A framework for partially encrypted machine learning using functional encryption.
problem Performing machine learning on encrypted data without revealing sensitive information.
method Combining adversarial training and functional encryption to efficiently compute quadratic functions and prevent feature leakage.
result The proposed framework maintains high model accuracy while significantly improving data privacy.
Improved CNN accuracy for encrypted data using approximate activation functions.
problem Low accuracy in classifying encrypted data using homomorphic encryption.
method Used a fourth-order polynomial approximation of the Swish activation function with batch normalization for homomorphic encryption.
result Achieved 99.22% accuracy on MNIST and 80.48% on CIFAR-10, improving by 0.04% and 4.11% respectively.
Cryptotree enables accurate predictions on encrypted data using Random Forests.
problem Applying machine learning to private data while preserving confidentiality.
method Adapting Neural RF to CKKS scheme for HE operations on encrypted data.
result Cryptotree achieves better prediction results on encrypted data than regular RF.
Topological data analysis classifies encrypted bits with success.
problem Classifying encrypted data with traditional machine learning methods.
method Persistent homology for generating topological features, machine learning pipeline.
result Successfully classifies encrypted data, outperforming classical models.
Information that is stored in an encrypted format is, by definition, usually not amenable to statistical analysis or machine learning methods. In this paper we present detailed analysis of coordinate and accelerated gradient descent algorithms which are capable of fitting least squares and penalised ridge regression mo…
A simple encoder and complex decoder for secure image encryption and decryption.
problem Secure and efficient image encryption and decryption.
method Uses a shallow encoder neural network for encryption and a deep decoder for decryption, trained independently.
result Decrypted images are nearly identical to the original, demonstrating the effectiveness of the framework.
A method for data encryption makes data look identical to humans but misleading to machine learning.
problem Data leakage in data sharing for medical purposes.
method Proposes a method inspired by adversarial attacks for data encryption.
result Encrypted data look identical to humans but misleading to machine learning methods.
Securely share encrypted data for machine learning training.
problem Securely sharing encrypted data for machine learning training without revealing the data.
method Rotation based method using flow model.
result Theoretical justification and demonstration of effectiveness in different scenarios.
Deep learning attacks chaos-based image encryption.
problem Chaos-based image encryption vulnerability.
method Project encrypted images to low-dimensional space, use deconvolutional generator to regenerate images.
result Proposes a key-independent, end-to-end trained method to attack chaos-based encryption.
Machine learning methods are widely used for a variety of prediction problems. \emph{Prediction as a service} is a paradigm in which service providers with technological expertise and computational resources may perform predictions for clients. However, data privacy severely restricts the applicability of such services…
Glyph speeds up DNN training on encrypted data by 99%.
problem Training deep neural networks on encrypted data efficiently.
method Switches between TFHE and BGV cryptosystems for activations and MAC operations, applies transfer learning.
result Reduces training latency by 99% on various encrypted datasets.
Paper proposes DPN for encrypted speech recognition, maintaining privacy and security.
problem Privacy and security issues in cloud-based speech recognition.
method Deep Polynomial Network (DPN) for encrypted speech, cloud-local joint decoding.
result DPN can make frame-level predictions over encrypted speech and return them in encrypted form.
We present SEALion: an extensible framework for privacy-preserving machine learning with homomorphic encryption. It allows one to learn deep neural networks that can be seamlessly utilized for prediction on encrypted data. The framework consists of two layers: the first is built upon TensorFlow and SEAL and exposes sta…
Recent advances in cryptography promise to enable secure statistical computation on encrypted data, whereby a limited set of operations can be carried out without the need to first decrypt. We review these homomorphic encryption schemes in a manner accessible to statisticians and machine learners, focusing on pertinent…
End-to-end encrypted neural network improves privacy and compression in federated learning.
problem Privacy and bandwidth issues in gradient updates transmission in federated learning.
method Proposes an end-to-end encrypted neural network to encode and decode gradient updates.
result Effective privacy protection and data compression with minimal accuracy loss.
