AIセキュリティポータル K Program
Bicoptor 2.0: Addressing Challenges in Probabilistic Truncation for Enhanced Privacy-Preserving Machine Learning
Share
Abstract
This paper primarily focuses on analyzing the problems and proposing solutions for the probabilistic truncation protocol in existing PPML works from the perspectives of accuracy and efficiency. In terms of accuracy, we reveal that precision selections recommended in some of the existing works are incorrect. We conduct a thorough analysis of their open-source code and find that their errors were mainly due to simplified implementation, more specifically, fixed numbers are used instead of random numbers in probabilistic truncation protocols. Based on this, we provide a detailed theoretical analysis to validate our views. We propose a solution and a precision selection guideline for future works. Regarding efficiency, we identify limitations in the state-of-the-art comparison protocol, Bicoptor's (S\&P 2023) DReLU protocol, which relies on the probabilistic truncation protocol and is heavily constrained by the security parameter to avoid errors, significantly impacting the protocol's performance. To address these challenges, we introduce the first non-interactive deterministic truncation protocol, replacing the original probabilistic truncation protocol. Additionally, we design a non-interactive modulo switch protocol to enhance the protocol's security. Finally, we provide a guideline to reduce computational and communication overhead by using only a portion of the bits of the input, i.e., the key bits, for DReLU operations based on different model parameters. With the help of key bits, the performance of our DReLU protocol is further improved. We evaluate the performance of our protocols on three GPU servers, and achieve a 10x improvement in DReLU protocol, and a 6x improvement in the ReLU protocol over the state-of-the-art work Piranha-Falcon (USENIX Sec 22). Overall, the performance of our end-to-end (E2E) privacy-preserving machine learning (PPML) inference is improved by 3-4 times.
Aby3: A mixed protocol framework for machine learning
Payman Mohassel, Peter Rindal
Published: 2018
Cryptflow2: Practical 2-party secure inference
Deevashwer Rathee, Mayank Rathee, Nishant Kumar, Nishanth Chandran, Divya Gupta, Aseem Rastogi, Rahul Sharma
Published: 2020
Cheetah: Lean and fast secure {Two-Party} deep neural network inference
Z. Huang, W.-j. Lu, C. Hong, J. Ding
Published: 2022
Pika: Secure computation using function secret sharing over rings
S. Wagh
Published: 2022
Delphi: A cryptographic inference system for neural networks
Pratyush Mishra, Ryan Lehmkuhl, Akshayaram Srinivasan, Wenting Zheng, Raluca Ada Popa
Published: 2020
ARIANN: Low-Interaction Privacy-Preserving Deep Learning via Function Secret Sharing
Théo Ryffel, Pierre Tholoniat, David Pointcheval, Francis Bach
Published: 2020.6.8
F: Honest-majority maliciously secure framework for private deep learning
S. Wagh, S. Tople, F. Benhamouda, E. Kushilevitz, P. Mittal, T. Rabin
Published: 2021
Flash: Fast and robust framework for privacy-preserving machine learning
Megha Byali, Harsh Chaudhari, Arpita Patra, Ajith Suresh
Published: 2020
BLAZE: Blazing Fast Privacy-Preserving Machine Learning
Arpita Patra, Ajith Suresh
Published: 2020.5.19
Trident: Efficient 4pc framework for privacy preserving machine learning
H. Chaudhari, R. Rachuri, A. Suresh
Published: 2020
Piranha: A GPU platform for secure computation
J. Watson, S. Wagh, R. A. Popa
Published: 2022
CryptGPU: Fast Privacy-Preserving Machine Learning on the GPU
Sijun Tan, Brian Knott, Yuan Tian, David J. Wu
Published: 2021.4.22
Improved primitives for mpc over mixed arithmetic-binary circuits
D. Escudero, S. Ghosh, M. Keller, R. Rachuri, P. Scholl
Published: 2020
Bicoptor: Two-round Secure Three-party Non-linear Computation without Preprocessing for Privacy-preserving Machine Learning
Lijing Zhou, Ziyu Wang, Hongrui Cui, Qingrui Song, Yu Yu
Published: 2022.10.5
Gazelle: A Low Latency Framework for Secure Neural Network Inference
Chiraag Juvekar, Vinod Vaikuntanathan, Anantha Chandrakasan
Published: 2018.1.17
Chameleon: A hybrid secure computation framework for machine learning applications
M. S. Riazi, C. Weinert, O. Tkachenko, E. M. Songhori, T. Schneider, F. Koushanfar
Published: 2018
Aby2.0: Improved mixed-protocol secure two-party computation
A. Patra, T. Schneider, A. Suresh, H. Yalame
Published: 2021
Optimizing privacy-preserving outsourced convolutional neural network predictions
M. Li, S. S. M. Chow, S. Hu, Y. Yan, C. Shen, Q. Wang
Published: 2022
Securenn: 3-party secure computation for neural network training
Sameer Wagh, Divya Gupta, Nishanth Chandran
Published: 2019
ASTRA: High Throughput 3PC over Rings with Application to Secure Prediction
Harsh Chaudhari, Ashish Choudhury, Arpita Patra, Ajith Suresh
Published: 2019.12.5
Cryptflow: Secure tensorflow inference
N. Kumar, M. Rathee, N. Chandran, D. Gupta, A. Rastogi, R. Sharma
Published: 2020
Fantastic four: Honest-majority four-party secure computation with malicious security
A. P. K. Dalskov, D. Escudero, M. Keller
Published: 2021
SWIFT: super-fast and robust privacy-preserving machine learning
N. Koti, M. Pancholi, A. Patra, A. Suresh
Published: 2021
Rabbit: Efficient comparison for secure multi-party computation
E. Makri, D. Rotaru, F. Vercauteren, S. Wagh
Published: 2021
Towards hardware implementation of neural network-based communication algorithms
F. A. Aoudia, J. Hoydis
Published: 2019
Efficient multiparty protocols using circuit randomization
D. Beaver
Published: 1992
Share