### Simulating Homomorphic Evaluation of Deep Learning Predictions

Christina Boura, Nicolas Gama, Mariya Georgieva, and Dimitar Jetchev

##### Abstract

Convolutional neural networks (CNNs) is a category of deep neural networks that are primarily used for classifying image data. Yet, their continuous gain in popularity poses important privacy concerns for the potentially sensitive data that they process. A solution to this problem is to combine CNNs with Fully Homomorphic Encryption (FHE) techniques. In this work, we study this approach by focusing on two popular FHE schemes, TFHE and HEAAN, that can work in the approximated computational model. We start by providing an analysis of the noise after each principal homomorphic operation, i.e. multiplication, linear combination, rotation and bootstrapping. Then, we provide a theoretical study on how the most important non-linear operations of a CNN (i.e. max, Abs, ReLU), can be evaluated in each scheme. Finally, we measure via practical experiments on the plaintext the robustness of different neural networks against perturbations of their internal weights that could potentially result from the propagation of large homomorphic noise. This allows us to simulate homomorphic evaluations with large amounts of noise and to predict the effect on the classification accuracy without a real evaluation of heavy and time-consuming homomorphic operations. In addition, this approach enables us to correctly choose smaller and more efficient parameter sets for both schemes.

Available format(s)
Category
Applications
Publication info
Published elsewhere. CSCML 2019
Keywords
neural networkshomomorphic encryptionTFHEHEAAN
Contact author(s)
maria georgievabs @ gmail com
History
Short URL
https://ia.cr/2019/591

CC BY

BibTeX

@misc{cryptoeprint:2019/591,
author = {Christina Boura and Nicolas Gama and Mariya Georgieva and Dimitar Jetchev},
title = {Simulating Homomorphic Evaluation of Deep Learning Predictions},
howpublished = {Cryptology ePrint Archive, Paper 2019/591},
year = {2019},
note = {\url{https://eprint.iacr.org/2019/591}},
url = {https://eprint.iacr.org/2019/591}
}

Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.