Abstract:As privacy-preserving becomes a pivotal aspect of deep learning (DL) development, multi-party computation (MPC) has gained prominence for its efficiency and strong security. However, the practice of current MPC frameworks is limited, especially when dealing with large neural networks, exemplified by the prolonged execution time of 25.8 seconds for secure inference on ResNet-152. The primary challenge lies in the reliance of current MPC approaches on additive secret sharing, which incurs significant communication overhead with non-linear operations such as comparisons. Furthermore, additive sharing suffers from poor scalability on party size. In contrast, the evolving landscape of MPC necessitates accommodating a larger number of compute parties and ensuring robust performance against malicious activities or computational failures. In light of these challenges, we propose SSNet, which for the first time, employs Shamir's secret sharing (SSS) as the backbone of MPC-based ML framework. We meticulously develop all framework primitives and operations for secure DL models tailored to seamlessly integrate with the SSS scheme. SSNet demonstrates the ability to scale up party numbers straightforwardly and embeds strategies to authenticate the computation correctness without incurring significant performance overhead. Additionally, SSNet introduces masking strategies designed to reduce communication overhead associated with non-linear operations. We conduct comprehensive experimental evaluations on commercial cloud computing infrastructure from Amazon AWS, as well as across diverse prevalent DNN models and datasets. SSNet demonstrates a substantial performance boost, achieving speed-ups ranging from 3x to 14x compared to SOTA MPC frameworks. Moreover, SSNet also represents the first framework that is evaluated on a five-party computation setup, in the context of secure DL inference.

Privacy-Preserving Deep Learning with SPDZ

Privacy-Preserving Collaborative Deep Learning with Unreliable Participants.

GELU-Net: A Globally Encrypted, Locally Unencrypted Deep Neural Network for Privacy-Preserved Learning.

Industrial Scale Privacy Preserving Deep Neural Network

A Distributed Privacy-Preserving Framework for Deep Learning with Edge-Cloud Computing.

Towards Scalable and Privacy-Preserving Deep Neural Network via Algorithmic-Cryptographic Co-design

Toward Scalable and Privacy-preserving Deep Neural Network Via Algorithmic-Cryptographic Co-design

Secure Computation for Machine Learning With SPDZ

Low-Latency Privacy-Preserving Deep Learning Design via Secure MPC

Practical Two-party Privacy-preserving Neural Network Based on Secret Sharing

SSNet: A Lightweight Multi-Party Computation Scheme for Practical Privacy-Preserving Machine Learning Service in the Cloud

SHAPER: A General Architecture for Privacy-Preserving Primitives in Secure Machine Learning.

Rethinking Privacy Preserving Deep Learning: How to Evaluate and Thwart Privacy Attacks

SecureML: A System for Scalable Privacy-Preserving Machine Learning

Communication-Efficient Privacy-Preserving Neural Network Inference via Arithmetic Secret Sharing

MSDP: multi-scheme privacy-preserving deep learning via differential privacy

FssNN: Communication-Efficient Secure Neural Network Training via Function Secret Sharing

FastSecNet: An Efficient Cryptographic Framework for Private Neural Network Inference

EPIDL: Towards efficient and privacy‐preserving inference in deep learning

SparseLock: Securing Neural Network Models in Deep Learning Accelerators

PrivyNet: A Flexible Framework for Privacy-Preserving Deep Neural Network Training