Banded Square Root Matrix Factorization for Differentially Private Model Training

Fuente: arXiv
Enregistré dans:
Détails bibliographiques
Auteurs principaux: Kalinin, Nikita P., Lampert, Christoph
Format: Preprint
Publié: 2024
Sujets:
Accès en ligne:
Tags: Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
_version_ 1866911003809153024
author Kalinin, Nikita P.
Lampert, Christoph
author_facet Kalinin, Nikita P.
Lampert, Christoph
contents Current state-of-the-art methods for differentially private model training are based on matrix factorization techniques. However, these methods suffer from high computational overhead because they require numerically solving a demanding optimization problem to determine an approximately optimal factorization prior to the actual model training. In this work, we present a new matrix factorization approach, BSR, which overcomes this computational bottleneck. By exploiting properties of the standard matrix square root, BSR allows to efficiently handle also large-scale problems. For the key scenario of stochastic gradient descent with momentum and weight decay, we even derive analytical expressions for BSR that render the computational overhead negligible. We prove bounds on the approximation quality that hold both in the centralized and in the federated learning setting. Our numerical experiments demonstrate that models trained using BSR perform on par with the best existing methods, while completely avoiding their computational overhead.
format Preprint
id arxiv_https___arxiv_org_abs_2405_13763
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Banded Square Root Matrix Factorization for Differentially Private Model Training
Kalinin, Nikita P.
Lampert, Christoph
Machine Learning
Cryptography and Security
Current state-of-the-art methods for differentially private model training are based on matrix factorization techniques. However, these methods suffer from high computational overhead because they require numerically solving a demanding optimization problem to determine an approximately optimal factorization prior to the actual model training. In this work, we present a new matrix factorization approach, BSR, which overcomes this computational bottleneck. By exploiting properties of the standard matrix square root, BSR allows to efficiently handle also large-scale problems. For the key scenario of stochastic gradient descent with momentum and weight decay, we even derive analytical expressions for BSR that render the computational overhead negligible. We prove bounds on the approximation quality that hold both in the centralized and in the federated learning setting. Our numerical experiments demonstrate that models trained using BSR perform on par with the best existing methods, while completely avoiding their computational overhead.
title Banded Square Root Matrix Factorization for Differentially Private Model Training
topic Machine Learning
Cryptography and Security
url https://arxiv.org/abs/2405.13763