DeepReDuce: ReLU Reduction for Fast Private Inference
Not on the map. Why?
Abstract (arXiv)
The recent rise of privacy concerns has led researchers to devise methods for private neural inference -- where inferences are made directly on encrypted data, never seeing inputs. The primary challenge facing private inference is that computing on encrypted data levies an impractically-high latency penalty, stemming mostly from non-linear operators like ReLU. Enabling practical and private inference requires new optimization methods that minimize network ReLU counts while preserving accuracy. This paper proposes DeepReDuce: a set of optimizations for the judicious removal of ReLUs to reduce private inference latency. The key insight is that not all ReLUs contribute equally to accuracy. We leverage this insight to drop, or remove, ReLUs from classic networks to significantly reduce inference latency and maintain high accuracy. Given a target network, DeepReDuce outputs a Pareto frontier of networks that tradeoff the number of ReLUs and accuracy. Compared to the state-of-the-art for private inference DeepReDuce improves accuracy and reduces ReLU count by up to 3.5% (iso-ReLU count) and 3.5× (iso-accuracy), respectively.
Key facts. Cited by 50 papers in the map (data through 7 Oct 2026). Builds on 17 of its 42 references that are in the map. First posted on arXiv 2 Mar 2021.
Builds on
17 of 42 references.
References · 17
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2015Distilling the Knowledge in a Neural Networkcited by 10,076
- 2016Densely Connected Convolutional Networkscited by 6,691
- 2019EfficientNet: Rethinking Model Scaling for Convolutional Neural Networkscited by 6,415
- 2018MobileNetV2: Inverted Residuals and Linear Bottleneckscited by 4,773
- 2017MobileNets: Efficient Convolutional Neural Networks for Mobile Vision Applicationscited by 3,827
- 2016Wide Residual Networkscited by 3,057
- 2016Aggregated Residual Transformations for Deep Neural Networkscited by 2,540
- 2016Paying More Attention to Attention: Improving the Performance of Convolutional Neural Networks via Attention Transfercited by 1,059
- 2019On the Efficacy of Knowledge Distillationcited by 377
- 2020Knowledge Distillation and Student-Teacher Learning for Visual Intelligence: A Review and New Outlookscited by 312
5 more
- 2019Approximating CNNs with Bag-of-local-Features models works surprisingly well on ImageNetcited by 260
- 2018Gazelle: A Low Latency Framework for Secure Neural Network Inferencecited by 193
- 2017CondenseNet: An Efficient DenseNet using Learned Group Convolutionscited by 121
- 2018A Closer Look at Deep Learning Heuristics: Learning rate restarts, Warmup and Distillationcited by 110
- 2020CryptoNAS: Private Inference on a ReLU Budgetcited by 40
Built on by
Citing papers per year: 2021: 4; 2022: 10; 2023: 16; 2024: 12; 2025: 3; 2026: 5.
50 papers.
Sort:
By area:
- 2022Selective Network Linearization for Efficient Private Inferencecited by 31
- 2022Scaling up Trustless DNN Inference with Zero-Knowledge Proofscited by 30
- 2023AutoReP: Automatic ReLU Replacement for Fast Private Network Inferencecited by 29
- 2023LinGCN: Structural Linearized Graph Convolutional Network for Homomorphically Encrypted Inferencecited by 26
- 2023Learning to Linearize Deep Neural Networks for Secure and Efficient Private Inferencecited by 20
- 2022MPCViT: Searching for Accurate and Efficient MPC-Friendly Vision Transformer with Heterogeneous Attentioncited by 19
- 2021Circa: Stochastic ReLUs for Private Deep Learningcited by 16
- 2021Sphynx: ReLU-Efficient Network Design for Private Inferencecited by 15
- 2023AutoFHE: Automated Adaption of CNNs for Efficient Evaluation over FHEcited by 15
