On the Gini-impurity Preservation For Privacy Random Forests
Xinran Xie, Man-Jie Yuan, Xuetong Bai, Wei Gao, Zhi-Hua Zhou
Abstract
Random forests have been one of the successful ensemble algorithms in machine learning. Various techniques have been utilized to preserve the privacy of random forests, such as anonymization, differential privacy, homomorphic encryption, etc. This work takes one step towards data encryption by incorporating some crucial ingredients of learning algorithm. Specifically, we develop a new encryption to preserve data’s Gini impurity, which plays an important role during the construction of random forests. The basic idea is to modify the structure of binary search tree to store several examples in each node, and encrypt the data features by incorporating label and order information. Theoretically, our scheme is proven to preserve the minimum Gini impurity in ciphertexts without decrypting, and we also present the security guarantee for encryption. For random forests, we encrypt data features based on our Gini-impurity-preserving scheme, and take the homomorphic encryption scheme CKKS to encrypt data labels owing to their importance and privacy. We finally present extensive empirical studies to validate the effectiveness, efficiency and security of our proposed method.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Builds on18
- Deep Learning with Differential PrivacyMartín Abadi, Andy Chu, Ian J. Goodfellow, H. Brendan McMahan et al.CCS 2016 · 7,620 citations
- Practical Secure Aggregation for Privacy-Preserving Machine LearningKallista A. Bonawitz, Vladimir Ivanov, Ben Kreuter, Antonio Marcedone et al.CCS 2017 · 3,936 citations
- Deep Learning with Label Differential PrivacyBadih Ghazi, Noah Golowich, Ravi Kumar, Pasin Manurangsi et al.NeurIPS 2021 · 193 citations
- Low-Complexity Deep Convolutional Neural Networks on Fully Homomorphic Encryption Using Multiplexed Parallel ConvolutionsEunsang Lee, Joon-Woo Lee, Junghyun Lee, Young-Sik Kim et al.ICML 2022 · 171 citations
- SoK: Cryptographically Protected Database SearchBenjamin Fuller, Mayank Varia, Arkady Yerukhimovich, Emily Shen et al.S&P 2017 · 121 citations
Related papers
- Privacy-Preserving Feature Selection with Secure Multiparty ComputationXiling Li, Rafael Dowsley, Martine De CockICML 2021 · 51 citations
- Improving Private Random Forest Prediction Using Matrix RepresentationArisa Tajima, Joie Wu, Amir HoumansadrAAAI 2025
- Is Private Learning Possible with Instance Encoding?Nicholas Carlini, Samuel Deng, Sanjam Garg, Somesh Jha et al.S&P 2021 · 45 citations
- Order-Preserving Cryptography for the Confidential Inference in Random Forests: FPGA Design and ImplementationRupesh Raj Karn, Kashif Nawaz, Ibrahim Abe M. ElfadelDAC 2024 · 3 citations
- Trained Random Forests Completely Reveal your DatasetJulien Ferry, Ricardo Fukasawa, Timothée Pascal, Thibaut VidalICML 2024 · 11 citations
