The DOI matches its DataCite record; 18 of the 19 references it cites were found in a registry or an index.
Learning to Protect Communications with Adversarial Neural Cryptography
Open accessAbstract
We ask whether neural networks can learn to use secret keys to protect information from other neural networks. Specifically, we focus on ensuring confidentiality properties in a multiagent system, and we specify those properties in terms of an adversary. Thus, a system may consist of neural networks named Alice and Bob, and we aim to limit what a third neural network named Eve learns from eavesdropping on the communication between Alice and Bob. We do not prescribe specific cryptographic algorithms to these neural networks; instead, we train end-to-end, adversarially. We demonstrate that the neural networks can learn how to perform forms of encryption and decryption, and also how to apply these operations selectively in order to meet confidentiality goals.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Using this neural network, we show that the ANC model is not good enough to generate secure cryptosystems even using a simple NN.”
From Learning Perfectly Secure Cryptography to Protect Communications with Adversarial Neural Cryptography (2018) · cites this paper as [14]
Experimental — accuracy not yet measuredThe cited source says what the claim attributes to it.
In the citing paper
“As we will see in the experiments of Section 4, the problem with the approach proposed in the original ANC work [14] is that Eve’s job is too hard. It must decrypt a random message having access only to the ciphertext.”
From Learning Perfectly Secure Cryptography to Protect Communications with Adversarial Neural Cryptography (2018) · cites this paper as [14]
The cited source says what the claim attributes to it.
In the citing paper
“However, in their work, they did not show any solution learned by the networks.”
From Learning Perfectly Secure Cryptography to Protect Communications with Adversarial Neural Cryptography (2018) · cites this paper as [14]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Adam: A Method for Stochastic Optimization
Kingma, D. P., & Ba, J. (2014) · arXiv · doi:10.48550/arxiv.1412.6980 · Cited by 98,946
LeCun, Y., Bengio, Y., & Hinton, G. (2015) · Nature · doi:10.1038/nature14539 · Cited by 84,126
TensorFlow: A system for large-scale machine learningPreprint
Abadi, M., Barham, P., Chen, J., Chen, Z., Davis, A., Dean, J., Devin, M., Ghemawat, S., Irving, G., Isard, M., et al. (2016) · arXiv (Cornell University) · doi:10.5555/3026877.3026899 · Cited by 16,548
Self-citationExplaining and Harnessing Adversarial Examples
Goodfellow, I. J., Shlens, J., & Szegedy, C. (2014) · arXiv · doi:10.48550/arxiv.1412.6572 · Cited by 10,381
TensorFlow: Large-Scale Machine Learning on Heterogeneous Distributed Systems
Abadi, M., Agarwal, A., Barham, P., Brevdo, E., Chen, Z., Citro, C., Corrado, G. S., Davis, A., Dean, J., Devin, M., et al. (2016) · arXiv · doi:10.48550/arxiv.1603.04467 · Cited by 9,408
Self-citationSimple Statistical Gradient-Following Algorithms for Connectionist Reinforcement Learning
Williams, R. J. (1992) · Machine Learning · doi:10.1007/bf00992696 · Cited by 8,608
Intriguing properties of neural networks
Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., & Fergus, R. (2013) · arXiv · doi:10.48550/arxiv.1312.6199 · Cited by 8,143
Improved Techniques for Training GANs
Salimans, T., Goodfellow, I., Zaremba, W., Cheung, V., Radford, A., & Chen, X. (2016) · arXiv · doi:10.48550/arxiv.1606.03498 · Cited by 6,965
Deep Generative Image Models using a Laplacian Pyramid of Adversarial NetworksPreprint
Denton, E., Chintala, S., Szlam, A. D., & Fergus, R. (2015) · arXiv (Cornell University) · doi:10.48550/arxiv.1506.05751 · Cited by 1,789
(2016) · International Conference on Machine Learning · Cited by 1,270
Learning Multiagent Communication with BackpropagationPreprint
Sukhbaatar, S., Szlam, A. D., & Fergus, R. (2016) · arXiv (Cornell University) · doi:10.48550/arxiv.1605.07736 · Cited by 649
Censoring Representations with an AdversaryPreprint
Edwards, H., & Storkey, A. (2015) · International Conference on Learning Representations · doi:10.48550/arxiv.1511.05897 · Cited by 563
The Variational Fair AutoencoderPreprint
Louizos, C., Swersky, K., Li, Y., Welling, M., & Zemel, R. S. (2015) · UvA-DARE (University of Amsterdam) · doi:10.48550/arxiv.1511.00830 · Cited by 178
Neural Programmer: Inducing Latent Programs with Gradient DescentPreprint
Neelakantan, A., Le, Q. V., & Sutskever, I. (2015) · arXiv (Cornell University) · doi:10.48550/arxiv.1511.04834 · Cited by 171
Crypto-Nets: Neural Networks over Encrypted DataPreprint
Xie, P., Bilenko, M., Finley, T., Gilad-Bachrach, R., Lauter, K., & Naehrig, M. (2014) · arXiv (Cornell University) · doi:10.48550/arxiv.1412.6181 · Cited by 138
Analysis of Neural Cryptography
Klimov, A., Mityagin, A., & Shamir, A. (2002) · Lecture notes in computer science · doi:10.1007/3-540-36178-2_18 · Cited by 135
