Summary
The paper presents an approach to train differentially private regression models on sparse input data. It leverages a modified version of the Frank-Wolfe algorithm to reduce the training time significantly by making the algorithm sensitive to sparse inputs.The algorithmic complexity is improved from the standard linear complexity to sub-linear. The authors have used their proposed method on multiple high-dimensional datasets improving the accuracy by 26.3% compared to previous methods.
Strengths
The paper is eloquently written, with algorithms clearly delineated and accompanied by ample commentary. The proposed algorithm showcases its versatility across various scenarios, offering a remarkable improvement in performance.
Weaknesses
The paper does not provide proven error bounds, and all theoretical results appear to revolve around the concept of speed optimization. It remains unclear whether this speed enhancement comes at the expense of accuracy. Additionally, the lack of released code poses a challenge to reproducibility.
Privacy accounting is implict and lacking, the authors didn't directly explain how does their algorithm satisfy the DP condition (advanced compostion?).
Questions
Could you please clarify how the proposed algorithm ensures compliance with the Differential Privacy (DP) condition? Are there any alternative privacy accounting methods that may potentially enhance the overall performance? For example, better privacy accounting [1], using GDP/RDP [2] or tighter compostion theorems [3].
The authors suggest that their implementation requires fewer FLOPs compared to the standard Frank-Wolfe approach. Does this reduction in FLOPs translate directly to a commensurate speed increase, or is computational efficiency still constrained by factors such as RAM and cache access? Could you elaborate on the current computational bottlenecks?
The experimentation appears to have been conducted using a single core. Would there be any potential benefits, such as efficiency or performance improvements, if this method were to be adapted for multicore processing?
Can this method be extended beyond LASSO Regularized Logistic Regression? If not, what's the main challenge?
[1]: Altschuler, J., & Talwar, K. (2022). Privacy of noisy stochastic gradient descent: More iterations without more privacy loss. Advances in Neural Information Processing Systems, 35, 3788-3800.
[2] Liu, Y., Sun, K., Jiang, B., & Kong, L. (2022). Identification, amplification and measurement: A bridge to gaussian differential privacy. Advances in Neural Information Processing Systems, 35, 11410-11422.
[3] Kairouz, P., Oh, S., & Viswanath, P. (2015, June). The composition theorem for differential privacy. In International conference on machine learning (pp. 1376-1385). PMLR.
Rating
6: Weak Accept: Technically solid, moderate-to-high impact paper, with no major concerns with respect to evaluation, resources, reproducibility, ethical considerations.
Confidence
3: You are fairly confident in your assessment. It is possible that you did not understand some parts of the submission or that you are unfamiliar with some pieces of related work. Math/other details were not carefully checked.