FIBER: A Differentially Private Optimizer with Filter-Aware Innovation Bias Correction
MINH DUC DO, Thao Do, Minh Hoang, Anh Le Duc Tran, Daeyoung Kim, Huy L Nguyen
摘要
Differentially private (DP) training protects individual examples by adding noise to gradients, but the injected noise interacts nontrivially with adaptive optimizers. Recent DP methods temporally filter privatized gradients to reduce variance; however, filtering also changes the DP noise statistics seen by AdamW’s second-moment accumulator. As a result, bias corrections derived for unfiltered DP noise (e.g., subtracting ) can become miscalibrated when filtering is present. We propose FIBER, a DP optimizer designed for temporally filtered privatized gradients. FIBER (i) performs denoising in innovation space by filtering the residual stream and integrating it to form the filtered gradient estimate, (ii) decouples the two-point observation geometry from the innovation gain to enable independent tuning, and (iii) introduces a filter-aware second-moment calibration that subtracts the attenuated DP noise contribution , where is derived in closed form for the innovation filter and can be computed for general stable linear filters. Across vision and language benchmarks, FIBER consistently demonstrates substantial improvements in the performance of DP optimizers, surpassing state-of-the-art results under equivalent privacy constraints on multiple tasks.
问问这篇 Paper
智能体会读完全文。
Lune 把这篇 Paper 索引到了每一个公式,引用它的顶会 Paper 也一样。你提问,回答直接引用原文。
它引用的顶会 Paper19
- An Image is Worth 16x16 Words: Transformers for Image Recognition at ScaleAlexey Dosovitskiy, Lucas Beyer, Alexander Kolesnikov, Dirk Weissenborn 等ICLR 2021 · 被引用 21,477 次
- Deep Learning with Differential PrivacyMartín Abadi, Andy Chu, Ian J. Goodfellow, H. Brendan McMahan 等CCS 2016 · 被引用 7,620 次
- Evaluating Differentially Private Machine Learning in PracticeBargav Jayaraman, David EvansUSENIX Security 2019 · 被引用 586 次
- Large Language Models Can Be Strong Differentially Private LearnersXuechen Li, Florian Tramèr, Percy Liang, Tatsunori HashimotoICLR 2022 · 被引用 502 次
- Differentially Private Fine-tuning of Language ModelsDa Yu, Saurabh Naik, Arturs Backurs, Sivakanth Gopi 等ICLR 2022 · 被引用 494 次
相关 Paper
- DP-FedAdamW: An Efficient Optimizer for Differentially Private Federated Large ModelsJin Liu, Ning Xi, Yinbin Miao, Junkang LiuCVPR 2026 · 被引用 1 次
- DiSK: Differentially Private Optimizer with Simplified Kalman Filter for Noise ReductionXinwei Zhang, Zhiqi Bu, Borja Balle, Mingyi Hong 等ICLR 2025
- DP-AdamBC: Your DP-Adam Is Actually DP-SGD (Unless You Apply Bias Correction)Qiaoyue Tang, Frederick Shpilevskiy, Mathias LécuyerAAAI 2024 · 被引用 33 次
- DOPPLER: Differentially Private Optimizers with Low-pass Filter for Privacy Noise ReductionXinwei Zhang, Zhiqi Bu, Mingyi Hong, Meisam RazaviyaynNeurIPS 2024 · 被引用 10 次
- Differentially Private Adaptive Optimization with Delayed PreconditionersTian Li, Manzil Zaheer, Ken Liu, Sashank J. Reddi 等ICLR 2023 · 被引用 3 次