Fully automated analysis of padding-based encryption in the computational model
Barthe, G., Crespo, J. M., Grégoire, B., Kunz, C., Lakhnech, Y., Schmidt, B., & Zanella-Béguelin, S. (2013) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/2508859.2516663 · Cited by 54
Neural Synchronization and CryptographyPreprint
Ruttor, A. (2007) · arXiv (Cornell University) · doi:10.48550/arxiv.0711.2411 · Cited by 48
Research works printed but not linked: 10
- Boaz Barak, Oded Goldreich, Russell Impagliazzo, Steven Rudich, Amit Sahai, Salil Vadhan, and Ke Yang. On the (im)possibility of obfuscating programs. J. ACM , 59(2):6:1-6:48, May 2012. ISSN 0004-5411. doi: 10.1145/2160158.2160159. URL http://doi.acm.org/10.1145/ 2160158.2160159 . · DOI
- Xi Chen, Yan Duan, Rein Houthooft, John Schulman, Ilya Sutskever, and Pieter Abbeel. InfoGAN: Interpretable representation learning by information maximizing generative adversarial nets. CoRR , abs/1606.03657, 2016. URL https://arxiv.org/abs/1606.03657 . · arXiv
- Jakob N. Foerster, Yannis M. Assael, Nando de Freitas, and Shimon Whiteson. Learning to communicate to solve riddles with deep distributed recurrent Q-networks. CoRR , abs/1602.02672, 2016a. URL http://arxiv.org/abs/1602.02672 . · arXiv
- Jakob N. Foerster, Yannis M. Assael, Nando de Freitas, and Shimon Whiteson. Learning to communicate with deep multi-agent reinforcement learning. CoRR , abs/1605.06676, 2016b. URL http://arxiv.org/abs/1605.06676 . · arXiv
- Yaroslav Ganin, Evgeniya Ustinova, Hana Ajakan, Pascal Germain, Hugo Larochelle, Franc ¸ois Laviolette, Mario Marchand, and Victor S. Lempitsky. Domain-adversarial training of neural networks. CoRR , abs/1505.07818, 2015. URL http://arxiv.org/abs/1505.07818 . · arXiv
- Shafi Goldwasser and Silvio Micali. Probabilistic encryption. J. Comput. Syst. Sci. , 28(2):270299, 1984. doi: 10.1016/0022-0000(84)90070-9. URL http://dx.doi.org/10.1016/ 0022-0000(84)90070-9 . · DOI
- Ian J. Goodfellow, Jean Pouget-Abadie, Mehdi Mirza, Bing Xu, David Warde-Farley, Sherjil Ozair, Aaron C. Courville, and Yoshua Bengio. Generative adversarial nets. In Zoubin Ghahramani, Max Welling, Corinna Cortes, Neil D. Lawrence, and Kilian Q. Weinberger (eds.), Advances in Neural Information Processing Systems 27: Annual Conference on Neural Information Processing Systems 2014, December 8-13 2014, Montreal, Quebec, Canada , pp. 2672-2680, 2014a. URL http://papers.nips.cc/paper/5423-generative-adversarial-nets .
- Wolfgang Kinzel and Ido Kanter. Neural cryptography. arXiv preprint cond-mat/0208453 , 2002. · arXiv
- Sebastian Nowozin, Botond Cseke, and Ryota Tomioka. f-GAN: Training generative neural samplers using variational divergence minimization. CoRR , abs/1606.00709, 2016. URL https: //arxiv.org/abs/1606.00709 . · arXiv
- Lillian J Ratliff, Samuel A Burden, and S Shankar Sastry. Characterization and computation of local nash equilibria in continuous games. In Communication, Control, and Computing (Allerton), 2013 51st Annual Allerton Conference on , pp. 917-924. IEEE, 2013.
Cited by
Sorted by citations
The Algorithmic Foundations of Differential Privacy
Dwork, C., & Roth, A. (2014) · Foundations and Trends® in Theoretical Computer Science · doi:10.1561/0400000042 · Cited by 5,557
Multi-Agent Actor-Critic for Mixed Cooperative-Competitive Environments
Lowe, R., Wu, Y., Tamar, A., Harb, J., Abbeel, P., & Mordatch, I. (2017) · arXiv · doi:10.48550/arxiv.1706.02275 · Cited by 3,377
An Introduction to Deep Learning for the Physical Layer
O'Shea, T., & Hoydis, J. (2017) · IEEE Transactions on Cognitive Communications and Networking · doi:10.1109/tccn.2017.2758370 · Cited by 2,980
Deep Learning in Mobile and Wireless Networking: A Survey
Zhang, C., Patras, P., & Haddadi, H. (2019) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2019.2904897 · Cited by 1,913
A Review on Generative Adversarial Networks: Algorithms, Theory, and Applications
Gui, J., Sun, Z., Wen, Y., Tao, D., & Ye, J. (2023) · IEEE Transactions on Knowledge and Data Engineering · doi:10.1109/tkde.2021.3130191 · Cited by 1,231
Metadata
- Authors
- Abadi, M., & Andersen, D. G.
- Affiliations
- Google Brain
- Google (United States) (US)
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2016
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 1610.06918
- OpenAlex
- W2545316382
- Cited by
- 182
- References
- 19
- Citations by year
- 2026: 2 · 2025: 6 · 2024: 16 · 2023: 19 · 2022: 15 · 2021: 27 · 2020: 42 · 2019: 22 · 2018: 18 · 2017: 12 · 2016: 2
- Type
- posted content
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › Cryptography and Data Security
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Artificial Intelligence › Cryptographic Implementations and Security
- Keywords
- neural cryptography, adversarial neural networks, secret key, confidentiality, eavesdropping, multi-agent systems, encryption and decryption, selective encryption, end-to-end learning, information security
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
