Attacks on Image Encryption Schemes for Privacy-Preserving Deep Neural Networks
Privacy preserving machine learning is an active area of research usually relying on techniques such as homomorphic encryption or secure multiparty computation. Recent novel encryption techniques for performing machine learning using deep neural nets on images have recently been proposed by Tanaka and Sirichotedumrong, Kinoshita, and Kiya. We present new chosen-plaintext and ciphertext-only attacks against both of these proposed image encryption schemes and demonstrate the attacks' effectiveness on several examples.
Code (1)
Tasks
BIG-bench Machine LearningPrivacy PreservingSimilar Papers 제목 키워드 기반
InstaHide: Instance-hiding Schemes for Private Distributed Learning
How can multiple distributed entities collaboratively train a shared deep net on their private data while preserving privacy? This paper introduces InstaHide, a simple encryption of training images, which can be plugged …
Adversarial Test on Learnable Image Encryption
Data for deep learning should be protected for privacy preserving. Researchers have come up with the notion of learnable image encryption to satisfy the requirement. However, existing privacy preserving approaches have n…
Adversarial RobustnessPrivacy PreservingPrivacy-Preserving Federated Learning against Malicious Clients Based on Verifiable Functional Encryption
Federated learning is a promising distributed learning paradigm that enables collaborative model training without exposing local client data, thereby protect data privacy. However, it also brings new threats and challeng…
Federated LearningPrivacy PreservingGenerative Model-Based Attack on Learnable Image Encryption for Privacy-Preserving Deep Learning
In this paper, we propose a novel generative model-based attack on learnable image encryption methods proposed for privacy-preserving deep learning. Various learnable encryption methods have been studied to protect the s…
Privacy PreservingPrivacy Preserving Deep LearningPrivacy-Preserving Federated Learning via Homomorphic Adversarial Networks
Privacy-preserving federated learning (PPFL) aims to train a global model for multiple clients while maintaining their data privacy. However, current PPFL protocols exhibit one or more of the following insufficiencies: c…
Federated LearningPrivacy Preserving