Abstract:Most existing Secure Multi-Party Computation (MPC) protocols for privacy-preserving training of decision trees over distributed data assume that the features are categorical. In real-life applications, features are often numerical. The standard ``in the clear'' algorithm to grow decision trees on data with continuous values requires sorting of training examples for each feature in the quest for an optimal cut-point in the range of feature values in each node. Sorting is an expensive operation in MPC, hence finding secure protocols that avoid such an expensive step is a relevant problem in privacy-preserving machine learning. In this paper we propose three more efficient alternatives for secure training of decision tree based models on data with continuous features, namely: (1) secure discretization of the data, followed by secure training of a decision tree over the discretized data; (2) secure discretization of the data, followed by secure training of a random forest over the discretized data; and (3) secure training of extremely randomized trees (``extra-trees'') on the original data. Approaches (2) and (3) both involve randomizing feature choices. In addition, in approach (3) cut-points are chosen randomly as well, thereby alleviating the need to sort or to discretize the data up front. We implemented all proposed solutions in the semi-honest setting with additive secret sharing based MPC. In addition to mathematically proving that all proposed approaches are correct and secure, we experimentally evaluated and compared them in terms of classification accuracy and runtime. We privately train tree ensembles over data sets with 1000s of instances or features in a few minutes, with accuracies that are at par with those obtained in the clear. This makes our solution orders of magnitude more efficient than the existing approaches, which are based on oblivious sorting.

Securely Training Decision Trees Efficiently

Efficient decision tree training with new data structure for secure multi-party computation

Secure training of decision trees with continuous attributes

SoK: Modular and Efficient Private Decision Tree Evaluation.

Privacy-Preserving Training of Tree Ensembles over Continuous Data

Ents: An Efficient Three-party Training Framework for Decision Trees by Communication Optimization

Secure and Privacy-Preserving Decision Tree Classification with Lower Complexity

GTree: GPU-Friendly Privacy-preserving Decision Tree Training and Inference

Efficient Privacy-Preserving Decision Tree Classification Protocol

Level Up: Private Non-Interactive Decision Tree Evaluation using Levelled Homomorphic Encryption

Scalable Private Decision Tree Evaluation with Sublinear Communication

Secure Outsourcing Evaluation for Sparse Decision Trees

Outsourced Privacy-Preserving C4.5 Decision Tree Algorithm over Horizontally and Vertically Partitioned Dataset among Multiple Parties

OnePath: Efficient and Privacy-Preserving Decision Tree Inference in the Cloud

PriVDT: An Efficient Two-Party Cryptographic Framework for Vertical Decision Trees

Lightweight Privacy-Preserving Federated Incremental Decision Trees

Secure decision tree classification with decentralized authorization and access control

Outsourced Privacy-Preserving Random Decision Tree Algorithm Under Multiple Parties For Sensor-Cloud Integration

Federated Boosted Decision Trees with Differential Privacy

Mostree : Malicious Secure Private Decision Tree Evaluation with Sublinear Communication

UC Secure Private Branching Program and Decision Tree Evaluation.