Rethinking Layer-wise Gaussian Noise Injection: Bridging Implicit Objectives and Privacy Budget Allocation
Not on the map. Why?
Abstract (arXiv)
Layer-wise Gaussian mechanisms (LGM) enhance flexibility in differentially private deep learning by injecting noise into partitioned gradient vectors. However, existing methods often rely on heuristic noise allocation strategies, lacking a rigorous understanding of their theoretical grounding in connecting noise allocation to formal privacy-utility tradeoffs. In this paper, we present a unified analytical framework that systematically connects layer-wise noise injection strategies with their implicit optimization objectives and associated privacy budget allocations. Our analysis reveals that several existing approaches optimize ill-posed objectives -- either ignoring inter-layer signal-to-noise ratio (SNR) consistency or leading to inefficient use of the privacy budget. In response, we propose a SNR-Consistent noise allocation strategy that unifies both aspects, yielding a noise allocation scheme that achieves better signal preservation and more efficient privacy budget utilization. Extensive experiments in both centralized and federated learning settings demonstrate that our method consistently outperforms existing allocation strategies, achieving better privacy-utility tradeoffs. Our framework not only offers diagnostic insights into prior methods but also provides theoretical guidance for designing adaptive and effective noise injection schemes in deep models.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 16 of its 28 references that are in the map. First posted on arXiv 4 Sep 2025.
Builds on
16 of 28 references.
References · 16
- 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,349
- 2016Deep Learning with Differential Privacycited by 2,728
- 2019Measuring the Effects of Non-Identical Data Distribution for Federated Visual Classificationcited by 851
- 2017Renyi Differential Privacycited by 650
- 2017Differentially Private Federated Learning: A Client Level Perspectivecited by 459
- 2020Differentially Private Learning Needs Better Features (or Much More Data)cited by 235
- 2019R'enyi Differential Privacy of the Sampled Gaussian Mechanismcited by 204
- 2020Tempered Sigmoid Activations for Deep Learning with Differential Privacycited by 122
- 2022Automatic Clipping: Differentially Private Deep Learning Made Easier and Strongercited by 88
- 2018A General Approach to Adding Differential Privacy to Iterative Training Procedurescited by 84
- 2019AdaCliP: Adaptive Clipping for Private SGDcited by 77
- 2019Differentially Private Model Publishing for Deep Learningcited by 71
4 more
- 2022Exploring the Limits of Differentially Private Deep Learning with Group-wise Clippingcited by 52
- 2018Concentrated Differentially Private Gradient Descent with Adaptive per-Iteration Privacy Budgetcited by 32
- 2019An Adaptive and Fast Convergent Approach to Differentially Private Deep Learningcited by 13
- 2022Adap DP-FL: Differentially Private Federated Learning with Adaptive Noisecited by 13
Built on by
Not cited yet.