AdaCliP: Adaptive Clipping for Private SGD
Not on the map. Why?
Abstract (arXiv)
Privacy preserving machine learning algorithms are crucial for learning models over user data to protect sensitive information. Motivated by this, differentially private stochastic gradient descent (SGD) algorithms for training machine learning models have been proposed. At each step, these algorithms modify the gradients and add noise proportional to the sensitivity of the modified gradients. Under this framework, we propose AdaCliP, a theoretically motivated differentially private SGD algorithm that provably adds less noise compared to the previous methods, by using coordinate-wise adaptive clipping of the gradient. We empirically demonstrate that AdaCliP reduces the amount of added noise and produces models with better accuracy.
Key facts. Cited by 77 papers in the map (data through 14 Oct 2026). First posted on arXiv 20 Aug 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 19; 2022: 20; 2023: 13; 2024: 6; 2025: 12; 2026: 7.
77 papers.
Sort:
By area:
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 412
- 2021Adversary Instantiation: Lower Bounds for Differentially Private Machine Learningcited by 199
- 2021Practical and Private (Deep) Learning without Sampling or Shufflingcited by 170
- 2021Large-Scale Differentially Private BERTcited by 118
- 2021Label Leakage and Protection in Two-party Split Learningcited by 90
- 2022Automatic Clipping: Differentially Private Deep Learning Made Easier and Strongercited by 88
- 2022Toward Training at ImageNet Scale with Differential Privacycited by 87
- 2021Understanding Clipping for Federated Learning: Convergence and Client-Level Differential Privacycited by 69
- 2023Toward Understanding Why Adam Converges Faster Than SGD for Transformerscited by 53
- 2022Exploring the Limits of Differentially Private Deep Learning with Group-wise Clippingcited by 52
- 2022Differentially Private Learning Needs Hidden State (Or Much Faster Convergence)cited by 48
- 2021Private Adaptive Gradient Methods for Convex Optimizationcited by 46
38 more
- 2022Large Scale Transfer Learning for Differentially Private Image Classificationcited by 41
- 2022Mitigating Memorization of Noisy Labels by Clipping the Model Predictioncited by 40
- 2022Private Adaptive Optimization with Side Informationcited by 38
- 2022On Privacy and Personalization in Cross-Silo Federated Learningcited by 36
- 2022Normalized/Clipped SGD with Perturbation for Differentially Private Non-Convex Optimizationcited by 36
- 2021DataLens: Scalable Privacy Preserving Training via Gradient Compression and Aggregationcited by 31
- 2022Disparate Impact in Differential Privacy from Gradient Misalignmentcited by 31
- 2021Dynamic Differential-Privacy Preserving SGDcited by 30
- 2024SeqMIA: Sequential-Metric Based Membership Inference Attackcited by 23
- 2022Differentially Private Learning with Per-Sample Adaptive Clippingcited by 21
- 2021DPNAS: Neural Architecture Search for Deep Learning with Differential Privacycited by 20
- 2021Gradient Leakage Attack Resilient Deep Learningcited by 18
- 2022Nonlinear gradient mappings and stochastic optimization: A general framework with applications to heavy-tail noisecited by 16
- 2022Differentially Private Covariance Revisitedcited by 15
- 2023Securing Distributed SGD against Gradient Leakage Threatscited by 14
- 2023Fast Optimal Locally Private Mean Estimation via Random Projectionscited by 14
- 2022DPIS: An Enhanced Mechanism for Differentially Private SGD with Importance Samplingcited by 13
- 2022Adap DP-FL: Differentially Private Federated Learning with Adaptive Noisecited by 13
- 2023DPMLBench: Holistic Evaluation of Differentially Private Machine Learningcited by 13
- 2024Adaptive Gradient Clipping for Robust Federated Learningcited by 11
- 2021Differentially Private Coordinate Descent for Composite Empirical Risk Minimizationcited by 10
- 2023DPSUR: Accelerating Differentially Private Stochastic Gradient Descent Using Selective Update and Releasecited by 10
- 2023Differentially Private Video Activity Recognitioncited by 9
- 2021Improving Differentially Private SGD via Randomly Sparsified Gradientscited by 8
- 2022Differentially Private Image Classification from Featurescited by 7
- 2023Quantifying and Defending against Privacy Threats on Federated Knowledge Graph Embeddingcited by 7
- 2024To Clip or not to Clip: the Dynamics of SGD with Gradient Clipping in High-Dimensionscited by 7
