Document Type
Article
Publication Date
2025
Publication Title
Transactions on Machine Learning Research
Volume
Advance online publication
Pages
1-16
Abstract
Private inference applies cryptographic techniques like homomorphic encryption, garble circuit and secret sharing to keep both sides privacy in a client-server setting during inference. It is often hindered by the high communication overheads, especially at non-linear activation layers such as ReLU. Hence ReLU pruning has been widely recognized as an efficient way to accelerate private inference. Existing approaches to ReLU pruning typically rely on coarse hypothesis, which assume an inverse correlation between the importance of ReLU and linear layers or shallow activation layers have less importance for universal models, to assign the budgets according to the layer while preserving the inference accuracy. However, these assumptions are based on limited empirical evidence and can fail to generalize to diverse model architectures. In this work, we introduce a finer-granularity ReLU budget assignment approach by assessing the layer-wise importance of ReLU with the Shapley value. To address the computational burden of exact Shapley value calculation, we propose a tree-trimming algorithm for fast estimation. We provide both theoretical guarantees and empirical validation of our method. Our extensive experiments show that we achieve better efficiency and accuracy than the state-of-the-art across diverse model architectures, activation functions, and datasets. Specifically, we only need ~2.5 fewer ReLU operations to achieve a similar inference accuracy and gains up to ~8.13% increase on inference accuracy with similar ReLU budgets.
Rights
© 2025 The Authors.
Licensed under a Creative Commons Attribution 4.0 International (CC BY 4.0) License.
Original Publication Citation
Xu, X., Wang, Z., Ning, R., Xin, C., & Wu, H. (2025). PrivShap: A finer-granularity network linearization method for private inference. Transactions on Machine Learning Research. Advance online publication. https://openreview.net/forum?id=7TliYmJr2m
Repository Citation
Xu, X., Wang, Z., Ning, R., Xin, C., & Wu, H. (2025). PrivShap: A finer-granularity network linearization method for private inference. Transactions on Machine Learning Research. Advance online publication. https://openreview.net/forum?id=7TliYmJr2m
ORCID
0000-0003-4050-6252 (Ning)
Included in
Artificial Intelligence and Robotics Commons, Cybersecurity Commons, Data Science Commons, Information Security Commons