Banded Square Root Matrix Factorization for Differentially Private Model Training
Nikita P. Kalinin, Christoph H. Lampert
摘要
Current state-of-the-art methods for differentially private model training are based on matrix factorization techniques. However, these methods suffer from high computational overhead because they require numerically solving a demanding optimization problem to determine an approximately optimal factorization prior to the actual model training. In this work, we present a new matrix factorization approach, BSR, which overcomes this computational bottleneck. By exploiting properties of the standard matrix square root, BSR allows to efficiently handle also large-scale problems. For the key scenario of stochastic gradient descent with momentum and weight decay, we even derive analytical expressions for BSR that render the computational overhead negligible. We prove bounds on the approximation quality that hold both in the centralized and in the federated learning setting. Our numerical experiments demonstrate that models trained using BSR perform on par with the best existing methods, while completely avoiding their computational overhead.
问问这篇 Paper
智能体会读完全文。
Lune 把这篇 Paper 索引到了每一个公式,引用它的顶会 Paper 也一样。你提问,回答直接引用原文。
引用它的顶会 Paper5
- Back to Square Roots: An Optimal Bound on the Matrix Factorization Error for Multi-Epoch Differentially Private SGDNikita Kalinin, Ryan McKenna, Jalaj Upadhyay, Christoph H. LampertICLR 2026 · 被引用 10 次
- Continual Release Moment Estimation with Differential PrivacyNikita P. Kalinin, Jalaj Upadhyay, Christoph H. LampertNeurIPS 2025 · 被引用 5 次
- Unified Privacy Guarantees for Decentralized Learning via Matrix FactorizationAurélien Bellet, Edwige Cyffers, Davide Frey, Romaric Gaudel 等ICLR 2026 · 被引用 3 次
- Scaling up the Banded Matrix Factorization Mechanism for Large Scale Differentially Private MLRyan McKennaICLR 2025
- Edit-Neighboring Data Streams and Privacy under Continual ObservationJoel Daniel Andersson, Anamay Chaturvedi, Monika Henzinger, Roodabeh SafaviCCS 2026
它引用的顶会 Paper12
- Deep Learning with Differential PrivacyMartín Abadi, Andy Chu, Ian J. Goodfellow, H. Brendan McMahan 等CCS 2016 · 被引用 7,620 次
- Practical and Private (Deep) Learning Without Sampling or ShufflingPeter Kairouz, Brendan McMahan, Shuang Song, Om Thakkar 等ICML 2021 · 被引用 239 次
- Hyperparameter Tuning with Renyi Differential PrivacyNicolas Papernot, Thomas SteinkeICLR 2022 · 被引用 157 次
- Improved Differential Privacy for SGD via Optimal Private Linear Operators on Adaptive StreamsSergey Denisov, H. Brendan McMahan, John Rush, Adam D. Smith 等NeurIPS 2022 · 被引用 96 次
- (Amplified) Banded Matrix Factorization: A unified approach to private trainingChristopher A. Choquette-Choo, Arun Ganesh, Ryan McKenna, H. Brendan McMahan 等NeurIPS 2023 · 被引用 67 次
相关 Paper
- Gradient Descent with Linearly Correlated Noise: Theory and Applications to Differential PrivacyAnastasia Koloskova, Ryan McKenna, Zachary Charles, John Keith Rush 等NeurIPS 2023 · 被引用 24 次
- A Unified Fast Gradient Clipping Framework for DP-SGDWeiwei Kong, Andrés Muñoz MedinaNeurIPS 2023 · 被引用 9 次
- Multi-Epoch Matrix Factorization Mechanisms for Private Machine LearningChristopher A. Choquette-Choo, Hugh Brendan McMahan, J. Keith Rush, Abhradeep Guha ThakurtaICML 2023 · 被引用 62 次
- Sparsity-Preserving Differentially Private Training of Large Embedding ModelsBadih Ghazi, Yangsibo Huang, Pritish Kamath, Ravi Kumar 等NeurIPS 2023 · 被引用 9 次
- Federated Binary Matrix Factorization Using Proximal OptimizationSebastian Dalleiger, Jilles Vreeken, Michael KampAAAI 2025 · 被引用 1 次
