用公共数据提升私有梯度方法收敛性,解决实际应用中的隐私-精度难题。
Improving the Convergence of Private Shuffled Gradient Methods with Public Data
- 通过交替使用私有和公共数据,设计新优化框架以减少误差。
- 理论证明私有打乱方法比标准DP-SGD的实证误差更高。
- 适用于需要高隐私保护且数据有限的机器学习场景。
我们研究差分隐私(DP)下的凸经验风险最小化(ERM)问题。尽管标准的DP-SGD算法理论完备,但实际中常采用按顺序遍历数据的打乱梯度方法(DP-ShuffleG),其隐私-精度权衡尚不明确,导致理论与实践脱节。本文首次利用迭代隐私放大(PABI)和斯坦因引理,给出DP-ShuffleG的实证过失风险上界,发现其性能劣于DP-SGD。为此,我们提出混合方法Interleaved-ShuffleG,将公共数据样本融入私有优化过程,通过交替使用私有与公共样本显著降低实证过失风险。分析引入了包含代理目标、不同噪声水平和差异度量的新优化框架,具有独立研究价值。在多个数据集和任务上的实验表明,Interleaved-ShuffleG优于多种基线方法。
原文摘要 · Abstract (English)
We consider the problem of differentially private (DP) convex empirical risk minimization (ERM). While the standard DP-SGD algorithm is theoretically well-established, practical implementations often rely on shuffled gradient methods that traverse the training data sequentially rather than sampling with replacement in each iteration. Despite their widespread use, the theoretical privacy-accuracy trade-offs of private shuffled gradient methods (\textit{DP-ShuffleG}) remain poorly understood, leading to a gap between theory and practice. In this work, we leverage privacy amplification by iteration (PABI) and a novel application of Stein's lemma to provide the first empirical excess risk bound of \textit{DP-ShuffleG}. Our result shows that data shuffling results in worse empirical excess risk for \textit{DP-ShuffleG} compared to DP-SGD. To address this limitation, we propose \textit{Interleaved-ShuffleG}, a hybrid approach that integrates public data samples in private optimization. By alternating optimization steps that use private and public samples, \textit{Interleaved-ShuffleG} effectively reduces empirical excess risk. Our analysis introduces a new optimization framework with surrogate objectives, varying levels of noise injection, and a dissimilarity metric, which can be of independent interest. Our experiments on diverse datasets and tasks demonstrate the superiority of \textit{Interleaved-ShuffleG} over several baselines.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。