Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
Make Split, not Hijack: Preventing Feature-Space Hijacking Attacks in Split Learning
Tampere University, Finland.
Tampere University, Finland.ORCID iD: 0000-0002-1913-7985
RISE Research Institutes of Sweden, Digital Systems, Data Science. Tampere University, Finland.
2024 (English)In: Proceedings of the 29th ACM Symposium on Access Control Models and Technologies, Association for Computing Machinery (ACM) , 2024, p. 19-30Conference paper, Published paper (Refereed)
Abstract [en]

The popularity of Machine Learning (ML) makes the privacy of sensitive data more imperative than ever. Collaborative learning techniques like Split Learning (SL) aim to protect client data while enhancing ML processes. Though promising, SL has been proved to be vulnerable to a plethora of attacks, thus raising concerns about its effectiveness on data privacy. In this work, we introduce a hybrid approach combining SL and Function Secret Sharing (FSS) to ensure client data privacy. The client adds a random mask to the activation map before sending it to the servers. The servers cannot access the original function but instead work with shares generated using FSS. Consequently, during both forward and backward propagation, the servers cannot reconstruct the client’s raw data from the activation map. Furthermore, through visual invertibility, we demonstrate that the server is incapable of reconstructing the raw image data from the activation map when using FSS. It enhances privacy by reducing privacy leakage compared to other SL-based approaches where the server can access client input information. Our approach also ensures security against feature space hijacking attack, protecting sensitive information from potential manipulation. Our protocols yield promising results, reducing communication overhead by over 2× and training time by over 7× compared to the same model with FSS, without any SL. Also, we show that our approach achieves > 96% accuracy and remains equivalent to the plaintext models. 

Place, publisher, year, edition, pages
Association for Computing Machinery (ACM) , 2024. p. 19-30
Keywords [en]
Chemical activation, Privacy-preserving techniques, Sensitive data, Activation maps, Collaborative learning, Feature space, Function secret sharing, Learning techniques, Machine-learning, Privacy, Secret-sharing, Sensitive datas, Split learning, Machine learning
National Category
Computer Sciences
Identifiers
URN: urn:nbn:se:ri:diva-74716DOI: 10.1145/3649158.3657039Scopus ID: 2-s2.0-85197783248ISBN: 9798400704918 (print)OAI: oai:DiVA.org:ri-74716DiVA, id: diva2:1887557
Conference
The 29th ACM Symposium on Access Control Models and Technologies
Funder
EU, Horizon Europe, 101069535
Note

Conference name: 29th ACM Symposium on Access Control Models and Technologies, SACMAT 2024; Conference date: 15 May 2024 through 17 May 2024; Conference code: 200615; All Open Access, Hybrid Gold Open Access

This work was funded by the HARPOCRATES EU research project (No. 101069535) and the Technology Innovation Institute (TII), UAE, for the project ARROWSMITH.

Available from: 2024-08-08 Created: 2024-08-08 Last updated: 2025-09-23Bibliographically approved

Open Access in DiVA

fulltext(1818 kB)67 downloads
File information
File name FULLTEXT01.pdfFile size 1818 kBChecksum SHA-512
1cb4d8fed117397f34e9db6d88734fe1551def67f6de559e2441dda86f0921c06924253ee3dbab1cb74ef27e8ace512e549f74825c97e284aa583345226ee75d
Type fulltextMimetype application/pdf

Other links

Publisher's full textScopus

Search in DiVA

By author/editor
Budzys, Mindaugas
By organisation
Data Science
Computer Sciences

Search outside of DiVA

GoogleGoogle Scholar
Total: 68 downloads
The number of downloads is the sum of all downloads of full texts. It may include eg previous versions that are now no longer available

doi
isbn
urn-nbn

Altmetric score

doi
isbn
urn-nbn
Total: 472 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf