請用此 Handle URI 來引用此文件:
http://tdr.lib.ntu.edu.tw/jspui/handle/123456789/89137
標題: | 基於非可信任第三方的 Transformer 推理模型安全實作與優化 SITransformer: Secure Inference Transformer without Trusted Third Party |
作者: | 廖子毅 TZU-YI LIAO |
指導教授: | 吳沛遠 Pei-Yuan Wu |
關鍵字: | 隱私增強技術,隱私維護機器學習,安全兩方計算,機器學習服務,安全推論,樂觀鎖, privacy enhancing technique,privacy preserving machine learning,secure two party computation,machine learning as a service,security,transformer,secure inference,optimistic concurrency control viii, |
出版年 : | 2023 |
學位: | 碩士 |
摘要: | 如今,許多雲服務都建立在機器學習技術的基礎上。然而,大多數雲服務在設計時並未考慮安全因素,這可能導致數據洩漏或模型資產的丟失。為了解決這個問題,我們提出了一個名為 SITransformer 的框架,它在兩方安全計算場景中將便利性與安全性相結合。SITransformer 是 SiRNN 模型的擴展,與現有的 CrypTen 框架相比,具有更好的安全性假設。SITransformer 利用茫然傳輸作為安全通信通道,並通過使用樂觀併發控制和 Seed 的混合方法,提供與 CrpyTen 類似的推理效率。在 SITransformer 中,伺服器和客戶端都以秘密共享的形式持有數據,從而同時保護數據和模型資產。在實驗部分,SITransformer 展示了在沒有可信第三方假設的情境下,該框架的正確性以及樂觀併發控制和 Seed 方法所帶來的效率改進。 Many cloud services are built upon machine learning techniques nowadays. However, most cloud services were not designed with security considerations in mind, which can result in data leaks or loss of model assets. To address this issue, we propose a framework called SITransformer that combines convenience with security in the 2PC scenario. SITransformer is an extension of the SiRNN model and provides better security assumptions compared to the state-of-the-art CrypTen. SITransformer utilizes oblivious transfer as a secure communication channel and offers similar inference efficiency by leveraging a hybrid approach using optimistic concurrency control (OCC) and Seed. In SITransformer, both the server and the client hold data in the form of secret sharing, thereby protecting both the data and the model assets simultaneously. In our experimental section, SITransformer demonstrates the correctness of the framework in a scenario without a Trusted Third Party (TTP), as well as the efficiency improvements brought by OCC and Seed method. |
URI: | http://tdr.lib.ntu.edu.tw/jspui/handle/123456789/89137 |
DOI: | 10.6342/NTU202302161 |
全文授權: | 同意授權(限校園內公開) |
顯示於系所單位: | 電機工程學系 |
文件中的檔案:
檔案 | 大小 | 格式 | |
---|---|---|---|
ntu-111-2.pdf 授權僅限NTU校內IP使用(校園外請利用VPN校外連線服務) | 1.33 MB | Adobe PDF | 檢視/開啟 |
系統中的文件,除了特別指名其著作權條款之外,均受到著作權保護,並且保留所有的權利。