SOTAVerified

Attacks on Image Encryption Schemes for Privacy-Preserving Deep Neural Networks

2020-04-28Code Available1· sign in to hype

Alex Habeen Chang, Benjamin M. Case

Code Available — Be the first to reproduce this paper.

Reproduce

Code

Abstract

Privacy preserving machine learning is an active area of research usually relying on techniques such as homomorphic encryption or secure multiparty computation. Recent novel encryption techniques for performing machine learning using deep neural nets on images have recently been proposed by Tanaka and Sirichotedumrong, Kinoshita, and Kiya. We present new chosen-plaintext and ciphertext-only attacks against both of these proposed image encryption schemes and demonstrate the attacks' effectiveness on several examples.

Tasks

Reproductions