English

Adaptive Methods Are Preferable in High Privacy Settings: An SDE Perspective

Machine Learning 2026-03-04 v1 Cryptography and Security

Abstract

Differential Privacy (DP) is becoming central to large-scale training as privacy regulations tighten. We revisit how DP noise interacts with adaptivity in optimization through the lens of stochastic differential equations, providing the first SDE-based analysis of private optimizers. Focusing on DP-SGD and DP-SignSGD under per-example clipping, we show a sharp contrast under fixed hyperparameters: DP-SGD converges at a Privacy-Utility Trade-Off of O(1/ε2)\mathcal{O}(1/\varepsilon^2) with speed independent of ε\varepsilon, while DP-SignSGD converges at a speed linear in ε\varepsilon with an O(1/ε)\mathcal{O}(1/\varepsilon) trade-off, dominating in high-privacy or large batch noise regimes. By contrast, under optimal learning rates, both methods achieve comparable theoretical asymptotic performance; however, the optimal learning rate of DP-SGD scales linearly with ε\varepsilon, while that of DP-SignSGD is essentially ε\varepsilon-independent. This makes adaptive methods far more practical, as their hyperparameters transfer across privacy levels with little or no re-tuning. Empirical results confirm our theory across training and test metrics, and empirically extend from DP-SignSGD to DP-Adam.

Keywords

Cite

@article{arxiv.2603.03226,
  title  = {Adaptive Methods Are Preferable in High Privacy Settings: An SDE Perspective},
  author = {Enea Monzio Compagnoni and Alessandro Stanghellini and Rustem Islamov and Aurelien Lucchi and Anastasiia Koloskova},
  journal= {arXiv preprint arXiv:2603.03226},
  year   = {2026}
}

Comments

Accepted at ICLR 2026 (Poster)

R2 v1 2026-07-01T11:01:34.879Z