about
Paper: A Generic Framework for Privacy Preserving Deep Learning (NIPS 2018) (arxiv.org)
25 points by williamtrask on Nov 12, 2018 | hide | past | pdf | 1 comment on HN

In plain words: It represents training as a chain of commands on grids of numbers, so users can add privacy tricks like sharing data across devices or hiding inputs while writing normal deep learning code. Accuracy stayed the same except with added noise, but the software ran slower.

Abstract · A generic framework for privacy preserving deep learning

We detail a new framework for privacy preserving deep learning and discuss its assets. The framework puts a premium on ownership and secure processing of data and introduces a valuable representation based on chains of commands and tensors. This abstraction allows one to implement complex privacy preserving constructs such as Federated Learning, Secure Multiparty Computation, and Differential Privacy while still exposing a familiar deep learning API to the end-user. We report early results on the Boston Housing and Pima Indian Diabetes datasets. While the privacy features apart from Differential Privacy do not impact the prediction accuracy, the current implementation of the framework introduces a significant overhead in performance, which will be addressed at a later stage of the development. We believe this work is an important milestone introducing the first reliable, general framework for privacy preserving deep learning.

Theo Ryffel, Andrew Trask, Morten Dahl, Bobby Wagner, Jason Mancuso, Daniel Rueckert, Jonathan Passerat-Palmbach
arXiv:1811.04017 · cs.LG, cs.CR, stat.ML · submitted Nov 9, 2018 · updated Nov 13, 2018
abstract · pdf · html · PPML 2018, 5 pages

add comment on HN

cool!