Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Yannick Prudent

dblp:348/6379 · DBLP profile ↗
← Back
1ranked-venue papers
0as first author
1since 2021 · last 2024
—ORCID · none

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 1 · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Artificial intelligence
1 paper
Trustworthy machine learning · 100%
Network and information security
1 paper
Privacy and data protection · 100%

Topics — the 4 heaviest of 4, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Machine learning › Trustworthy machine learning › privacy
differentially private training
0.812024
DP-SGD Without Clipping: The Lipschitz Neural Network Way · ICLR 2024
Machine learning › Trustworthy machine learning › robustness › certified robustness
lipschitz-constrained networks
0.812024
DP-SGD Without Clipping: The Lipschitz Neural Network Way · ICLR 2024
Machine learning › Trustworthy machine learning › privacy
privacy-preserving machine learning
0.812024
DP-SGD Without Clipping: The Lipschitz Neural Network Way · ICLR 2024
Privacy and data protection
differential privacy
0.812024
DP-SGD Without Clipping: The Lipschitz Neural Network Way · ICLR 2024

Methods — techniques the papers use, named apart from their topics

lipschitz constraint · 1.5DP-SGD · 1.5
YearPublicationVenuePosition
2024 DP-SGD Without Clipping: The Lipschitz Neural Network Way
abstract
State-of-the-art approaches for training Differentially Private (DP) Deep Neural Networks (DNN) face difficulties to estimate tight bounds on the sensitivity of the network's layers, and instead rely on a process of per-sample gradient clipping. This clipping process not only biases the direction of gradients but also proves costly both in memory consumption and in computation. To provide sensitivity bounds and bypass the drawbacks of the clipping process, we propose to rely on Lipschitz constrained networks. Our theoretical analysis reveals an unexplored link between the Lipschitz constant with respect to their input and the one with respect to their parameters. By bounding the Lipschitz constant of each layer with respect to its parameters, we prove that we can train these networks with privacy guarantees. Our analysis not only allows the computation of the aforementioned sensitivities at scale, but also provides guidance on how to maximize the gradient-to-noise ratio for fixed privacy guarantees. To facilitate the application of Lipschitz networks and foster robust and certifiable learning under privacy guarantees, we provide a Python package that implements building blocks allowing the construction and private training of such networks.
Louis Béthune, Thomas Massena, Thibaut Boissin, Aurélien Bellet, Franck Mamalet, Yannick Prudent, Corentin Friedrich, Mathieu Serrurier, David Vigouroux
ICLR6