Abstract:The emerging of machine learning has massively promoted the abilities of computational sustainability in natural resource management and allocation. Many Internet giants such as Google, Amazon, and Microsoft now provide Machine Learning as a Service (MLaaS) to meet the increasing demand for machine learning services. However, the prediction results of training data and testing data with the same machine learning model in MLaaS have remarkable differences, and thus the attackers can leverage machine learning techniques to launch the so-called membership inference attacks, i.e., to infer whether a record is in the training data or not. In this paper, we propose MIASec that can guarantee the data indistinguishability of the training data and thereby has the ability to defend against membership inference attacks in MLaaS. The key idea of MIASec is to narrow the dynamic ranges of vital features in the training data, such that the training data, the testing data, and even the synthetic data have almost semblable prediction results by the same machine learning model. With elaborated design on modifying the values of vital features in the training data, MIASec can thus reduce the differences between the model's outcomes of training data and testing data, thereby protecting the training data in effect while keeping the model's accuracy stable. We empirically evaluate MIASec on machine learning models trained by off-line neural networks and on-line MLaaS. Using realistic data and classification tasks, our experiment results show that MIASec can defend the membership inference attacks effectively. In particular, MIASec can reduce the precision and recall of attacks respectively by 11.7 and 15.4 percent in average, and by 18.6 and 21.8 percent at best.

VeriML: Enabling Integrity Assurances and Fair Payments for Machine Learning as a Service

VerifyML: Obliviously Checking Model Fairness Resilient to Malicious Model Holder.

Verifiable Fairness: Privacy-preserving Computation of Fairness for Machine Learning Systems

opML: Optimistic Machine Learning on Blockchain

Fostering Trust and Quantifying Value of AI and ML

A Generative Framework for Low-Cost Result Validation of Machine Learning-as-a-Service Inference

SecureML: A System for Scalable Privacy-Preserving Machine Learning

Zero-knowledge Proof Meets Machine Learning in Verifiability: A Survey

Secure MLaaS with Temper: Trusted and Efficient Model Partitioning and Enclave Reuse

Rethinking Certification for Trustworthy Machine Learning-Based Applications

Providing assurance and scrutability on shared data and machine learning models with verifiable credentials

Scaling up Trustless DNN Inference with Zero-Knowledge Proofs

SVIP: Towards Verifiable Inference of Open-source Large Language Models

Golden Grain: Building a Secure and Decentralized Model Marketplace for MLaaS

Privacy-Preserving Machine Learning As a Service: Challenges and Opportunities

Decentralized and Secure Deduplication with Dynamic Ownership in MLaaS

Artemis: Efficient Commit-and-Prove SNARKs for zkML

MIASec: Enabling Data Indistinguishability Against Membership Inference Attacks in MLaaS.

Active Fairness Auditing

NSML: Meet the MLaaS platform with a real-world case study

Distributed Machine Learning Oriented Data Integrity Verification Scheme in Cloud Computing Environment