- 2022(Nearly) Optimal Private Linear Regression via Adaptive Clippingcited by 6
- 2022Private Ad Modeling with DP-SGDcited by 6
- 2023PLAN: Variance-Aware Private Mean Estimationcited by 6
- 2023Spectral-DP: Differentially Private Deep Learning through Spectral Perturbation and Filteringcited by 6
- 2025DC-SGD: Differentially Private SGD with Dynamic Clipping through Gradient Norm Distribution Estimationcited by 6
- 2021Dynamic Privacy Budget Allocation Improves Data Efficiency of Differentially Private Gradient Descentcited by 5
- 2021Efficient Hyperparameter Optimization for Differentially Private Deep Learningcited by 5
- 2021Adaptive Differentially Private Empirical Risk Minimizationcited by 5
- 2022Dynamic Global Sensitivity for Differentially Private Contextual Banditscited by 5
- 2024Clip Body and Tail Separately: High Probability Guarantees for DPSGD with Heavy Tailscited by 5
- 2025Differentially Private Federated Learning With Time-Adaptive Privacy Spendingcited by 5
50 most cited of 77 All 77 (JSON)
- 2026StraightDP: Geometry-Aware Differential Privacy for Rectified-Flow Transformers31 Jul 2026
- 2026DP-MacAdam: Differentially Private Mechanism with Adaptive Clipping and Adaptive Momentum3 Jun 2026
- 2026Revisiting Privacy Amplification by Subsampling in Selective Release DPSGD3 Jun 2026
- 2026DP-Muon: Differentially Private Optimization via Matrix-Orthogonalized Momentum13 May 2026
- 2026Adaptive Methods Are Preferable in High Privacy Settings: An SDE Perspective3 Mar 2026
- 2026Mitigating Membership Inference in Intermediate Representations with Differentially Private Training26 Feb 2026
- 2026When Gradient Clipping Becomes a Control Mechanism for Differential Privacy in Deep Learning11 Feb 2026
- 2025ConvXformer: Differentially Private Hybrid ConvNeXt-Transformer for Inertial Navigation22 Oct 2025
- 2025Rethinking Layer-wise Gaussian Noise Injection: Bridging Implicit Objectives and Privacy Budget Allocation4 Sep 2025
- 2025Towards Reliable and Generalizable Differentially Private Machine Learning (Extended Version)21 Aug 2025
- 2025Efficient Differentially Private Fine-Tuning of LLMs via Reinforcement Learning30 Jul 2025
- 2025AdaDPIGU: Differentially Private SGD with Adaptive Clipping and Importance-Based Gradient Updates for Deep Neural Networks9 Jul 2025
38 more
- 2025GeoClip: Geometry-Aware Clipping for Differentially Private SGD6 Jun 2025
- 2025Fast Fourier Transform-Based Spectral and Temporal Gradient Filtering for Differential Privacy7 May 2025
- 2025DC-SGD: Differentially Private SGD with Dynamic Clipping through Gradient Norm Distribution Estimation29 Mar 2025
- 2025Adaptive Clipping for Privacy-Preserving Few-Shot Learning: Enhancing Generalization with Limited Data27 Mar 2025
- 2025Video-DPRP: A Differentially Private Approach for Visual Privacy-Preserving Video Human Activity Recognition3 Mar 2025
- 2025Differentially Private Federated Learning With Time-Adaptive Privacy Spending25 Feb 2025
- 2025Structure-Preference Enabled Graph Embedding Generation under Differential Privacy7 Jan 2025
- 2024Enhancing DP-SGD through Non-monotonous Adaptive Scaling Gradient Weight5 Nov 2024
- 2024SeqMIA: Sequential-Metric Based Membership Inference Attack21 Jul 2024
- 2024To Clip or not to Clip: the Dynamics of SGD with Gradient Clipping in High-Dimensions17 Jun 2024
- 2024DPDR: Gradient Decomposition and Reconstruction for Differentially Private Deep Learning4 Jun 2024
- 2024Clip Body and Tail Separately: High Probability Guarantees for DPSGD with Heavy Tails27 May 2024
- 2024Adaptive Gradient Clipping for Robust Federated Learning23 May 2024
- 2023PCDP-SGD: Improving the Convergence of Differentially Private SGD via Projection in Advance6 Dec 2023
- 2023DPSUR: Accelerating Differentially Private Stochastic Gradient Descent Using Selective Update and Release23 Nov 2023
- 2023The Relative Gaussian Mechanism and its Application to Private Gradient Descent29 Aug 2023
- 2023Spectral-DP: Differentially Private Deep Learning through Spectral Perturbation and Filtering25 Jul 2023
- 2023Differentially Private Video Activity Recognition27 Jun 2023
- 2023PLAN: Variance-Aware Private Mean Estimation14 Jun 2023
- 2023Fast Optimal Locally Private Mean Estimation via Random Projections7 Jun 2023
- 2023Toward Understanding Why Adam Converges Faster Than SGD for Transformers31 May 2023
- 2023Securing Distributed SGD against Gradient Leakage Threats10 May 2023
