Deep Learning with Differential Privacy

Key findings

• DP-SGD clips per-example gradients and adds noise; the moments accountant tracks privacy loss tightly - Achieved usable accuracy on MNIST and CIFAR under modest privacy budgets

Sources

• arxiv.orghttps://arxiv.org/abs/1607.00133