Document Type

Article

Publication Date

2025

Publication Title

Transactions on Machine Learning Research

Volume

Advance online publication

Pages

1-16

Abstract

Private inference applies cryptographic techniques like homomorphic encryption, garble circuit and secret sharing to keep both sides privacy in a client-server setting during inference. It is often hindered by the high communication overheads, especially at non-linear activation layers such as ReLU. Hence ReLU pruning has been widely recognized as an efficient way to accelerate private inference. Existing approaches to ReLU pruning typically rely on coarse hypothesis, which assume an inverse correlation between the importance of ReLU and linear layers or shallow activation layers have less importance for universal models, to assign the budgets according to the layer while preserving the inference accuracy. However, these assumptions are based on limited empirical evidence and can fail to generalize to diverse model architectures. In this work, we introduce a finer-granularity ReLU budget assignment approach by assessing the layer-wise importance of ReLU with the Shapley value. To address the computational burden of exact Shapley value calculation, we propose a tree-trimming algorithm for fast estimation. We provide both theoretical guarantees and empirical validation of our method. Our extensive experiments show that we achieve better efficiency and accuracy than the state-of-the-art across diverse model architectures, activation functions, and datasets. Specifically, we only need ~2.5 fewer ReLU operations to achieve a similar inference accuracy and gains up to ~8.13% increase on inference accuracy with similar ReLU budgets.

Rights

© 2025 The Authors.

Licensed under a Creative Commons Attribution 4.0 International (CC BY 4.0) License.

Original Publication Citation

Xu, X., Wang, Z., Ning, R., Xin, C., & Wu, H. (2025). PrivShap: A finer-granularity network linearization method for private inference. Transactions on Machine Learning Research. Advance online publication. https://openreview.net/forum?id=7TliYmJr2m

ORCID

0000-0003-4050-6252 (Ning)

Share

COinS