arXiv Machine Learning

BRACE: Differential Privacy for Dense Associative Memory with LSR Energy

The paper introduces BRACE, a differentially private retrieval algorithm for log-sum-ReLU dense associative memory (LSR-DAM). BRACE adaptively corrects boundary-sensitive perturbations to control their cumulative effect during retrieval, achieving minimax optimal error rates that are independent of dimension and depend optimally on inverse temperature and retrieval horizon. The authors also prove central limit theorems for uncertainty quantification and demonstrate the method’s accuracy against baseline privacy approaches in numerical experiments.

arXiv Machine Learning
Jul 23

Differentially Private Neural Network Training Under the Hidden State Assumption

arXiv:2407. 08233v3 Announce Type: replace Abstract: Current differentially private learning paradigms face a severe utility bottleneck: DP-SGD degrades performance through noise accumulation over training steps, while aggregation-based approaches such as PATE suffer from data inefficiency due to disjoint data partitioning.

By Ding Chen, Haochen Luo, Xiaofei Wang, Chen Liu
arXiv AI
Oct 12

DP-MIND: Differentially private memory-guided Long context Inference

DP-MIND is a memory‑guided framework that enables differentially private inference for large language models on million‑token contexts. It locally perturbs user queries and processes them in chunks, using a compact memory that retains task‑relevant information across the sequence. The memory construction is optimized via reinforcement learning on perturbed inputs, and a local denoising module recovers corrupted answer spans, resulting in improved scalability and utility over existing DP and long‑context inference baselines.

By Zhihao Liu, Yitian Cheng, Shuang Liu, Rui Wen, Yuke Hu, Zhan Qin
arXiv Machine Learning
Aug 12

Information Bottleneck under Perfect Privacy

arXiv:2608. 11003v1 Announce Type: cross Abstract: In this work, we study the information bottleneck under perfect privacy, with particular emphasis on the active-rate regime, where the representation-rate constraint is binding and directly limits the achievable utility.

By Junle Zhong, Mohamad Assaad, Sreejith Sreekumar
arXiv Machine Learning
Sep 15

Privacy-Aligned Personalized Federated Learning with Compact Adaptation and Variable-Length Gaussian Communication

The paper proposes a privacy‑aligned personalized federated learning method that releases a private client context once and limits repeated adaptation to a fixed coefficient space, thereby reducing dimensionality misalignment. A factorized generator creates an adaptive optimization geometry that reshapes noisy updates, and most of the private‑training benefit is preserved by radial evolution. Variable‑length Gaussian quantization is used for coefficient updates, allowing the quantization error to act as the privacy perturbation and cutting protected uplink communication by a factor of 2.67 on CIFAR‑10 at ε=16 while maintaining comparable future‑client accuracy.

By Yilin Xu, Chun Hei Michael Shiu, Chih Wei Ling, Linqi Song
arXiv AI
Oct 31

When to spend privacy: optimal allocation in private learning

The paper presents a framework for optimally allocating a fixed privacy budget across iterations of Differentially Private Stochastic Gradient Descent. By modeling the Gaussian noise-variance schedule as an open-loop control problem under a zero-Concentrated Differential Privacy constraint, the authors derive an exact-budget simplex formulation and introduce the Privacy‑Budget Adjoint Mirror Descent (PB‑AMD) algorithm. The method guarantees budget exhaustiveness, stability, and stationarity, and yields a square‑root allocation law that empirically outperforms existing allocation rules and reduces optimization time compared to projected gradient descent.

By Umberto Biccari, Yongcun Song
arXiv Machine Learning
Oct 2

Certification-Based Differentially Private Learning

The paper extends the abstract gradient training (AGT) framework to provide tighter differential privacy guarantees for both private prediction and private learning. It introduces Abstract Gradient Sampling (AGS) to analyze privacy in continuous, unbounded regression and offers theoretical and empirical evidence that these methods yield tighter bounds than global-sensitivity baselines, even in previously unbounded settings. The authors also demonstrate that their private learning algorithm can outperform standard private learners under comparable conditions.

By Mihnea Ghitu, Matthew Wicker