AdaDPIGU: Differentially Private SGD with Adaptive Clipping and Importance-Based Gradient Updates for Deep Neural Networks
Not on the map. Why?
Abstract (arXiv)
Differential privacy has been proven effective for stochastic gradient descent; however, existing methods often suffer from performance degradation in high-dimensional settings, as the scale of injected noise increases with dimensionality. To tackle this challenge, we propose AdaDPIGU--a new differentially private SGD framework with importance-based gradient updates tailored for deep neural networks. In the pretraining stage, we apply a differentially private Gaussian mechanism to estimate the importance of each parameter while preserving privacy. During the gradient update phase, we prune low-importance coordinates and introduce a coordinate-wise adaptive clipping mechanism, enabling sparse and noise-efficient gradient updates. Theoretically, we prove that AdaDPIGU satisfies (varepsilon, δ)-differential privacy and retains convergence guarantees. Extensive experiments on standard benchmarks validate the effectiveness of AdaDPIGU. All results are reported under a fixed retention ratio of 60%. On MNIST, our method achieves a test accuracy of 99.12% under a privacy budget of ε = 8, nearly matching the non-private model. Remarkably, on CIFAR-10, it attains 73.21% accuracy at ε = 4, outperforming the non-private baseline of 71.12%, demonstrating that adaptive sparsification can enhance both privacy and utility.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Builds on 39 of its 64 references that are in the map. First posted on arXiv 9 Jul 2025.
Builds on
39 of 64 references.
References · 39
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,669
- 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,349
- 2016Deep Learning with Differential Privacycited by 2,728
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2015Learning both Weights and Connections for Efficient Neural Networkscited by 2,031
- 2019Deep Leakage from Gradientscited by 1,021
- 2017Renyi Differential Privacycited by 650
- 2018Exploiting Unintended Feature Leakage in Collaborative Learningcited by 520
- 2018ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Modelscited by 498
- 2020iDLG: Improved Deep Leakage from Gradientscited by 382
- 2021See through Gradients: Image Batch Recovery via GradInversioncited by 326
- 2018Beyond Inferring Class Representatives: User-Level Privacy Leakage From Federated Learningcited by 246
27 more
- 2019PowerSGD: Practical Low-Rank Gradient Compression for Distributed Optimizationcited by 238
- 2018Subsampled R'enyi Differential Privacy and Analytical Moments Accountantcited by 236
- 2020Differentially Private Learning Needs Better Features (or Much More Data)cited by 235
- 2020A review of deep learning in medical imaging: Imaging traits, technology trends, case studies with progress highlights, and future promisescited by 231
- 2019Differentially Private Learning with Adaptive Clippingcited by 220
- 2017Machine Learning Models that Remember Too Muchcited by 169
- 2020Understanding Gradient Clipping in Private SGD: A Geometric Perspectivecited by 142
- 2018An overview of deep learning in medical imaging focusing on MRIcited by 140
- 2020On Biased Compression for Distributed Learningcited by 140
- 2020Tempered Sigmoid Activations for Deep Learning with Differential Privacycited by 122
- 2019Gmail Smart Compose: Real-Time Assisted Writingcited by 98
- 2020R-GAP: Recursive Gradient Attack on Privacycited by 97
- 2020Bypassing the Ambient Dimension: Private SGD with Gradient Subspace Identificationcited by 90
- 2021Large Scale Private Learning via Low-rank Reparametrizationcited by 88
- 2021Do Not Let Privacy Overbill Utility: Gradient Embedding Perturbation for Private Learningcited by 86
- 2019AdaCliP: Adaptive Clipping for Private SGDcited by 77
- 2021Towards General Deep Leakage in Federated Learningcited by 40
- 2020FedSel: Federated SGD under Local Differential Privacy with Top-k Dimension Selectioncited by 36
- 2018Scattering Networks for Hybrid Representation Learningcited by 33
- 2020Improving Deep Learning with Differential Privacy using Gradient Encoding and Denoisingcited by 30
- 2022DPIS: An Enhanced Mechanism for Differentially Private SGD with Importance Samplingcited by 13
- 2020Privacy-preserving Learning via Deep Net Pruningcited by 12
- 2023DPSUR: Accelerating Differentially Private Stochastic Gradient Descent Using Selective Update and Releasecited by 10
- 2021Improving Differentially Private SGD via Randomly Sparsified Gradientscited by 8
- 2023Differential Privacy Meets Neural Network Pruningcited by 5
- 2024DPDR: Gradient Decomposition and Reconstruction for Differentially Private Deep Learningcited by 4
- 2023PCDP-SGD: Improving the Convergence of Differentially Private SGD via Projection in Advancecited by 2
Built on by
Citing papers per year: 2026: 1.
1 paper.