On the Convergence of Differentially Private Federated Learning on Non-Lipschitz Objectives, and with Normalized Client Updates
Not on the map. Why?
Abstract (arXiv)
There is a dearth of convergence results for differentially private federated learning (FL) with non-Lipschitz objective functions (i.e., when gradient norms are not bounded). The primary reason for this is that the clipping operation (i.e., projection onto an ℓ2 ball of a fixed radius called the clipping threshold) for bounding the sensitivity of the average update to each client's update introduces bias depending on the clipping threshold and the number of local steps in FL, and analyzing this is not easy. For Lipschitz functions, the Lipschitz constant serves as a trivial clipping threshold with zero bias. However, Lipschitzness does not hold in many practical settings; moreover, verifying it and computing the Lipschitz constant is hard. Thus, the choice of the clipping threshold is non-trivial and requires a lot of tuning in practice. In this paper, we provide the first convergence result for private FL on smooth textitconvex objectives textitfor a general clipping threshold -- textitwithout assuming Lipschitzness. We also look at a simpler alternative to clipping (for bounding sensitivity) which is textitnormalization -- where we use only a scaled version of the unit vector along the client updates, completely discarding the magnitude information. The resulting normalization-based private FL algorithm is theoretically shown to have better convergence than its clipping-based counterpart on smooth convex functions. We corroborate our theory with synthetic experiments as well as experiments on benchmarking datasets.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 22 of its 40 references that are in the map. First posted on arXiv 13 Jun 2021.
Builds on
22 of 40 references.
References · 22
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,669
- 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,349
- 2016Deep Learning with Differential Privacycited by 2,728
- 2019Large Batch Optimization for Deep Learning: Training BERT in 76 minutescited by 674
- 2017Large Batch Training of Convolutional Networkscited by 535
- 2017Differentially Private Federated Learning: A Client Level Perspectivecited by 459
- 2019Differentially Private Learning with Adaptive Clippingcited by 220
- 2019Private Stochastic Convex Optimization with Optimal Ratescited by 186
- 2018cpSGD: Communication-efficient and differentially-private distributed SGDcited by 158
- 2020Private Stochastic Convex Optimization: Optimal Rates in Linear Timecited by 153
- 2020Understanding Gradient Clipping in Private SGD: A Geometric Perspectivecited by 142
10 more
- 2020Momentum Improves Normalized SGDcited by 139
- 2018Differentially Private Empirical Risk Minimization Revisited: Faster and More Generalcited by 128
- 2021Private Stochastic Convex Optimization: Optimal Rates in ℓ1 Geometrycited by 83
- 2015Beyond Convexity: Stochastic Quasi-Convex Optimizationcited by 76
- 2018Escaping Saddles with Stochastic Gradientscited by 66
- 2017Efficient Private ERM for Smooth Objectivescited by 61
- 2020On Differentially Private Stochastic Convex Optimization with Heavy-tailed Datacited by 51
- 2021Improved Rates for Differentially Private Stochastic Convex Optimization with Heavy-Tailed Datacited by 47
- 2019Private Federated Learning with Domain Adaptationcited by 36
- 2019Privacy for Free: Communication-Efficient Learning with Differential Privacy Using Sketchescited by 17
Built on by
Citing papers per year: 2022: 1; 2023: 2; 2024: 1; 2025: 1.
5 papers.
- 2022Automatic Clipping: Differentially Private Deep Learning Made Easier and Strongercited by 88
- 2023Differentially Private SGD Without Clipping Bias: An Error-Feedback Approachcited by 14
- 2024Pre-training Differentially Private Models with Limited Public Datacited by 8
- 2023Improved Convergence Analysis and SNR Control Strategies for Federated Learning in the Presence of Noisecited by 4
- 2025First Provable Guarantees for Practical Private FL: Beyond Restrictive Assumptionscited by 1
- 2025First Provable Guarantees for Practical Private FL: Beyond Restrictive Assumptions25 Dec 2025
- 2024Pre-training Differentially Private Models with Limited Public Data28 Feb 2024
- 2023Differentially Private SGD Without Clipping Bias: An Error-Feedback Approach24 Nov 2023
- 2023Improved Convergence Analysis and SNR Control Strategies for Federated Learning in the Presence of Noise14 Jul 2023
- 2022Automatic Clipping: Differentially Private Deep Learning Made Easier and Stronger14 Jun 2022