USENIX Security2023Top-tier venue
Secure Floating-Point Training
Deevashwer Rathee, Anwesh Bhattacharya, Divya Gupta, Rahul Sharma, Dawn Song
Abstract
Secure 2-party computation (2PC) of floating-point arithmetic is improving in performance and recent work runs deep learning algorithms with it, while being as numerically precise as commonly used machine learning (ML) frameworks like PyTorch. We find that the existing 2PC libraries for floatingpoint support generic computations and lack specialized support for ML training. Hence, their latency and communication costs for compound operations (e.g., dot products) are high. We provide novel specialized 2PC protocols for compound operations and prove their precision using numerical analysis. Our implementation BEACON outperforms state-of-the-art libraries for 2PC of floating-point by over 6×. We provide novel specialized protocols for compound operations occurring in ML training that are as precise as SECFLOAT-based protocols while being much more efficient. Note that, apart from SECFLOAT, all other prior works in secure training use approximations that lack formal precision guarantees [16, 17, 41, 43, 54, 55, 64, 66, 67] . Among these, KS22 [41] is the state-of-the-art whose approximations have high efficiency and have been shown to empirically match the end-to-end training accuracy provided by floating-point training on MNIST [46]/CIFAR [44] datasets. We show that the latency overheads of our provably precise protocols are < 6× over KS22. In particular,
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Your agent calls
Luneget_paper_fulltext
Free to start. No credit card required.
Terminal
Install the CLIlune papers fulltext 6f9f0d61-396c-4a3a-b45b-66ee0dad82fcCited by top-tier papers3
- Orca: FSS-based Secure Training and Inference with GPUsNeha Jawalkar, Kanav Gupta, Arkaprava Basu, Nishanth Chandran et al.S&P 2024 · 58 citations
- Trustless Audits without Revealing Data or ModelsSuppakit Waiwitlikhit, Ion Stoica, Yi Sun, Tatsunori Hashimoto et al.ICML 2024 · 20 citations
- Sequoia: An Accessible and Extensible Framework for Privacy-Preserving Machine Learning over Distributed DataKaiqiang Xu, Di Chai, Junxue Zhang, Fan Lai et al.SIGMOD 2025 · 1 citation
Builds on24
- SecureML: A System for Scalable Privacy-Preserving Machine LearningPayman Mohassel, Yupeng ZhangS&P 2017 · 2,107 citations
- Exploiting Unintended Feature Leakage in Collaborative LearningLuca Melis, Congzheng Song, Emiliano De Cristofaro, Vitaly ShmatikovS&P 2019 · 1,736 citations
- Deep Models Under the GAN: Information Leakage from Collaborative Deep LearningBriland Hitaj, Giuseppe Ateniese, Fernando Pérez-CruzCCS 2017 · 1,581 citations
- GAZELLE: A Low Latency Framework for Secure Neural Network InferenceChiraag Juvekar, Vinod Vaikuntanathan, Anantha P. ChandrakasanUSENIX Security 2018 · 1,075 citations
- ABY3: A Mixed Protocol Framework for Machine LearningPayman Mohassel, Peter RindalCCS 2018 · 898 citations
Related papers
- SecFloat: Accurate Floating-Point meets Secure 2-Party ComputationDeevashwer Rathee, Anwesh Bhattacharya, Rahul Sharma, Divya Gupta et al.S&P 2022 · 65 citations
- SiRnn: A Math Library for Secure RNN InferenceDeevashwer Rathee, Mayank Rathee, Rahul Kranti Kiran Goli, Divya Gupta et al.S&P 2021 · 154 citations
- QUOTIENT: Two-Party Secure Neural Network Training and PredictionNitin Agrawal, Ali Shahin Shamsabadi, Matt J. Kusner, Adrià GascónCCS 2019 · 241 citations
- CrypTFlow2: Practical 2-Party Secure InferenceDeevashwer Rathee, Mayank Rathee, Nishant Kumar, Nishanth Chandran et al.CCS 2020 · 294 citations
- PASNet: Polynomial Architecture Search Framework for Two-party Computation-based Secure Neural Network DeploymentHongwu Peng, Shanglin Zhou, Yukui Luo, Nuo Xu et al.DAC 2023 · 5 citations
