Machine learning model validation and authentication
The present disclosure is directed to methods and apparatus for validating and authenticating use of machine learning models. For example, various techniques are described herein to limit the vulnerability of machine learning models to attack and/or exploitation of the model for malicious use, and for detecting when such attack/exploitation has occurred. Additionally, various embodiments described herein promote the protection of sensitive and/or valuable data, for example by ensuring only licensed use is permissible. Moreover, techniques are described for version tracking, usage tracking, permission tracking, and evolution of machine learning models.
1. A method implemented using one or more processors, comprising:
providing an encryption key that is associated with a particular entity, wherein the particular entity has access to a machine learning model that is trained to generate one or more outputs based on data applied across a plurality of inputs;
encrypting one or more parameters of the trained machine learning model using the encryption key;
encrypting input data to be applied as input across the trained machine learning model;
applying the encrypted input data as input across the encrypted trained machine learning model to generate encrypted output;
decrypting the encrypted output using a decryption key to generate decrypted output;
analyzing the decrypted output using the decryption key to determine that one or more of the parameters of the trained machine learning model have been compromised; and
causing one or more computing devices to provide output that indicates that the one or more parameters of the trained machine learning model have been compromised.
2. The method of claim 1 , wherein encrypting the one or more parameters is performed using homomorphic encryption.
3. The method of claim 2 , wherein encrypting the input data is performed using homomorphic encryption.
4. The method of claim 1 , wherein the analyzing includes determining whether the decrypted output complies with an expected output structure.
5. The method of claim 4 , wherein the determining includes determined whether one or more output values of the decrypted output fall within a particular range.
6. The method of claim 4 , wherein the determining includes determining whether multiple output values of the decrypted output collectively add up to a predetermined value.
7. The method of claim 1 , wherein the particular entity accesses the trained machine learning model using a software application executing on a computing device operated by the particular entity.
8. The method of claim 7 , further comprising configuring the software application to encrypt the input data in response to one or more events.
9. The method of claim 8 , wherein the one or more events include a user associated with the particular entity operating the software application to perform a task that includes application of the input data across the trained machine learning model.
10. The method of claim 1 , wherein the trained machine learning model comprises a generative adversarial network, a convolutional neural network, or a recurrent neural network.
11. The method of claim 1 , wherein the digital key is unique to the particular entity and the trained machine learning model.
12. A system comprising one or more processors and memory storing instructions that, in response to execution of the instructions by the one or more processors, cause the one or more processors to perform the following operations:
providing an encryption key that is associated with a particular entity, wherein the particular entity has access to a machine learning model that is trained to generate one or more outputs based on data applied across a plurality of inputs;
encrypting one or more parameters of the trained machine learning model using the encryption key;
encrypting input data to be applied as input across the trained machine learning model;
applying the encrypted input data as input across the encrypted trained machine learning model to generate encrypted output;
decrypting the encrypted output using a decryption key to generate decrypted output;
analyzing the decrypted output using the decryption key to determine that one or more of the parameters of the trained machine learning model have been compromised; and
causing one or more computing devices to provide output that indicates that the one or more parameters of the trained machine learning model have been compromised.
13. The system of claim 12 , wherein encrypting the one or more parameters is performed using homomorphic encryption.
14. The system of claim 13 , wherein encrypting the input data is performed using homomorphic encryption.
15. The system of claim 12 , wherein the analyzing includes determining whether the decrypted output complies with an expected output structure.
16. The system of claim 15 , wherein the determining includes determined whether one or more output values of the decrypted output fall within a particular range.
17. The system of claim 15 , wherein the determining includes determining whether multiple output values of the decrypted output collectively add up to a predetermined value.
18. The system of claim 12 , wherein the particular entity accesses the trained machine learning model using a software application executing on a computing device operated by the particular entity.
19. The system of claim 12 , wherein the trained machine learning model comprises a generative adversarial network, a convolutional neural network, or a recurrent neural network.
20. At least one non-transitory computer-readable medium comprising instructions that, in response to execution of the instructions by one or more processors, cause the one or more processors to perform the following operations:
providing an encryption key that is associated with a particular entity, wherein the particular entity has access to a machine learning model that is trained to generate one or more outputs based on data applied across a plurality of inputs;
encrypting one or more parameters of the trained machine learning model using the encryption key;
encrypting input data to be applied as input across the trained machine learning model;
applying the encrypted input data as input across the encrypted trained machine learning model to generate encrypted output;
decrypting the encrypted output using a decryption key to generate decrypted output;
analyzing the decrypted output using the decryption key to determine that one or more of the parameters of the trained machine learning model have been compromised; and
causing one or more computing devices to provide output that indicates that the one or more parameters of the trained machine learning model have been compromised.