Private Non-Convex Federated Learning Without a Trusted Server
Not on the map. Why?
Abstract (arXiv)
We study federated learning (FL) -- especially cross-silo FL -- with non-convex loss functions and data from people who do not trust the server or other silos. In this setting, each silo (e.g. hospital) must protect the privacy of each person's data (e.g. patient's medical record), even if the server or other silos act as adversarial eavesdroppers. To that end, we consider inter-silo record-level (ISRL) differential privacy (DP), which requires silo~i's communications to satisfy record/item-level DP. We propose novel ISRL-DP algorithms for FL with heterogeneous (non-i.i.d.) silo data and two classes of Lipschitz continuous loss functions: First, we consider losses satisfying the Proximal Polyak-Lojasiewicz (PL) inequality, which is an extension of the classical PL condition to the constrained setting. In contrast to our result, prior works only considered unconstrained private optimization with Lipschitz PL loss, which rules out most interesting PL losses such as strongly convex problems and linear/logistic regression. Our algorithms nearly attain the optimal strongly convex, homogeneous (i.i.d.) rate for ISRL-DP FL without assuming convexity or i.i.d. data. Second, we give the first private algorithms for non-convex non-smooth loss functions. Our utility bounds even improve on the state-of-the-art bounds for smooth losses. We complement our upper bounds with lower bounds. Additionally, we provide shuffle DP (SDP) algorithms that improve over the state-of-the-art central DP algorithms under more practical trust assumptions. Numerical experiments show that our algorithm has better accuracy than baselines for most privacy levels. All the codes are publicly available at: https://github.com/ghafeleb/Private-NonConvex-Federated-Learning-Without-a-Trusted-Server.
Key facts. Cited by 26 papers in the map (data through 7 Oct 2026). Builds on 59 of its 110 references that are in the map. First posted on arXiv 13 Mar 2022.
Builds on
59 of 110 references.
References · 59
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,592
- 2019Advances and Open Problems in Federated Learningcited by 3,021
- 2018Federated Optimization in Heterogeneous Networkscited by 2,971
- 2016Deep Learning with Differential Privacycited by 2,682
- 2019On the Convergence of FedAvg on Non-IID Datacited by 1,220
- 2019Deep Leakage from Gradientscited by 1,004
- 2014Convex Optimization: Algorithms and Complexitycited by 569
- 2019Federated Learning with Differential Privacy: Algorithms and Performance Analysiscited by 528
- 2016Linear Convergence of Gradient and Proximal-Gradient Methods Under the Polyak-Lojasiewicz Conditioncited by 526
- 2017Differentially Private Federated Learning: A Client Level Perspectivecited by 451
- 2020A Unified Theory of Decentralized SGD with Changing Topology and Local Updatescited by 361
- 2016Concentrated Differential Privacy: Simplifications, Extensions, and Lower Boundscited by 339
38 more
- 2019Lower Bounds for Non-Convex Stochastic Optimizationcited by 303
- 2013The Composition Theorem for Differential Privacycited by 290
- 2018SPIDER: Near-Optimal Non-Convex Optimization via Stochastic Path Integrated Differential Estimatorcited by 283
- 2021Federated Learning for Internet of Things: A Comprehensive Surveycited by 247
- 2020Loss landscapes and optimization in over-parameterized non-linear systems and neural networkscited by 231
- 2018A Hybrid Approach to Privacy-Preserving Federated Learningcited by 208
- 2019Private Stochastic Convex Optimization with Optimal Ratescited by 183
- 2018Amplification by Shuffling: From Local to Central Differential Privacy via Anonymitycited by 163
- 2020Private Stochastic Convex Optimization: Optimal Rates in Linear Timecited by 152
- 2020Is Local SGD Better than Minibatch SGD?cited by 151
- 2020Minibatch vs Local SGD for Heterogeneous Distributed Learningcited by 147
- 2020FedPD: A Federated Learning Framework with Optimal Rates and Adaptivity to Non-IID Datacited by 143
- 2016Concentrated Differential Privacycited by 139
- 2020LDP-Fed: Federated Learning with Local Differential Privacycited by 129
- 2018Differentially Private Empirical Risk Minimization Revisited: Faster and More Generalcited by 127
- 2018Distributed Differential Privacy via Shufflingcited by 115
- 2014Differentially Private Empirical Risk Minimization: Efficient Algorithms and Tight Error Boundscited by 104
- 2021Hyperparameter Tuning with Renyi Differential Privacycited by 104
- 2020Hiding Among the Clones: A Simple and Nearly Optimal Analysis of Privacy Amplification by Shufflingcited by 96
- 2020Federated Accelerated Stochastic Gradient Descentcited by 85
