Secure Quantized Training for Deep Learning
Not on the map. Why?
Abstract (arXiv)
We implement training of neural networks in secure multi-party computation (MPC) using quantization commonly used in said setting. We are the first to present an MNIST classifier purely trained in MPC that comes within 0.2 percent of the accuracy of the same convolutional neural network trained via plaintext computation. More concretely, we have trained a network with two convolutional and two dense layers to 99.2% accuracy in 3.5 hours (under one hour for 99% accuracy). We have also implemented AlexNet for CIFAR-10, which converges in a few hours. We develop novel protocols for exponentiation and inverse square root. Finally, we present experiments in a range of MPC security models for up to ten parties, both with honest and dishonest majority as well as semi-honest and malicious security.
Key facts. Cited by 15 papers in the map (data through 7 Oct 2026). Builds on 19 of its 78 references that are in the map. First posted on arXiv 1 Jul 2021.
Builds on
19 of 78 references.
References · 19
- 2014Adam: A Method for Stochastic Optimizationcited by 36,960
- 2015Batch Normalization: Accelerating Deep Network Training by Reducing Internal Covariate Shiftcited by 6,979
- 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,283
- 2019On the Convergence of Adam and Beyondcited by 834
- 2018Gazelle: A Low Latency Framework for Secure Neural Network Inferencecited by 193
- 2018Training Deep Neural Networks with 8-bit Floating Point Numberscited by 163
- 2015Fixed Point Quantization of Deep Convolutional Networkscited by 141
- 2018A generic framework for privacy preserving deep learningcited by 103
- 2020CrypTFlow2: Practical 2-Party Secure Inferencecited by 82
- 2017Training Quantized Nets: A Deeper Understandingcited by 74
- 2020FALCON: Honest-Majority Maliciously Secure Framework for Private Deep Learningcited by 74
- 2018Chameleon: A Hybrid Secure Computation Framework for Machine Learning Applicationscited by 67
7 more
- 2021CryptGPU: Fast Privacy-Preserving Machine Learning on the GPUcited by 46
- 2019QUOTIENT: Two-Party Secure Neural Network Training and Predictioncited by 41
- 2019Glyph: Fast and Accurately Training Deep Neural Networks on Encrypted Datacited by 28
- 2019Secure Evaluation of Quantized Neural Networkscited by 22
- 2018Private Machine Learning in TensorFlow using Secure Computationcited by 15
- 2021secureTF: A Secure TensorFlow Frameworkcited by 12
- 2020Effectiveness of MPC-friendly Softmax Replacementcited by 3
Built on by
Citing papers per year: 2022: 3; 2023: 4; 2024: 4; 2025: 3; 2026: 1.
15 papers.
Sort:
- 2022Secure Multiparty Computation for Synthetic Data Generation from Distributed Datacited by 6
- 2023Implementing Responsible AI: Tensions and Trade-Offs Between Ethics Aspectscited by 5
- 2023Attesting Distributional Properties of Training Data for Machine Learningcited by 5
- 2024UTrace: Poisoning Forensics for Private Collaborative Learningcited by 3
- 2024CryptoTrain: Fast Secure Training on Encrypted Datasetcited by 3
- 2022Tabula: Efficiently Computing Nonlinear Activation Functions for Secure Neural Network Inferencecited by 2
- 2023WW-FL: Secure and Private Large-Scale Federated Learningcited by 2
- 2022CECILIA: Comprehensive Secure Machine Learning Frameworkcited by 1
- 2025Covert Attacks on Machine Learning Training in Passively Secure MPCcited by 1
- 2025DictPFL: Efficient and Private Federated Learning on Encrypted Gradientscited by 1
- 2023Practical, Private Assurance of the Value of Collaboration via Fully Homomorphic Encryptioncited by 0
- 2024Spin: An Efficient Secure Computation Framework with GPU Accelerationcited by 0
3 more
- 2026Secure and Privacy-Preserving Vertical Federated Learning15 Apr 2026
- 2025DictPFL: Efficient and Private Federated Learning on Encrypted Gradients24 Oct 2025
- 2025Covert Attacks on Machine Learning Training in Passively Secure MPC21 May 2025
- 2025SLVR: Securely Leveraging Client Validation for Robust Federated Learning12 Feb 2025
- 2024End to End Collaborative Synthetic Data Generation4 Dec 2024
- 2024CryptoTrain: Fast Secure Training on Encrypted Dataset25 Sep 2024
- 2024UTrace: Poisoning Forensics for Private Collaborative Learning23 Sep 2024
- 2024Spin: An Efficient Secure Computation Framework with GPU Acceleration4 Feb 2024
- 2023Practical, Private Assurance of the Value of Collaboration via Fully Homomorphic Encryption4 Oct 2023
- 2023Attesting Distributional Properties of Training Data for Machine Learning18 Aug 2023
- 2023Implementing Responsible AI: Tensions and Trade-Offs Between Ethics Aspects17 Apr 2023
- 2023WW-FL: Secure and Private Large-Scale Federated Learning20 Feb 2023
- 2022Secure Multiparty Computation for Synthetic Data Generation from Distributed Datacited by 6
- 2023Implementing Responsible AI: Tensions and Trade-Offs Between Ethics Aspectscited by 5
- 2023Attesting Distributional Properties of Training Data for Machine Learningcited by 5
- 2024UTrace: Poisoning Forensics for Private Collaborative Learningcited by 3
- 2024CryptoTrain: Fast Secure Training on Encrypted Datasetcited by 3
- 2022Tabula: Efficiently Computing Nonlinear Activation Functions for Secure Neural Network Inferencecited by 2
- 2023WW-FL: Secure and Private Large-Scale Federated Learningcited by 2
- 2022CECILIA: Comprehensive Secure Machine Learning Frameworkcited by 1
- 2025Covert Attacks on Machine Learning Training in Passively Secure MPCcited by 1
- 2025DictPFL: Efficient and Private Federated Learning on Encrypted Gradientscited by 1
- 2023Practical, Private Assurance of the Value of Collaboration via Fully Homomorphic Encryptioncited by 0
- 2024Spin: An Efficient Secure Computation Framework with GPU Accelerationcited by 0
12 most cited of 15 All 15 (JSON)
- 2026Secure and Privacy-Preserving Vertical Federated Learning15 Apr 2026
- 2025DictPFL: Efficient and Private Federated Learning on Encrypted Gradients24 Oct 2025
- 2025Covert Attacks on Machine Learning Training in Passively Secure MPC21 May 2025
- 2025SLVR: Securely Leveraging Client Validation for Robust Federated Learning12 Feb 2025
- 2024End to End Collaborative Synthetic Data Generation4 Dec 2024
- 2024CryptoTrain: Fast Secure Training on Encrypted Dataset25 Sep 2024
- 2024UTrace: Poisoning Forensics for Private Collaborative Learning23 Sep 2024
- 2024Spin: An Efficient Secure Computation Framework with GPU Acceleration4 Feb 2024
- 2023Practical, Private Assurance of the Value of Collaboration via Fully Homomorphic Encryption4 Oct 2023
- 2023Attesting Distributional Properties of Training Data for Machine Learning18 Aug 2023
- 2023Implementing Responsible AI: Tensions and Trade-Offs Between Ethics Aspects17 Apr 2023
- 2023WW-FL: Secure and Private Large-Scale Federated Learning20 Feb 2023
12 newest of 15 All 15 (JSON)