mlsanityData to 14 Oct 2026

AdaDPIGU: Differentially Private SGD with Adaptive Clipping and Importance-Based Gradient Updates for Deep Neural Networks

arXiv 2507.06525 ↗First posted 9 Jul 2025cs.LG math.ST stat.MLcited by 1

Not on the map. Why?

Abstract (arXiv)

Differential privacy has been proven effective for stochastic gradient descent; however, existing methods often suffer from performance degradation in high-dimensional settings, as the scale of injected noise increases with dimensionality. To tackle this challenge, we propose AdaDPIGU--a new differentially private SGD framework with importance-based gradient updates tailored for deep neural networks. In the pretraining stage, we apply a differentially private Gaussian mechanism to estimate the importance of each parameter while preserving privacy. During the gradient update phase, we prune low-importance coordinates and introduce a coordinate-wise adaptive clipping mechanism, enabling sparse and noise-efficient gradient updates. Theoretically, we prove that AdaDPIGU satisfies (varepsilon, δ)-differential privacy and retains convergence guarantees. Extensive experiments on standard benchmarks validate the effectiveness of AdaDPIGU. All results are reported under a fixed retention ratio of 60%. On MNIST, our method achieves a test accuracy of 99.12% under a privacy budget of ε = 8, nearly matching the non-private model. Remarkably, on CIFAR-10, it attains 73.21% accuracy at ε = 4, outperforming the non-private baseline of 71.12%, demonstrating that adaptive sparsification can enhance both privacy and utility.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Builds on 39 of its 64 references that are in the map. First posted on arXiv 9 Jul 2025.

Builds on

39 of 64 references.

References · 39

  1. 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,669
  2. 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,349
  3. 2016Deep Learning with Differential Privacycited by 2,728
  4. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
  5. 2015Learning both Weights and Connections for Efficient Neural Networkscited by 2,031
  6. 2019Deep Leakage from Gradientscited by 1,021
  7. 2017Renyi Differential Privacycited by 650
  8. 2018Exploiting Unintended Feature Leakage in Collaborative Learningcited by 520
  9. 2018ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Modelscited by 498
  10. 2020iDLG: Improved Deep Leakage from Gradientscited by 382
  11. 2021See through Gradients: Image Batch Recovery via GradInversioncited by 326
  12. 2018Beyond Inferring Class Representatives: User-Level Privacy Leakage From Federated Learningcited by 246
27 more
  1. 2019PowerSGD: Practical Low-Rank Gradient Compression for Distributed Optimizationcited by 238
  2. 2018Subsampled R'enyi Differential Privacy and Analytical Moments Accountantcited by 236
  3. 2020Differentially Private Learning Needs Better Features (or Much More Data)cited by 235
  4. 2020A review of deep learning in medical imaging: Imaging traits, technology trends, case studies with progress highlights, and future promisescited by 231
  5. 2019Differentially Private Learning with Adaptive Clippingcited by 220
  6. 2017Machine Learning Models that Remember Too Muchcited by 169
  7. 2020Understanding Gradient Clipping in Private SGD: A Geometric Perspectivecited by 142
  8. 2018An overview of deep learning in medical imaging focusing on MRIcited by 140
  9. 2020On Biased Compression for Distributed Learningcited by 140
  10. 2020Tempered Sigmoid Activations for Deep Learning with Differential Privacycited by 122
  11. 2019Gmail Smart Compose: Real-Time Assisted Writingcited by 98
  12. 2020R-GAP: Recursive Gradient Attack on Privacycited by 97
  13. 2020Bypassing the Ambient Dimension: Private SGD with Gradient Subspace Identificationcited by 90
  14. 2021Large Scale Private Learning via Low-rank Reparametrizationcited by 88
  15. 2021Do Not Let Privacy Overbill Utility: Gradient Embedding Perturbation for Private Learningcited by 86
  16. 2019AdaCliP: Adaptive Clipping for Private SGDcited by 77
  17. 2021Towards General Deep Leakage in Federated Learningcited by 40
  18. 2020FedSel: Federated SGD under Local Differential Privacy with Top-k Dimension Selectioncited by 36
  19. 2018Scattering Networks for Hybrid Representation Learningcited by 33
  20. 2020Improving Deep Learning with Differential Privacy using Gradient Encoding and Denoisingcited by 30
  21. 2022DPIS: An Enhanced Mechanism for Differentially Private SGD with Importance Samplingcited by 13
  22. 2020Privacy-preserving Learning via Deep Net Pruningcited by 12
  23. 2023DPSUR: Accelerating Differentially Private Stochastic Gradient Descent Using Selective Update and Releasecited by 10
  24. 2021Improving Differentially Private SGD via Randomly Sparsified Gradientscited by 8
  25. 2023Differential Privacy Meets Neural Network Pruningcited by 5
  26. 2024DPDR: Gradient Decomposition and Reconstruction for Differentially Private Deep Learningcited by 4
  27. 2023PCDP-SGD: Improving the Convergence of Differentially Private SGD via Projection in Advancecited by 2

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 1.

1 paper.