Attacks on Image Encryption Schemes for Privacy-Preserving Deep Neural Networks
Cryptography and Security
2020-04-30 v2 Computer Vision and Pattern Recognition
Machine Learning
Abstract
Privacy preserving machine learning is an active area of research usually relying on techniques such as homomorphic encryption or secure multiparty computation. Recent novel encryption techniques for performing machine learning using deep neural nets on images have recently been proposed by Tanaka and Sirichotedumrong, Kinoshita, and Kiya. We present new chosen-plaintext and ciphertext-only attacks against both of these proposed image encryption schemes and demonstrate the attacks' effectiveness on several examples.
Cite
@article{arxiv.2004.13263,
title = {Attacks on Image Encryption Schemes for Privacy-Preserving Deep Neural Networks},
author = {Alex Habeen Chang and Benjamin M. Case},
journal= {arXiv preprint arXiv:2004.13263},
year = {2020}
}
Comments
For associated code, see https://github.com/ahchang98/image-encryption-scheme-attacks