Privacy Preserving Inference for Deep Neural Networks: Optimizing Homomorphic Encryption for Efficient and Secure Classification

Muhammad Aftab Akram, Fawad Khan, Shahzaib Tahir, Asif Iqbal, Syed Aziz Shah, Abdullah Baz

Research output: Contribution to journalArticlepeer-review

10 Downloads (Pure)

Abstract

The application of machine learning in healthcare, financial, social media, and other sensitive sectors not only involves high accuracy but privacy as well. Due to the emergence of the Cloud as a computation and one-to-many access paradigm; training and classification/inference tasks have been outsourced to Cloud. However, its usage is limited due to legal and ethical constraints regarding privacy. In this work, we propose a privacy-preserving neural networks-based classification model based on Homomorphic Encryption (HE) where the user can send an encrypted instance to the cloud and receive an encrypted inference from it to preserve the user’s query privacy. In contrast to existing works, we demonstrate the realistic limitations of HE for privacy-preserving machine learning by changing its parameters for enhanced security and accuracy. We showcase scenarios where the choice of HE parameters impedes accurate classification and present an optimized setting for achieving reliable classification. We present several results to demonstrate its effectiveness using MNIST dataset with highly improved inference time for a query as compared to the state of the art.
Original languageEnglish
Pages (from-to)15684-15695
Number of pages12
JournalIEEE Access
Volume12
Early online date22 Jan 2024
DOIs
Publication statusPublished - 1 Feb 2024

Bibliographical note

2024 The Authors. This work is licensed under a Creative Commons Attribution 4.0 License.
For more information, see https://creativecommons.org/licenses/by/4.0/

Funder

10.13039/501100006701-Deanship for Research & Innovation, Ministry of Education in Saudi Arabia (Grant Number: IFP22UQU4260426DSR203)

Keywords

  • Convolutional neural network
  • homomorphic encryption
  • activation function
  • cloud server
  • approximation techniques
  • security and privacy
  • encrypted computations

Fingerprint

Dive into the research topics of 'Privacy Preserving Inference for Deep Neural Networks: Optimizing Homomorphic Encryption for Efficient and Secure Classification'. Together they form a unique fingerprint.

Cite this