Stabilization of Perturbed Loss Function: Differential Privacy without Gradient Noise
Not on the map. Why?
Abstract (arXiv)
We propose SPOF (Stabilization of Perturbed Loss Function), a differentially private training mechanism intended for multi-user local differential privacy (LDP). SPOF perturbs a stabilized Taylor expanded polynomial approximation of a model's training loss function, where each user's data is privatized by calibrated noise added to the coefficients of the polynomial. Unlike gradient-based mechanisms such as differentially private stochastic gradient descent (DP-SGD), SPOF does not require injecting noise into the gradients of the loss function, which improves both computational efficiency and stability. This formulation naturally supports simultaneous privacy guarantees across all users. Moreover, SPOF exhibits robustness to environmental noise during training, maintaining stable performance even when user inputs are corrupted. We compare SPOF with a multi-user extension of DP-SGD, evaluating both methods in a wireless body area network (WBAN) scenario involving heterogeneous user data and stochastic channel noise from body sensors. Our results show that SPOF achieves, on average, up to 3.5% higher reconstruction accuracy and reduces mean training time by up to 57.2% compared to DP-SGD, demonstrating superior privacy-utility trade-offs in multi-user environments.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 17 of its 35 references that are in the map. First posted on arXiv 21 Aug 2025.
Builds on
17 of 35 references.
References · 17
- 2016Deep Learning with Differential Privacycited by 2,728
- 2019Federated Learning with Differential Privacy: Algorithms and Performance Analysiscited by 536
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 412
- 2020Bypassing the Ambient Dimension: Private SGD with Gradient Subspace Identificationcited by 90
- 2022Differentially Private Optimization on Large Model at Small Costcited by 65
- 2022Exploring the Limits of Differentially Private Deep Learning with Group-wise Clippingcited by 52
- 2024Private Fine-tuning of Large Language Models with Zeroth-order Optimizationcited by 41
- 2021Dynamic Differential-Privacy Preserving SGDcited by 30
- 2021Fast and Memory Efficient Differentially Private-SGD via JL Projectionscited by 29
- 2022One Parameter Defense -- Defending against Data Inference Attacks via Differential Privacycited by 27
- 2020Differentially Private and Fair Classification via Calibrated Functional Mechanismcited by 20
- 2023Gradients Look Alike: Sensitivity is Often Overestimated in DP-SGDcited by 11
5 more
- 2021Making the Most of Parallel Composition in Differential Privacycited by 10
- 2022Dimension Independent Generalization of DP-SGD for Overparameterized Smooth Convex Optimizationcited by 9
- 2023Zero redundancy distributed learning with differential privacycited by 7
- 2023Task-aware Distributed Source Coding under Dynamic Bandwidthcited by 6
- 2024Active Learning for WBAN-based Health Monitoringcited by 2
Built on by
Not cited yet.