{"id":"https://openalex.org/W4389162403","doi":"https://doi.org/10.1109/iccad57390.2023.10323851","title":"THE-V: Verifiable Privacy-Preserving Neural Network via Trusted Homomorphic Execution","display_name":"THE-V: Verifiable Privacy-Preserving Neural Network via Trusted Homomorphic Execution","publication_year":2023,"publication_date":"2023-10-28","ids":{"openalex":"https://openalex.org/W4389162403","doi":"https://doi.org/10.1109/iccad57390.2023.10323851"},"language":"en","primary_location":{"id":"doi:10.1109/iccad57390.2023.10323851","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccad57390.2023.10323851","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE/ACM International Conference on Computer Aided Design (ICCAD)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5000185895","display_name":"Yuntao Wei","orcid":"https://orcid.org/0000-0002-3418-9329"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuntao Wei","raw_affiliation_strings":["School of Integrated Circuit Science and Engineering, Beihang University,Beijing,China","Institute of Artificial Intelligence, Beihang University, Beijing, China","School of Integrated Circuit Science and Engineering, Beihang University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Integrated Circuit Science and Engineering, Beihang University,Beijing,China","institution_ids":["https://openalex.org/I82880672"]},{"raw_affiliation_string":"Institute of Artificial Intelligence, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]},{"raw_affiliation_string":"School of Integrated Circuit Science and Engineering, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100390413","display_name":"Xueyan Wang","orcid":"https://orcid.org/0000-0003-0080-4730"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xueyan Wang","raw_affiliation_strings":["School of Integrated Circuit Science and Engineering, Beihang University,Beijing,China","School of Integrated Circuit Science and Engineering, Beihang University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Integrated Circuit Science and Engineering, Beihang University,Beijing,China","institution_ids":["https://openalex.org/I82880672"]},{"raw_affiliation_string":"School of Integrated Circuit Science and Engineering, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065421587","display_name":"Song Bian","orcid":"https://orcid.org/0000-0003-0467-6203"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Song Bian","raw_affiliation_strings":["School of Cyber Science and Technology, Beihang University,Beijing,China","School of Cyber Science and Technology, Beihang University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Technology, Beihang University,Beijing,China","institution_ids":["https://openalex.org/I82880672"]},{"raw_affiliation_string":"School of Cyber Science and Technology, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066473925","display_name":"Weisheng Zhao","orcid":"https://orcid.org/0000-0001-8088-0404"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weisheng Zhao","raw_affiliation_strings":["School of Integrated Circuit Science and Engineering, Beihang University,Beijing,China","School of Integrated Circuit Science and Engineering, Beihang University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Integrated Circuit Science and Engineering, Beihang University,Beijing,China","institution_ids":["https://openalex.org/I82880672"]},{"raw_affiliation_string":"School of Integrated Circuit Science and Engineering, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5017464942","display_name":"Yier Jin","orcid":"https://orcid.org/0000-0002-8791-0597"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yier Jin","raw_affiliation_strings":["School of Cyber Science and Technology, University of Science and Technology of China,Hefei,China","School of Cyber Science and Technology, University of Science and Technology of China, Hefei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Technology, University of Science and Technology of China,Hefei,China","institution_ids":["https://openalex.org/I126520041"]},{"raw_affiliation_string":"School of Cyber Science and Technology, University of Science and Technology of China, Hefei, China","institution_ids":["https://openalex.org/I126520041"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"9"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9957000017166138,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/homomorphic-encryption","display_name":"Homomorphic encryption","score":0.8776478171348572},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.854318380355835},{"id":"https://openalex.org/keywords/verifiable-secret-sharing","display_name":"Verifiable secret sharing","score":0.8360403776168823},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5232657194137573},{"id":"https://openalex.org/keywords/outsourcing","display_name":"Outsourcing","score":0.4811059832572937},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.4807893633842468},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.4799911677837372},{"id":"https://openalex.org/keywords/bottleneck","display_name":"Bottleneck","score":0.4179956316947937},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3770804703235626},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.32369279861450195},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.27668750286102295},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.1792120337486267},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.17876648902893066}],"concepts":[{"id":"https://openalex.org/C158338273","wikidata":"https://www.wikidata.org/wiki/Q2154943","display_name":"Homomorphic