We present a practical method for protecting data during the inference phase
of deep learning based on bipartite topology threat modeling and an interactive
adversarial deep network construction. We term this approach \emph{Privacy
Partitioning}. In the proposed framework, we split the machine learning models
and deploy a few layers into users' local devices, and the rest of the layers
into a remote server. We propose an approach to protect user's data during the
inference phase, while still achieve good classification accuracy.
We conduct an experimental evaluation of this approach on benchmark datasets
of three computer vision tasks. The experimental results indicate that this
approach can be used to significantly attenuate the capacity for an adversary
with access to the state-of-the-art deep network's intermediate states to learn
privacy-sensitive inputs to the network. For example, we demonstrate that our
approach can prevent attackers from inferring the private attributes such as
gender from the Face image dataset without sacrificing the classification
accuracy of the original machine learning task such as Face Identification.

提出了一种名为 “Privacy Partitioning” 的方法，通过将机器学习模型拆分并部署到本地设备和远程服务器中，保护用户数据，防止对状态最先进的深度网络的中间状态进行攻击并推断出隐私敏感的输入。（该方法）能够在不影响分类准确性的情况下有效削弱攻击者获得隐私敏感信息的能力。