Adaptive Batch Size for Privately Finding Second-Order Stationary Points
Daogao Liu, Kunal Talwar

TL;DR
This paper introduces an adaptive batch size method using the binary tree mechanism to improve the private detection of second-order stationary points, matching the best results for first-order points and addressing previous methodological issues.
Contribution
It presents a novel adaptive batch size approach that corrects prior analysis errors and enhances the guarantees for privately finding second-order stationary points.
Findings
Achieves improved privacy guarantees for SOSP detection.
Matches state-of-the-art results for FOSP detection.
Addresses previous methodological flaws in saddle point escape procedures.
Abstract
There is a gap between finding a first-order stationary point (FOSP) and a second-order stationary point (SOSP) under differential privacy constraints, and it remains unclear whether privately finding an SOSP is more challenging than finding an FOSP. Specifically, Ganesh et al. (2023) claimed that an -SOSP can be found with , where is the dataset size, is the dimension, and is the differential privacy parameter. However, a recent analysis revealed an issue in their saddle point escape procedure, leading to weaker guarantees. Building on the SpiderBoost algorithm framework, we propose a new approach that uses adaptive batch sizes and incorporates the binary tree mechanism. Our method not only corrects this issue but also improves the results for privately finding an SOSP, achieving…
Peer Reviews
Decision·ICLR 2025 Spotlight
1. The authors present in a nice and neat way. 2. This paper studies a timely and interesting problem - finding SOSP privately. 3. The authors introduced simple yet effective tools to solve this problem effectively. Tree mechanism has been applied in many DP papers but this paper illustrates its power when combined with the adaptive batch size. And the analysis part is non-trivial. This technique might be applicable to other private optimization problems.
I see no apparent weaknesses in this paper.
The paper proposes a novel algorithm for an important problem in private machine learning. The algorithm improves meaningfully on the previous state-of-the-art in multiple clear ways. The writing is generally clear and ideas are easy to follow.
My only concern is a lack of experimental results. It would be nice to see a small experiment comparing the algorithm to the prior state-of-the-art in order to give a sense of whether the new algorithm is practical to run or not as well as whether the theoretical improvements actually translate into substantive improvement in the quality of the SOSP. In particular, I would be interested to see how the runtime as well as the $\alpha$ value of your approach compares to prior approaches on benchmar
This paper addresses an important problem by improving the theoretical bound for achieving a second-order stationary point (SOSP) under differential privacy constraints, aligning it with the bound for a first-order stationary point (FOSP). Leveraging the tree mechanism in differentially private continuous observation, which has been shown to achieve asymptotically minimal error, the paper successfully reduces the error for SOSP. I believe the idea is noval and the contribution is sufficient.
1. There is a line of work that further improves the theoretical bound of the tree mechanism, called matrix mechanism [1]. It improves the bound of the tree mechanism by a constant factor. When training a model, it generally works better than the tree mechanism [2]. I would like to hear some discussions about whether using the matrix mechanism can help improve the theoretical analysis. 2. I am confused by how you describe the adaptive batch size, the expression of $b_t$ in Lemma 3.8 depends on
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsAuction Theory and Applications · Advanced Database Systems and Queries · Data Management and Algorithms