We present two new statistical machine learning methods designed to learn on fully homomorphic encrypted (FHE) data. The introduction of FHE schemes following Gentry (2009) opens up the prospect of privacy preserving statistical machine learning analysis and modelling of encrypted data without compromising security con…
InstaHide encrypts images for privacy in distributed learning.
problem Private training of deep neural networks on distributed data.
method Encryption of training images with one-time secret keys and pixel-wise masks.
result Preserves privacy with minor accuracy loss, secure against known attacks.
Post-Quantum Secure Federated DeFi for Inclusive Banking
problem Financial systems and DeFi ecosystems are vulnerable to quantum computing threats.
method Post-Quantum Secure Federated DeFi framework using lattice-based FHE.
result End-to-end homomorphic computation enables inter-bank collaboration.
Securely analyzes survival data across multiple institutions without revealing individual patient records.
problem Privacy concerns in federated survival analysis of health data.
method Multiparty homomorphic encryption for approximate floating-point computation and encrypted aggregation.
result Privacy-preserving federated Kaplan--Meier survival analysis with high fidelity and predictable overhead.
Paper proposes privacy-preserving learning for images, making them imperceptible to humans but recognizable by machines.
problem Conflict between developing AI systems and protecting sensitive training data.
method Encryption strategies (random shuffling and sub-patch mixing) followed by minimal adaptation to vision transformer.
result Achieves comparable accuracy to competitive methods while ensuring human-imperceptibility of encrypted images.
Paper proposes efficient privacy-preserving matrix encryption for secure collaborative learning against malicious adversaries.
problem Secure collaborative learning of sensitive data across different agencies is challenging with malicious adversaries.
method The paper applies matrix encryption to secure data against chosen plaintext attack, known plaintext attack, and collusion attack, achieving local differential privacy and high computation efficiency.
result The proposed schemes are computationally efficient and secure against malicious adversaries compared to existing techniques.
Paper addresses federated contextual bandits with encryption.
problem Building contextual bandits with vertically distributed data.
method Design of O3M encryption scheme for LinUCB and LinTS.
result Proposed protocols achieve good performance and privacy.
New defense method inspired by encryption improves visual classification accuracy.
problem Conventional defenses reduce accuracy and are defeated by obfuscated gradients.
method Block-wise pixel shuffling with secret key for training and test images.
result Achieves high accuracy (91.55%) on clean images and (89.66%) on adversarial examples.
Modular FHE enables accurate Gaussian process predictions without data exposure.
problem Privacy issues in machine learning with multiple data sources.
method Modular approach to apply FHE only to sensitive parts of a workflow.
result First effectively encrypted Gaussian process model.
TextHide secures language understanding tasks by adding minimal encryption.
problem Mitigating privacy risks in natural language understanding tasks.
method TextHide adds a simple encryption step to prevent data recovery.
result TextHide reduces accuracy loss by only 1.9% on GLUE benchmark.
Securely trains fair models using homomorphic encryption.
problem Protecting sensitive features while testing model fairness.
method Fully homomorphic encryption for training and testing.
result Practical application to adult income data set.
AI tested on 10 math questions from research.
problem Assessing AI's ability to solve research-level math problems.
method Shared 10 math questions not previously publicly available.
result Answers to questions are known to authors but encrypted.
Fully Homomorphic Encryption (FHE) refers to a set of encryption schemes that allow computations to be applied directly on encrypted data without requiring a secret key. This enables novel application scenarios where a client can safely offload storage and computation to a third-party cloud provider without having to t…
Secure sum outperforms homomorphic encryption in collaborative deep learning.
problem Training deep learning models on private data from multiple parties without revealing the data.
method Used a secure sum protocol in conjunction with default secure channels.
result Secure sum protocol provides superior properties in terms of collusion-resistance and runtime.
Paper proposes a method to encrypt faces while maintaining visual similarity.
problem Protecting personal data from unauthorized face recognition.
method Targeted identity-protection iterative method (TIP-IM) to generate adversarial identity masks.
result TIP-IM provides 95%+ protection success rate against face recognition models.
Paper proposes a faster federated learning method for logistic regression.
problem Federated learning for logistic regression with disjoint feature sets.
method Quasi-Newton method under additively homomorphic encryption.
result Significant reduction in communication rounds with minimal additional cost.
