Split Without a Leak: Reducing Privacy Leakage in Split Learning
2025 (English)In: Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering, ISSN 1867-8211, E-ISSN 1867-822X, Vol. 568 LNICST, p. 321-344Article in journal (Refereed) Published
Abstract [en]
The popularity of Deep Learning (DL) makes the privacy of sensitive data more imperative than ever. As a result, various privacy-preserving techniques have been implemented to preserve user data privacy in DL. Among various privacy-preserving techniques, collaborative learning techniques, such as Split Learning (SL) have been utilized to accelerate the learning and prediction process. Initially, SL was considered a promising approach to data privacy. However, subsequent research has demonstrated that SL is susceptible to many types of attacks and, therefore, it cannot serve as a privacy-preserving technique. Meanwhile, countermeasures using a combination of SL and encryption have also been introduced to achieve privacy-preserving deep learning. In this work, we propose a hybrid approach using SL and Homomorphic Encryption (HE). The idea behind it is that the client encrypts the activation map (the output of the split layer between the client and the server) before sending it to the server. Hence, during both forward and backward propagation, the server cannot reconstruct the client’s input data from the intermediate activation map. This improvement is important as it reduces privacy leakage compared to other SL-based works, where the server can gain valuable information about the client’s input. In addition, on the MIT-BIH dataset, our proposed hybrid approach using SL and HE yields faster training time (about 6 times) and significantly reduced communication overhead (almost 160 times) compared to other HE-based approaches, thereby offering improved privacy protection for sensitive data in DL.
Place, publisher, year, edition, pages
Springer Science and Business Media Deutschland GmbH , 2025. Vol. 568 LNICST, p. 321-344
Keywords [en]
Adversarial machine learning; Contrastive Learning; Federated learning; Information leakage; Activation maps; Collaborative learning; Ho-momorphic encryptions; Homomorphic-encryptions; Hybrid approach; Machine-learning; Privacy leakages; Privacy preserving; Split learning; User data; Differential privacy
National Category
Computer and Information Sciences
Identifiers
URN: urn:nbn:se:ri:diva-76159DOI: 10.1007/978-3-031-64954-7_17Scopus ID: 2-s2.0-85207543395OAI: oai:DiVA.org:ri-76159DiVA, id: diva2:1915259
Conference
19th EAI International Conference on Security and Privacy in Communication Networks, SecureComm 2023. Hong Kong. 19 October 2023 through 21 October 2023
2024-11-222024-11-222025-09-23Bibliographically approved