- 2018Private Selection from Private Candidatescited by 75
- 2020Local Differential Privacy based Federated Learning for Internet of Thingscited by 74
- 2021Differentially Private Federated Learning on Heterogeneous Datacited by 74
- 2021Learning with User-Level Privacycited by 72
- 2017Efficient Private ERM for Smooth Objectivescited by 61
- 2017Non-convex Finite-Sum Optimization Via SCSG Methodscited by 61
- 2017Prochlo: Strong Privacy for Analytics in the Crowdcited by 51
- 2020Wireless Federated Learning with Local Differential Privacycited by 50
- 2019Local Differential Privacy for Deep Learningcited by 46
- 2021Differentially Private Stochastic Optimization: New Results in Convex and Non-Convex Settingscited by 45
- 2018DP-ADMM: ADMM-based Distributed Learning with Differential Privacycited by 41
- 2020Encode, Shuffle, Analyze Privacy Revisited: Formalizations and Empirical Evaluationcited by 39
- 2019The Complexity of Making the Gradient Small in Stochastic Convex Optimizationcited by 33
- 2021Private Federated Learning Without a Trusted Server: Optimal Algorithms for Convex Lossescited by 30
- 2019Efficient Privacy-Preserving Stochastic Nonconvex Optimizationcited by 27
- 2020FLAME: Differentially Private Federated Learning in the Shuffle Modelcited by 27
- 2020Private Stochastic Non-Convex Optimization: Adaptive Algorithms and Tighter Generalization Boundscited by 26
- 2020Federated Learning with Sparsification-Amplified Privacy and Adaptive Optimizationcited by 25
50 most cited of 59 All 59 (JSON)
Built on by
Citing papers per year: 2022: 3; 2023: 6; 2024: 8; 2025: 8; 2026: 1.
26 papers.
Sort:
By area:
- 2022SoteriaFL: A Unified Framework for Private Federated Learning with Communication Compressioncited by 34
- 2023On the Privacy-Robustness-Utility Trilemma in Distributed Learningcited by 24
- 2022Stochastic Differentially Private and Fair Learningcited by 16
- 2023On Differentially Private Federated Linear Contextual Banditscited by 14
- 2024FedP3: Federated Personalized and Privacy-friendly Network Pruning under Model Heterogeneitycited by 13
- 2024How to Make the Gradients Small Privately: Improved Rates for Differentially Private Non-Convex Optimizationcited by 10
- 2023Optimal Differentially Private Model Training with Public Datacited by 9
- 2023ULDP-FL: Federated Learning with Across Silo User-Level Differential Privacycited by 9
- 2024Private Heterogeneous Federated Learning Without a Trusted Server Revisited: Error-Optimal and Communication-Efficient Algorithms for Convex Lossescited by 8
- 2024Cross-silo Federated Learning with Record-level Personalized Differential Privacycited by 7
- 2023Differentially Private Non-Convex Optimization under the KL Condition with Optimal Ratescited by 4
- 2023Toward the Tradeoffs between Privacy, Fairness and Utility in Federated Learningcited by 4
14 more
- 2024PrivSGP-VR: Differentially Private Variance-Reduced Stochastic Gradient Push with Tight Utility Boundscited by 4
- 2022Private Stochastic Optimization With Large Worst-Case Lipschitz Parametercited by 3
- 2024Private and Federated Stochastic Convex Optimization: Efficient Strategies for Centralized Systemscited by 3
- 2025Second-Order Convergence in Private Stochastic Non-Convex Optimizationcited by 3
- 2025Research in Collaborative Learning Does Not Serve Cross-Silo Federated Learning in Practicecited by 3
- 2025Smoothed Normalization for Efficient Distributed Private Optimizationcited by 1
- 2025Privacy-Preserving Federated Convex Optimization: Balancing Partial-Participation and Efficiency via Noise Cancellationcited by 1
- 2025DP-CSGP: Differentially Private Stochastic Gradient Push with Compressed Communicationcited by 1
- 2024Convergent Differential Privacy Analysis for General Federated Learningcited by 0
- 2024A Stochastic Optimization Framework for Private and Fair Learning From Decentralized Datacited by 0
- 2025Personalized Federated Training of Diffusion Models with Privacy Guaranteescited by 0
- 2025On the Inherent Privacy of Zeroth Order Projected Gradient Descentcited by 0
- 2025First Provable Guarantees for Practical Private FL: Beyond Restrictive Assumptionscited by 0
- 2026ERIS: Enhancing Privacy and Scalability in Federated Learning via Federated Shard Aggregationcited by 0
- 2026ERIS: Enhancing Privacy and Scalability in Federated Learning via Federated Shard Aggregation9 Feb 2026
- 2025First Provable Guarantees for Practical Private FL: Beyond Restrictive Assumptions25 Dec 2025
- 2025DP-CSGP: Differentially Private Stochastic Gradient Push with Compressed Communication15 Dec 2025
- 2025Research in Collaborative Learning Does Not Serve Cross-Silo Federated Learning in Practice14 Oct 2025
- 2025On the Inherent Privacy of Zeroth Order Projected Gradient Descent8 Jul 2025
