Zero redundancy distributed learning with differential privacy
Not on the map. Why?
Abstract (arXiv)
Deep learning using large models have achieved great success in a wide range of domains. However, training these models on billions of parameters is very challenging in terms of the training speed, memory cost, and communication efficiency, especially under the privacy-preserving regime with differential privacy (DP). On the one hand, DP optimization has comparable efficiency to the standard non-private optimization on a single GPU, but on multiple GPUs, existing DP distributed learning (such as pipeline parallel) has suffered from significantly worse efficiency. On the other hand, the Zero Redundancy Optimizer (ZeRO) is a state-of-the-art solution to the standard distributed learning, exhibiting excellent training efficiency on large models, but to work compatibly with DP is technically complicated. In this work, we develop a new systematic solution, DP-ZeRO, (I) to scale up the trainable DP model size, e.g. to GPT-100B, (II) to obtain the same computation and communication efficiency as the standard ZeRO, and (III) to enable mixed-precision DP training. Our DP-ZeRO, like the standard ZeRO, has the potential to train models with arbitrary size and is evaluated on the world's largest DP models in terms of the number of trainable parameters.
Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Builds on 44 of its 56 references that are in the map. First posted on arXiv 20 Nov 2023.
Builds on
44 of 56 references.
References · 44
- 2017Attention Is All You Needcited by 60,361
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2019Parameter-Efficient Transfer Learning for NLPcited by 4,236
- 2023QLoRA: Efficient Finetuning of Quantized LLMscited by 3,418
- 2016Deep Learning with Differential Privacycited by 2,728
- 2020Transformers are RNNs: Fast Autoregressive Transformers with Linear Attentioncited by 2,022
- 2020Linformer: Self-Attention with Linear Complexitycited by 1,474
32 more
- 2022SmoothQuant: Accurate and Efficient Post-Training Quantization for Large Language Modelscited by 1,386
- 2021BitFit: Simple Parameter-efficient Fine-tuning for Transformer-based Masked Language-modelscited by 1,245
- 2017Mixed Precision Trainingcited by 1,156
- 2021Scaling Vision Transformerscited by 999
- 2016Training Deep Nets with Sublinear Memory Costcited by 848
- 2021Efficient Large-Scale Language Model Training on GPU Clusters Using Megatron-LMcited by 632
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 412
- 2021Differentially Private Fine-tuning of Language Modelscited by 400
- 2021Opacus: User-Friendly Differential Privacy Library in PyTorchcited by 383
- 2018Efficient Attention: Attention with Linear Complexitiescited by 368
- 2021ZeRO-Offload: Democratizing Billion-Scale Model Trainingcited by 341
- 2021ZeRO-Infinity: Breaking the GPU Memory Wall for Extreme Scale Deep Learningcited by 256
- 2018Differentially Private Generative Adversarial Networkcited by 235
- 2022Unlocking High-Accuracy Differentially Private Image Classification through Scalecited by 224
- 2021Numerical Composition of Differential Privacycited by 180
- 2019Deep Learning with Gaussian Differential Privacycited by 114
- 2022Automatic Clipping: Differentially Private Deep Learning Made Easier and Strongercited by 88
- 2022Toward Training at ImageNet Scale with Differential Privacycited by 87
- 2021Optimal Accounting of Differential Privacy via Characteristic Functioncited by 86
- 20211-bit Adam: Communication Efficient Large-Scale Training with Adam's Convergence Speedcited by 75
- 2022Differentially Private Optimization on Large Model at Small Costcited by 65
- 2020Enabling Fast Differentially Private SGD via Just-in-Time Compilation and Vectorizationcited by 58
- 2022Exploring the Limits of Differentially Private Deep Learning with Group-wise Clippingcited by 52
- 2022Scalable and Efficient Training of Large Convolutional Neural Networks with Differential Privacycited by 48
- 2022Differentially Private Bias-Term Fine-tuning of Foundation Modelscited by 48
- 2020Scaling up Differentially Private Deep Learning with Fast Per-Example Gradient Clippingcited by 47
- 2015Efficient Per-Example Gradient Computationscited by 42
- 2019Evaluating Modern GPU Interconnect: PCIe, NVLink, NV-SLI, NVSwitch and GPUDirectcited by 41
- 2022Large Scale Transfer Learning for Differentially Private Image Classificationcited by 41
- 2022Normalized/Clipped SGD with Perturbation for Differentially Private Non-Convex Optimizationcited by 36
- 2021Fast and Memory Efficient Differentially Private-SGD via JL Projectionscited by 29
- 2022MiCS: Near-linear Scaling for Training Gigantic Model on Public Cloudcited by 22
Built on by
Citing papers per year: 2024: 3; 2025: 4.
7 papers.
- 2024Private Fine-tuning of Large Language Models with Zeroth-order Optimizationcited by 41
- 2024LLM-PBE: Assessing Data Privacy in Large Language Modelscited by 41
- 2025Tokens for Learning, Tokens for Unlearning: Mitigating Membership Inference Attacks in Large Language Models via Dual-Purpose Trainingcited by 15
- 2024Pre-training Differentially Private Models with Limited Public Datacited by 8
- 2025Can Differentially Private Fine-tuning LLMs Protect Against Privacy Attacks?cited by 4
- 2025Cocoon: A System Architecture for Differentially Private Training with Correlated Noisescited by 1
- 2025Stabilization of Perturbed Loss Function: Differential Privacy without Gradient Noisecited by 0
- 2025Cocoon: A System Architecture for Differentially Private Training with Correlated Noises8 Oct 2025
- 2025Stabilization of Perturbed Loss Function: Differential Privacy without Gradient Noise21 Aug 2025
- 2025Can Differentially Private Fine-tuning LLMs Protect Against Privacy Attacks?28 Apr 2025
- 2025Tokens for Learning, Tokens for Unlearning: Mitigating Membership Inference Attacks in Large Language Models via Dual-Purpose Training27 Feb 2025
- 2024LLM-PBE: Assessing Data Privacy in Large Language Models23 Aug 2024
- 2024Pre-training Differentially Private Models with Limited Public Data28 Feb 2024
- 2024Private Fine-tuning of Large Language Models with Zeroth-order Optimization9 Jan 2024