Learning Differentially Private Recurrent Language Models

Citations Over Time

Abstract

We demonstrate that it is possible to train large recurrent language models with user-level differential privacy guarantees with only a negligible cost in predictive accuracy. Our work builds on recent advances in the training of deep networks on user-partitioned data and privacy accounting for stochastic gradient descent. In particular, we add user-level privacy protection to the federated averaging algorithm, which makes "large step" updates from user-level data. Our work demonstrates that given a dataset with a sufficiently large number of users (a requirement easily met by even small internet-scale datasets), achieving differential privacy comes at the cost of increased computation, rather than in decreased utility as in most prior work. We find that our private LSTM language models are quantitatively and qualitatively similar to un-noised models when trained on a large dataset.

Related Papers

• → Stochastic Gradient Descent(2015)47 cited
• → Training a Two-Layer ReLU Network Analytically(2023)7 cited
• → Accelerating Extreme Search Based on Natural Gradient Descent with Beta Distribution(2021)4 cited
• → Differential Privacy Machine Learning Based on Attention Residual Networks(2023)2 cited
• → Concentrated Differentially Private Gradient Descent with Adaptive\n per-Iteration Privacy Budget(2018)