Search papers, labs, and topics across Lattice.
This paper introduces a topology-guided framework for privacy-aware split learning that leverages the persistent Betti complexity of smashed activations to mitigate privacy risks associated with intermediate representations. Through a detailed layer-wise analysis, the authors reveal that privacy vulnerabilities are unevenly distributed across layers, with significant increases in feature inversion fidelity at deeper split points. The proposed BettiSafe strategy enhances resistance to feature inversion by 2 to 5 times compared to traditional depth-based methods while maintaining classification accuracy, showcasing the potential of topological complexity in secure collaborative learning systems.
Topological complexity can dramatically enhance privacy in split learning, improving resistance to feature inversion by up to 5 times without sacrificing model performance.
Split learning enables collaborative model training by partitioning neural networks across clients and servers. However, improper split placement can lead to severe privacy leakage through intermediate representations. In this work, we propose a topology-guided framework for privacy-aware split learning based on the persistent Betti complexity of smashed activations. Through comprehensive layer-wise analysis, we show that privacy risk in split learning is highly non-uniform across layers and exhibits sharp transition regions that are not captured by architectural depth alone. In particular, feature inversion fidelity increases from negligible reconstruction to as high as 0.98 SSIM at deeper, privacy-critical split points. We further demonstrate that Betti complexity consistently identifies representation regimes associated with elevated feature-space privacy leakage across architectures and datasets. Leveraging this observation, we introduce BettiSafe, a topology-guided split selection strategy that identifies privacy-sensitive layers without requiring explicit attack execution. BettiSafe improves resistance to feature inversion by 2 to 5 times compared to depth-based heuristics while preserving classification accuracy. In addition, Betti-based regularisation increases inversion difficulty by nearly 5 x without degrading model utility, enabling a favourable privacy utility tradeoff. Overall, our results highlight topological complexity as a promising structural descriptor for secure, adaptive, and representation-aware split learning in real-world collaborative systems