- 2021Layer Folding: Neural Network Depth Reduction using Activation Linearizationcited by 14
- 2021Sisyphus: A Cautionary Tale of Using Low-Degree Polynomial Activations in Privacy-Preserving Deep Learningcited by 14
- 2022AESPA: Accuracy Preserving Low-degree Polynomial Activation for Fast Private Inferencecited by 14
38 more
- 2023RRNet: Towards ReLU-Reduced Neural Network for Two-party Computation Based Private Inferencecited by 12
- 2022CryptoGCN: Fast and Scalable Homomorphically Encrypted Graph Convolutional Network Inferencecited by 10
- 2024PrivCirNet: Efficient Private Inference via Block Circulant Transformationcited by 7
- 2022Private and Reliable Neural Network Inferencecited by 6
- 2023Training Large Scale Polynomial CNNs for E2E Inference over Homomorphic Encryptioncited by 5
- 2024MPC-Minimized Secure LLM Inferencecited by 5
- 2022MPC-Pipe: an Efficient Pipeline Scheme for Secure Multi-party Machine Learning Inferencecited by 4
- 2023Making Models Shallow Again: Jointly Learning to Reduce Non-Linearity and Depth for Latency-Efficient Private Inferencecited by 4
- 2023Fast and Private Inference of Deep Neural Networks by Co-designing Activation Functionscited by 4
- 2023PriViT: Vision Transformers for Fast Private Inferencecited by 4
- 2023Optimized Layerwise Approximation for Efficient Private Inference on Fully Homomorphic Encryptioncited by 4
- 2024Privacy-Preserving Diffusion Model Using Homomorphic Encryptioncited by 4
- 2024The Simpler The Better: An Entropy-Based Importance Metric To Reduce Neural Networks' Depthcited by 3
- 2024ReLU's Revival: On the Entropic Overload in Normalization-Free Large Language Modelscited by 3
- 2022Tabula: Efficiently Computing Nonlinear Activation Functions for Secure Neural Network Inferencecited by 2
- 2022Efficient ML Models for Practical Secure Inferencecited by 2
- 2022PolyMPCNet: Towards ReLU-free Neural Architecture Search in Two-party Computation Based Private Inferencecited by 2
- 2023Approximating ReLU on a Reduced Ring for Efficient MPC-based Private Inferencecited by 2
- 2024HEQuant: Marrying Homomorphic Encryption and Quantization for Communication-Efficient Private Inferencecited by 2
- 2024Disparate Impact on Group Accuracy of Linearization for Private Inferencecited by 2
- 2023Securing Neural Networks with Knapsack Optimizationcited by 1
- 2023NetBooster: Empowering Tiny Deep Learning By Standing on the Shoulders of Deep Giantscited by 1
- 2023Towards Fast and Scalable Private Inferencecited by 1
- 2023LayerCollapse: Adaptive compression of neural networkscited by 1
- 2024Neural Networks with (Low-Precision) Polynomial Approximations: New Insights and Techniques for Accuracy Improvementcited by 1
- 2024DCT-CryptoNets: Scaling Private Inference in the Frequency Domaincited by 1
- 2024PrivQuant: Communication-Efficient Private Inference with Quantized Network/Protocol Co-Optimizationcited by 1
- 2025CrypTorch: PyTorch-based Auto-tuning Compiler for Machine Learning with Multi-party Computationcited by 1
- 2026ATLAS: Automated Approximation of Transformers for Efficient Homomorphic Inference in One Hourcited by 1
- 2023Regularized PolyKervNets: Optimizing Expressiveness and Efficiency for Private Inference in Deep Neural Networkscited by 0
- 2024Linearizing Models for Efficient yet Robust Private Inferencecited by 0
- 2024xMLP: Revolutionizing Private Inference with Exclusive Square Activationcited by 0
- 2025Coordinate Descent for Network Linearizationcited by 0
- 2025DeepShare: Sharing ReLU Across Channels and Layers for Efficient Private Inferencecited by 0
- 2026UFO: Unlocking Ultra-Efficient Quantized Private Inference with Protocol and Algorithm Co-Optimizationcited by 0
