arXiv:2511.13999cs.LGcs.CR2025-11被引 2

揭示私有优化中梯度查询次数的理论下限,指出维度越高代价越大。

On the Gradient Complexity of Private Optimization with Private Oracles

  • 在私有代理查询下,提出维度与精度相关的最优查询下界
  • 证明私有优化比非私有优化多出维度依赖的运行开销
  • 适用于研究隐私优化算法复杂度的学者和工程师

本文研究 Lipschitz 凸损失下不同隐私保护经验/总体风险最小化的运行时间(以一阶黑箱查询次数衡量)。在损失非光滑且优化器仅通过私有代理查询获取小批量梯度信息的设定下,当维度 d ≥ 1/α² 时,达到 α 过剩风险所需期望查询次数为 Ω(min{√d/α², d/log(1/α)})。通过 DP-SGD 的上界表明该结果在 d > ~Ω(1/α⁴) 时紧致。进一步将下界强化至 Ω(min{d/(m̄α²), d/log(1/α)}),其中 m̄ < √d 为最大小批量大小。对于光滑损失,放松私有查询假设,仅要求优化器本身隐私,得到期望查询次数下界 ~Ω(√d/α + min{1/α², n}),n 为数据集规模。现有算法修改后可近似达到此界。相比非私有情况,私有优化存在维度相关的时间惩罚。最后,通过证明技巧扩展至信息受限的代理查询:若每批梯度传输信息不超过 Γ 比特,则需 Ω(min{d/(α²Γ), d/log(1/α)}) 次查询,揭示梯度量化在优化中的根本局限。

原文摘要 · Abstract (English)

We study the running time, in terms of first order oracle queries, of differentially private empirical/population risk minimization of Lipschitz convex losses. We first consider the setting where the loss is non-smooth and the optimizer interacts with a private proxy oracle, which sends only private messages about a minibatch of gradients. In this setting, we show that expected running time $Ω(\min\{\frac{\sqrt{d}}{α^2}, \frac{d}{\log(1/α)}\})$ is necessary to achieve $α$ excess risk on problems of dimension $d$ when $d \geq 1/α^2$. Upper bounds via DP-SGD show these results are tight when $d>\tildeΩ(1/α^4)$. We further show our lower bound can be strengthened to $Ω(\min\{\frac{d}{\bar{m}α^2}, \frac{d}{\log(1/α)} \})$ for algorithms which use minibatches of size at most $\bar{m} < \sqrt{d}$. We next consider smooth losses, where we relax the private oracle assumption and give lower bounds under only the condition that the optimizer is private. Here, we lower bound the expected number of first order oracle calls by $\tildeΩ\big(\frac{\sqrt{d}}α + \min\{\frac{1}{α^2}, n\}\big)$, where $n$ is the size of the dataset. Modifications to existing algorithms show this bound is nearly tight. Compared to non-private lower bounds, our results show that differentially private optimizers pay a dimension dependent runtime penalty. Finally, as a natural extension of our proof technique, we show lower bounds in the non-smooth setting for optimizers interacting with information limited oracles. Specifically, if the proxy oracle transmits at most $Γ$-bits of information about the gradients in the minibatch, then $Ω\big(\min\{\frac{d}{α^2Γ}, \frac{d}{\log(1/α)}\}\big)$ oracle calls are needed. This result shows fundamental limitations of gradient quantization techniques in optimization.

隐私优化梯度查询下界分析

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。