- 2025Privacy-Preserving Federated Convex Optimization: Balancing Partial-Participation and Efficiency via Noise Cancellation3 Jun 2025
- 2025Second-Order Convergence in Private Stochastic Non-Convex Optimization21 May 2025
- 2025Personalized Federated Training of Diffusion Models with Privacy Guarantees1 Apr 2025
- 2025Smoothed Normalization for Efficient Distributed Private Optimization19 Feb 2025
- 2024A Stochastic Optimization Framework for Private and Fair Learning From Decentralized Data12 Nov 2024
- 2024Convergent Differential Privacy Analysis for General Federated Learning28 Aug 2024
- 2024Private and Federated Stochastic Convex Optimization: Efficient Strategies for Centralized Systems17 Jul 2024
14 more
- 2024Private Heterogeneous Federated Learning Without a Trusted Server Revisited: Error-Optimal and Communication-Efficient Algorithms for Convex Losses12 Jul 2024
- 2024PrivSGP-VR: Differentially Private Variance-Reduced Stochastic Gradient Push with Tight Utility Bounds4 May 2024
- 2024FedP3: Federated Personalized and Privacy-friendly Network Pruning under Model Heterogeneity15 Apr 2024
- 2024How to Make the Gradients Small Privately: Improved Rates for Differentially Private Non-Convex Optimization17 Feb 2024
- 2024Cross-silo Federated Learning with Record-level Personalized Differential Privacy29 Jan 2024
- 2023Toward the Tradeoffs between Privacy, Fairness and Utility in Federated Learning30 Nov 2023
- 2023Differentially Private Non-Convex Optimization under the KL Condition with Optimal Rates22 Nov 2023
- 2023ULDP-FL: Federated Learning with Across Silo User-Level Differential Privacy23 Aug 2023
- 2023Optimal Differentially Private Model Training with Public Data26 Jun 2023
- 2023On Differentially Private Federated Linear Contextual Bandits27 Feb 2023
- 2023On the Privacy-Robustness-Utility Trilemma in Distributed Learning9 Feb 2023
- 2022Stochastic Differentially Private and Fair Learning17 Oct 2022
- 2022Private Stochastic Optimization With Large Worst-Case Lipschitz Parameter15 Sep 2022
- 2022SoteriaFL: A Unified Framework for Private Federated Learning with Communication Compression20 Jun 2022
- 2022SoteriaFL: A Unified Framework for Private Federated Learning with Communication Compressioncited by 34
- 2023On the Privacy-Robustness-Utility Trilemma in Distributed Learningcited by 24
- 2022Stochastic Differentially Private and Fair Learningcited by 16
- 2023On Differentially Private Federated Linear Contextual Banditscited by 14
- 2024FedP3: Federated Personalized and Privacy-friendly Network Pruning under Model Heterogeneitycited by 13
- 2024How to Make the Gradients Small Privately: Improved Rates for Differentially Private Non-Convex Optimizationcited by 10
- 2023Optimal Differentially Private Model Training with Public Datacited by 9
- 2023ULDP-FL: Federated Learning with Across Silo User-Level Differential Privacycited by 9
- 2024Private Heterogeneous Federated Learning Without a Trusted Server Revisited: Error-Optimal and Communication-Efficient Algorithms for Convex Lossescited by 8
- 2024Cross-silo Federated Learning with Record-level Personalized Differential Privacycited by 7
- 2023Differentially Private Non-Convex Optimization under the KL Condition with Optimal Ratescited by 4
- 2023Toward the Tradeoffs between Privacy, Fairness and Utility in Federated Learningcited by 4
12 most cited of 25 All 25 (JSON)
- 2026ERIS: Enhancing Privacy and Scalability in Federated Learning via Federated Shard Aggregation9 Feb 2026
- 2025First Provable Guarantees for Practical Private FL: Beyond Restrictive Assumptions25 Dec 2025
- 2025DP-CSGP: Differentially Private Stochastic Gradient Push with Compressed Communication15 Dec 2025
- 2025Research in Collaborative Learning Does Not Serve Cross-Silo Federated Learning in Practice14 Oct 2025
- 2025On the Inherent Privacy of Zeroth Order Projected Gradient Descent8 Jul 2025
- 2025Privacy-Preserving Federated Convex Optimization: Balancing Partial-Participation and Efficiency via Noise Cancellation3 Jun 2025
- 2025Second-Order Convergence in Private Stochastic Non-Convex Optimization21 May 2025
- 2025Smoothed Normalization for Efficient Distributed Private Optimization19 Feb 2025
- 2024A Stochastic Optimization Framework for Private and Fair Learning From Decentralized Data12 Nov 2024
- 2024Convergent Differential Privacy Analysis for General Federated Learning28 Aug 2024
- 2024Private and Federated Stochastic Convex Optimization: Efficient Strategies for Centralized Systems17 Jul 2024
- 2024Private Heterogeneous Federated Learning Without a Trusted Server Revisited: Error-Optimal and Communication-Efficient Algorithms for Convex Losses12 Jul 2024
12 newest of 25 All 25 (JSON)