A White-Box Watermarking Modulation for Encrypted DNN in Homomorphic Federated Learning - PEPR Santé numérique
Communication Dans Un Congrès Année : 2024

A White-Box Watermarking Modulation for Encrypted DNN in Homomorphic Federated Learning

Résumé

Federated Learning (FL) is a distributed paradigm that enables multiple clients to collaboratively train a model without sharing their sensitive local data. In such a privacy-sensitive setting, Homomorphic Encryption (HE) plays an important role by enabling computations on encrypted data. This prevents the server from reverse-engineering the model updates, during the aggregation, to infer private client data, a significant concern in scenarios like the healthcare industry where patient confidentiality is paramount. Despite these advancements, FL remains susceptible to intellectual property theft and model leakage due to malicious participants during the training phase. To counteract this, watermarking emerges as a solution for protecting the intellectual property rights of Deep Neural Networks (DNNs). However, traditional watermarking methods are not compatible with HE, primarily because they require the use of non-polynomial functions, which are not natively supported by HE. In this paper, we address these challenges by proposing the first white-box DNN watermarking modulation on a single homomorphically encrypted model. We then extend this modulation to a server-side FL context that complies with HE's processing constraints. Our experimental results demonstrate that the performance of the proposed watermarking modulation is equivalent to the one on unencrypted domain.
Fichier principal
Vignette du fichier
127643.pdf (447.7 Ko) Télécharger le fichier
Origine Accord explicite pour ce dépôt
licence

Dates et versions

hal-04663085 , version 1 (30-10-2024)

Licence

Identifiants

Citer

Mohammed Lansari, Reda Bellafqira, Katarzyna Kapusta, Vincent Thouvenot, Olivier Bettan, et al.. A White-Box Watermarking Modulation for Encrypted DNN in Homomorphic Federated Learning. 21st International Conference on Security and Cryptography, INSTICC, Jul 2024, Dijon, France. pp.186-197, ⟨10.5220/0012764300003767⟩. ⟨hal-04663085⟩

Collections

ANR PEPR_SANTENUM
0 Consultations
0 Téléchargements

Altmetric

Partager

More