Back to Square Roots: An Optimal Bound on the Matrix Factorization Error for Multi-Epoch Differentially Private SGD
Nikita Kalinin, Ryan McKenna, Jalaj Upadhyay, Christoph H. Lampert
摘要
Matrix factorization mechanisms for differentially private training have emerged as a promising approach to improve model utility under privacy constraints. In practical settings, models are typically trained over multiple epochs, requiring matrix factorizations that account for repeated participation. Existing theoretical upper and lower bounds on multi-epoch factorization error leave a significant gap. In this work, we introduce a new explicit factorization method, Banded Inverse Square Root (BISR), which imposes a banded structure on the inverse correlation matrix. This factorization enables us to derive an explicit and tight characterization of the multi-epoch error. We further prove that BISR achieves asymptotically optimal error by matching the upper and lower bounds. Empirically, BISR performs on par with the state of the art factorization methods, while being simpler to implement, computationally efficient, and easier to analyze.
问问这篇 Paper
智能体会读完全文。
Lune 把这篇 Paper 索引到了每一个公式,引用它的顶会 Paper 也一样。你提问,回答直接引用原文。
引用它的顶会 Paper2
- Continual Release Moment Estimation with Differential PrivacyNikita P. Kalinin, Jalaj Upadhyay, Christoph H. LampertNeurIPS 2025 · 被引用 5 次
- Edit-Neighboring Data Streams and Privacy under Continual ObservationJoel Daniel Andersson, Anamay Chaturvedi, Monika Henzinger, Roodabeh SafaviCCS 2026
它引用的顶会 Paper16
- Practical and Private (Deep) Learning Without Sampling or ShufflingPeter Kairouz, Brendan McMahan, Shuang Song, Om Thakkar 等ICML 2021 · 被引用 239 次
- Improved Differential Privacy for SGD via Optimal Private Linear Operators on Adaptive StreamsSergey Denisov, H. Brendan McMahan, John Rush, Adam D. Smith 等NeurIPS 2022 · 被引用 96 次
- (Amplified) Banded Matrix Factorization: A unified approach to private trainingChristopher A. Choquette-Choo, Arun Ganesh, Ryan McKenna, H. Brendan McMahan 等NeurIPS 2023 · 被引用 67 次
- Multi-Epoch Matrix Factorization Mechanisms for Private Machine LearningChristopher A. Choquette-Choo, Hugh Brendan McMahan, J. Keith Rush, Abhradeep Guha ThakurtaICML 2023 · 被引用 62 次
- Correlated Noise Provably Beats Independent Noise for Differentially Private LearningChristopher A. Choquette-Choo, Krishnamurthy Dj Dvijotham, Krishna Pillutla, Arun Ganesh 等ICLR 2024 · 被引用 27 次
相关 Paper
- Banded Square Root Matrix Factorization for Differentially Private Model TrainingNikita P. Kalinin, Christoph H. LampertNeurIPS 2024 · 被引用 18 次
- Gradient Descent with Linearly Correlated Noise: Theory and Applications to Differential PrivacyAnastasia Koloskova, Ryan McKenna, Zachary Charles, John Keith Rush 等NeurIPS 2023 · 被引用 24 次
- Scaling up the Banded Matrix Factorization Mechanism for Large Scale Differentially Private MLRyan McKennaICLR 2025
- Almost Tight Error Bounds on Differentially Private Continual CountingMonika Henzinger, Jalaj Upadhyay, Sarvagya UpadhyaySODA 2023 · 被引用 14 次
- Near-Exact Privacy Amplification for Matrix MechanismsChristopher A. Choquette-Choo, Arun Ganesh, Saminul Haque, Thomas Steinke 等ICLR 2025
