mlsanityData to 14 Oct 2026

On the Convergence of Differentially Private Federated Learning on Non-Lipschitz Objectives, and with Normalized Client Updates

arXiv 2106.07094 ↗First posted 13 Jun 2021cs.LG cs.DC eess.SPcited by 5

Not on the map. Why?

Abstract (arXiv)

There is a dearth of convergence results for differentially private federated learning (FL) with non-Lipschitz objective functions (i.e., when gradient norms are not bounded). The primary reason for this is that the clipping operation (i.e., projection onto an ℓ2 ball of a fixed radius called the clipping threshold) for bounding the sensitivity of the average update to each client's update introduces bias depending on the clipping threshold and the number of local steps in FL, and analyzing this is not easy. For Lipschitz functions, the Lipschitz constant serves as a trivial clipping threshold with zero bias. However, Lipschitzness does not hold in many practical settings; moreover, verifying it and computing the Lipschitz constant is hard. Thus, the choice of the clipping threshold is non-trivial and requires a lot of tuning in practice. In this paper, we provide the first convergence result for private FL on smooth textitconvex objectives textitfor a general clipping threshold -- textitwithout assuming Lipschitzness. We also look at a simpler alternative to clipping (for bounding sensitivity) which is textitnormalization -- where we use only a scaled version of the unit vector along the client updates, completely discarding the magnitude information. The resulting normalization-based private FL algorithm is theoretically shown to have better convergence than its clipping-based counterpart on smooth convex functions. We corroborate our theory with synthetic experiments as well as experiments on benchmarking datasets.

Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 22 of its 40 references that are in the map. First posted on arXiv 13 Jun 2021.

Builds on

22 of 40 references.

References · 22

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,669
  3. 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,349
  4. 2016Deep Learning with Differential Privacycited by 2,728
  5. 2019Large Batch Optimization for Deep Learning: Training BERT in 76 minutescited by 674
  6. 2017Large Batch Training of Convolutional Networkscited by 535
  7. 2017Differentially Private Federated Learning: A Client Level Perspectivecited by 459
  8. 2019Differentially Private Learning with Adaptive Clippingcited by 220
  9. 2019Private Stochastic Convex Optimization with Optimal Ratescited by 186
  10. 2018cpSGD: Communication-efficient and differentially-private distributed SGDcited by 158
  11. 2020Private Stochastic Convex Optimization: Optimal Rates in Linear Timecited by 153
  12. 2020Understanding Gradient Clipping in Private SGD: A Geometric Perspectivecited by 142
10 more
  1. 2020Momentum Improves Normalized SGDcited by 139
  2. 2018Differentially Private Empirical Risk Minimization Revisited: Faster and More Generalcited by 128
  3. 2021Private Stochastic Convex Optimization: Optimal Rates in ℓ1 Geometrycited by 83
  4. 2015Beyond Convexity: Stochastic Quasi-Convex Optimizationcited by 76
  5. 2018Escaping Saddles with Stochastic Gradientscited by 66
  6. 2017Efficient Private ERM for Smooth Objectivescited by 61
  7. 2020On Differentially Private Stochastic Convex Optimization with Heavy-tailed Datacited by 51
  8. 2021Improved Rates for Differentially Private Stochastic Convex Optimization with Heavy-Tailed Datacited by 47
  9. 2019Private Federated Learning with Domain Adaptationcited by 36
  10. 2019Privacy for Free: Communication-Efficient Learning with Differential Privacy Using Sketchescited by 17

Built on by

Cited by year

Citing papers per year: 2022: 1; 2023: 2; 2024: 1; 2025: 1.

5 papers.