AIセキュリティポータル K Program
OPAF: Optimized Secure Two-Party Computation Protocols for Nonlinear Activation Functions in Recurrent Neural Network
Share
Abstract
Deep neural network (DNN) typically involves convolutions, pooling, and activation function. Due to the growing concern about privacy, privacy-preserving DNN becomes a hot research topic. Generally, the convolution and pooling operations can be supported by additive homomorphic and secure comparison, but the secure implementation of activation functions is not so straightforward for the requirements of accuracy and efficiency, especially for the non-linear ones such as exponential, sigmoid, and tanh functions. This paper pays a special attention to the implementation of such non-linear functions in semi-honest model with two-party settings, for which SIRNN is the current state-of-the-art. Different from previous works, we proposed improved implementations for these functions by using their intrinsic features as well as worthy tiny tricks. At first, we propose a novel and efficient protocol for exponential function by using a divide-and-conquer strategy with most of the computations executed locally. Exponential protocol is widely used in machine learning tasks such as Poisson regression, and is also a key component of sigmoid and tanh functions. Next, we take advantage of the symmetry of sigmoid and Tanh, and fine-tune the inputs to reduce the 2PC building blocks, which helps to save overhead and improve performance. As a result, we implement these functions with fewer fundamental building blocks. The comprehensive evaluations show that our protocols achieve state-of-the-art precision while reducing run-time by approximately 57%, 44%, and 42% for exponential (with only negative inputs), sigmoid, and Tanh functions, respectively.
The EU general data protection regulation (GDPR)
Paul Voigt, Axel Von dem Bussche
Published: 2017
How to play any mental game, or a completeness theorem for protocols with honest majority
O. Goldreich, S. Micali, A. Wigderson
Published: 2019
Protocols for secure computations
A. C. Yao
Published: 1982
Oblivious neural network predictions via minionn transformations
J. Liu, M. Juuti, Y. Lu, N. Asokan
Published: 2017
Securenlp: A system for multi-party privacy-preserving natural language processing
Q. Feng, D. He, Z. Liu, H. Wang, K.-K. R. Choo
Published: 2020
Cryptflow2: Practical 2-party secure inference
Deevashwer Rathee, Mayank Rathee, Nishant Kumar, Nishanth Chandran, Divya Gupta, Aseem Rastogi, Rahul Sharma
Published: 2020
Delphi: A cryptographic inference system for neural networks
Pratyush Mishra, Ryan Lehmkuhl, Akshayaram Srinivasan, Wenting Zheng, Raluca Ada Popa
Published: 2020
Aby2.0: Improved mixed-protocol secure two-party computation
A. Patra, T. Schneider, A. Suresh, H. Yalame
Published: 2021
SIRNN: A Math Library for Secure RNN Inference
Deevashwer Rathee, Mayank Rathee, Rahul Kranti Kiran Goli, Divya Gupta, Rahul Sharma, Nishanth Chandran, Aseem Rastogi
Published: 2021.5.10
Cheetah: Lean and fast secure {Two-Party} deep neural network inference
Z. Huang, W.-j. Lu, C. Hong, J. Ding
Published: 2022
Llama: A low latency math library for secure inference
K. Gupta, D. Kumaraswamy, N. Chandran, D. Gupta
Published: 2022
Deep residual learning for image recognition
Kaiming He, Xiangyu Zhang, Shaoqing Ren, Jian Sun
Published: 2016
Densely connected convolutional networks
G. Huang, Z. Liu, L. Van Der Maaten, K. Q. Weinberger
Published: 2017
Mobilenetv2: Inverted residuals and linear bottlenecks
M. Sandler, A. Howard, M. Zhu, A. Zhmoginov, L.-C. Chen
Published: 2018
Mp-spdz: A versatile framework for multi-party computation
Marcel Keller
Published: 2020
How to play any mental game
S. Micali, O. Goldreich, A. Wigderson
Published: 1987
Deepsecure: Scalable provably-secure deep learning
B. D. Rouhani, M. S. Riazi, F. Koushanfar
Published: 2018
Nfgen: Automatic non-linear function evaluation code generator for general-purpose mpc platforms
X. Fan, K. Chen, G. Wang, M. Zhuang, Y. Li, W. Xu
Aby-a framework for efficient mixed-protocol secure two-party computation
D. Demmler, T. Schneider, M. Zohner
Published: 2015
How to generate and exchange secrets
A. C.-C. Yao
Published: 1986
F: Honest-majority maliciously secure framework for private deep learning
S. Wagh, S. Tople, F. Benhamouda, E. Kushilevitz, P. Mittal, T. Rabin
Published: 2021
Applications of division by convergence
R. E. Goldschmidt
Published: 1964
Efficient initial approximation for multiplicative division and square root by a multiplication with operand modification
M. Ito, N. Takagi, S. Yajima
Published: 1997
Deep learning
I. Goodfellow, Y. Bengio, A. Courville
Published: 2016
Pushing the communication barrier in secure computation using lookup tables
G. Dessouky, F. Koushanfar, A.-R. Sadeghi, T. Schneider, S. Zeitouni, M. Zohner
Published: 2017
Intel math kernel library
E. Wang, Q. Zhang, B. Shen, G. Zhang, X. Lu, Q. Wu, Y. Wang
Published: 2014
Security and composition of multiparty cryptographic protocols
R. Canetti
Published: 2000
How to simulate it–a tutorial on the simulation proof technique
Yehuda Lindell
Published: 2017
Efficient multiparty protocols using circuit randomization
D. Beaver
Published: 1992
Str: Secure computation on additive shares using the share-transform-reveal strategy
Z. Xia, Q. Gu, W. Zhou, L. Xiong, J. Weng, N. Xiong
Published: 2021
Compiling kb-sized machine learning models to tiny iot devices
S. Gopinath, N. Ghanathe, V. Seshadri, R. Sharma
Published: 2019
Fastgrnn: A fast, accurate, stable and tiny kilobyte sized gated recurrent neural network
A. Kusupati, M. Singh, K. Bhatia, A. Kumar, P. Jain, M. Varma
Published: 2018
Share