- 2026Meeting in the Middle: A Co-Design Paradigm for FHE and AI Inferencecited by 0
- 2026PRISM: Sensitivity-Aware PolynoMial PRuning for EffIcient Neural Network Encryptioncited by 0
- 2026HEAT: Faster Fully Homomorphic Inference via Approximations-Weights Co-Adaptationcited by 0
- 2026HEAT: Faster Fully Homomorphic Inference via Approximations-Weights Co-Adaptation1 Sep 2026
- 2026ATLAS: Automated Approximation of Transformers for Efficient Homomorphic Inference in One Hour26 Jul 2026
- 2026PRISM: Sensitivity-Aware PolynoMial PRuning for EffIcient Neural Network Encryption20 Jul 2026
- 2026Meeting in the Middle: A Co-Design Paradigm for FHE and AI Inference20 Mar 2026
- 2026UFO: Unlocking Ultra-Efficient Quantized Private Inference with Protocol and Algorithm Co-Optimization21 Feb 2026
- 2025DeepShare: Sharing ReLU Across Channels and Layers for Efficient Private Inference19 Dec 2025
- 2025CrypTorch: PyTorch-based Auto-tuning Compiler for Machine Learning with Multi-party Computation24 Nov 2025
- 2025Coordinate Descent for Network Linearization14 Nov 2025
- 2024ReLU's Revival: On the Entropic Overload in Normalization-Free Large Language Models12 Oct 2024
- 2024PrivQuant: Communication-Efficient Private Inference with Quantized Network/Protocol Co-Optimization12 Oct 2024
- 2024DCT-CryptoNets: Scaling Private Inference in the Frequency Domain27 Aug 2024
- 2024MPC-Minimized Secure LLM Inference7 Aug 2024
38 more
- 2024PrivCirNet: Efficient Private Inference via Block Circulant Transformation23 May 2024
- 2024The Simpler The Better: An Entropy-Based Importance Metric To Reduce Neural Networks' Depth27 Apr 2024
- 2024xMLP: Revolutionizing Private Inference with Exclusive Square Activation12 Mar 2024
- 2024Privacy-Preserving Diffusion Model Using Homomorphic Encryption9 Mar 2024
- 2024Neural Networks with (Low-Precision) Polynomial Approximations: New Insights and Techniques for Accuracy Improvement17 Feb 2024
- 2024Linearizing Models for Efficient yet Robust Private Inference8 Feb 2024
- 2024Disparate Impact on Group Accuracy of Linearization for Private Inference6 Feb 2024
- 2024HEQuant: Marrying Homomorphic Encryption and Quantization for Communication-Efficient Private Inference29 Jan 2024
- 2023Regularized PolyKervNets: Optimizing Expressiveness and Efficiency for Private Inference in Deep Neural Networks23 Dec 2023
- 2023LayerCollapse: Adaptive compression of neural networks29 Nov 2023
- 2023Optimized Layerwise Approximation for Efficient Private Inference on Fully Homomorphic Encryption16 Oct 2023
- 2023AutoFHE: Automated Adaption of CNNs for Efficient Evaluation over FHE12 Oct 2023
- 2023PriViT: Vision Transformers for Fast Private Inference6 Oct 2023
- 2023LinGCN: Structural Linearized Graph Convolutional Network for Homomorphically Encrypted Inference25 Sep 2023
- 2023Approximating ReLU on a Reduced Ring for Efficient MPC-based Private Inference9 Sep 2023
- 2023AutoReP: Automatic ReLU Replacement for Fast Private Network Inference20 Aug 2023
- 2023Towards Fast and Scalable Private Inference9 Jul 2023
- 2023NetBooster: Empowering Tiny Deep Learning By Standing on the Shoulders of Deep Giants23 Jun 2023
- 2023Fast and Private Inference of Deep Neural Networks by Co-designing Activation Functions14 Jun 2023
- 2023Training Large Scale Polynomial CNNs for E2E Inference over Homomorphic Encryption26 Apr 2023
- 2023Making Models Shallow Again: Jointly Learning to Reduce Non-Linearity and Depth for Latency-Efficient Private Inference26 Apr 2023
- 2023Securing Neural Networks with Knapsack Optimization20 Apr 2023
- 2023RRNet: Towards ReLU-Reduced Neural Network for Two-party Computation Based Private Inference5 Feb 2023
- 2023Learning to Linearize Deep Neural Networks for Secure and Efficient Private Inference23 Jan 2023
