{"id":"https://openalex.org/W4376626823","doi":"https://doi.org/10.56553/popets-2023-0083","title":"Losing Less: A Loss for Differentially Private Deep Learning","display_name":"Losing Less: A Loss for Differentially Private Deep Learning","publication_year":2023,"publication_date":"2023-05-15","ids":{"openalex":"https://openalex.org/W4376626823","doi":"https://doi.org/10.56553/popets-2023-0083"},"language":"en","primary_location":{"id":"doi:10.56553/popets-2023-0083","is_oa":true,"landing_page_url":"http://dx.doi.org/10.56553/popets-2023-0083","pdf_url":"https://petsymposium.org/popets/2023/popets-2023-0083.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://petsymposium.org/popets/2023/popets-2023-0083.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5065455506","display_name":"Ali Shahin Shamsabadi","orcid":"https://orcid.org/0000-0003-2649-8700"},"institutions":[{"id":"https://openalex.org/I185261750","display_name":"University of Toronto","ror":"https://ror.org/03dbr7087","country_code":"CA","type":"education","lineage":["https://openalex.org/I185261750"]},{"id":"https://openalex.org/I4210127509","display_name":"Vector Institute","ror":"https://ror.org/03kqdja62","country_code":"CA","type":"facility","lineage":["https://openalex.org/I4210127509"]},{"id":"https://openalex.org/I4210128584","display_name":"The Alan Turing Institute","ror":"https://ror.org/035dkdb55","country_code":"GB","type":"facility","lineage":["https://openalex.org/I4210128584"]}],"countries":["CA","GB"],"is_corresponding":false,"raw_author_name":"Ali Shahin Shamsabadi","raw_affiliation_strings":["The Alan Turing Institute","University of Toronto and Vector Institute"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Alan Turing Institute","institution_ids":["https://openalex.org/I4210128584"]},{"raw_affiliation_string":"University of Toronto and Vector Institute","institution_ids":["https://openalex.org/I185261750","https://openalex.org/I4210127509"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5018809423","display_name":"Nicolas Papernot","orcid":"https://orcid.org/0000-0001-5078-7233"},"institutions":[{"id":"https://openalex.org/I185261750","display_name":"University of Toronto","ror":"https://ror.org/03dbr7087","country_code":"CA","type":"education","lineage":["https://openalex.org/I185261750"]},{"id":"https://openalex.org/I4210127509","display_name":"Vector Institute","ror":"https://ror.org/03kqdja62","country_code":"CA","type":"facility","lineage":["https://openalex.org/I4210127509"]},{"id":"https://openalex.org/I4210128584","display_name":"The Alan Turing Institute","ror":"https://ror.org/035dkdb55","country_code":"GB","type":"facility","lineage":["https://openalex.org/I4210128584"]}],"countries":["CA","GB"],"is_corresponding":false,"raw_author_name":"Nicolas Papernot","raw_affiliation_strings":["Vector Institute, University of Toronto","The Alan Turing Institute","University of Toronto and Vector Institute"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Vector Institute, University of Toronto","institution_ids":["https://openalex.org/I185261750","https://openalex.org/I4210127509"]},{"raw_affiliation_string":"The Alan Turing Institute","institution_ids":["https://openalex.org/I4210128584"]},{"raw_affiliation_string":"University of Toronto and Vector Institute","institution_ids":["https://openalex.org/I185261750","https://openalex.org/I4210127509"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.5637,"has_fulltext":true,"cited_by_count":4,"citation_normalized_percentile":{"value":0.71191183,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":96},"biblio":{"volume":"2023","issue":"3","first_page":"307","last_page":"320"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11612","display_name":"Stochastic Gradient Optimization Techniques","score":0.9951000213623047,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9664000272750854,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/stochastic-gradient-descent","display_name":"Stochastic gradient descent","score":0.8529151678085327},{"id":"https://openalex.org/keywords/mnist-database","display_name":"MNIST database","score":0.8376004695892334},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6635637879371643},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.6542948484420776},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6295873522758484},{"id":"https://openalex.org/keywords/cross-entropy","display_name":"Cross entropy","score":0.5885942578315735},{"id":"https://openalex.org/keywords/gradient-descent","display_name":"Gradient descent","score":0.49820709228515625},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.49513640999794006},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.49057263135910034},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3307563364505768},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.2209162712097168}],"concepts":[{"id":"https://openalex.org/C206688291","wikidata":"https://www.wikidata.org/wiki/Q7617819","display_name":"Stochastic gradient descent","level":3,"score":0.8529151678085327},{"id":"https://openalex.org/C190502265","wikidata":"https://www.wikidata.org/wiki/Q17069496","display_name":"MNIST