arXiv:2411.03059cs.LGcs.AI2024-11被引 1

改进隐私保护训练,让小梯度也能发挥作用

Enhancing DP-SGD through Non-monotonous Adaptive Scaling Gradient Weight

  • 用非单调自适应缩放替代传统梯度裁剪
  • 在多个数据集上提升模型准确率,隐私保障不变
  • 适合需要高精度的隐私敏感场景

在深度学习中,如何在保护敏感数据的同时保持模型性能是个关键挑战。传统差分隐私方法如差分隐私随机梯度下降(DP-SGD)通常采用直接或逐样本自适应梯度裁剪策略,但这些方法因过度影响梯度处理而损害模型准确率,尤其忽略了训练后期小梯度的重要贡献。本文提出一种改进的DP-SGD方法——差分隐私逐样本自适应缩放裁剪(DP-PSASC),用非单调自适应梯度缩放替代传统裁剪,减少对阈值设定的依赖,并修正了小梯度被低估的问题。本研究贡献有二:一是设计了一种新型梯度缩放机制,有效为梯度(尤其是小梯度)分配合理权重,提升差分隐私下的学习效果;二是引入基于动量的方法,降低随机采样带来的偏差,加快收敛速度。理论与实证分析表明,DP-PSASC在保持差分隐私的前提下,在多种数据集上均实现更优性能,为隐私敏感应用树立新标准。

原文摘要 · Abstract (English)

In the domain of deep learning, the challenge of protecting sensitive data while maintaining model utility is significant. Traditional Differential Privacy (DP) techniques such as Differentially Private Stochastic Gradient Descent (DP-SGD) typically employ strategies like direct or per-sample adaptive gradient clipping. These methods, however, compromise model accuracy due to their critical influence on gradient handling, particularly neglecting the significant contribution of small gradients during later training stages. In this paper, we introduce an enhanced version of DP-SGD, named Differentially Private Per-sample Adaptive Scaling Clipping (DP-PSASC). This approach replaces traditional clipping with non-monotonous adaptive gradient scaling, which alleviates the need for intensive threshold setting and rectifies the disproportionate weighting of smaller gradients. Our contribution is twofold. First, we develop a novel gradient scaling technique that effectively assigns proper weights to gradients, particularly small ones, thus improving learning under differential privacy. Second, we integrate a momentum-based method into DP-PSASC to reduce bias from stochastic sampling, enhancing convergence rates. Our theoretical and empirical analyses confirm that DP-PSASC preserves privacy and delivers superior performance across diverse datasets, setting new standards for privacy-sensitive applications.

差分隐私梯度裁剪模型优化

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。