Practical and private (deep) learning without sampling or shuffling

P Kairouz, B McMahan, S Song… - International …, 2021 - proceedings.mlr.press
We consider training models with differential privacy (DP) using mini-batch gradients. The
existing state-of-the-art, Differentially Private Stochastic Gradient Descent (DP-SGD) …

(Amplified) Banded Matrix Factorization: A unified approach to private training

CA Choquette-Choo, A Ganesh… - Advances in …, 2023 - proceedings.neurips.cc
Matrix factorization (MF) mechanisms for differential privacy (DP) have substantially
improved the state-of-the-art in privacy-utility-computation tradeoffs for ML applications in a …

Constant matters: Fine-grained error bound on differentially private continual observation

H Fichtenberger, M Henzinger… - … on Machine Learning, 2023 - proceedings.mlr.press
We study fine-grained error bounds for differentially private algorithms for counting under
continual observation. Our main insight is that the matrix mechanism when using lower …

Improved differential privacy for sgd via optimal private linear operators on adaptive streams

S Denisov, HB McMahan, J Rush… - Advances in …, 2022 - proceedings.neurips.cc
Motivated by recent applications requiring differential privacy in the setting of adaptive
streams, we investigate the question of optimal instantiations of the matrix mechanism in this …

Almost tight error bounds on differentially private continual counting

M Henzinger, J Upadhyay, S Upadhyay - … of the 2023 Annual ACM-SIAM …, 2023 - SIAM
The first large-scale deployment of private federated learning uses differentially private
counting in the continual release model as a subroutine (Google AI blog titled “Federated …

Efficient and near-optimal noise generation for streaming differential privacy

KD Dvijotham, HB McMahan, K Pillutla… - 2024 IEEE 65th …, 2024 - ieeexplore.ieee.org
In the task of differentially private (DP) continual counting, we receive a stream of increments
and our goal is to output an approximate running total of these increments, without revealing …

Multi-epoch matrix factorization mechanisms for private machine learning

CA Choquette-Choo, HB McMahan, K Rush… - arxiv preprint arxiv …, 2022 - arxiv.org
We introduce new differentially private (DP) mechanisms for gradient-based machine
learning (ML) with multiple passes (epochs) over a dataset, substantially improving the …

Correlated noise provably beats independent noise for differentially private learning

CA Choquette-Choo, K Dvijotham, K Pillutla… - arxiv preprint arxiv …, 2023 - arxiv.org
Differentially private learning algorithms inject noise into the learning process. While the
most common private learning algorithm, DP-SGD, adds independent Gaussian noise in …

A smooth binary mechanism for efficient private continual observation

JD Andersson, R Pagh - Advances in Neural Information …, 2023 - proceedings.neurips.cc
In privacy under continual observation we study how to release differentially private
estimates based on a dataset that evolves over time. The problem of releasing private prefix …

Constant matters: Fine-grained Complexity of Differentially Private Continual Observation

H Fichtenberger, M Henzinger, J Upadhyay - arxiv preprint arxiv …, 2022 - arxiv.org
We study fine-grained error bounds for differentially private algorithms for counting under
continual observation. Our main insight is that the matrix mechanism when using lower …