Certification for Differentially Private Prediction in Gradient-Based Training

Matthew Wicker, Philip Sosnin, Igor Shilov +5

We study private prediction where differential privacy is achieved by adding noise to the outputs of a non-private model. Existing methods rely on noise proportional to the global…