Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
Split Without a Leak: Reducing Privacy Leakage in Split Learning
Tampere University, Finland.
Tampere University, Finland.
RISE Research Institutes of Sweden. Tampere University, Finland.
2025 (English)In: Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering, ISSN 1867-8211, E-ISSN 1867-822X, Vol. 568 LNICST, p. 321-344Article in journal (Refereed) Published
Abstract [en]

The popularity of Deep Learning (DL) makes the privacy of sensitive data more imperative than ever. As a result, various privacy-preserving techniques have been implemented to preserve user data privacy in DL. Among various privacy-preserving techniques, collaborative learning techniques, such as Split Learning (SL) have been utilized to accelerate the learning and prediction process. Initially, SL was considered a promising approach to data privacy. However, subsequent research has demonstrated that SL is susceptible to many types of attacks and, therefore, it cannot serve as a privacy-preserving technique. Meanwhile, countermeasures using a combination of SL and encryption have also been introduced to achieve privacy-preserving deep learning. In this work, we propose a hybrid approach using SL and Homomorphic Encryption (HE). The idea behind it is that the client encrypts the activation map (the output of the split layer between the client and the server) before sending it to the server. Hence, during both forward and backward propagation, the server cannot reconstruct the client’s input data from the intermediate activation map. This improvement is important as it reduces privacy leakage compared to other SL-based works, where the server can gain valuable information about the client’s input. In addition, on the MIT-BIH dataset, our proposed hybrid approach using SL and HE yields faster training time (about 6 times) and significantly reduced communication overhead (almost 160 times) compared to other HE-based approaches, thereby offering improved privacy protection for sensitive data in DL. 

Place, publisher, year, edition, pages
Springer Science and Business Media Deutschland GmbH , 2025. Vol. 568 LNICST, p. 321-344
Keywords [en]
Adversarial machine learning; Contrastive Learning; Federated learning; Information leakage; Activation maps; Collaborative learning; Ho-momorphic encryptions; Homomorphic-encryptions; Hybrid approach; Machine-learning; Privacy leakages; Privacy preserving; Split learning; User data; Differential privacy
National Category
Computer and Information Sciences
Identifiers
URN: urn:nbn:se:ri:diva-76159DOI: 10.1007/978-3-031-64954-7_17Scopus ID: 2-s2.0-85207543395OAI: oai:DiVA.org:ri-76159DiVA, id: diva2:1915259
Conference
19th EAI International Conference on Security and Privacy in Communication Networks, SecureComm 2023. Hong Kong. 19 October 2023 through 21 October 2023
Available from: 2024-11-22 Created: 2024-11-22 Last updated: 2025-09-23Bibliographically approved

Open Access in DiVA

No full text in DiVA

Other links

Publisher's full textScopus
By organisation
RISE Research Institutes of Sweden
In the same journal
Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering
Computer and Information Sciences

Search outside of DiVA

GoogleGoogle Scholar

doi
urn-nbn

Altmetric score

doi
urn-nbn
Total: 47 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf