利用公开特征加速私有回归,提升隐私保护下的模型收敛速度。
Private Learning with Public Feature Conditioning

- 基于公共特征构建可学习的优化条件矩阵,改进差分隐私梯度下降。
- 在私有线性回归中实现比DPSGD更快收敛,且不增加隐私开销。
- 适用于推荐、广告等标签隐私场景,对多种数据集和模型均有效。
我们研究在每个数据样本包含非敏感公共特征的场景下的差分隐私(DP)回归问题,这类场景常见于推荐与广告系统。尽管此类标签-差分隐私或半敏感特征设置在分类任务中已有研究,但针对回归的有效方法仍不充分。本文提出Cond-DP,一种基于条件化的DPSGD变体,利用公共特征矩阵的结构以改善隐私约束下的优化性能。受公共特征常具有快速衰减谱特性的启发,Cond-DP引入数据驱动的条件矩阵,重塑优化景观并加速收敛。本文提供了凸、强凸及非凸设定下的收敛保证,并在条件矩阵为单位阵时退化为标准DPSGD。我们展示了如何直接从公共特征构造有效的条件矩阵,使私有线性回归的收敛速度显著快于DPSGD,且不增加额外隐私成本。实验表明,该条件矩阵在标签差分隐私下,于多种数据集与模型架构上持续优于现有最优基线,表现出强大且稳健的实用性。
原文摘要 · Abstract (English)
We study differentially private (DP) regression in settings where each data sample includes public, non-sensitive features -- common in applications such as recommendation and advertising systems. While such label-DP or semi-sensitive-feature settings have been primarily explored in the context of classification, effective approaches for regression remain underexplored. We introduce Cond-DP, a conditioned variant of DPSGD that leverages the structure of public feature matrices to improve optimization under privacy constraints. Motivated by the observation that these public features often exhibit rapidly decaying spectra, Cond-DP incorporates a data-driven conditioning matrix to reshape the optimization landscape and accelerate convergence. We provide convergence guarantees for convex, strongly convex, and non-convex settings, and recover standard DPSGD as a special case when the conditioning matrix is the identity. We show how to construct an effective conditioning matrix for Cond-DP directly from public features, enabling provably faster convergence than DPSGD in private linear regression without incurring additional privacy cost. Empirically, Cond-DP with this conditioning matrix consistently outperforms state-of-the-art baselines across a wide range of datasets and model architectures under label DP, demonstrating strong and robust performance in practice.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。