paper-with-me

Papers

DPQuant: Efficient and Differentially-Private Model Training via Dynamic Quantization Scheduling

2025-09-03 · Yubo Gao, Renbo Tu, Gennady Pekhimenko, Nandita Vijaykumar arxiv

Differentially-Private SGD (DP-SGD) and its adaptive variant DP-Adam are powerful techniques to protect user privacy when using sensitive data to train neural networks. During training, converting model weights and activations into low-precision formats, i.e., quantization, can drastically reduce training times, energy consumption, and cost, and is thus a widely used technique. In this work, we demonstrate for the first time that quantization causes significantly higher accuracy degradation in DP training compared to regular SGD. We observe that this is caused by noise injection, which amplifies quantization variance, leading to disproportionately large accuracy degradation. To address this challenge, we present DPQuant, a dynamic quantization framework that adaptively selects a changing subset of layers to quantize at each epoch. Our method combines two key ideas that effectively reduce quantization variance: (i) probabilistic sampling that rotates which layers are quantized every epoch, and (ii) loss-aware layer prioritization, which uses a differentially private loss sensitivity estimator to identify layers that can be quantized with minimal impact on model quality. This estimator consumes a negligible fraction of the overall privacy budget, preserving DP guarantees. Empirical evaluations on ResNet18, ResNet50, and DenseNet121 across a range of datasets demonstrate that DPQuant consistently outperforms static quantization baselines, achieving near Pareto-optimal accuracy-compute trade-offs and up to $2.21\times$ theoretical throughput improvements on low-precision hardware, with less than 2% drop in validation accuracy. We further show that our framework extends to DP-Adam with similar gains.

📄 PDF Abstract BibTeX arXiv:2509.03472

Code (0)

등록된 구현이 없습니다.

Similar Papers 제목 키워드 기반

Differentially private training of neural networks with Langevin dynamics for calibrated predictive uncertainty

2021-07-09 · Moritz Knolle, Alexander Ziller, Dmitrii Usynin, Rickmer Braren 외

We show that differentially private stochastic gradient descent (DP-SGD) can yield poorly calibrated, overconfident deep learning models. This represents a serious issue for safety-critical applications, e.g. in medical …

Bayesian InferenceMedical Diagnosis

Differentially Private and Adversarially Robust Machine Learning: An Empirical Evaluation

2024-01-18 · Janvi Thakkar, Giulio Zizzo, Sergio Maffeis

Malicious adversaries can attack machine learning models to infer sensitive information or damage the system by launching a series of evasion attacks. Although various work addresses privacy and security concerns, they f…

Inference AttackMembership Inference Attack

Fast Private Kernel Density Estimation via Locality Sensitive Quantization

2023-07-04 · Tal Wagner, Yonatan Naamad, Nina Mishra

We study efficient mechanisms for differentially private kernel density estimation (DP-KDE). Prior work for the Gaussian kernel described algorithms that run in time exponential in the number of dimensions $d$. This pape…

Density EstimationQuantization

Differentially Private Deep Learning with Direct Feedback Alignment

2020-10-08 · Jaewoo Lee, Daniel Kifer

Standard methods for differentially private training of deep neural networks replace back-propagated mini-batch gradients with biased and noisy approximations to the gradient. These modifications to training often result…

Deep LearningPrivacy Preserving

RQP-SGD: Differential Private Machine Learning through Noisy SGD and Randomized Quantization

2024-02-09 · Ce Feng, Parv Venkitasubramaniam

The rise of IoT devices has prompted the demand for deploying machine learning at-the-edge with real-time, efficient, and secure data processing. In this context, implementing machine learning (ML) models with real-value…

Privacy PreservingQuantization