An Encryption Method of ConvMixer Models without Performance Degradation
In this paper, we propose an encryption method for ConvMixer models with a secret key. Encryption methods for DNN models have been studied to achieve adversarial defense, model protection and privacy-preserving image classification. However, the use of conventional encryption methods degrades the performance of models compared with that of plain models. Accordingly, we propose a novel method for encrypting ConvMixer models. The method is carried out on the basis of an embedding architecture that ConvMixer has, and models encrypted with the method can have the same performance as models trained with plain images only when using test images encrypted with a secret key. In addition, the proposed method does not require any specially prepared data for model training or network modification. In an experiment, the effectiveness of the proposed method is evaluated in terms of classification accuracy and model protection in an image classification task on the CIFAR10 dataset.
Code (0)
등록된 구현이 없습니다.
Tasks
Adversarial DefenseClassificationimage-classificationImage ClassificationPrivacy PreservingMethods 이 논문이 사용한 방법론
Similar Papers 제목 키워드 기반
Privacy-Preserving Image Classification Using ConvMixer with Adaptive Permutation Matrix
In this paper, we propose a privacy-preserving image classification method using encrypted images under the use of the ConvMixer structure. Block-wise scrambled images, which are robust enough against various attacks, ha…
Classificationimage-classificationImage ClassificationPrivacy PreservingA Privacy Preserving Method with a Random Orthogonal Matrix for ConvMixer Models
In this paper, a privacy preserving image classification method is proposed under the use of ConvMixer models. To protect the visual information of test images, a test image is divided into blocks, and then every block i…
Classificationimage-classificationImage ClassificationPrivacy PreservingA Random Ensemble of Encrypted models for Enhancing Robustness against Adversarial Examples
Deep neural networks (DNNs) are well known to be vulnerable to adversarial examples (AEs). In addition, AEs have adversarial transferability, which means AEs generated for a source model can fool another black-box model …
Enhanced Security against Adversarial Examples Using a Random Ensemble of Encrypted Vision Transformer Models
Deep neural networks (DNNs) are well known to be vulnerable to adversarial examples (AEs). In addition, AEs have adversarial transferability, which means AEs generated for a source model can fool another black-box model …
Input-Output History Feedback Controller for Encrypted Control with Leveled Fully Homomorphic Encryption
Protecting the parameters, states, and input/output signals of a dynamic controller is essential for securely outsourcing its computation to an untrusted third party. Although a fully homomorphic encryption scheme allows…