Affiliation:
1. School of Mathematics and Information Sciences, Guangzhou University, Guangzhou 510000, China
Abstract
Decision tree models are widely used for classification tasks in data mining. However, privacy becomes a significant concern when training data contain sensitive information from different parties. This paper proposes a novel framework for secure two-party decision tree classification that enables collaborative training and evaluation without leaking sensitive data. The critical techniques employed include homomorphic encryption, function secret sharing (FSS), and a custom secure comparison protocol. Homomorphic encryption allows computations on ciphertexts, enabling parties to evaluate an encrypted decision tree model jointly. FSS splits functions into secret shares to hide sensitive intermediate values. The comparison protocol leverages FSS to securely compare attribute values to node thresholds for tree traversal, reducing overhead through efficient cryptographic techniques. Our framework divides computation between two servers holding private data. A privacy-preserving protocol lets them jointly construct a decision tree classifier without revealing their respective inputs. The servers encrypt their data and exchange function secret shares to traverse the tree and obtain the classification result. Rigorous security proofs demonstrate that the protocol protects data confidentiality in a semihonest model. Experiments on benchmark datasets confirm that the approach achieves high accuracy with reasonable computation and communication costs. The techniques minimize accuracy loss and latency compared to prior protocols. Overall, the paper delivers an efficient, modular framework for practical two-party secure decision tree evaluation that advances the capability of privacy-preserving machine learning.
Funder
National Natural Science Foundation of China
Subject
Multidisciplinary,General Computer Science
Reference59 articles.
1. Data mining: practical machine learning tools and techniques;H. W. Ian;Annals of Physics,2011
2. Model inversion attacks that exploit confidence information and basic countermeasures;M. Fredrikson
3. Stealing machine learning models via prediction apis;F. Tramèr
4. A methodology for formalizing model-inversion attacks;X. Wu
5. Multiparty computation from threshold homomorphic encryption;R. Cramer,2001