請用此 Handle URI 來引用此文件:
http://tdr.lib.ntu.edu.tw/jspui/handle/123456789/91775
標題: | 防禦拆分式學習中的資料重建攻擊 Defending against Data Reconstruction Attacks in Split Learning |
作者: | 鄭力誠 Li-Chen Cheng |
指導教授: | 逄愛君 Ai-Chun Pang |
關鍵字: | 隱私,差分隱私,隨機降採樣,拆分式學習,資料重建攻擊,模型逆向攻擊,影像分類, Privacy,Stochastic Downsampling,Split Learning,Data Reconstruction Attack,Model Inversion Attack,Differential Privacy,Image Classification, |
出版年 : | 2024 |
學位: | 碩士 |
摘要: | 拆分式學習是一種很有前景的協作學習架構,用於解決深度學習應用中的隱私問題。它有助於在不損害個人資料隱私的情況下進行協作神經網路訓練。然而,由於潛在的資料重建攻擊,即使參與者只分享中間特徵,也會威脅到參與者的隱私,因此如何在拆分式學習中保護隱私,仍然是一個巨大的挑戰。以往針對資料重建攻擊的防禦策略通常會導致模型效用顯著下降或需要高昂的計算成本。為了解決這些問題,我們提出了一種新的防禦方法--差分隱私隨機降採樣。這種防禦策略將隨機降採樣和雜訊應用到中間特徵中,在不增加大量計算成本的情況下,有效地實現了隱私與效用的平衡。在各種資料集上進行的實證分析表明,所提出的防禦方法優於現有的最先進方法,突出了它在不犧牲效用的情況下維護隱私的功能。 Split learning emerges as a promising collaborative learning framework addressing privacy concerns in deep learning applications. It facilitates collaborative neural network training without compromising individual data privacy. However, preserving privacy in split learning remains a substantial challenge due to potential data reconstruction attacks that threaten participants' privacy even when participants only share intermediate features. Previous defense strategies against data reconstruction attacks usually result in a significant drop in model utility or require high computational costs. To navigate these issues, we propose a novel defense method --- differentially private stochastic downsampling. This defense strategy applies stochastic downsampling and noise addition to intermediate features, effectively creating a privacy-utility balance without imposing substantial computational burdens. Empirical evaluations conducted on diverse datasets demonstrate the superiority of the proposed defense method over existing state-of-the-art methods, highlighting its efficacy in maintaining privacy without sacrificing utility. |
URI: | http://tdr.lib.ntu.edu.tw/jspui/handle/123456789/91775 |
DOI: | 10.6342/NTU202400487 |
全文授權: | 未授權 |
顯示於系所單位: | 資訊網路與多媒體研究所 |
文件中的檔案:
檔案 | 大小 | 格式 | |
---|---|---|---|
ntu-112-1.pdf 目前未授權公開取用 | 5.95 MB | Adobe PDF |
系統中的文件,除了特別指名其著作權條款之外,均受到著作權保護,並且保留所有的權利。