In today's machine learning landscape, fine-tuning pretrained transformer
models has emerged as an essential technique, particularly in scenarios where
access to task-aligned training data is limited. However, challenges surface
when data sharing encounters obstacles due to stringent privacy regulations or
user apprehension regarding personal information disclosure. Earlier works
based on secure multiparty computation (SMC) and fully homomorphic encryption
(FHE) for privacy-preserving machine learning (PPML) focused more on
privacy-preserving inference than privacy-preserving training. In response, we
introduce BlindTuner, a privacy-preserving fine-tuning system that enables
transformer training exclusively on homomorphically encrypted data for image
classification. Our extensive experimentation validates BlindTuner's
effectiveness by demonstrating comparable accuracy to non-encrypted models.
Notably, our findings highlight a substantial speed enhancement of 1.5x to 600x
over previous work in this domain.
外部データセット
MNIST
CIFAR-10
DermaMNIST
Face Mask Detection
参考文献
ACM Transactions on Computation Theory (TOCT)
(leveled) fully homomorphic encryption without bootstrapping
Z. Brakerski, C. Gentry, V. Vaikuntanathan
Published: 2014
Springer
Bootstrapping for approximate homomorphic encryption
J. H. Cheon, K. Han, A. Kim, M. Kim, Y. Song
Published: 2018
Advances in Cryptology – ASIACRYPT 2017
Homomorphic encryption for arithmetic of approximate numbers
Jung Hee Cheon, Andrey Kim, Miran Kim, Yongsoo Song