提出新方法缓解私有扩散模型中条件输入导致的异常梯度问题。
DP-aware AdaLN-Zero: Taming Conditioning-Induced Heavy-Tailed Gradients in Differentially Private Diffusion
- 通过敏感度感知的归一化机制抑制条件输入引发的极端梯度。
- 在真实电力数据和两个公开时间序列数据集上提升插值、填补与预测性能。
- 无需修改私有优化器,适合需要隐私保护的时间序列生成任务。
条件注入使扩散模型能生成上下文相关输出,对时序任务至关重要。然而,异质条件(如历史观测、缺失模式或异常协变量)会引发重尾样本级梯度。在差分隐私随机梯度下降(DP-SGD)下,这些罕见的条件驱动重尾梯度会过度触发全局裁剪,导致异常主导更新、更大裁剪偏差,且在固定隐私预算下性能下降。本文提出 DP-aware AdaLN-Zero,一种无需修改 DP-SGD 的即插即用敏感度感知条件机制,通过有界重参数化联合约束条件表示幅度与 AdaLN 调制参数,提前抑制极端梯度尾部事件。实验表明,结合该机制的 DP-SGD 在匹配隐私设置下显著提升插值/填补与预测表现。在真实电力数据集及两个公开 ETT 基准上均取得一致改进。梯度诊断显示性能提升源于条件特异性尾部重塑与裁剪失真降低,同时保留非私有训练中的表达能力。结果表明,敏感度感知条件设计可显著提升私有条件扩散训练效果,且不牺牲标准性能。
原文摘要 · Abstract (English)
Condition injection enables diffusion models to generate context-aware outputs, which is essential for many time-series tasks. However, heterogeneous conditional contexts (e.g., observed history, missingness patterns or outlier covariates) can induce heavy-tailed per-example gradients. Under Differentially Private Stochastic Gradient Descent (DP-SGD), these rare conditioning-driven heavy-tailed gradients disproportionately trigger global clipping, resulting in outlier-dominated updates, larger clipping bias, and degraded utility under a fixed privacy budget. In this paper, we propose DP-aware AdaLN-Zero, a drop-in sensitivity-aware conditioning mechanism for conditional diffusion transformers that limits conditioning-induced gain without modifying the DP-SGD mechanism. DP-aware AdaLN-Zero jointly constrains conditioning representation magnitude and AdaLN modulation parameters via bounded re-parameterization, suppressing extreme gradient tail events before gradient clipping and noise injection. Empirically, DP-SGD equipped with DP-aware AdaLN-Zero improves interpolation/imputation and forecasting under matched privacy settings. We observe consistent gains on a real-world power dataset and two public ETT benchmarks over vanilla DP-SGD. Moreover, gradient diagnostics attribute these improvements to conditioning-specific tail reshaping and reduced clipping distortion, while preserving expressiveness in non-private training. Overall, these results show that sensitivity-aware conditioning can substantially improve private conditional diffusion training without sacrificing standard performance.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。