arXiv:2502.08889cs.LGcs.CR2025-02

用鲁棒统计方法实现用户级隐私保护的线性时间优化

Linear-Time User-Level DP-SCO via Robust Statistics

  • 用中位数和截尾均值降低梯度估计噪声
  • 理论隐私-效用权衡达到最优对数因子水平
  • 适合关注高效隐私保护算法的研究者

用户级差分隐私随机凸优化(DP-SCO)在现代大规模机器学习中至关重要,需保护用户隐私。现有基于差分隐私随机梯度下降(DP-SGD)的方法因需对每次中间迭代进行隐私处理,导致噪声累积高、效用差。本文提出一种新型线性时间算法,利用鲁棒统计(中位数与截尾均值)控制SGD所有中间迭代的敏感度,显著降低梯度估计噪声,提升隐私-效用权衡。该方法避免重复隐私化,兼具理论最优性和计算高效性。我们还给出了信息论下界,证明上界仅差对数因子及ε依赖项,表明其最优性。本工作为更鲁棒高效的隐私保护技术奠定基础。

原文摘要 · Abstract (English)

User-level differentially private stochastic convex optimization (DP-SCO) has garnered significant attention due to the paramount importance of safeguarding user privacy in modern large-scale machine learning applications. Current methods, such as those based on differentially private stochastic gradient descent (DP-SGD), often struggle with high noise accumulation and suboptimal utility due to the need to privatize every intermediate iterate. In this work, we introduce a novel linear-time algorithm that leverages robust statistics, specifically the median and trimmed mean, to overcome these challenges. Our approach uniquely bounds the sensitivity of all intermediate iterates of SGD with gradient estimation based on robust statistics, thereby significantly reducing the gradient estimation noise for privacy purposes and enhancing the privacy-utility trade-off. By sidestepping the repeated privatization required by previous methods, our algorithm not only achieves an improved theoretical privacy-utility trade-off but also maintains computational efficiency. We complement our algorithm with an information-theoretic lower bound, showing that our upper bound is optimal up to logarithmic factors and the dependence on $ε$. This work sets the stage for more robust and efficient privacy-preserving techniques in machine learning, with implications for future research and application in the field.

差分隐私凸优化鲁棒统计线性时间

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。