arXiv Machine Learning

Stabilizing Private LASSO under Heterogeneous Covariates via Anisotropic Objective Perturbation

The paper investigates high‑dimensional LASSO under differential privacy using objective perturbation when covariates have heterogeneous scales. It introduces a Gram‑based anisotropic objective perturbation that counteracts the distortion caused by covariate heterogeneity, restoring isotropy in the estimation process. Through an Approximate Message Passing framework and state evolution analysis, the authors show that this approach stabilizes convergence and improves both statistical efficiency and privacy performance compared to standard uniform noise injection.

arXiv Machine Learning
Aug 20

Jacobian-Guided Anisotropic Noise Reshaping for Enhancing Representation Utility under Local Differential Privacy

The paper introduces Jacobian-Guided Anisotropic Noise Reshaping, a method that improves data utility under Local Differential Privacy by selectively reducing noise in task-relevant subspaces of data representations. It uses the Jacobian of a public downstream model to identify critical directions and reshapes isotropic LDP noise into an anisotropic distribution, preserving privacy while enhancing performance. Experiments on CIFAR-10-C show significant accuracy gains, especially for PrivUnit variants at ε=7.5.

By Youngmok Ha, Viktor Schlegel, Yidan Sun, Anil Anthony Bharath
arXiv Machine Learning
4d ago

Privacy-Aligned Personalized Federated Learning with Compact Adaptation and Variable-Length Gaussian Communication

The paper proposes a privacy‑aligned personalized federated learning method that releases a private client context once and limits repeated adaptation to a fixed coefficient space, thereby reducing dimensionality misalignment. A factorized generator creates an adaptive optimization geometry that reshapes noisy updates, and most of the private‑training benefit is preserved by radial evolution. Variable‑length Gaussian quantization is used for coefficient updates, allowing the quantization error to act as the privacy perturbation and cutting protected uplink communication by a factor of 2.67 on CIFAR‑10 at ε=16 while maintaining comparable future‑client accuracy.

By Yilin Xu, Chun Hei Michael Shiu, Chih Wei Ling, Linqi Song
arXiv Machine Learning
Jul 23

Differentially Private Neural Network Training Under the Hidden State Assumption

arXiv:2407. 08233v3 Announce Type: replace Abstract: Current differentially private learning paradigms face a severe utility bottleneck: DP-SGD degrades performance through noise accumulation over training steps, while aggregation-based approaches such as PATE suffer from data inefficiency due to disjoint data partitioning.

By Ding Chen, Haochen Luo, Xiaofei Wang, Chen Liu