- 2023DPMLBench: Holistic Evaluation of Differentially Private Machine Learning10 May 2023
- 2023Quantifying and Defending against Privacy Threats on Federated Knowledge Graph Embedding6 Apr 2023
- 2023Generalization Error Bounds for Noisy, Iterative Algorithms via Maximal Leakage28 Feb 2023
- 2023U-Clip: On-Average Unbiased Stochastic Gradient Clipping6 Feb 2023
- 2022Mitigating Memorization of Noisy Labels by Clipping the Model Prediction8 Dec 2022
- 2022Exploring the Limits of Differentially Private Deep Learning with Group-wise Clipping3 Dec 2022
- 2022Differentially Private Learning with Per-Sample Adaptive Clipping1 Dec 2022
- 2022Adap DP-FL: Differentially Private Federated Learning with Adaptive Noise29 Nov 2022
- 2022Differentially Private Image Classification from Features24 Nov 2022
- 2022Private Ad Modeling with DP-SGD21 Nov 2022
- 2022DPIS: An Enhanced Mechanism for Differentially Private SGD with Importance Sampling18 Oct 2022
- 2022Dynamic Global Sensitivity for Differentially Private Contextual Bandits30 Aug 2022
- 2022(Nearly) Optimal Private Linear Regression via Adaptive Clipping11 Jul 2022
- 2022Normalized/Clipped SGD with Perturbation for Differentially Private Non-Convex Optimization27 Jun 2022
- 2022On Privacy and Personalization in Cross-Silo Federated Learning16 Jun 2022
- 2022Disparate Impact in Differential Privacy from Gradient Misalignment15 Jun 2022
50 newest of 77 All 77 (JSON)
- 2024SeqMIA: Sequential-Metric Based Membership Inference Attackcited by 23
- 2023DPSUR: Accelerating Differentially Private Stochastic Gradient Descent Using Selective Update and Releasecited by 10
- 2026Mitigating Membership Inference in Intermediate Representations with Differentially Private Trainingcited by 0
- 2026Mitigating Membership Inference in Intermediate Representations with Differentially Private Training26 Feb 2026
- 2024SeqMIA: Sequential-Metric Based Membership Inference Attack21 Jul 2024
- 2023DPSUR: Accelerating Differentially Private Stochastic Gradient Descent Using Selective Update and Release23 Nov 2023
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 412
- 2021Adversary Instantiation: Lower Bounds for Differentially Private Machine Learningcited by 199
- 2021Practical and Private (Deep) Learning without Sampling or Shufflingcited by 170
- 2021Large-Scale Differentially Private BERTcited by 118
- 2021Label Leakage and Protection in Two-party Split Learningcited by 90
- 2022Automatic Clipping: Differentially Private Deep Learning Made Easier and Strongercited by 88
- 2022Toward Training at ImageNet Scale with Differential Privacycited by 87
- 2021Understanding Clipping for Federated Learning: Convergence and Client-Level Differential Privacycited by 69
- 2023Toward Understanding Why Adam Converges Faster Than SGD for Transformerscited by 53
- 2022Exploring the Limits of Differentially Private Deep Learning with Group-wise Clippingcited by 52
- 2022Differentially Private Learning Needs Hidden State (Or Much Faster Convergence)cited by 48
- 2021Private Adaptive Gradient Methods for Convex Optimizationcited by 46
12 most cited of 74 All 74 (JSON)
- 2026StraightDP: Geometry-Aware Differential Privacy for Rectified-Flow Transformers31 Jul 2026
- 2026DP-MacAdam: Differentially Private Mechanism with Adaptive Clipping and Adaptive Momentum3 Jun 2026
- 2026Revisiting Privacy Amplification by Subsampling in Selective Release DPSGD3 Jun 2026
- 2026DP-Muon: Differentially Private Optimization via Matrix-Orthogonalized Momentum13 May 2026
- 2026Adaptive Methods Are Preferable in High Privacy Settings: An SDE Perspective3 Mar 2026
- 2026When Gradient Clipping Becomes a Control Mechanism for Differential Privacy in Deep Learning11 Feb 2026
- 2025ConvXformer: Differentially Private Hybrid ConvNeXt-Transformer for Inertial Navigation22 Oct 2025
- 2025Rethinking Layer-wise Gaussian Noise Injection: Bridging Implicit Objectives and Privacy Budget Allocation4 Sep 2025
- 2025Towards Reliable and Generalizable Differentially Private Machine Learning (Extended Version)21 Aug 2025
- 2025Efficient Differentially Private Fine-Tuning of LLMs via Reinforcement Learning30 Jul 2025
- 2025AdaDPIGU: Differentially Private SGD with Adaptive Clipping and Importance-Based Gradient Updates for Deep Neural Networks9 Jul 2025
- 2025GeoClip: Geometry-Aware Clipping for Differentially Private SGD6 Jun 2025
12 newest of 74 All 74 (JSON)