arXiv:2503.22988cs.LGcs.AI2025-03中稿 · IEEE Transactions …被引 15

动态调整梯度裁剪阈值,让隐私训练更快更准。

DC-SGD: Differentially Private SGD with Dynamic Clipping through Gradient Norm Distribution Estimation

  • 用差分隐私直方图估算梯度范数分布,自动调阈值。
  • 调参速度比传统DP-SGD快9倍,CIFAR10准确率高10.62%。
  • 适合需要高效隐私保护的深度学习场景,如医疗图像分析。

差分隐私随机梯度下降(DP-SGD)是隐私保护深度学习的主流方法。其核心挑战在于选择最优裁剪阈值C,需在裁剪偏差与噪声大小间权衡,且超参数调优带来巨大隐私和计算开销。本文提出动态裁剪DP-SGD(DC-SGD),通过差分隐私直方图估计梯度范数分布,动态调整裁剪阈值C。包含两个新机制:DC-SGD-P基于梯度范数百分位数调整阈值,DC-SGD-E最小化梯度期望平方误差以优化C。大量实验表明,该框架在图像分类与自然语言处理任务中,超参数调优效率最高提升9倍;在相同隐私预算下,DC-SGD-E相较DP-SGD在CIFAR10上准确率提升10.62%。理论分析证明其可无缝集成Adam优化器。结果表明DC-SGD兼具鲁棒性与高效性,显著降低计算开销并增强隐私保障。

原文摘要 · Abstract (English)

Differentially Private Stochastic Gradient Descent (DP-SGD) is a widely adopted technique for privacy-preserving deep learning. A critical challenge in DP-SGD is selecting the optimal clipping threshold C, which involves balancing the trade-off between clipping bias and noise magnitude, incurring substantial privacy and computing overhead during hyperparameter tuning. In this paper, we propose Dynamic Clipping DP-SGD (DC-SGD), a framework that leverages differentially private histograms to estimate gradient norm distributions and dynamically adjust the clipping threshold C. Our framework includes two novel mechanisms: DC-SGD-P and DC-SGD-E. DC-SGD-P adjusts the clipping threshold based on a percentile of gradient norms, while DC-SGD-E minimizes the expected squared error of gradients to optimize C. These dynamic adjustments significantly reduce the burden of hyperparameter tuning C. The extensive experiments on various deep learning tasks, including image classification and natural language processing, show that our proposed dynamic algorithms achieve up to 9 times acceleration on hyperparameter tuning than DP-SGD. And DC-SGD-E can achieve an accuracy improvement of 10.62% on CIFAR10 than DP-SGD under the same privacy budget of hyperparameter tuning. We conduct rigorous theoretical privacy and convergence analyses, showing that our methods seamlessly integrate with the Adam optimizer. Our results highlight the robust performance and efficiency of DC-SGD, offering a practical solution for differentially private deep learning with reduced computational overhead and enhanced privacy guarantees.

差分隐私梯度裁剪自适应优化深度学习

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。