用公开数据提升私有零阶优化效率,速度最快快16倍
Private Zeroth-Order Optimization with Public Data
- 利用公开数据辅助近似私有梯度,降低计算开销
- 在视觉与文本任务中优于现有最优基线,尤其在高隐私需求下
- 无需额外参数,实现最高16倍加速,适合资源受限场景
主流一阶差分隐私机器学习算法(如DP-SGD)存在计算与内存成本高的瓶颈。零阶方法通过函数值近似梯度,更易实现隐私保护。然而,现有零阶方法性能仍低于DP-SGD,且应用范围有限。本文提出公共数据辅助的零阶优化框架PAZO,利用公开数据指导私有梯度估计,在假设公私数据相似的前提下提供理论分析。实验表明,PAZO在图像与文本任务的预训练与微调场景中均实现更优的隐私/效用权衡,显著超越现有最优一阶基线(使用公开数据),尤其在高隐私设置下表现突出,并实现最高16倍的运行时加速。
原文摘要 · Abstract (English)
One of the major bottlenecks for deploying popular first-order differentially private (DP) machine learning algorithms (e.g., DP-SGD) lies in their high computation and memory cost, despite the existence of optimized implementations. Zeroth-order methods have promise in mitigating the overhead, as they leverage function evaluations to approximate the gradients, hence significantly easier to privatize. While recent works have explored zeroth-order approaches in both private and non-private settings, they still suffer from relatively low utilities compared with DP-SGD, and have only been evaluated in limited application domains. In this work, we propose to leverage public information to guide and improve gradient approximation of private zeroth-order algorithms. We explore a suite of public-data-assisted zeroth-order optimizers (PAZO) with minimal overhead. We provide theoretical analyses of the PAZO framework under an assumption of the similarity between public and private data. Empirically, we demonstrate that PAZO achieves superior privacy/utility tradeoffs across vision and text tasks in both pre-training and fine-tuning settings, outperforming the best first-order baselines (with public data) especially in highly private regimes, while offering up to $16\times$ runtime speedup.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。