prefix sum estimation
Correlated Noise Mechanisms for Differentially Private Learning
Pillutla, Krishna, Upadhyay, Jalaj, Choquette-Choo, Christopher A., Dvijotham, Krishnamurthy, Ganesh, Arun, Henzinger, Monika, Katz, Jonathan, McKenna, Ryan, McMahan, H. Brendan, Rush, Keith, Steinke, Thomas, Thakurta, Abhradeep
This monograph explores the design and analysis of correlated noise mechanisms for differential privacy (DP), focusing on their application to private training of AI and machine learning models via the core primitive of estimation of weighted prefix sums. While typical DP mechanisms inject independent noise into each step of a stochastic gradient (SGD) learning algorithm in order to protect the privacy of the training data, a growing body of recent research demonstrates that introducing (anti-)correlations in the noise can significantly improve privacy-utility trade-offs by carefully canceling out some of the noise added on earlier steps in subsequent steps. Such correlated noise mechanisms, known variously as matrix mechanisms, factorization mechanisms, and DP-Follow-the-Regularized-Leader (DP-FTRL) when applied to learning algorithms, have also been influential in practice, with industrial deployment at a global scale.
- Europe > Austria (0.04)
- North America > United States > Michigan (0.04)
- Europe > United Kingdom > England > Greater London > London (0.04)
- Asia > Middle East > Israel (0.04)
- Workflow (0.92)
- Research Report > New Finding (0.87)
- Instructional Material > Course Syllabus & Notes (0.85)
- Information Technology > Security & Privacy (1.00)
- Education (1.00)
- Government > Regional Government > North America Government > United States Government (0.45)
- Information Technology > Artificial Intelligence > Representation & Reasoning > Optimization (1.00)
- Information Technology > Artificial Intelligence > Machine Learning > Statistical Learning (1.00)
- Information Technology > Artificial Intelligence > Machine Learning > Neural Networks > Deep Learning (0.92)