paper-with-me

Papers

Banded Square Root Matrix Factorization for Differentially Private Model Training

2024-05-22 · Nikita P. Kalinin, Christoph Lampert

Current state-of-the-art methods for differentially private model training are based on matrix factorization techniques. However, these methods suffer from high computational overhead because they require numerically solving a demanding optimization problem to determine an approximately optimal factorization prior to the actual model training. In this work, we present a new matrix factorization approach, BSR, which overcomes this computational bottleneck. By exploiting properties of the standard matrix square root, BSR allows to efficiently handle also large-scale problems. For the key scenario of stochastic gradient descent with momentum and weight decay, we even derive analytical expressions for BSR that render the computational overhead negligible. We prove bounds on the approximation quality that hold both in the centralized and in the federated learning setting. Our numerical experiments demonstrate that models trained using BSR perform on par with the best existing methods, while completely avoiding their computational overhead.

📄 PDF Abstract BibTeX arXiv:2405.13763

Code (0)

등록된 구현이 없습니다.

Tasks

Federated Learning

Similar Papers 제목 키워드 기반

Back to Square Roots: An Optimal Bound on the Matrix Factorization Error for Multi-Epoch Differentially Private SGD

2025-05-17 · Nikita P. Kalinin, Ryan McKenna, Jalaj Upadhyay, Christoph H. Lampert

Matrix factorization mechanisms for differentially private training have emerged as a promising approach to improve model utility under privacy constraints. In practical settings, models are typically trained over multip…

Beyond Square Roots: Explicit Memory-Efficient Factorization for Multi-Epoch Private Learning

2026-05-18 · Nikita P. Kalinin, Aki Rehn, Joel Daniel Andersson, Antti Honkela 외 arxiv

Correlated-noise mechanisms are among the most promising approaches for improving the utility of differentially private model training, but rigorous guarantees require explicit, analyzable factorizations, and practical d…

Inverse LDM' and LU Factorizations of a Partitioned Matrix with the Square-root and Division Free Version for V-BLAST

2019-12-10

This letter proposes the inverse LDM' and LU factorizations of a matrix partitioned into 2x2 blocks, which include the square-root and division free version. The proposed squareroot and division free inverse LDM' factori…

Sampling-Free Privacy Accounting for Matrix Mechanisms under Random Allocation

2026-01-29 · Jan Schuchardt, Nikita Kalinin arxiv

We study privacy amplification for differentially private model training with matrix factorization under random allocation (also known as the balls-in-bins model). Recent work by Choquette-Choo et al. (2025) proposes a s…

Scaling up the Banded Matrix Factorization Mechanism for Differentially Private ML

2024-05-24 · Ryan McKenna

Correlated noise mechanisms such as DP Matrix Factorization (DP-MF) have proven to be effective alternatives to DP-SGD in large-epsilon few-epoch training regimes. Significant work has been done to find the best correlat…

Privacy Preserving