database","level":3,"score":0.8376004695892334},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6635637879371643},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.6542948484420776},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6295873522758484},{"id":"https://openalex.org/C167981619","wikidata":"https://www.wikidata.org/wiki/Q1685498","display_name":"Cross entropy","level":3,"score":0.5885942578315735},{"id":"https://openalex.org/C153258448","wikidata":"https://www.wikidata.org/wiki/Q1199743","display_name":"Gradient descent","level":3,"score":0.49820709228515625},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.49513640999794006},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.49057263135910034},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3307563364505768},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.2209162712097168}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.56553/popets-2023-0083","is_oa":true,"landing_page_url":"http://dx.doi.org/10.56553/popets-2023-0083","pdf_url":"https://petsymposium.org/popets/2023/popets-2023-0083.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.56553/popets-2023-0083","is_oa":true,"landing_page_url":"http://dx.doi.org/10.56553/popets-2023-0083","pdf_url":"https://petsymposium.org/popets/2023/popets-2023-0083.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306151","display_name":"Alfred P. Sloan Foundation","ror":"https://ror.org/052csg198"},{"id":"https://openalex.org/F4320309949","display_name":"Canadian Institute for Advanced Research","ror":"https://ror.org/01sdtdd95"},{"id":"https://openalex.org/F4320319880","display_name":"Government of Canada","ror":"https://ror.org/010q4q527"},{"id":"https://openalex.org/F4320330223","display_name":"Vector Institute","ror":"https://ror.org/03kqdja62"},{"id":"https://openalex.org/F4320334593","display_name":"Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4376626823.pdf"},"referenced_works_count":28,"referenced_works":["https://openalex.org/W1992926795","https://openalex.org/W2027595342","https://openalex.org/W2051267297","https://openalex.org/W2473418344","https://openalex.org/W2535690855","https://openalex.org/W2605258322","https://openalex.org/W2798657499","https://openalex.org/W2884561390","https://openalex.org/W2887842788","https://openalex.org/W2899748887","https://openalex.org/W2932329902","https://openalex.org/W2946930197","https://openalex.org/W2950943617","https://openalex.org/W2952604841","https://openalex.org/W2963999993","https://openalex.org/W2964296660","https://openalex.org/W2965721472","https://openalex.org/W2995315671","https://openalex.org/W3005560345","https://openalex.org/W3010512657","https://openalex.org/W3034598017","https://openalex.org/W3037261120","https://openalex.org/W3045700442","https://openalex.org/W3110164654","https://openalex.org/W3125098139","https://openalex.org/W3185099774","https://openalex.org/W4286908675","https://openalex.org/W4287646898"],"related_works":["https://openalex.org/W4315785049","https://openalex.org/W3015792155","https://openalex.org/W2937906318","https://openalex.org/W3118286710","https://openalex.org/W4225929918","https://openalex.org/W3095450733","https://openalex.org/W2895097035","https://openalex.org/W4206903459","https://openalex.org/W2754816816","https://openalex.org/W4366280654"],"abstract_inverted_index":{"Differentially":[0],"Private":[1],"Stochastic":[2],"Gradient":[3],"Descent,":[4],"DP-SGD,":[5],"is":[6],"the":[7,22,32,43,67,84,88,110,119,135,140,170],"canonical":[8],"approach":[9],"to":[10,26,45,61],"training":[11,56],"deep":[12,35,72],"neural":[13,36],"networks":[14],"with":[15,57,74,100,125],"guarantees":[16],"of":[17,34,49,113,122,128,137,172,182],"Differential":[18],"Privacy":[19],"(DP).":[20],"However,":[21],"modifications":[23],"DP-SGD":[24,173],"introduces":[25],"vanilla":[27],"gradient":[28,144],"descent":[29],"negatively":[30],"impact":[31],"accuracy":[33,160,171],"networks.":[37],"In":[38],"this":[39,50],"paper,":[40],"we":[41,63,77,152,168],"are":[42,116],"first":[44,96],"observe":[46],"that":[47],"some":[48],"performance":[51],"can":[52],"be":[53],"recovered":[54],"when":[55],"a":[58,79,92,179],"loss":[59,70,80,150],"tailored":[60],"DP-SGD;":[62],"challenge":[64],"cross-entropy":[65],"as":[66],"de":[68],"facto":[69],"for":[71,178],"learning":[73,99,123],"DP.":[75],"Specifically,":[76],"introduce":[78],"combining":[81],"three":[82],"terms:":[83],"summed":[85],"squared":[86],"error,":[87],"focal":[89],"loss,":[90],"and":[91,159,164],"regularization":[93],"penalty.":[94],"The":[95,103,130],"term":[97,105,132],"encourages":[98],"faster":[101],"convergence.":[102],"second":[104],"emphasizes":[106],"hard-to-learn":[107],"examples":[108],"in":[109,146],"later":[111],"stages":[112],"training.":[114],"Both":[115],"beneficial":[117],"because":[118],"privacy":[120,158],"cost":[121],"increases":[124],"every":[126],"step":[127],"DP-SGD.":[129,147],"third":[131],"helps":[133],"control":[134],"sensitivity":[136],"learning,":[138],"decreasing":[139],"bias":[141],"introduced":[142],"by":[143,176],"clipping":[145],"Using":[148],"our":[149],"function,":[151],"achieve":[153],"new":[154],"state-of-the-art":[155],"tradeoffs":[156],"between":[157],"on":[161,174],"MNIST,":[162],"FashionMNIST,":[163],"CIFAR10.":[165],"Most":[166],"importantly,":[167],"improve":[169],"CIFAR10":[175],"4%":[177],"DP":[180],"guarantee":[181],"\ud835\udf00":[183],"=":[184],"3.":[185]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-10-10T00:00:00"}