VeriML : Enabling Integrity Assurances and Fair Payments for Machine Learning as a Service

Research output: Journal Publications and Reviews (RGC: 21, 22, 62)21_Publication in refereed journalpeer-review

View graph of relations


  • Lingchen Zhao
  • Qian Wang
  • Qi Li
  • Chao Shen
  • Bo Feng

Related Research Unit(s)


Original languageEnglish
Pages (from-to)2524-2540
Journal / PublicationIEEE Transactions on Parallel and Distributed Systems
Issue number10
Online published23 Mar 2021
Publication statusOnline published - 23 Mar 2021


Machine Learning as a Service (MLaaS) allows clients with limited resources to outsource their expensive ML tasks topowerful servers. Despite the huge benefits, current MLaaS solutions still lack strong assurances on: 1) service correctness (i.e.,whether the MLaaS works as expected); 2) trustworthy accounting (i.e., whether the bill for the MLaaS resource consumption iscorrectly accounted); 3) fair payment (i.e., whether a client gets the entire MLaaS result before making the payment). Without theseassurances, unfaithful service providers can return improperly-executed ML task results or partially-trained ML models while asking forover-claimed rewards. Moreover, it is hard to argue for wide adoption of MLaaS to both the client and the service provider, especially inthe open market without a trusted third party.In this paper, we present VeriML, a novel and efficient framework to bring integrity assurances and fair payments to MLaaS. WithVeriML, clients can be assured that ML tasks are correctly executed on an untrusted server , and the resource consumption claimed bythe service provider equals to the actual workload. We strategically use succinct non-interactive arguments of knowledge (SNARK) onrandomly-selected iterations during the ML training phase for efficiency with tunable probabilistic assurance. We also develop multipleML-specific optimizations to the arithmetic circuit required by SNARK. Our system implements six common algorithms: linearregression, logistic regression, neural network, support vector machine, K-means and decision tree. The experimental results havevalidated the practical performance of VeriML.

Research Area(s)

  • Computational modeling, machine learning, Machine learning, Optimization, Predictive models, secure outsourcing, Servers, Task analysis, Training, Verifiable computation

Citation Format(s)