English

Efficient Differentially Private Fine-Tuning of Diffusion Models

Machine Learning 2024-06-11 v1 Cryptography and Security

Abstract

The recent developments of Diffusion Models (DMs) enable generation of astonishingly high-quality synthetic samples. Recent work showed that the synthetic samples generated by the diffusion model, which is pre-trained on public data and fully fine-tuned with differential privacy on private data, can train a downstream classifier, while achieving a good privacy-utility tradeoff. However, fully fine-tuning such large diffusion models with DP-SGD can be very resource-demanding in terms of memory usage and computation. In this work, we investigate Parameter-Efficient Fine-Tuning (PEFT) of diffusion models using Low-Dimensional Adaptation (LoDA) with Differential Privacy. We evaluate the proposed method with the MNIST and CIFAR-10 datasets and demonstrate that such efficient fine-tuning can also generate useful synthetic samples for training downstream classifiers, with guaranteed privacy protection of fine-tuning data. Our source code will be made available on GitHub.

Keywords

Cite

@article{arxiv.2406.05257,
  title  = {Efficient Differentially Private Fine-Tuning of Diffusion Models},
  author = {Jing Liu and Andrew Lowy and Toshiaki Koike-Akino and Kieran Parsons and Ye Wang},
  journal= {arXiv preprint arXiv:2406.05257},
  year   = {2024}
}
R2 v1 2026-06-28T16:57:52.103Z