← Search

Andrew Lowy

8 accepted papers

2024

How to Make the Gradients Small Privately: Improved Rates for Differentially Private Non-Convex Optimization

ICML 2024poster

We provide a simple and flexible framework for designing differentially private algorithms to find approximate stationary points of non-convex loss functions. Our framework is based on using a private approximate risk minimizer to "warm start" another private algorithm for finding stationary points.…

2024

Optimal Differentially Private Model Training with Public Data

ICML 2024poster

Differential privacy (DP) ensures that training a machine learning model does not leak private data. In practice, we may have access to auxiliary public data that is free of privacy concerns. In this work, we assume access to a given amount of public data and settle the following fundamental open qu…

2024

Private Heterogeneous Federated Learning Without a Trusted Server Revisited: Error-Optimal and Communication-Efficient Algorithms for Convex Losses

ICML 2024poster

We revisit the problem of federated learning (FL) with private data from people who do not trust the server or other silos/clients. In this context, every silo (e.g. hospital) has data from several people (e.g. patients) and needs to protect the privacy of each person's data (e.g. health records), e…

Cited by 6SourcePDFScholar
2023

Private Federated Learning Without a Trusted Server: Optimal Algorithms for Convex Losses

ICLR 2023poster

This paper studies federated learning (FL)—especially cross-silo FL—with data from people who do not trust the server or other silos. In this setting, each silo (e.g. hospital) has data from different people (e.g. patients) and must maintain the privacy of each person’s data (e.g. medical record), e…

Cited by 42SourcePDFScholar
2023

Private Non-Convex Federated Learning Without a Trusted Server

AISTATS 2023poster

We study federated learning (FL) with non-convex loss functions and data from people who do not trust the server or other silos. In this setting, each silo (e.g. hospital) must protect the privacy of each person’s medical record), even if the server or other silos act as adversarial eavesdroppers. T…