Banded Square Root Matrix Factorization for Differentially Private Model Training
Not on the map. Why?
Abstract (arXiv)
Current state-of-the-art methods for differentially private model training are based on matrix factorization techniques. However, these methods suffer from high computational overhead because they require numerically solving a demanding optimization problem to determine an approximately optimal factorization prior to the actual model training. In this work, we present a new matrix factorization approach, BSR, which overcomes this computational bottleneck. By exploiting properties of the standard matrix square root, BSR allows to efficiently handle also large-scale problems. For the key scenario of stochastic gradient descent with momentum and weight decay, we even derive analytical expressions for BSR that render the computational overhead negligible. We prove bounds on the approximation quality that hold both in the centralized and in the federated learning setting. Our numerical experiments demonstrate that models trained using BSR perform on par with the best existing methods, while completely avoiding their computational overhead.
Key facts. Cited by 12 papers in the map (data through 14 Oct 2026). Builds on 16 of its 36 references that are in the map. First posted on arXiv 22 May 2024.
Builds on
16 of 36 references.
References · 16
- 2016Deep Learning with Differential Privacycited by 2,728
- 2021Opacus: User-Friendly Differential Privacy Library in PyTorchcited by 383
- 2021Practical and Private (Deep) Learning without Sampling or Shufflingcited by 170
- 2023How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacycited by 153
- 2021Hyperparameter Tuning with Renyi Differential Privacycited by 104
- 2022Toward Training at ImageNet Scale with Differential Privacycited by 87
- 2022Improved Differential Privacy for SGD via Optimal Private Linear Operators on Adaptive Streamscited by 59
- 2023(Amplified) Banded Matrix Factorization: A unified approach to private trainingcited by 49
- 2022Multi-Epoch Matrix Factorization Mechanisms for Private Machine Learningcited by 48
- 2020Dual Policy Distillationcited by 25
- 2023Correlated Noise Provably Beats Independent Noise for Differentially Private Learningcited by 23
- 2023Gradient Descent with Linearly Correlated Noise: Theory and Applications to Differential Privacycited by 18
4 more
- 2023Privacy Amplification for Matrix Mechanismscited by 17
- 2024Efficient and Near-Optimal Noise Generation for Streaming Differential Privacycited by 17
- 2023A Unifying Framework for Differentially Private Sums under Continual Observationcited by 15
- 2024pfl-research: simulation framework for accelerating research in Private Federated Learningcited by 8
Built on by
Citing papers per year: 2024: 2; 2025: 5; 2026: 5.
12 papers.
- 2024A Hassle-free Algorithm for Private Learning in Practice: Don't Use Tree Aggregation, Use BLTscited by 9
- 2024Streaming Private Continual Counting via Binningcited by 7
- 2025Back to Square Roots: An Optimal Bound on the Matrix Factorization Error for Multi-Epoch Differentially Private SGDcited by 7
- 2025Continual Release Moment Estimation with Differential Privacycited by 5
- 2025Binned Group Algebra Factorization for Differentially Private Continual Countingcited by 3
- 2026Sampling-Free Privacy Accounting for Matrix Mechanisms under Random Allocationcited by 3
- 2026DP-λCGD: Efficient Noise Correlation for Differentially Private Model Trainingcited by 3
- 2025Unified Privacy Guarantees for Decentralized Learning via Matrix Factorizationcited by 2
- 2025Learning Rate Scheduling with Matrix Factorization for Private Trainingcited by 2
- 2026Matrix Factorization for Practical Continual Mean Estimation Under User-Level Differential Privacycited by 0
- 2026Secure and Privacy-Preserving Vertical Federated Learningcited by 0
- 2026Beyond Square Roots: A Memory-Efficient Explicit Factorization for Multi-Epoch Private Learningcited by 0
- 2026Beyond Square Roots: A Memory-Efficient Explicit Factorization for Multi-Epoch Private Learning18 May 2026
- 2026Secure and Privacy-Preserving Vertical Federated Learning15 Apr 2026
- 2026DP-λCGD: Efficient Noise Correlation for Differentially Private Model Training29 Jan 2026
- 2026Matrix Factorization for Practical Continual Mean Estimation Under User-Level Differential Privacy29 Jan 2026
- 2026Sampling-Free Privacy Accounting for Matrix Mechanisms under Random Allocation29 Jan 2026
- 2025Learning Rate Scheduling with Matrix Factorization for Private Training22 Nov 2025
- 2025Unified Privacy Guarantees for Decentralized Learning via Matrix Factorization20 Oct 2025
- 2025Back to Square Roots: An Optimal Bound on the Matrix Factorization Error for Multi-Epoch Differentially Private SGD17 May 2025
- 2025Binned Group Algebra Factorization for Differentially Private Continual Counting6 Apr 2025
- 2025Continual Release Moment Estimation with Differential Privacy10 Feb 2025
- 2024Streaming Private Continual Counting via Binning10 Dec 2024
- 2024A Hassle-free Algorithm for Private Learning in Practice: Don't Use Tree Aggregation, Use BLTs16 Aug 2024