Not Just Privacy: Improving Performance of Private Deep Learning in Mobile Cloud

Abstract

The increasing demand for on-device deep learning services calls for a highly efficient manner to deploy deep neural networks (DNNs) on mobile devices with limited capacity. The cloud-based solution is a promising approach to enabling deep learning applications on mobile devices where the large portions of a DNN are offloaded to the cloud. However, revealing data to the cloud leads to potential privacy risk. To benefit from the cloud data center without the privacy risk, we design, evaluate, and implement a cloud-based framework ARDEN which partitions the DNN across mobile devices and cloud data centers. A simple data transformation is performed on the mobile device, while the resource-hungry training and the complex inference rely on the cloud data center. To protect the sensitive information, a lightweight privacy-preserving mechanism consisting of arbitrary data nullification and random noise addition is introduced, which provides strong privacy guarantee. A rigorous privacy budget analysis is given. Nonetheless, the private perturbation to the original data inevitably has a negative impact on the performance of further inference on the cloud side. To mitigate this influence, we propose a noisy training method to enhance the cloud-side network robustness to perturbed data. Through the sophisticated design, ARDEN can not only preserve privacy but also improve the inference performance. To validate the proposed ARDEN, a series of experiments based on three image datasets and a real mobile application are conducted. The experimental results demonstrate the effectiveness of ARDEN. Finally, we implement ARDEN on a demo system to verify its practicality.

arXiv commentConference version accepted by KDD'18

References in corpus (6)

• Very Deep Convolutional Networks for Large-Scale Image Recognition
• Unsupervised Representation Learning with Deep Convolutional Generative Adversarial Networks
• Deep Learning with Differential Privacy
• How transferable are features in deep neural networks?
• Semi-supervised Knowledge Transfer for Deep Learning from Private Training Data
• DeepMood: Modeling Mobile Phone Typing Dynamics for Mood Detection

Cited by in corpus (12)

• Edge Intelligence: The Confluence of Edge Computing and Artificial Intelligence
• Transformative effects of IoT, Blockchain and Artificial Intelligence on cloud computing: Evolution, vision, trends and open challenges
• Overlearning Reveals Sensitive Attributes
• Privacy-Preserving Inference in Machine Learning Services Using Trusted Execution Environments
• Communication-Efficient Edge AI: Algorithms and Systems
• Federated Neural Architecture Search
• Private Model Compression via Knowledge Distillation
• Deep Quaternion Features for Privacy Protection
• Deep Learning Towards Mobile Applications
• Trade-offs and Guarantees of Adversarial Representation Learning for Information Obfuscation
• Rotation-Equivariant Neural Networks for Privacy Protection
• Improved Dynamic Memory Network for Dialogue Act Classification with Adversarial Training