MSc Thesis: Systematic Evaluation of Segmentation Architectures in Private Medical Deep Learning

Privacy-Preserving Machine Learning enables the training of neural networks, while bounding the information about data subjects [1,2]. Hence, especially in sensitive contexts where plausible deniability is crucial it is an important mean to give mathematical guarantees about worst case guarantees. However, due to these constraints in most cases it introduces a drop in utility compared to non-private training. In recent publications it was shown that the margin between private and non-private training is among other factors dependent on the model architecture [3,4,5]. It is apparent that the rules, which architectures perform best, which have extensively been researched for standard training are different in these settings. First studies in classification settings showed that wider models appear to be advantageous [4,5]. In this thesis we want to systematically evaluate existing segmentation architectures under privacy constraints in medical and non-medical benchmark datasets.

Your qualifications:

  • Enthusiasm for deep learning.
  • Advanced knowledge of machine learning and computer vision.
  • Excellent programming skills in Python and at least one deep learning frame work (optimally PyTorch or Jax)
  • Prior knowledge on PPML or medical imaging is helpful but no requirement

What we offer:

  • Experience with several top-tier publications in privacy-preserving machine learning.
  • Working in an interdisciplinary team of experts in PPML, image processing, deep learning, biomedical engineering and medicine.
  • Enough freedom to pursue your own project while providing the guidance you need.
  • Thesis is strongly aimed to be published in a peer-reviewed venue.


Alexander Ziller
Alexander Ziller
PhD Student

My research interests include Privacy-preserving Machine Learning as well as deep learning in medical imaging.