When Gradient Clipping Becomes a Control Mechanism for Differential Privacy in Deep Learning
Not on the map. Why?
Abstract (arXiv)
Privacy-preserving training on sensitive data commonly relies on differentially private stochastic optimization with gradient clipping and Gaussian noise. The clipping threshold is a critical control knob: if set too small, systematic over-clipping induces optimization bias; if too large, injected noise dominates updates and degrades accuracy. Existing adaptive clipping methods often depend on per-example gradient norm statistics, adding computational overhead and introducing sensitivity to datasets and architectures. We propose a control-driven clipping strategy that adapts the threshold using a lightweight, weight-only spectral diagnostic computed from model parameters. At periodic probe steps, the method analyzes a designated weight matrix via spectral decomposition and estimates a heavy-tailed spectral indicator associated with training stability. This indicator is smoothed over time and fed into a bounded feedback controller that updates the clipping threshold multiplicatively in the log domain. Because the controller uses only parameters produced during privacy-preserving training, the resulting threshold updates are post-processing and do not increase privacy loss beyond that of the underlying DP optimizer under standard composition accounting.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 24 of its 36 references that are in the map. First posted on arXiv 11 Feb 2026.
Builds on
24 of 36 references.
References · 24
- 2016Deep Learning with Differential Privacycited by 2,682
- 2020Sharpness-Aware Minimization for Efficiently Improving Generalizationcited by 1,404
- 2021Opacus: User-Friendly Differential Privacy Library in PyTorchcited by 375
- 2018Privacy Amplification by Subsampling: Tight Analyses via Couplings and Divergencescited by 237
- 2019Differentially Private Learning with Adaptive Clippingcited by 218
- 2018Implicit Self-Regularization in Deep Neural Networks: Evidence from Random Matrix Theory and Implications for Learningcited by 211
- 2021Numerical Composition of Differential Privacycited by 174
- 2020Understanding Gradient Clipping in Private SGD: A Geometric Perspectivecited by 140
- 2020Predicting trends in the quality of state-of-the-art neural networks without access to training or testing datacited by 113
- 2022Automatic Clipping: Differentially Private Deep Learning Made Easier and Strongercited by 87
- 2019AdaCliP: Adaptive Clipping for Private SGDcited by 77
- 2020Scaling up Differentially Private Deep Learning with Fast Per-Example Gradient Clippingcited by 46
12 more
- 2019Heavy-Tailed Universality Predicts Trends in Test Accuracies for Very Large Pre-Trained Deep Neural Networkscited by 43
- 2021On the Convergence and Calibration of Deep Learning with Differential Privacycited by 36
- 2023DP-AdamBC: Your DP-Adam Is Actually DP-SGD (Unless You Apply Bias Correction)cited by 28
- 2022Differentially Private Learning with Per-Sample Adaptive Clippingcited by 21
- 2022Differentially Private Adaptive Optimization with Delayed Preconditionerscited by 18
- 2022Faster Privacy Accounting via Evolving Discretizationcited by 14
- 2023Differentially Private Sharpness-Aware Trainingcited by 14
- 2022DPIS: An Enhanced Mechanism for Differentially Private SGD with Importance Samplingcited by 13
- 2025Differentially private fine-tuned NF-Net to predict GI cancer typecited by 3
- 2025DP-Adam-AC: Privacy-preserving Fine-Tuning of Localizable Language Models Using Adam Optimization with Adaptive Clippingcited by 3
- 2025Mitigating Disparate Impact of Differentially Private Learning through Bounded Adaptive Clippingcited by 2
- 2025AdaDPIGU: Differentially Private SGD with Adaptive Clipping and Importance-Based Gradient Updates for Deep Neural Networkscited by 1
Built on by
Citing papers per year: 2026: 1.
1 paper.