Faster Privacy Accounting via Evolving Discretization
Not on the map. Why?
Abstract (arXiv)
We introduce a new algorithm for numerical composition of privacy random variables, useful for computing the accurate differential privacy parameters for composition of mechanisms. Our algorithm achieves a running time and memory usage of polylog(k) for the task of self-composing a mechanism, from a broad class of mechanisms, k times; this class, e.g., includes the sub-sampled Gaussian mechanism, that appears in the analysis of differentially private stochastic gradient descent. By comparison, recent work by Gopi et al. (NeurIPS 2021) has obtained a running time of widetildeO(√k) for the same task. Our approach extends to the case of composing k different mechanisms in the same class, improving upon their running time and memory usage from widetildeO(k1.5) to widetildeO(k).
Key facts. Cited by 14 papers in the map (data through 7 Oct 2026). Builds on 15 of its 34 references that are in the map. First posted on arXiv 10 Jul 2022.
Builds on
15 of 34 references.
References · 15
- 2016Deep Learning with Differential Privacycited by 2,682
- 2017Renyi Differential Privacycited by 643
- 2016Concentrated Differential Privacy: Simplifications, Extensions, and Lower Boundscited by 339
- 2013The Composition Theorem for Differential Privacycited by 290
- 2014RAPPOR: Randomized Aggregatable Privacy-Preserving Ordinal Responsecited by 262
- 2021Numerical Composition of Differential Privacycited by 174
- 2017Collecting Telemetry Data Privatelycited by 147
- 2016Concentrated Differential Privacycited by 139
- 2019Deep Learning with Gaussian Differential Privacycited by 112
- 2021Optimal Accounting of Differential Privacy via Characteristic Functioncited by 83
- 2020Tight Differential Privacy for Discrete-Valued Mechanisms and for the Subsampled Gaussian Mechanism Using FFTcited by 43
- 2021Fast and Memory Efficient Differentially Private-SGD via JL Projectionscited by 29
3 more
Built on by
Citing papers per year: 2022: 4; 2023: 3; 2024: 3; 2025: 2; 2026: 2.
14 papers.
Sort:
By area:
- 2022Composition of Differential Privacy & Privacy Amplification by Subsamplingcited by 42
- 2024Privacy-Preserving Instructions for Aligning Large Language Modelscited by 34
- 2023Selective Pre-training for Private Fine-tuningcited by 22
- 2024How Private are DP-SGD Implementations?cited by 22
- 2024Scalable DP-SGD: Shuffling vs. Poisson Subsamplingcited by 16
- 2022Feature-based Learning for Diverse and Privacy-Preserving Counterfactual Explanationscited by 11
- 2023A Randomized Approach for Tight Privacy Accountingcited by 11
- 2022Private Ad Modeling with DP-SGDcited by 6
- 2022The Saddle-Point Accountant for Differential Privacycited by 5
- 2023Sparsity-Preserving Differentially Private Training of Large Embedding Modelscited by 5
- 2025PREAMBLE: Private and Efficient Aggregation via Block Sparse Vectorscited by 1
- 2026When Gradient Clipping Becomes a Control Mechanism for Differential Privacy in Deep Learningcited by 1
- 2026Provable Robustness against Backdoor Attacks via the Primal-Dual Perspective on Differential Privacy20 May 2026
- 2026When Gradient Clipping Becomes a Control Mechanism for Differential Privacy in Deep Learning11 Feb 2026
- 2025Auditable Early Stopping for Agentic Routing: Ledger-Verified Run-Wise Certificates under Local DP9 Sep 2025
- 2025PREAMBLE: Private and Efficient Aggregation via Block Sparse Vectors14 Mar 2025
- 2024Scalable DP-SGD: Shuffling vs. Poisson Subsampling6 Nov 2024
- 2024How Private are DP-SGD Implementations?26 Mar 2024
- 2024Privacy-Preserving Instructions for Aligning Large Language Models21 Feb 2024
- 2023Sparsity-Preserving Differentially Private Training of Large Embedding Models14 Nov 2023
- 2023Selective Pre-training for Private Fine-tuning23 May 2023
- 2023A Randomized Approach for Tight Privacy Accounting17 Apr 2023
- 2022Private Ad Modeling with DP-SGD21 Nov 2022
- 2022Composition of Differential Privacy & Privacy Amplification by Subsampling2 Oct 2022
2 more
- 2022Composition of Differential Privacy & Privacy Amplification by Subsamplingcited by 42
- 2023Selective Pre-training for Private Fine-tuningcited by 22
- 2024How Private are DP-SGD Implementations?cited by 22
- 2024Scalable DP-SGD: Shuffling vs. Poisson Subsamplingcited by 16
- 2023A Randomized Approach for Tight Privacy Accountingcited by 11
- 2022Private Ad Modeling with DP-SGDcited by 6
- 2022The Saddle-Point Accountant for Differential Privacycited by 5
- 2023Sparsity-Preserving Differentially Private Training of Large Embedding Modelscited by 5
- 2025PREAMBLE: Private and Efficient Aggregation via Block Sparse Vectorscited by 1
- 2026When Gradient Clipping Becomes a Control Mechanism for Differential Privacy in Deep Learningcited by 1
- 2026Provable Robustness against Backdoor Attacks via the Primal-Dual Perspective on Differential Privacycited by 0
- 2026Provable Robustness against Backdoor Attacks via the Primal-Dual Perspective on Differential Privacy20 May 2026
- 2026When Gradient Clipping Becomes a Control Mechanism for Differential Privacy in Deep Learning11 Feb 2026
- 2025PREAMBLE: Private and Efficient Aggregation via Block Sparse Vectors14 Mar 2025
- 2024Scalable DP-SGD: Shuffling vs. Poisson Subsampling6 Nov 2024
- 2024How Private are DP-SGD Implementations?26 Mar 2024
- 2023Sparsity-Preserving Differentially Private Training of Large Embedding Models14 Nov 2023
- 2023Selective Pre-training for Private Fine-tuning23 May 2023
- 2023A Randomized Approach for Tight Privacy Accounting17 Apr 2023
- 2022Private Ad Modeling with DP-SGD21 Nov 2022
- 2022Composition of Differential Privacy & Privacy Amplification by Subsampling2 Oct 2022
- 2022The Saddle-Point Accountant for Differential Privacy20 Aug 2022