mlsanityData to 14 Oct 2026

Beyond Square Roots: A Memory-Efficient Explicit Factorization for Multi-Epoch Private Learning

arXiv 2605.18379 ↗First posted 18 May 2026cs.LGcited by 0

Not on the map. Why?

Abstract (arXiv)

Correlated-noise mechanisms are among the most promising approaches for improving the utility of differentially private model training, but rigorous guarantees require explicit, analyzable factorizations, and practical deployment requires memory efficiency. Recent works have developed banded inverse factorizations, which address both requirements by exploiting a banded structure in the correlation matrix. The bandwidth controls the size of the noise buffer used to correlate noise across iterations, and thus governs the tradeoff between utility and memory cost. At the two ends of this tradeoff, DP-λCGD achieves high memory efficiency by using only a one-step noise buffer, but this limits its utility gains, while the banded inverse square root (BISR) factorization exploits larger correlation windows and is asymptotically optimal for large bandwidths but performs poorly at low bandwidths. To bridge this gap, we introduce γ-BIFR, a unified generalization of both factorizations. In the low-memory, low-bandwidth regime, γ-BIFR improves RMSE, amplified RMSE, and private training performance, while yielding tighter theoretical guarantees for multi-participation error in multi-epoch training.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 30 of its 38 references that are in the map. First posted on arXiv 18 May 2026.

Builds on

30 of 38 references.

References · 30

  1. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
  2. 2016Deep Learning with Differential Privacycited by 2,728
  3. 2019Optuna: A Next-generation Hyperparameter Optimization Frameworkcited by 2,501
  4. 2021Opacus: User-Friendly Differential Privacy Library in PyTorchcited by 383
  5. 2018Improving the Gaussian Mechanism for Differential Privacy: Analytical Calibration and Optimal Denoisingcited by 218
  6. 2021Numerical Composition of Differential Privacycited by 180
  7. 2021Practical and Private (Deep) Learning without Sampling or Shufflingcited by 170
  8. 2022Improved Differential Privacy for SGD via Optimal Private Linear Operators on Adaptive Streamscited by 59
  9. 2023(Amplified) Banded Matrix Factorization: A unified approach to private trainingcited by 49
  10. 2022Multi-Epoch Matrix Factorization Mechanisms for Private Machine Learningcited by 48
  11. 2022Constant matters: Fine-grained Complexity of Differentially Private Continual Observationcited by 23
  12. 2023Correlated Noise Provably Beats Independent Noise for Differentially Private Learningcited by 23
18 more
  1. 2024Near Exact Privacy Amplification for Matrix Mechanismscited by 18
  2. 2023Privacy Amplification for Matrix Mechanismscited by 17
  3. 2024Efficient and Near-Optimal Noise Generation for Streaming Differential Privacycited by 17
  4. 2021Differentially Private Histograms under Continual Observation: Streaming Selection into the Unknowncited by 14
  5. 2025Correlated Noise Mechanisms for Differentially Private Learningcited by 14
  6. 2024Scaling up the Banded Matrix Factorization Mechanism for Differentially Private MLcited by 13
  7. 2023A Smooth Binary Mechanism for Efficient Private Continual Observationcited by 12
  8. 2024Banded Square Root Matrix Factorization for Differentially Private Model Trainingcited by 12
  9. 2024A Hassle-free Algorithm for Private Learning in Practice: Don't Use Tree Aggregation, Use BLTscited by 9
  10. 2024Streaming Private Continual Counting via Binningcited by 7
  11. 2025Back to Square Roots: An Optimal Bound on the Matrix Factorization Error for Multi-Epoch Differentially Private SGDcited by 7
  12. 2026Privacy Amplification for BandMF via b-Min-Sep Subsamplingcited by 6
  13. 2024Count on Your Elders: Laplace vs Gaussian Noisecited by 4
  14. 2025Binned Group Algebra Factorization for Differentially Private Continual Countingcited by 3
  15. 2026Sampling-Free Privacy Accounting for Matrix Mechanisms under Random Allocationcited by 3
  16. 2026DP-λCGD: Efficient Noise Correlation for Differentially Private Model Trainingcited by 3
  17. 2026JAX-Privacy: A library for differentially private machine learningcited by 3
  18. 2025Learning Rate Scheduling with Matrix Factorization for Private Trainingcited by 2

Built on by

Not cited yet.