(2021) MLCapsule: Guarded Offline Deployment of Machine Learning as a Service.
Abstract
Machine Learning as a Service (MLaaS) is a popular and convenient way to access a trained machine learning (ML) model trough an API. However, if the user's input is sensitive, sending it to the server is not an option. Equally, the service provider does not want to share the model by sending it to the client for protecting its intellectual property and pay-per-query business model. As a solution, we propose MLCapsule, a guarded offline deployment of MLaaS. MLCapsule executes the machine learning model locally on the user's client and therefore the data never leaves the client. Meanwhile, we show that MLCapsule is able to offer the service provider the same level of control and security of its model as the commonly used server-side execution. Beyond protecting against direct model access, we demonstrate that MLCapsule allows for implementing defenses against advanced attacks on machine learning models such as model stealing, reverse engineering and membership inference.
| Item Type: | Conference or Workshop Item (A Paper) (Paper) |
|---|---|
| Divisions: | Lucjan Hanzlik (LH) Mario Fritz (MF) Michael Backes (InfSec) Yang Zhang (YZ) |
| Conference: | ECCV European Conference on Computer Vision |
| Depositing User: | Tobias Lorenz |
| Date Deposited: | 21 Jun 2021 12:05 |
| Last Modified: | 21 Jun 2021 12:05 |
| Primary Research Area: | NRA1: Trustworthy Information Processing |
| URI: | https://publications.cispa.saarland/id/eprint/3435 |
Actions
Actions (login required)
 |
View Item |