Concentrated Differentially Private Gradient Descent with Adaptive per-Iteration Privacy Budget
Authors:
Open Access
- 19 July 2018
- conference paper
- Published by Association for Computing Machinery (ACM)
- p. 1656-1665
Abstract
Iterative algorithms, like gradient descent, are common tools for solving a variety of problems, such as model fitting. For this reason, there is interest in creating differentially private versions of them. However, their conversion to differentially private algorithms is often naive. For instance, a fixed number of iterations are chosen, the privacy budget is split evenly among them, and at each iteration, parameters are updated with a noisy gradient. In this paper, we show that gradient-based algorithms can be improved by a more careful allocation of privacy budget per iteration. Intuitively, at the beginning of the optimization, gradients are expected to be large, so that they do not need to be measured as accurately. However, as the parameters approach their optimal values, the gradients decrease and hence need to be measured more accurately. We add a basic line-search capability that helps the algorithm decide when more accurate gradient measurements are necessary. Our gradient descent algorithm works with the recently introduced zCDP version of differential privacy. It outperforms prior algorithms for model fitting and is competitive with the state-of-the-art for $(ε,δ)$-differential privacy, a strictly weaker definition than zCDP.Keywords
All Related Versions
Funding Information
- NSF (CNS-1702760, CNS-1228669)
This publication has 12 references indexed in Scilit:
- Deep Learning with Differential Privacy2016
- Concentrated Differential Privacy: Simplifications, Extensions, and Lower Bounds2016
- The Algorithmic Foundations of Differential PrivacyFoundations and Trends® in Theoretical Computer Science, 2014
- Stochastic gradient descent with differentially private updates2013
- Bounds on the sample complexity for private learning and private data releaseMachine Learning, 2013
- PrivGene2013
- LIBSVMACM Transactions on Intelligent Systems and Technology, 2011
- Boosting and Differential Privacy2010
- Our Data, Ourselves: Privacy Via Distributed Noise Generation2006
- Calibrating Noise to Sensitivity in Private Data Analysis2006