Table 1.

Comparison of privacy accounting methods.

Mechanism	Privacy accounting approaches	q	σ	δ	Epoch	ε
Baseline	Strong composition	0.01	6	10−5	400	34.3
DP-SGD	Moment Account (MA)					1.67
The improvement of DP-SGD	zCDP (random sampling, RS)					2.37
	zCDP (random reshuffling, RF)					21.5