SecONNds让图像识别模型在不信任服务器上安全推理,速度提升17倍。
SecONNds: Secure Outsourced Neural Network Inference on ImageNet
- 用新型加密协议加速非线性计算,降低通信开销。
- 37位量化SqueezeNet在GPU上推理仅需2.8秒,总通信420MiB。
- 适合资源受限环境的隐私保护应用,代码开源可用。
外包神经网络推理的普及带来了重大隐私挑战,因敏感用户数据需在不可信远程服务器上处理。现有安全推理框架存在高计算开销和通信成本,难以实际部署。我们提出SecONNds,一种专为ImageNet规模卷积神经网络优化的非侵入式安全推理框架。其集成新型全布尔Goldreich-Micali-Wigderson(GMW)协议,解决姚氏百万富翁问题,利用预生成的Beaver比特三元组(来自静默随机不经意传输)。该协议在线阶段非线性运算速度比现有方案快17倍,同时降低通信开销。为进一步提升性能,SecONNds采用数论变换(NTT)预处理,并借助GPU加速同态加密操作,使线性运算在CPU上提速1.6倍、在GPU上提速2.2倍。我们还提出SecONNds-P,一种比特精确变体,确保安全计算中结果可验证且与明文计算完全一致。在37位量化SqueezeNet模型上评估,SecONNds在GPU上端到端推理时间为2.8秒,CPU为3.6秒,总通信量仅为420 MiB。其高效性与低计算负载使其适用于资源受限环境中的隐私敏感应用。代码已开源:https://github.com/shashankballa/SecONNds。
原文摘要 · Abstract (English)
The widespread adoption of outsourced neural network inference presents significant privacy challenges, as sensitive user data is processed on untrusted remote servers. Secure inference offers a privacy-preserving solution, but existing frameworks suffer from high computational overhead and communication costs, rendering them impractical for real-world deployment. We introduce SecONNds, a non-intrusive secure inference framework optimized for large ImageNet-scale Convolutional Neural Networks. SecONNds integrates a novel fully Boolean Goldreich-Micali-Wigderson (GMW) protocol for secure comparison -- addressing Yao's millionaires' problem -- using preprocessed Beaver's bit triples generated from Silent Random Oblivious Transfer. Our novel protocol achieves an online speedup of 17$\times$ in nonlinear operations compared to state-of-the-art solutions while reducing communication overhead. To further enhance performance, SecONNds employs Number Theoretic Transform (NTT) preprocessing and leverages GPU acceleration for homomorphic encryption operations, resulting in speedups of 1.6$\times$ on CPU and 2.2$\times$ on GPU for linear operations. We also present SecONNds-P, a bit-exact variant that ensures verifiable full-precision results in secure computation, matching the results of plaintext computations. Evaluated on a 37-bit quantized SqueezeNet model, SecONNds achieves an end-to-end inference time of 2.8 s on GPU and 3.6 s on CPU, with a total communication of just 420 MiB. SecONNds' efficiency and reduced computational load make it well-suited for deploying privacy-sensitive applications in resource-constrained environments. SecONNds is open source and can be accessed from: https://github.com/shashankballa/SecONNds.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。