mlsanityData to 14 Oct 2026

PCDP-SGD: Improving the Convergence of Differentially Private SGD via Projection in Advance

arXiv 2312.03792 ↗First posted 6 Dec 2023cs.CR cs.LGcited by 2

Not on the map. Why?

Abstract (arXiv)

The paradigm of Differentially Private SGD~(DP-SGD) can provide a theoretical guarantee for training data in both centralized and federated settings. However, the utility degradation caused by DP-SGD limits its wide application in high-stakes tasks, such as medical image diagnosis. In addition to the necessary perturbation, the convergence issue is attributed to the information loss on the gradient clipping. In this work, we propose a general framework PCDP-SGD, which aims to compress redundant gradient norms and preserve more crucial top gradient components via projection operation before gradient clipping. Additionally, we extend PCDP-SGD as a fundamental component in differential privacy federated learning~(DPFL) for mitigating the data heterogeneous challenge and achieving efficient communication. We prove that pre-projection enhances the convergence of DP-SGD by reducing the dependence of clipping error and bias to a fraction of the top gradient eigenspace, and in theory, limits cross-client variance to improve the convergence under heterogeneous federation. Experimental results demonstrate that PCDP-SGD achieves higher accuracy compared with state-of-the-art DP-SGD variants in computer vision tasks. Moreover, PCDP-SGD outperforms current federated learning frameworks when DP is guaranteed on local training sets.

Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 33 of its 47 references that are in the map. First posted on arXiv 6 Dec 2023.

Builds on

33 of 47 references.

References · 33

  1. 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,669
  2. 2018Federated Optimization in Heterogeneous Networkscited by 2,987
  3. 2016Deep Learning with Differential Privacycited by 2,728
  4. 2021Model-Contrastive Federated Learningcited by 766
  5. 2023Extracting Training Data from Diffusion Modelscited by 732
  6. 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 412
  7. 2018Measuring the Intrinsic Dimension of Objective Landscapescited by 370
  8. 2019Why gradient clipping accelerates training: A theoretical justification for adaptivitycited by 341
  9. 2017Empirical Analysis of the Hessian of Over-Parametrized Neural Networkscited by 290
  10. 2019Differentially Private Learning with Adaptive Clippingcited by 220
  11. 2018Gradient Descent Happens in a Tiny Subspacecited by 217
  12. 2019A Tail-Index Analysis of Stochastic Gradient Noise in Deep Neural Networkscited by 214
21 more
  1. 2020Understanding Gradient Clipping in Private SGD: A Geometric Perspectivecited by 142
  2. 2019Deep Learning with Gaussian Differential Privacycited by 114
  3. 2022Automatic Clipping: Differentially Private Deep Learning Made Easier and Strongercited by 88
  4. 2019BackPACK: Packing more into backpropcited by 78
  5. 2019AdaCliP: Adaptive Clipping for Private SGDcited by 77
  6. 2021Understanding Clipping for Federated Learning: Convergence and Client-Level Differential Privacycited by 69
  7. 2016A Variational Analysis of Stochastic Gradient Algorithmscited by 57
  8. 2022Mixed Differential Privacy in Computer Visioncited by 54
  9. 2022Large Scale Transfer Learning for Differentially Private Image Classificationcited by 41
  10. 2019Limits of Private Learning with Access to Public Datacited by 39
  11. 2019Hessian based analysis of SGD for Deep Nets: Dynamics and Generalizationcited by 37
  12. 2022Differentially Private Federated Learning with Local Regularization and Sparsificationcited by 36
  13. 2022Normalized/Clipped SGD with Perturbation for Differentially Private Non-Convex Optimizationcited by 36
  14. 2023Make Landscape Flatter in Differentially Private Federated Learningcited by 33
  15. 2022Privacy-Preserving Face Recognition with Learnable Privacy Budgets in Frequency Domaincited by 28
  16. 2020Private Query Release Assisted by Public Datacited by 27
  17. 2020Federated Learning with Sparsification-Amplified Privacy and Adaptive Optimizationcited by 26
  18. 2022Differentially Private Learning with Per-Sample Adaptive Clippingcited by 21
  19. 2022Improving Federated Learning Face Recognition via Privacy-Agnostic Clusterscited by 18
  20. 2021Improving Differentially Private SGD via Randomly Sparsified Gradientscited by 8
  21. 2022DPAUC: Differentially Private AUC Computation in Federated Learningcited by 7

Built on by

Cited by year

Citing papers per year: 2024: 1; 2025: 1.

2 papers.