基于安全两方计算的高效神经网络推理协议  

Efficient Neural Network Inference Protocol Based on Secure Two-Party Computation

作　　者：许春根[1] 薛少康 徐磊[1] 张盼 XU Chungen;XUE Shaokang;XU Lei;ZHANG Pan(School of Mathematics and Statistics,Nanjing University of Science and Technology,Nanjing 210094,China;School of Computer Science and Engineering,Nanjing University of Science and Technology,Nanjing 210094,China;School of Cyber Science and Engineering,Nanjing University of Science and Technology,Nanjing 210094,China)

机构地区：[1]南京理工大学数学与统计学院,南京210094 [2]南京理工大学计算机科学与工程学院,南京210094 [3]南京理工大学网络空间安全学院,南京210094

出　　处：《信息网络安全》2023年第7期22-30,共9页Netinfo Security

基　　金：国家自然科学基金[62072240,62202228];江苏省自然科学基金[BK20210330]。

摘　　要：近年来机器学习即服务(MLaaS)发展迅速,但在实际应用中,其性能存在很大瓶颈,且面临用户数据和企业神经网络模型参数泄露的风险。目前已有一些具有隐私保护功能的机器学习方案,但存在计算效率低和通信开销大的问题。针对上述问题,文章提出一种基于安全两方计算的高效神经网络推理协议,其中线性层使用秘密共享技术保护输入数据的隐私,非线性层使用低通信开销的基于不经意传输的比较函数计算激活函数。实验结果表明,与现有方案相比,该协议在两个基准数据集上的效率至少提高了23%,通信开销至少减小51%。Despite the rapid growth of Machine Learning as a Service(MLaaS)in recent years,there are still many performance and security issues in real-world applications,with the risk of leakage of user data and enterprise neural network model parameters.There are currently some machine learning schemes with privacy protection,but there are problems with low computational efficiency and high communication overhead.To address the above problems,the paper proposed an efficient neural network inference protocol based on secure two-party computation,where the linear layer used secret sharing to protect the privacy of the input data and the nonlinear layer used a low communication overhead comparison function based on oblivious transfer to compute the activation function.The experimental results show that the protocol is at least 23% more efficient and reduces communication overhead by at least 51%on two benchmark datasets compared to existing solutions.

关 键 词：机器学习 安全两方计算 神经网络 秘密共享 不经意传输 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]