How to Make the Gradients Small Privately: Improved Rates for Differentially Private Non-Convex Optimization
Not on the map. Why?
Abstract (arXiv)
We provide a simple and flexible framework for designing differentially private algorithms to find approximate stationary points of non-convex loss functions. Our framework is based on using a private approximate risk minimizer to "warm start" another private algorithm for finding stationary points. We use this framework to obtain improved, and sometimes optimal, rates for several classes of non-convex loss functions. First, we obtain improved rates for finding stationary points of smooth non-convex empirical loss functions. Second, we specialize to quasar-convex functions, which generalize star-convex functions and arise in learning dynamical systems and training some neural nets. We achieve the optimal rate for this class. Third, we give an optimal algorithm for finding stationary points of functions satisfying the Kurdyka-Lojasiewicz (KL) condition. For example, over-parameterized neural networks often satisfy this condition. Fourth, we provide new state-of-the-art rates for stationary points of non-convex population loss functions. Fifth, we obtain improved rates for non-convex generalized linear models. A modification of our algorithm achieves nearly the same rates for second-order stationary points of functions with Lipschitz Hessian, improving over the previous state-of-the-art for each of the above problems.
Key facts. Cited by 10 papers in the map (data through 14 Oct 2026). Builds on 45 of its 64 references that are in the map. First posted on arXiv 17 Feb 2024.
Builds on
45 of 64 references.
References · 45
- 2016Deep Learning with Differential Privacycited by 2,728
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2016Linear Convergence of Gradient and Proximal-Gradient Methods Under the Polyak-Lojasiewicz Conditioncited by 539
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 412
- 2021Differentially Private Fine-tuning of Language Modelscited by 400
- 2020Loss landscapes and optimization in over-parameterized non-linear systems and neural networkscited by 233
- 2019Private Stochastic Convex Optimization with Optimal Ratescited by 186
- 2020Private Stochastic Convex Optimization: Optimal Rates in Linear Timecited by 153
- 2018Differentially Private Empirical Risk Minimization Revisited: Faster and More Generalcited by 128
- 2016Matrix Completion has No Spurious Local Minimumcited by 125
- 2018An Alternative View: When Does SGD Escape Local Minima?cited by 115
33 more
- 2016A Geometric Analysis of Phase Retrievalcited by 92
- 2016The Landscape of Empirical Risk for Non-convex Lossescited by 86
- 2021Private Stochastic Convex Optimization: Optimal Rates in ℓ1 Geometrycited by 83
- 2013Fingerprinting Codes and the Price of Approximate Differential Privacycited by 82
- 2016Gradient Descent Learns Linear Dynamical Systemscited by 79
- 2020SGD for Structured Nonconvex Functions: Learning Rates, Minibatching and Interpolationcited by 67
- 2017Efficient Private ERM for Smooth Objectivescited by 61
- 2019Robust Bi-Tempered Logistic Loss Based on Bregman Divergencescited by 61
- 2018How To Make the Gradients Small Stochastically: Even Faster Convex and Nonconvex SGDcited by 57
- 2015Between Pure and Approximate Differential Privacycited by 56
- 2021Non-Euclidean Differentially Private Stochastic Convex Optimization: Optimal Rates in Linear Timecited by 51
- 2021Public Data-Assisted Mirror Descent for Private Model Trainingcited by 49
- 2021Differentially Private Stochastic Optimization: New Results in Convex and Non-Convex Settingscited by 45
- 2019SGD Converges to Global Minimum in Deep Learning via Star-convex Pathcited by 39
- 2018Uniform Convergence of Gradients for Non-Convex Learning and Optimizationcited by 38
- 2019Near-Optimal Methods for Minimizing Star-Convex Functions and Beyondcited by 36
- 2018On exponential convergence of SGD in non-convex over-parametrized learningcited by 33
- 2022Faster Rates of Convergence to Stationary Points in Differentially Private Optimizationcited by 32
- 2021Private Federated Learning Without a Trusted Server: Optimal Algorithms for Convex Lossescited by 30
- 2020Private Stochastic Non-Convex Optimization: Adaptive Algorithms and Tighter Generalization Boundscited by 26
- 2022Private Non-Convex Federated Learning Without a Trusted Servercited by 26
- 2022Bring Your Own Algorithm for Optimal Differentially Private Stochastic Minimax Optimizationcited by 22
- 2021Optimal Algorithms for Differentially Private Stochastic Monotone Variational Inequalities and Saddle-Point Problemscited by 17
- 2022Differentially Private Generalized Linear Models Revisitedcited by 17
- 2022Stochastic Differentially Private and Fair Learningcited by 16
- 2023Private (Stochastic) Non-Convex Optimization Revisited: Second-Order Stationary Points and Excess Riskscited by 12
- 2022Momentum Aggregation for Private Non-convex ERMcited by 10
- 2023Differentially Private Non-convex Learning for Multi-layer Neural Networkscited by 10
- 2023Near-Optimal Algorithms for Private Online Optimization in the Realizable Regimecited by 9
- 2023Optimal Differentially Private Model Training with Public Datacited by 9
- 2023Differentially Private Optimization for Smooth Nonconvex ERMcited by 5
- 2023Differentially Private Non-Convex Optimization under the KL Condition with Optimal Ratescited by 4
- 2019Weighted Distributed Differential Privacy ERM: Convex and Non-convexcited by 3
Built on by
Citing papers per year: 2024: 6; 2025: 3; 2026: 1.
10 papers.
- 2024Private Heterogeneous Federated Learning Without a Trusted Server Revisited: Error-Optimal and Communication-Efficient Algorithms for Convex Lossescited by 8
- 2024Improved Sample Complexity for Private Nonsmooth Nonconvex Optimizationcited by 4
- 2024Faster Algorithms for User-Level Private Stochastic Convex Optimizationcited by 4
- 2024Convex Approximation of Two-Layer ReLU Networks for Hidden State Differential Privacycited by 2
- 2024Differentially Private Bilevel Optimizationcited by 2
- 2024Adaptive Batch Size for Privately Finding Second-Order Stationary Pointscited by 2
- 2025Memory-Efficient Differentially Private Training with Gradient Random Projectioncited by 2
- 2025Differentially Private Bilevel Optimization: Efficient Algorithms with Near-Optimal Ratescited by 1
- 2026Optimization, Generalization and Differential Privacy Bounds for Gradient Descent on Kolmogorov-Arnold Networkscited by 1
- 2025On the Inherent Privacy of Zeroth Order Projected Gradient Descentcited by 0
- 2026Optimization, Generalization and Differential Privacy Bounds for Gradient Descent on Kolmogorov-Arnold Networks29 Jan 2026
- 2025On the Inherent Privacy of Zeroth Order Projected Gradient Descent8 Jul 2025
- 2025Memory-Efficient Differentially Private Training with Gradient Random Projection18 Jun 2025
- 2025Differentially Private Bilevel Optimization: Efficient Algorithms with Near-Optimal Rates15 Jun 2025
- 2024Faster Algorithms for User-Level Private Stochastic Convex Optimization24 Oct 2024
- 2024Adaptive Batch Size for Privately Finding Second-Order Stationary Points10 Oct 2024
- 2024Improved Sample Complexity for Private Nonsmooth Nonconvex Optimization8 Oct 2024
- 2024Differentially Private Bilevel Optimization29 Sep 2024
- 2024Private Heterogeneous Federated Learning Without a Trusted Server Revisited: Error-Optimal and Communication-Efficient Algorithms for Convex Losses12 Jul 2024
- 2024Convex Approximation of Two-Layer ReLU Networks for Hidden State Differential Privacy5 Jul 2024