Confidential Machine Learning on Untrusted Platforms: A Survey

Abstract

With the ever-growing data and the need for developing powerful machine learning models, data owners increasingly depend on various untrusted platforms (e.g., public clouds, edges, and machine learning service providers) for scalable processing or collaborative learning. Thus, sensitive data and models are in danger of unauthorized access, misuse, and privacy compromises. A relatively new body of research confidentially trains machine learning models on protected data to address these concerns. In this survey, we summarize notable studies in this emerging area of research. With a unified framework, we highlight the critical challenges and innovations in outsourcing machine learning confidentially. We focus on the cryptographic approaches for confidential machine learning (CML), primarily on model training, while also covering other directions such as perturbation-based approaches and CML in the hardware-assisted computing environment. The discussion will take a holistic way to consider a rich context of the related threat models, security assumptions, design principles, and associated trade-offs amongst data utility, cost, and confidentiality.

arXiv commentTo appear in Cybersecurity Journal, Springer, 2021

References in corpus (7)

• Deep Learning with Differential Privacy
• A Survey of Deep Learning Techniques for Autonomous Driving
• CryptoDL: Deep Neural Networks over Encrypted Data
• Deep Models Under the GAN: Information Leakage from Collaborative Deep Learning
• Differential Privacy and Machine Learning: a Survey and Review
• Overlearning Reveals Sensitive Attributes
• Membership Inference Attacks against Machine Learning Models