Leveled Homomorphic Encryption (LHE) offers a potential solution that could allow sectors with sensitive data to utilize the cloud and securely deploy their models for remote inference with Deep Neural Networks (DNN). However, this application faces several obstacles due to the limitations of LHE. One of the main probl…
RENNs protect input privacy by rotating d-ary features.
problem Protecting input privacy from intermediate-layer features.
method Rotation-equivariant neural networks using d-ary vectors/tensors.
result RENNs effectively hide input information without degrading output accuracy.
Efficiently preserves privacy in logistic regression for IoT data.
problem Balancing data privacy and utility in collaborative learning.
method Matrix encryption approach for secure multi-party computation.
result Proposes a privacy-preserving logistic regression model with fast convergence.
A new bootstrapping method reduces key sizes and runtime in FHE.
problem Large plaintext evaluation in FHE increases bootstrapping complexity.
method New polynomial vector representation and monic monomial permutation matrices.
result Polynomial factor improvement in key size and constant factor in runtime.
Paper introduces privacy-preserving deep-learning service.
problem Privacy loss in deep-learning-as-a-service.
method Homomorphic Encryption tailored for CNNs.
result Effectiveness of proposed privacy-preserving architecture.
Secure blockchain architectures protect data privacy in distributed learning.
problem Data privacy and trust in distributed learning across organizations.
method Adequate encryption and blockchain mechanisms ensure data privacy and trust in iterative learning.
result Secure sharing of a learned model among coalition members without revealing data.
Deep-Lock secures DNN models with secret keys.
problem Preventing unauthorized usage of DNN models.
method Uses S-Boxes and key scheduling to encrypt DNN parameters.
result Ensures correct functioning only with the correct secret key.
This paper proposes a new weight representation scheme for efficient model compression and performance enhancement.
problem Challenges in achieving performance enhancement on devices due to irregular sparse matrix representations.
method Fine-grained and unstructured pruning method combined with structured weight encryption.
result Achieved high compression ratios and performance on various deep learning models.
Recent work has explored how to train machine learning models which do not discriminate against any subgroup of the population as determined by sensitive attributes such as gender or race. To avoid disparate treatment, sensitive attributes should not be considered. On the other hand, in order to avoid disparate impact,…
The goal of homomorphic encryption is to encrypt data such that another party can operate on it without being explicitly exposed to the content of the original data. We introduce an idea for a privacy-preserving transformation on natural language data, inspired by homomorphic encryption. Our primary tool is {\em obfusc…
Paper classifies multiple video sources in encrypted tunnels using NLP-inspired features.
problem Traffic classification in encrypted video streams.
method Deep learning with a novel NLP-inspired feature for multi-label classification.
result The method achieves high performance on binary and multilabel classification tasks.
SharedMF uses secret sharing to protect privacy in distributed recommendation systems.
problem Privacy issues in multi-source data for recommendation systems.
method Federated learning and secret sharing technology.
result SharedMF achieves faster execution speed and better data adaptability compared to homomorphic encryption methods.
Secure SMMD enables data privacy in federated learning.
problem Data privacy in federated learning.
method Homomorphic encryption-based Secure Maximum Mean Discrepancy (SMMD).
result Secure SMMD avoids data leakage and enables effective knowledge transfer.
FleXOR trains fractional quantization for neural networks, improving accuracy and size.
problem Quantization limits to integer bits restricts compression and accuracy.
method Encryption algorithm with XOR gates for fractional bits during inference.
result FleXOR achieves high accuracy with fractional sub-1-bit weights.
SecureGBM securely trains GBM models across two parties without revealing data.
problem Securely training GBM models across parties with encrypted data.
method Extending LightGBM with semi-homomorphic encryption and stochastic approximation.
result SecureGBM achieves AUC within 3% of non-secure LightGBM, maintaining performance.
Common privacy enhancing technologies fail to effectively hide certain statistical aspects of encrypted traffic, namely individual packets length, packets direction and, packets timing. Recent researches have shown that using such attributes, an adversary is able to extract various information from the encrypted traffi…
The paper proposes a privacy-preserving algorithm for decentralized learning using public-key cryptography.
problem Preserving data privacy in decentralized learning.
method Public-key cryptography and anonymization techniques.
result A scheme that provides anonymity in decentralized learning with theoretical guarantees.