mlsanityData to 14 Oct 2026

Banded Square Root Matrix Factorization for Differentially Private Model Training

arXiv 2405.13763 ↗First posted 22 May 2024cs.LG cs.CRcited by 12

Not on the map. Why?

Abstract (arXiv)

Current state-of-the-art methods for differentially private model training are based on matrix factorization techniques. However, these methods suffer from high computational overhead because they require numerically solving a demanding optimization problem to determine an approximately optimal factorization prior to the actual model training. In this work, we present a new matrix factorization approach, BSR, which overcomes this computational bottleneck. By exploiting properties of the standard matrix square root, BSR allows to efficiently handle also large-scale problems. For the key scenario of stochastic gradient descent with momentum and weight decay, we even derive analytical expressions for BSR that render the computational overhead negligible. We prove bounds on the approximation quality that hold both in the centralized and in the federated learning setting. Our numerical experiments demonstrate that models trained using BSR perform on par with the best existing methods, while completely avoiding their computational overhead.

Key facts. Cited by 12 papers in the map (data through 14 Oct 2026). Builds on 16 of its 36 references that are in the map. First posted on arXiv 22 May 2024.

Builds on

16 of 36 references.

References · 16

  1. 2016Deep Learning with Differential Privacycited by 2,728
  2. 2021Opacus: User-Friendly Differential Privacy Library in PyTorchcited by 383
  3. 2021Practical and Private (Deep) Learning without Sampling or Shufflingcited by 170
  4. 2023How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacycited by 153
  5. 2021Hyperparameter Tuning with Renyi Differential Privacycited by 104
  6. 2022Toward Training at ImageNet Scale with Differential Privacycited by 87
  7. 2022Improved Differential Privacy for SGD via Optimal Private Linear Operators on Adaptive Streamscited by 59
  8. 2023(Amplified) Banded Matrix Factorization: A unified approach to private trainingcited by 49
  9. 2022Multi-Epoch Matrix Factorization Mechanisms for Private Machine Learningcited by 48
  10. 2020Dual Policy Distillationcited by 25
  11. 2023Correlated Noise Provably Beats Independent Noise for Differentially Private Learningcited by 23
  12. 2023Gradient Descent with Linearly Correlated Noise: Theory and Applications to Differential Privacycited by 18
4 more
  1. 2023Privacy Amplification for Matrix Mechanismscited by 17
  2. 2024Efficient and Near-Optimal Noise Generation for Streaming Differential Privacycited by 17
  3. 2023A Unifying Framework for Differentially Private Sums under Continual Observationcited by 15
  4. 2024pfl-research: simulation framework for accelerating research in Private Federated Learningcited by 8

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2024: 2; 2025: 5; 2026: 5.

12 papers.