AIセキュリティポータル K Program
GTree: GPU-Friendly Privacy-preserving Decision Tree Training and Inference
Share
Abstract
Decision tree (DT) is a widely used machine learning model due to its versatility, speed, and interpretability. However, for privacy-sensitive applications, outsourcing DT training and inference to cloud platforms raise concerns about data privacy. Researchers have developed privacy-preserving approaches for DT training and inference using cryptographic primitives, such as Secure Multi-Party Computation (MPC). While these approaches have shown progress, they still suffer from heavy computation and communication overheads. Few recent works employ Graphical Processing Units (GPU) to improve the performance of MPC-protected deep learning. This raises a natural question: \textit{can MPC-protected DT training and inference be accelerated by GPU?} We present GTree, the first scheme that uses GPU to accelerate MPC-protected secure DT training and inference. GTree is built across 3 parties who securely and jointly perform each step of DT training and inference with GPU. Each MPC protocol in GTree is designed in a GPU-friendly version. The performance evaluation shows that GTree achieves ${\thicksim}11{\times}$ and ${\thicksim}21{\times}$ improvements in training SPECT and Adult datasets, compared to the prior most efficient CPU-based work. For inference, GTree shows its superior efficiency when the DT has less than 10 levels, which is $126\times$ faster than the prior most efficient work when inferring $10^4$ instances with a tree of 7 levels. GTree also achieves a stronger security guarantee than prior solutions, which only leaks the tree depth and size of data samples while prior solutions also leak the tree structure. With \textit{oblivious array access}, the access pattern on GPU is also protected.
Decision tree classifiers for automated medical diagnosis
A. T. Azar, S. M. El-Metwally
Published: 2013
A short-term photovoltaic power prediction model based on the gradient boost decision tree
J. Wang, P. Li, R. Ran, Y. Che, Y. Zhou
Published: 2018
Secure training of decision trees with continuous attributes
M. Abspoel, D. Escudero, N. Volgushev
Published: 2020
Privacy-preserving training of tree ensembles over continuous data
S. Adams, C. Choudhary, M. De Cock, R. Dowsley, D. Melanson, A. Nascimento, D. Railsback, J. Shen
Published: 2022
Privacy preserving decision tree learning over multiple parties
F. Emekçi, O. D. Sahin, D. Agrawal, A. El Abbadi
Published: 2007
Practical secure decision tree learning in a teletreatment application
S. d. Hoogh, B. Schoenmakers, P. Chen, et al.
Published: 2014
Privacy preserving data mining
Y. Lindell, B. Pinkas
Published: 2000
Privacy preserving id3 using gini index over horizontally partitioned data
S. Samet, A. Miri
Published: 2008
Private evaluation of decision trees using sublinear cost
A. Tueno, F. Kerschbaum, S. Katzenbeisser
Published: 2019
Machine learning classification over encrypted data.
R. Bost, R. A. Popa, S. Tu, S. Goldwasser
Published: 2015
Privately evaluating decision trees and random forests
D. J. Wu, T. Feng, M. Naehrig, K. Lauter
Published: 2016
Privacy-preserving decision trees evaluation via linear functions
R. K. Tai, J. P. Ma, Y. Zhao, S. S. Chow
Published: 2017
Privacy-preserving decision trees training and prediction
A. Akavia, M. Leibovich, Y. S. Resheff, R. Ron, M. Shahar, M. Vald
Published: 2022
Towards practical privacy-preserving decision tree training and evaluation in the cloud
L. Liu, R. Chen, X. Liu, J. Su, L. Qiao
Published: 2020
Privacy-preserving collaborative tree-based model learning
S. Chatel, A. Pyrgelis, J. R. Troncoso-Pastoriza, J.-P. Hubaux
Published: 2021
Oblivious multi-party machine learning on trusted processors
O. Ohrimenko, F. Schuster, C. Fournet, A. Mehta, S. Nowozin, K. Vaswani, M. Costa
Published: 2016
Secure collaborative training and inference for xgboost
A. Law, C. Leung, R. Poddar, R. A. Popa, C. Shi, O. Sima, C. Yu, X. Zhang, W. Zheng
Published: 2020
Enclavetree: Privacy-preserving data stream training and inference using tee
Q. Wang, S. Cui, L. Zhou, O. Wu, Y. Zhu, G. Russello
Published: 2022
Intel sgx explained
Victor Costan, Srinivas Devadas
Published: 2016
GForce: GPU-Friendly oblivious and rapid neural network inference
L. K. Ng, S. S. Chow
Published: 2021
CryptGPU: Fast Privacy-Preserving Machine Learning on the GPU
Sijun Tan, Brian Knott, Yuan Tian, David J. Wu
Published: 4.22.2021
Piranha: A GPU platform for secure computation
J. Watson, S. Wagh, R. A. Popa
Published: 2022
Orca: Fss-based secure training and inference with gpus
N. Jawalkar, K. Gupta, A. Basu, N. Chandran, D. Gupta, R. Sharma
Published: 2023
Cuda c++ programming guide
CUDA
Published: 2022
How to generate and exchange secrets
A. C.-C. Yao
Published: 1986
Aby3: A mixed protocol framework for machine learning
Payman Mohassel, Peter Rindal
Published: 2018
High-throughput semi-honest secure three-party computation with an honest majority
T. Araki, J. Furukawa, Y. Lindell, A. Nof, K. Ohara
Published: 2016
F: Honest-majority maliciously secure framework for private deep learning
S. Wagh, S. Tople, F. Benhamouda, E. Kushilevitz, P. Mittal, T. Rabin
Published: 2021
Modular and efficient private decision tree evaluation
A. Kiss, M. Naderpour, J. Liu, N. Asokan, T. Schneider
Published: 2019
C4. 5: programs for machine learning
J. R. Quinlan
Published: 2014
Memory-based side-channel attacks and countermeasure
Z. H. Jiang
Published: 2019
Accel-sim: An extensible simulation framework for validated gpu modeling
M. Khairy, Z. Shen, T. M. Aamodt, T. G. Rogers
Published: 2020
Rabbit: Efficient comparison for secure multi-party computation
E. Makri, D. Rotaru, F. Vercauteren, S. Wagh
Published: 2021
Scaling oram for secure computation
J. Doerner, A. Shelat
Published: 2017
Visor:{Privacy-Preserving} video analytics as a cloud service
Rishabh Poddar, Ganesh Ananthanarayanan, Srinath Setty, Stavros Volos, Raluca Ada Popa
Published: 2020
Uc secure private branching program and decision tree evaluation
K. Ji, B. Zhang, T. Lu, L. Li, K. Ren
Published: 2022
How to play any mental game, or a completeness theorem for protocols with honest majority
O. Goldreich, S. Micali, A. Wigderson
Published: 2019
Cryptflow: Secure tensorflow inference
N. Kumar, M. Rathee, N. Chandran, D. Gupta, A. Rastogi, R. Sharma
Published: 2020
Efficient and private scoring of decision trees, support vector machines and logistic regression models based on precomputation
M. De Cock, R. Dowsley, C. Horst, R. Katti, A. C. Nascimento, W.-S. Poon, S. Truex
Published: 2017
Scalable private decision tree evaluation with sublinear communication
J. Bai, X. Song, S. Cui, E.-C. Chang, G. Russello
Published: 2022
Share