- 2022MPCViT: Searching for Accurate and Efficient MPC-Friendly Vision Transformer with Heterogeneous Attention25 Nov 2022
- 2022Private and Reliable Neural Network Inference27 Oct 2022
- 2022Scaling up Trustless DNN Inference with Zero-Knowledge Proofs17 Oct 2022
- 2022MPC-Pipe: an Efficient Pipeline Scheme for Secure Multi-party Machine Learning Inference27 Sep 2022
- 2022CryptoGCN: Fast and Scalable Homomorphically Encrypted Graph Convolutional Network Inference24 Sep 2022
- 2022PolyMPCNet: Towards ReLU-free Neural Architecture Search in Two-party Computation Based Private Inference20 Sep 2022
- 2022Efficient ML Models for Practical Secure Inference26 Aug 2022
- 2022Tabula: Efficiently Computing Nonlinear Activation Functions for Secure Neural Network Inference5 Mar 2022
- 2022Selective Network Linearization for Efficient Private Inference4 Feb 2022
- 2022AESPA: Accuracy Preserving Low-degree Polynomial Activation for Fast Private Inference18 Jan 2022
- 2021Sisyphus: A Cautionary Tale of Using Low-Degree Polynomial Activations in Privacy-Preserving Deep Learning26 Jul 2021
- 2021Sphynx: ReLU-Efficient Network Design for Private Inference17 Jun 2021
- 2021Layer Folding: Neural Network Depth Reduction using Activation Linearization17 Jun 2021
- 2021Circa: Stochastic ReLUs for Private Deep Learning15 Jun 2021
- 2022Selective Network Linearization for Efficient Private Inferencecited by 31
- 2022Scaling up Trustless DNN Inference with Zero-Knowledge Proofscited by 30
- 2023AutoReP: Automatic ReLU Replacement for Fast Private Network Inferencecited by 29
- 2023LinGCN: Structural Linearized Graph Convolutional Network for Homomorphically Encrypted Inferencecited by 26
- 2023Learning to Linearize Deep Neural Networks for Secure and Efficient Private Inferencecited by 20
- 2022MPCViT: Searching for Accurate and Efficient MPC-Friendly Vision Transformer with Heterogeneous Attentioncited by 19
- 2021Circa: Stochastic ReLUs for Private Deep Learningcited by 16
- 2021Sphynx: ReLU-Efficient Network Design for Private Inferencecited by 15
- 2023AutoFHE: Automated Adaption of CNNs for Efficient Evaluation over FHEcited by 15
- 2021Layer Folding: Neural Network Depth Reduction using Activation Linearizationcited by 14
- 2021Sisyphus: A Cautionary Tale of Using Low-Degree Polynomial Activations in Privacy-Preserving Deep Learningcited by 14
- 2022AESPA: Accuracy Preserving Low-degree Polynomial Activation for Fast Private Inferencecited by 14
12 most cited of 49 All 49 (JSON)
- 2026HEAT: Faster Fully Homomorphic Inference via Approximations-Weights Co-Adaptation1 Sep 2026
- 2026ATLAS: Automated Approximation of Transformers for Efficient Homomorphic Inference in One Hour26 Jul 2026
- 2026PRISM: Sensitivity-Aware PolynoMial PRuning for EffIcient Neural Network Encryption20 Jul 2026
- 2026Meeting in the Middle: A Co-Design Paradigm for FHE and AI Inference20 Mar 2026
- 2026UFO: Unlocking Ultra-Efficient Quantized Private Inference with Protocol and Algorithm Co-Optimization21 Feb 2026
- 2025DeepShare: Sharing ReLU Across Channels and Layers for Efficient Private Inference19 Dec 2025
- 2025CrypTorch: PyTorch-based Auto-tuning Compiler for Machine Learning with Multi-party Computation24 Nov 2025
- 2025Coordinate Descent for Network Linearization14 Nov 2025
- 2024ReLU's Revival: On the Entropic Overload in Normalization-Free Large Language Models12 Oct 2024
- 2024PrivQuant: Communication-Efficient Private Inference with Quantized Network/Protocol Co-Optimization12 Oct 2024
- 2024DCT-CryptoNets: Scaling Private Inference in the Frequency Domain27 Aug 2024
- 2024MPC-Minimized Secure LLM Inference7 Aug 2024
12 newest of 49 All 49 (JSON)