paper-with-me

Papers

Differentially Private Diffusion Models

2022-10-18 · Tim Dockhorn, Tianshi Cao, Arash Vahdat, Karsten Kreis

While modern machine learning models rely on increasingly large training datasets, data is often limited in privacy-sensitive domains. Generative models trained with differential privacy (DP) on sensitive data can sidestep this challenge, providing access to synthetic data instead. We build on the recent success of diffusion models (DMs) and introduce Differentially Private Diffusion Models (DPDMs), which enforce privacy using differentially private stochastic gradient descent (DP-SGD). We investigate the DM parameterization and the sampling algorithm, which turn out to be crucial ingredients in DPDMs, and propose noise multiplicity, a powerful modification of DP-SGD tailored to the training of DMs. We validate our novel DPDMs on image generation benchmarks and achieve state-of-the-art performance in all experiments. Moreover, on standard benchmarks, classifiers trained on DPDM-generated synthetic data perform on par with task-specific DP-SGD-trained classifiers, which has not been demonstrated before for DP generative models. Project page and code: https://nv-tlabs.github.io/DPDM.

📄 PDF Abstract BibTeX arXiv:2210.09929

Code (1)

nv-tlabs/dpdm pytorch

Tasks

Image Generation

Methods 이 논문이 사용한 방법론

Diffusion Diffusion models generate samples by gradually removing noise from a signal, and their training objective can be expressed as a reweighted variational lower-bound…

Similar Papers 제목 키워드 기반

RAPID: Retrieval Augmented Training of Differentially Private Diffusion Models

2025-02-18 · Tanqiu Jiang, Changjiang Li, Fenglong Ma, Ting Wang

Differentially private diffusion models (DPDMs) harness the remarkable generative capabilities of diffusion models while enforcing differential privacy (DP) for sensitive data. However, existing DPDM training approaches …

Privacy PreservingRAGRetrievalRetrieval-augmented Generation

Differentially Private Adaptation of Diffusion Models via Noisy Aggregated Embeddings

2024-11-22 · Pura Peetathawatchai, Wei-Ning Chen, Berivan Isik, Sanmi Koyejo 외

We introduce a novel method for adapting diffusion models under differential privacy (DP) constraints, enabling privacy-preserving style and content transfer without fine-tuning model weights. Traditional approaches to p…

Privacy PreservingStyle Transfer

DP-RDM: Adapting Diffusion Models to Private Domains Without Fine-Tuning

2024-03-21 · Jonathan Lebensold, Maziar Sanjabi, Pietro Astolfi, Adriana Romero-Soriano 외

Text-to-image diffusion models have been shown to suffer from sample-level memorization, possibly reproducing near-perfect replica of images that they are trained on, which may be undesirable. To remedy this issue, we de…

MemorizationRetrievalRetrieval-augmented Generation

Adaptive Diffusion Denoised Smoothing : Certified Robustness via Randomized Smoothing with Differentially Private Guided Denoising Diffusion

2025-07-10 · Frederick Shpilevskiy, Saiyue Lyu, Krishnamurthy Dj Dvijotham, Mathias Lécuyer 외 arxiv

We propose Adaptive Diffusion Denoised Smoothing, a method for certifying the predictions of a vision model against adversarial examples, while adapting to the input. Our key insight is to reinterpret a guided denoising …

DP-Mix: Mixup-based Data Augmentation for Differentially Private Learning

2023-09-21 · NeurIPS 2023 11

Data augmentation techniques, such as simple image transformations and combinations, are highly effective at improving the generalization of computer vision models, especially when training data is limited. However, such…