Share your thoughts, 1 month free Claude Pro on usSee more
WorkDL logo mark

Back to Square Roots: An Optimal Bound on the Matrix Factorization Error for Multi-Epoch Differentially Private SGD

About

Matrix factorization mechanisms for differentially private training have emerged as a promising approach to improve model utility under privacy constraints. In practical settings, models are typically trained over multiple epochs, requiring matrix factorizations that account for repeated participation. Existing theoretical upper and lower bounds on multi-epoch factorization error leave a significant gap. In this work, we introduce a new explicit factorization method, Banded Inverse Square Root (BISR), which imposes a banded structure on the inverse correlation matrix. This factorization enables us to derive an explicit and tight characterization of the multi-epoch error. We further prove that BISR achieves asymptotically optimal error by matching the upper and lower bounds. Empirically, BISR performs on par with state-of-the-art factorization methods, while being simpler to implement, computationally efficient, and easier to analyze.

Nikita P. Kalinin, Ryan McKenna, Jalaj Upadhyay, Christoph H. Lampert• 2025

Related benchmarks

TaskDatasetResultRank
Sentiment AnalysisIMDB (test)
Accuracy91.41
306
Matrix Factorization UtilityBalls-in-Bins accountant n=2048, k=8
RMSE4.74
63
Differentially Private Model TrainingDP Noise Correlation Utility
RMSE (eps=8, w/o Amp)7.87
25
Image ClassificationCIFAR-10 (test)
Accuracy Epoch 132.3
10
Sentiment AnalysisIMDB (test)
Accuracy @ Epoch 183.27
10
Image ClassificationCIFAR-10 (test)
Accuracy (eps=0.5)49.38
8
Sentiment AnalysisIMDb BERT-base (test)
Mean Accuracy (ε=0.5)87.65
8
Showing 7 of 7 rows

Other info

Follow for update