arXiv:2512.17398cs.LGcs.CR2025-12

通过共享ReLU计算减少隐私推理中的计算开销,提升效率。

DeepShare: Sharing ReLU Across Channels and Layers for Efficient Private Inference

  • 用原型通道共享DReLU,其余通道复制其结果
  • 在ResNet类网络中大幅降低DReLU操作次数
  • 可解决扩展XOR问题,适合高效隐私推理场景

隐私推理(PI)利用密码学原语实现保护用户数据的机器学习推理。在此场景中,模型所有者在不泄露模型信息且不获取客户端数据的前提下完成推理。研究发现,PI的主要计算瓶颈在于门控操作(即ReLU)的计算,因此大量工作致力于减少网络中的ReLU数量。本文聚焦于非线性步骤函数DReLU,提出一个新激活模块:仅在部分通道(原型通道)执行DReLU,其余通道(复制通道)将其神经元的DReLU结果从对应原型通道复制而来。该方法进一步扩展至跨层共享。理论分析表明,该框架仅用一个非线性与两个神经元即可解决扩展版XOR问题,传统及部分隐私推理方法无法实现。实验在多个分类任务上达到新SOTA,图像分割任务也取得最优性能。

原文摘要 · Abstract (English)

Private Inference (PI) uses cryptographic primitives to perform privacy preserving machine learning. In this setting, the owner of the network runs inference on the data of the client without learning anything about the data and without revealing any information about the model. It has been observed that a major computational bottleneck of PI is the calculation of the gate (i.e., ReLU), so a considerable amount of effort have been devoted to reducing the number of ReLUs in a given network. We focus on the DReLU, which is the non-linear step function of the ReLU and show that one DReLU can serve many ReLU operations. We suggest a new activation module where the DReLU operation is only performed on a subset of the channels (Prototype channels), while the rest of the channels (replicate channels) replicates the DReLU of each of their neurons from the corresponding neurons in one of the prototype channels. We then extend this idea to work across different layers. We show that this formulation can drastically reduce the number of DReLU operations in resnet type network. Furthermore, our theoretical analysis shows that this new formulation can solve an extended version of the XOR problem, using just one non-linearity and two neurons, something that traditional formulations and some PI specific methods cannot achieve. We achieve new SOTA results on several classification setups, and achieve SOTA results on image segmentation.

隐私推理高效计算深度学习优化

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。