FIBER: A Differentially Private Optimizer with Filter-Aware Innovation Bias Correction
MINH DUC DO, Thao Do, Minh Hoang, Anh Le Duc Tran, Daeyoung Kim, Huy L Nguyen
Abstract
Differentially private (DP) training protects individual examples by adding noise to gradients, but the injected noise interacts nontrivially with adaptive optimizers. Recent DP methods temporally filter privatized gradients to reduce variance; however, filtering also changes the DP noise statistics seen by AdamW’s second-moment accumulator. As a result, bias corrections derived for unfiltered DP noise (e.g., subtracting ) can become miscalibrated when filtering is present. We propose FIBER, a DP optimizer designed for temporally filtered privatized gradients. FIBER (i) performs denoising in innovation space by filtering the residual stream and integrating it to form the filtered gradient estimate, (ii) decouples the two-point observation geometry from the innovation gain to enable independent tuning, and (iii) introduces a filter-aware second-moment calibration that subtracts the attenuated DP noise contribution , where is derived in closed form for the innovation filter and can be computed for general stable linear filters. Across vision and language benchmarks, FIBER consistently demonstrates substantial improvements in the performance of DP optimizers, surpassing state-of-the-art results under equivalent privacy constraints on multiple tasks.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Your agent calls
Luneget_paper_fulltext
Free to start. No credit card required.
Terminal
Install the CLIlune papers fulltext 816bc616-7158-40f0-8f62-d0351d3bca84Builds on19
- An Image is Worth 16x16 Words: Transformers for Image Recognition at ScaleAlexey Dosovitskiy, Lucas Beyer, Alexander Kolesnikov, Dirk Weissenborn et al.ICLR 2021 · 21,477 citations
- Deep Learning with Differential PrivacyMartín Abadi, Andy Chu, Ian J. Goodfellow, H. Brendan McMahan et al.CCS 2016 · 7,620 citations
- Evaluating Differentially Private Machine Learning in PracticeBargav Jayaraman, David EvansUSENIX Security 2019 · 586 citations
- Large Language Models Can Be Strong Differentially Private LearnersXuechen Li, Florian Tramèr, Percy Liang, Tatsunori HashimotoICLR 2022 · 502 citations
- Differentially Private Fine-tuning of Language ModelsDa Yu, Saurabh Naik, Arturs Backurs, Sivakanth Gopi et al.ICLR 2022 · 494 citations
Related papers
- DP-FedAdamW: An Efficient Optimizer for Differentially Private Federated Large ModelsJin Liu, Ning Xi, Yinbin Miao, Junkang LiuCVPR 2026 · 1 citation
- DiSK: Differentially Private Optimizer with Simplified Kalman Filter for Noise ReductionXinwei Zhang, Zhiqi Bu, Borja Balle, Mingyi Hong et al.ICLR 2025
- DP-AdamBC: Your DP-Adam Is Actually DP-SGD (Unless You Apply Bias Correction)Qiaoyue Tang, Frederick Shpilevskiy, Mathias LécuyerAAAI 2024 · 33 citations
- DOPPLER: Differentially Private Optimizers with Low-pass Filter for Privacy Noise ReductionXinwei Zhang, Zhiqi Bu, Mingyi Hong, Meisam RazaviyaynNeurIPS 2024 · 10 citations
- Differentially Private Adaptive Optimization with Delayed PreconditionersTian Li, Manzil Zaheer, Ken Liu, Sashank J. Reddi et al.ICLR 2023 · 3 citations
