These labels were automatically added by AI and may be inaccurate. For details, see About Literature Database.
Abstract
The popularity of Machine Learning (ML) makes the privacy of sensitive data
more imperative than ever. Collaborative learning techniques like Split
Learning (SL) aim to protect client data while enhancing ML processes. Though
promising, SL has been proved to be vulnerable to a plethora of attacks, thus
raising concerns about its effectiveness on data privacy. In this work, we
introduce a hybrid approach combining SL and Function Secret Sharing (FSS) to
ensure client data privacy. The client adds a random mask to the activation map
before sending it to the servers. The servers cannot access the original
function but instead work with shares generated using FSS. Consequently, during
both forward and backward propagation, the servers cannot reconstruct the
client's raw data from the activation map. Furthermore, through visual
invertibility, we demonstrate that the server is incapable of reconstructing
the raw image data from the activation map when using FSS. It enhances privacy
by reducing privacy leakage compared to other SL-based approaches where the
server can access client input information. Our approach also ensures security
against feature space hijacking attack, protecting sensitive information from
potential manipulation. Our protocols yield promising results, reducing
communication overhead by over 2x and training time by over 7x compared to the
same model with FSS, without any SL. Also, we show that our approach achieves
>96% accuracy and remains equivalent to the plaintext models.