arXiv:2509.09485cs.LG2025-09被引 1

动态调整隐私与性能平衡,提升模型训练安全性和效率。

Balancing Utility and Privacy: Dynamically Private SGD with Random Projection

  • 结合动态差分隐私与随机投影,自适应调节隐私保护强度。
  • 在多个数据集上实现更高准确率,且收敛速度接近最优。
  • 适合对隐私敏感的场景,如医疗或金融领域的模型训练。

随机优化是现代机器学习的关键驱动力,能为各类任务生成高效模型。然而,现有研究已表明模型参数和梯度信息易引发隐私泄露。尽管差分隐私随机梯度下降(DPSGD)可缓解隐私风险,其静态噪声机制会影响模型性能的误差界。随着模型参数呈指数增长,使用随机优化器进行高效学习愈发困难。为此,我们提出动态差分隐私投影梯度下降(D2P2-SGD)优化器。该方法融合两项核心思想:(i) 动态差分隐私(DDP)与自动梯度裁剪;(ii) 随机投影与SGD结合,实现隐私与效用间的动态权衡。理论上,该算法在不同目标函数下具备可证明的次线性收敛速率,达到最优水平。分析表明,DDP在牺牲少量隐私的前提下提升模型效用,而随机投影则显著提升学习效率。大量实验验证了D2P2-SGD在多种数据集上的优越表现,既能大幅提高准确率,又能有效保障隐私。代码已公开。

原文摘要 · Abstract (English)

Stochastic optimization is a pivotal enabler in modern machine learning, producing effective models for various tasks. However, several existing works have shown that model parameters and gradient information are susceptible to privacy leakage. Although Differentially Private SGD (DPSGD) addresses privacy concerns, its static noise mechanism impacts the error bounds for model performance. Additionally, with the exponential increase in model parameters, efficient learning of these models using stochastic optimizers has become more challenging. To address these concerns, we introduce the Dynamically Differentially Private Projected SGD (D2P2-SGD) optimizer. In D2P2-SGD, we combine two important ideas: (i) dynamic differential privacy (DDP) with automatic gradient clipping and (ii) random projection with SGD, allowing dynamic adjustment of the tradeoff between utility and privacy of the model. It exhibits provably sub-linear convergence rates across different objective functions, matching the best available rate. The theoretical analysis further suggests that DDP leads to better utility at the cost of privacy, while random projection enables more efficient model learning. Extensive experiments across diverse datasets show that D2P2-SGD remarkably enhances accuracy while maintaining privacy. Our code is available here.

差分隐私随机优化模型安全动态调节

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。