mlsanityData to 7 Oct 2026

SHE: A Fast and Accurate Deep Neural Network for Encrypted Data

arXiv 1906.00148 ↗First posted 1 Jun 2019cs.CR cs.LGcited by 36

Not on the map. Why?

Abstract (arXiv)

Homomorphic Encryption (HE) is one of the most promising security solutions to emerging Machine Learning as a Service (MLaaS). Leveled-HE (LHE)-enabled Convolutional Neural Networks (LHECNNs) are proposed to implement MLaaS to avoid large bootstrapping overhead. However, prior LHECNNs have to pay significant computing overhead but achieve only low inference accuracy, due to their polynomial approximation activations and poolings. Stacking many polynomial approximation activation layers in a network greatly reduces inference accuracy, since the polynomial approximation activation errors lead to a low distortion of the output distribution of the next batch normalization layer. So the polynomial approximation activations and poolings have become the obstacle to a fast and accurate LHECNN model. In this paper, we propose a Shift-accumulation-based LHE-enabled deep neural network (SHE) for fast and accurate inferences on encrypted data. We use the binary-operation-friendly Leveled Fast Homomorphic Encryption over Torus (LTFHE) encryption scheme to implement ReLU activations and max poolings. We also adopt the logarithmic quantization to accelerate inferences by replacing expensive LTFHE multiplications with cheap LTFHE shifts. We propose a mixed bitwidth accumulator to accelerate accumulations. Since the LTFHE ReLU activations, max poolings, shifts and accumulations have small multiplicative depth overhead, SHE can implement much deeper network architectures with more convolutional and activation layers. Our experimental results show SHE achieves the state-of-the-art inference accuracy and reduces the inference latency by 76.21% ~ 94.23% over prior LHECNNs on MNIST and CIFAR-10. The source code of SHE is available at https://github.com/qianlou/SHE.

Key facts. Cited by 36 papers in the map (data through 7 Oct 2026). First posted on arXiv 1 Jun 2019.

Builds on

No reference list yet.

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2021: 3; 2022: 6; 2023: 8; 2024: 11; 2025: 6; 2026: 2.

36 papers.

Sort:

By area:

  1. 2021Privacy-Preserving Machine Learning with Fully Homomorphic Encryption for Deep Neural Networkcited by 57
  2. 2023Deep Neural Networks for Encrypted Inference with TFHEcited by 11
  3. 2023A2Q: Accumulator-Aware Quantization with Guaranteed Overflow Avoidancecited by 11
  4. 2022CryptoGCN: Fast and Scalable Homomorphically Encrypted Graph Convolutional Network Inferencecited by 10
  5. 2023HyPHEN: A Hybrid Packing Method and Optimizations for Homomorphic Encryption-Based Neural Networkscited by 9
  6. 2025CipherPrune: Efficient and Scalable Private Transformer Inferencecited by 9
  7. 2022FedVLN: Privacy-preserving Federated Vision-and-Language Navigationcited by 8
  8. 2022Hiding Visual Information via Obfuscating Adversarial Perturbationscited by 7
  9. 2024PrivCirNet: Efficient Private Inference via Block Circulant Transformationcited by 7
  10. 2022Private and Reliable Neural Network Inferencecited by 6
  11. 2024A2Q+: Improving Accumulator-Aware Weight Quantizationcited by 5
  12. 2022RL-DistPrivacy: Privacy-Aware Distributed Deep Inference for low latency IoT systemscited by 4
24 more
  1. 2023TT-TFHE: a Torus Fully Homomorphic Encryption-Friendly Neural Network Architecturecited by 4
  2. 2023Optimized Layerwise Approximation for Efficient Private Inference on Fully Homomorphic Encryptioncited by 4
  3. 2024Accumulator-Aware Post-Training Quantization for Large Language Modelscited by 4
  4. 2025TFHE-Coder: Evaluating LLM-agentic Fully Homomorphic Encryption Code Generationcited by 4
  5. 2023Quantized Neural Networks for Low-Precision Accumulation with Guaranteed Overflow Avoidancecited by 3
  6. 2024CryptoTrain: Fast Secure Training on Encrypted Datasetcited by 3
  7. 2021SoK: Privacy-preserving Deep Learning with Homomorphic Encryptioncited by 2
  8. 2023Inhibitor Transformers and Gated RNNs for Torus Efficient Fully Homomorphic Encryptioncited by 2
  9. 2024From Algorithm to Hardware: A Survey on Efficient and Safe Deployment of Deep Neural Networkscited by 2
  10. 2025Securing Transformer-based AI Execution via Unified TEEs and Crypto-protected Acceleratorscited by 2
  11. 2021Efficient CNN Building Blocks for Encrypted Datacited by 1
  12. 2024Bi-CryptoNets: Leveraging Different-Level Privacy for Encrypted Inferencecited by 1
  13. 2024DCT-CryptoNets: Scaling Private Inference in the Frequency Domaincited by 1
  14. 2024SoK: Towards Security and Safety of Edge AIcited by 1
  15. 2025Privacy-Preserving Chest X-ray Classification in Latent Space with Homomorphically Encrypted Neural Inferencecited by 1
  16. 2025DictPFL: Efficient and Private Federated Learning on Encrypted Gradientscited by 1
  17. 2022On the Evaluation of User Privacy in Deep Neural Networks using Timing Side Channelcited by 0
  18. 2023The Inhibitor: ReLU and Addition-Based Attention for Efficient Transformers under Fully Homomorphic Encryption on the Toruscited by 0
  19. 2024Homomorphic WiSARDs: Efficient Weightless Neural Network training over encrypted datacited by 0
  20. 2024Privacy-Preserving and Trustworthy Deep Learning for Medical Imagingcited by 0
  21. 2024Attack GAN (AGAN ): A new Security Evaluation Tool for Perceptual Encryptioncited by 0
  22. 2025SecPE: Secure Prompt Ensembling for Private and Robust Large Language Modelscited by 0
  23. 2026RobPI: Robust Private Inference against Malicious Clientcited by 0
  24. 2026EI-DDLGN: Efficient Encrypted Inference with Deep Differentiable Logic Gate Networks under TFHEcited by 0