Enhancing DP-SGD through Non-monotonous Adaptive Scaling Gradient Weight
Not on the map. Why?
Abstract (arXiv)
In the domain of deep learning, the challenge of protecting sensitive data while maintaining model utility is significant. Traditional Differential Privacy (DP) techniques such as Differentially Private Stochastic Gradient Descent (DP-SGD) typically employ strategies like direct or per-sample adaptive gradient clipping. These methods, however, compromise model accuracy due to their critical influence on gradient handling, particularly neglecting the significant contribution of small gradients during later training stages. In this paper, we introduce an enhanced version of DP-SGD, named Differentially Private Per-sample Adaptive Scaling Clipping (DP-PSASC). This approach replaces traditional clipping with non-monotonous adaptive gradient scaling, which alleviates the need for intensive threshold setting and rectifies the disproportionate weighting of smaller gradients. Our contribution is twofold. First, we develop a novel gradient scaling technique that effectively assigns proper weights to gradients, particularly small ones, thus improving learning under differential privacy. Second, we integrate a momentum-based method into DP-PSASC to reduce bias from stochastic sampling, enhancing convergence rates. Our theoretical and empirical analyses confirm that DP-PSASC preserves privacy and delivers superior performance across diverse datasets, setting new standards for privacy-sensitive applications.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 35 of its 48 references that are in the map. First posted on arXiv 5 Nov 2024.
Builds on
35 of 48 references.
References · 35
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 11,979
- 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,283
- 2016Deep Learning with Differential Privacycited by 2,682
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2019Deep Leakage from Gradientscited by 1,004
- 2021Differentially Private Fine-tuning of Language Modelscited by 392
- 2021Opacus: User-Friendly Differential Privacy Library in PyTorchcited by 375
- 2019Why gradient clipping accelerates training: A theoretical justification for adaptivitycited by 335
- 2019Momentum-Based Variance Reduction in Non-Convex SGDcited by 302
- 2018Beyond Inferring Class Representatives: User-Level Privacy Leakage From Federated Learningcited by 242
- 2020Differentially Private Learning Needs Better Features (or Much More Data)cited by 233
23 more
- 2019Differentially Private Learning with Adaptive Clippingcited by 218
- 2020Understanding Gradient Clipping in Private SGD: A Geometric Perspectivecited by 140
- 2021Hyperparameter Tuning with Renyi Differential Privacycited by 104
- 2020Improved Analysis of Clipping Algorithms for Non-convex Optimizationcited by 88
- 2021Large Scale Private Learning via Low-rank Reparametrizationcited by 87
- 2022Toward Training at ImageNet Scale with Differential Privacycited by 87
- 2022Automatic Clipping: Differentially Private Deep Learning Made Easier and Strongercited by 87
- 2019AdaCliP: Adaptive Clipping for Private SGDcited by 77
- 2021Property Inference From Poisoningcited by 56
- 2021Private Adaptive Gradient Methods for Convex Optimizationcited by 46
- 2021Differentially Private Stochastic Optimization: New Results in Convex and Non-Convex Settingscited by 45
- 2022Private Adaptive Optimization with Side Informationcited by 38
- 2021On the Convergence and Calibration of Deep Learning with Differential Privacycited by 36
- 2022Normalized/Clipped SGD with Perturbation for Differentially Private Non-Convex Optimizationcited by 35
- 2022Disparate Impact in Differential Privacy from Gradient Misalignmentcited by 31
- 2021Dynamic Differential-Privacy Preserving SGDcited by 29
- 2020Dual Policy Distillationcited by 25
- 2021Differentially Private SGD with Non-Smooth Lossescited by 22
- 2022Differentially Private Learning with Per-Sample Adaptive Clippingcited by 21
- 2018Three Tools for Practical Differential Privacycited by 20
- 2020Differentially Private Accelerated Optimization Algorithmscited by 13
- 2021Differentially Private Coordinate Descent for Composite Empirical Risk Minimizationcited by 10
- 2021Adaptive Differentially Private Empirical Risk Minimizationcited by 5
Built on by
Citing papers per year: 2026: 1.
1 paper.