Machine Learning on Encrypted Data Without Decrypting It
juliacomputing.com
Machine Learning on Encrypted Data Without Decrypting It
1–10 of 122 posts
Re: Machine Learning on Encrypted Data Without Decrypting It
#2Before reading: "I bet they're using homomorphic encryption to expose patterns in the encrypted data"
After reading: Yup. It makes sense, so long as your resulting model is run against similarly encrypted data, the same patterns will be there for the ML to identify.
Which is, of course, one of the issues with homomorphic encryption.
Re: Machine Learning on Encrypted Data Without Decrypting It
#3If you can infer information from encrypted data then it's not properly encrypted. Generally you would use a salt that would render this type of analyses useless.
Re: Machine Learning on Encrypted Data Without Decrypting It
#4Before reading: "I bet they're using homomorphic encryption to expose patterns in the encrypted data" After reading: Yup. It makes sense, so long as your resulting model is run against similarly encrypted data, the same patterns will be there for the ML to identify. Which is, of course, one of the issues with homomorphic encryption.
Just to clarify, homomorphic encryption does not expose patterns. At every point in the computation the ciphertexts are computationally indistinguishable from random. The result of evaluating the ML model will be an encrypted prediction that you then need to send back to whoever encrypted the data (or more precisely whoever has the key - doesn't need to be the same person) so they can decrypt and use the prediction.
Re: Machine Learning on Encrypted Data Without Decrypting It
#5What are the runtimes?
Re: Machine Learning on Encrypted Data Without Decrypting It
#6If you can infer information from encrypted data then it's not properly encrypted. Generally you would use a salt that would render this type of analyses useless.
The person who runs the model won’t be able to infer anything. The result of the model is itself encrypted, and would need to be decrypted using the original encryption key.
Re: Machine Learning on Encrypted Data Without Decrypting It
#7Before reading: "I bet they're using homomorphic encryption to expose patterns in the encrypted data" After reading: Yup. It makes sense, so long as your resulting model is run against similarly encrypted data, the same patterns will be there for the ML to identify. Which is, of course, one of the issues with homomorphic encryption.
Just to clarify, homomorphic encryption does not expose patterns. At every point in the computation the ciphertexts are computationally indistinguishable from random. The result of evaluating the ML model will be an encrypted prediction that you then need to send back to whoever encrypted the data (or more precisely whoever has the key - doesn't need to be the same person) so they can decrypt and use the prediction.
Do you have a reference somewhere that backs up your assertions, where I can read more on this topic? I'm super curious about it.
Re: Machine Learning on Encrypted Data Without Decrypting It
#8What are the runtimes?
About a minute or so for the batch of 64, but I haven't tuned the implementation yet (I just did enough work to get it down to a comfortable range of experimentation). The paper I linked (https://eprint.iacr.org/2018/1041.pdf) which uses the same model, but with a more optimized implementation cites 26ms amortized per image (in a batch of 64), so I would suspect I can get down to that with a day or two of optimization work if I wanted to (or just plug in their backend - but where's the fun in that).
Re: Machine Learning on Encrypted Data Without Decrypting It
#9If you can infer information from encrypted data then it's not properly encrypted. Generally you would use a salt that would render this type of analyses useless.
Maybe i misunderstood something, but they are not really inferring information. The model is still encrypted, the outsider doesn't know what's going on. Wouldn't salt destroy the homomorphic property?
Re: Machine Learning on Encrypted Data Without Decrypting It
#10If you can infer information from encrypted data then it's not properly encrypted. Generally you would use a salt that would render this type of analyses useless.
[deleted]