Banded square root matrix factorization for differentially private model training
Kalinin N, Lampert C. 2024. Banded square root matrix factorization for differentially private model training. 38th Annual Conference on Neural Information Processing Systems. NeurIPS: Neural Information Processing Systems, NeurIPS, vol. 38.
Download
Conference Paper
| Published
| English
Scopus indexed
Corresponding author has ISTA affiliation
Department
Series Title
NeurIPS
Abstract
Current state-of-the-art methods for differentially private model training are based on matrix factorization techniques. However, these methods suffer from high computational overhead because they require numerically solving a demanding optimization problem to determine an approximately optimal factorization prior to the actual model training. In this work, we present a new matrix factorization approach, BSR, which overcomes this computational bottleneck. By exploiting properties of the standard matrix square root, BSR allows to efficiently handle also large-scale problems. For the key scenario of stochastic gradient descent with momentum and weight decay, we even derive analytical expressions for BSR that render the computational overhead negligible. We prove bounds on the approximation quality that hold both in the centralized and in the federated learning setting. Our numerical experiments demonstrate that models trained using BSR perform on par with the best existing methods, while completely avoiding their computational overhead.
Publishing Year
Date Published
2024-12-01
Proceedings Title
38th Annual Conference on Neural Information Processing Systems
Publisher
Curran Associates
Volume
38
Conference
NeurIPS: Neural Information Processing Systems
Conference Location
Vancouver, Canada
Conference Date
2024-12-16 – 2024-12-16
IST-REx-ID
Cite this
Kalinin N, Lampert C. Banded square root matrix factorization for differentially private model training. In: 38th Annual Conference on Neural Information Processing Systems. Vol 38. Curran Associates; 2024.
Kalinin, N., & Lampert, C. (2024). Banded square root matrix factorization for differentially private model training. In 38th Annual Conference on Neural Information Processing Systems (Vol. 38). Vancouver, Canada: Curran Associates.
Kalinin, Nikita, and Christoph Lampert. “Banded Square Root Matrix Factorization for Differentially Private Model Training.” In 38th Annual Conference on Neural Information Processing Systems, Vol. 38. Curran Associates, 2024.
N. Kalinin and C. Lampert, “Banded square root matrix factorization for differentially private model training,” in 38th Annual Conference on Neural Information Processing Systems, Vancouver, Canada, 2024, vol. 38.
Kalinin N, Lampert C. 2024. Banded square root matrix factorization for differentially private model training. 38th Annual Conference on Neural Information Processing Systems. NeurIPS: Neural Information Processing Systems, NeurIPS, vol. 38.
Kalinin, Nikita, and Christoph Lampert. “Banded Square Root Matrix Factorization for Differentially Private Model Training.” 38th Annual Conference on Neural Information Processing Systems, vol. 38, Curran Associates, 2024.
All files available under the following license(s):
Creative Commons Attribution 4.0 International Public License (CC-BY 4.0):
Main File(s)
File Name
2024_NeurIPS_Nikita.pdf
1.14 MB
Access Level

Date Uploaded
2025-01-27
MD5 Checksum
a216cab8eddc1fe7840aede0e2c0d41e
Export
Marked PublicationsOpen Data ISTA Research Explorer
Sources
arXiv 2405.13763