arXiv:2507.10494cs.LGcs.CR2025-07被引 2

用函数秘密共享增强分片学习,提升隐私保护并降低通信开销。

Split Happens: Combating Advanced Threats with Split Learning and Function Secret Sharing

  • 结合分片学习与函数秘密共享,实现更安全的数据隔离。
  • 在两个CNN模型上实验,训练时间与通信成本显著降低。
  • 适合关注联邦学习隐私安全的研究者与开发者。

分片学习(Split Learning, SL)将模型分为两部分以保护客户端数据并优化机器学习流程。尽管前景广阔,但现有方法易受各类攻击影响,引发对数据隐私保护效果的担忧。近期研究通过函数秘密共享(Function Secret Sharing, FSS)提升了安全性:服务器仅获得函数的分片,并在公开输入上操作,该输入被随机掩码隐藏。然而,这些方案未能应对日益增多的分片学习攻击。本文提出SplitHappens,将FSS与U型分片学习相结合,不仅继承了分片学习降低通信和计算成本的优势,还提供了更高安全等级——客户端可完全隐藏训练标签,无需向服务器共享。该方法扩展了原有安全分析,覆盖现代模型逆向攻击与标签推断攻击等新威胁。我们在两种卷积神经网络上于多个数据集上进行了实验,结果表明,相较于纯FSS方案,本方法显著减少训练时间和通信开销,同时保持原有准确率。

原文摘要 · Abstract (English)

Split Learning (SL) -- splits a model into two distinct parts to help protect client data while enhancing Machine Learning (ML) processes. Though promising, SL has proven vulnerable to different attacks, thus raising concerns about how effective it may be in terms of data privacy. Recent works have shown promising results for securing SL through the use of a novel paradigm, named Function Secret Sharing (FSS), in which servers obtain shares of a function they compute and operate on a public input hidden with a random mask. However, these works fall short in addressing the rising number of attacks which exist on SL. In SplitHappens, we expand the combination of FSS and SL to U-shaped SL. Similarly to other works, we are able to make use of the benefits of SL by reducing the communication and computational costs of FSS. However, a U-shaped SL provides a higher security guarantee than previous works, allowing a client to keep the labels of the training data secret, without having to share them with the server. Through this, we are able to generalize the security analysis of previous works and expand it to different attack vectors, such as modern model inversion attacks as well as label inference attacks. We tested our approach for two different convolutional neural networks on different datasets. These experiments show the effectiveness of our approach in reducing the training time as well as the communication costs when compared to simply using FSS while matching prior accuracy.

分片学习函数秘密共享隐私保护联邦学习

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。