网络与信息安全学报2024,Vol.10Issue(3):20-37,18.DOI:10.11959/j.issn.2096-109x.2024037
分割学习数据隐私研究综述
Survey of split learning data privacy
摘要
Abstract
With the rapid development of machine learning,artificial intelligence technology has been widely applied across various domains of life.However,concerns regarding the privacy risks associated with machine learning have increased.In response to these concerns,the Personal Information Protection Law of the People's Republic of China was promulgated to regulate the collection,use,and transmission of private information.Despite this,machine learning requires a large amount of data,necessitating the development of privacy protection technologies that allow for the collection and processing of data under legal and compliant conditions.Split learning,a privacy-preserving machine learning technique that enables the training of distributed models among multiple participants without sharing raw data,has emerged as a research focus.It has been recognized that split learning is vulnerable to data privacy attacks,and various attacks along with corresponding defenses have been proposed.However,existing surveys have not discussed and summarized research on data privacy during the training phase of split learning.The comprehensive overview of data privacy attack and defense techniques in the training phase of split learning was offered.Initially,the definition,principles,and classifications of split learning were summarized.Subsequently,two common attacks in split learning,namely the raw data reconstruction attack and the label leakage attack,were introduced.The causes of these attacks in the training phase of split learning were then analyzed,and corresponding defenses were presented.Finally,future research directions in the area of data privacy for split learning were discussed.关键词
隐私保护/人工智能安全/分布式机器学习/分割学习Key words
privacy protection/artificial intelligence security/distributed machine learning/split learning分类
信息技术与安全科学引用本文复制引用
秦轶群,马晓静,付佳韵,胡平一,徐鹏,金海..分割学习数据隐私研究综述[J].网络与信息安全学报,2024,10(3):20-37,18.基金项目
国家自然科学基金(62272175) National Nature Science Foundation of China(62272175) (62272175)