Make Split, not Hijack: Preventing Feature-Space Hijacking Attacks in Split Learning
2024 (English)In: Proceedings of the 29th ACM Symposium on Access Control Models and Technologies, Association for Computing Machinery (ACM) , 2024, p. 19-30Conference paper, Published paper (Refereed)
Abstract [en]
The popularity of Machine Learning (ML) makes the privacy of sensitive data more imperative than ever. Collaborative learning techniques like Split Learning (SL) aim to protect client data while enhancing ML processes. Though promising, SL has been proved to be vulnerable to a plethora of attacks, thus raising concerns about its effectiveness on data privacy. In this work, we introduce a hybrid approach combining SL and Function Secret Sharing (FSS) to ensure client data privacy. The client adds a random mask to the activation map before sending it to the servers. The servers cannot access the original function but instead work with shares generated using FSS. Consequently, during both forward and backward propagation, the servers cannot reconstruct the client’s raw data from the activation map. Furthermore, through visual invertibility, we demonstrate that the server is incapable of reconstructing the raw image data from the activation map when using FSS. It enhances privacy by reducing privacy leakage compared to other SL-based approaches where the server can access client input information. Our approach also ensures security against feature space hijacking attack, protecting sensitive information from potential manipulation. Our protocols yield promising results, reducing communication overhead by over 2× and training time by over 7× compared to the same model with FSS, without any SL. Also, we show that our approach achieves > 96% accuracy and remains equivalent to the plaintext models.
Place, publisher, year, edition, pages
Association for Computing Machinery (ACM) , 2024. p. 19-30
Keywords [en]
Chemical activation, Privacy-preserving techniques, Sensitive data, Activation maps, Collaborative learning, Feature space, Function secret sharing, Learning techniques, Machine-learning, Privacy, Secret-sharing, Sensitive datas, Split learning, Machine learning
National Category
Computer Sciences
Identifiers
URN: urn:nbn:se:ri:diva-74716DOI: 10.1145/3649158.3657039Scopus ID: 2-s2.0-85197783248ISBN: 9798400704918 (print)OAI: oai:DiVA.org:ri-74716DiVA, id: diva2:1887557
Conference
The 29th ACM Symposium on Access Control Models and Technologies
Funder
EU, Horizon Europe, 101069535
Note
Conference name: 29th ACM Symposium on Access Control Models and Technologies, SACMAT 2024; Conference date: 15 May 2024 through 17 May 2024; Conference code: 200615; All Open Access, Hybrid Gold Open Access
This work was funded by the HARPOCRATES EU research project (No. 101069535) and the Technology Innovation Institute (TII), UAE, for the project ARROWSMITH.
2024-08-082024-08-082025-09-23Bibliographically approved