encryption","level":3,"score":0.8776478171348572},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.854318380355835},{"id":"https://openalex.org/C85847156","wikidata":"https://www.wikidata.org/wiki/Q59015987","display_name":"Verifiable secret sharing","level":3,"score":0.8360403776168823},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5232657194137573},{"id":"https://openalex.org/C46934059","wikidata":"https://www.wikidata.org/wiki/Q61515","display_name":"Outsourcing","level":2,"score":0.4811059832572937},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4807893633842468},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.4799911677837372},{"id":"https://openalex.org/C2780513914","wikidata":"https://www.wikidata.org/wiki/Q18210350","display_name":"Bottleneck","level":2,"score":0.4179956316947937},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3770804703235626},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.32369279861450195},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.27668750286102295},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.1792120337486267},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.17876648902893066},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/iccad57390.2023.10323851","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccad57390.2023.10323851","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE/ACM International Conference on Computer Aided Design (ICCAD)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G8000804423","display_name":null,"funder_award_id":"62004011,62002006,62202028,62172025,U21B2021,61932011,61932014,61972018,61972019,U2241213","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320337387","display_name":"Division of Computing and Communication Foundations","ror":"https://ror.org/01mng8331"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":54,"referenced_works":["https://openalex.org/W51265332","https://openalex.org/W116275870","https://openalex.org/W913176383","https://openalex.org/W950690059","https://openalex.org/W1488058190","https://openalex.org/W1557386445","https://openalex.org/W2088492763","https://openalex.org/W2101687784","https://openalex.org/W2108598243","https://openalex.org/W2182467309","https://openalex.org/W2194775991","https://openalex.org/W2435473771","https://openalex.org/W2616901112","https://openalex.org/W2726092462","https://openalex.org/W2734245281","https://openalex.org/W2752929869","https://openalex.org/W2785858912","https://openalex.org/W2805074088","https://openalex.org/W2809138886","https://openalex.org/W2887819081","https://openalex.org/W2949140995","https://openalex.org/W2954241526","https://openalex.org/W2976763854","https://openalex.org/W2982848142","https://openalex.org/W3021878953","https://openalex.org/W3023051856","https://openalex.org/W3028867652","https://openalex.org/W3030708022","https://openalex.org/W3033700072","https://openalex.org/W3035490021","https://openalex.org/W3041660983","https://openalex.org/W3092283663","https://openalex.org/W3093021001","https://openalex.org/W3104454153","https://openalex.org/W3117449869","https://openalex.org/W3118608800","https://openalex.org/W3152901657","https://openalex.org/W3157709467","https://openalex.org/W3172819050","https://openalex.org/W3175006004","https://openalex.org/W3213013974","https://openalex.org/W4242053016","https://openalex.org/W4288804202","https://openalex.org/W4317465422","https://openalex.org/W4381785326","https://openalex.org/W6712237015","https://openalex.org/W6740443968","https://openalex.org/W6751922297","https://openalex.org/W6757619422","https://openalex.org/W6778434676","https://openalex.org/W6779672763","https://openalex.org/W6840955603","https://openalex.org/W6849375737","https://openalex.org/W6902698537"],"related_works":["https://openalex.org/W2595172197","https://openalex.org/W2355730523","https://openalex.org/W152021879","https://openalex.org/W2084856301","https://openalex.org/W2127970246","https://openalex.org/W2072918937","https://openalex.org/W2885125400","https://openalex.org/W1989889224","https://openalex.org/W2358200898","https://openalex.org/W2365629437"],"abstract_inverted_index":{"Privacy-preserving":[0],"machine":[1],"learning":[2],"(PPML)":[3],"schemes":[4],"aim":[5],"at":[6,84],"protecting":[7],"client-side":[8],"data":[9,35,76],"privacy":[10],"in":[11,132],"two-party":[12],"secure":[13],"computing":[14],"tasks":[15,131],"such":[16,40,120],"as":[17],"private":[18,104,148],"deep":[19],"neural":[20],"network":[21],"(DNN)":[22],"inference.":[23],"While":[24],"fully":[25],"homomorphic":[26,41],"encryption":[27],"(FHE)":[28],"can":[29,101,144],"provide":[30],"provable":[31],"security":[32],"for":[33],"client":[34],"privacy,":[36,77],"efficiently":[37],"verifying":[38],"that":[39,66,142],"DNN":[42,63,149],"inference":[43,64,150],"protocol":[44],"is":[45],"honestly":[46],"executed":[47],"on":[48],"the":[49,92,108,156],"server":[50],"presents":[51],"to":[52,74,134],"be":[53],"challenging.":[54],"In":[55],"this":[56],"work,":[57],"we":[58,122,140,143],"propose":[59],"THE-V,":[60],"a":[61,114,124],"novel":[62],"framework":[65],"combines":[67],"FHE":[68,97],"and":[69,80,105,147],"Trusted":[70],"Execution":[71],"Environment":[72],"(TEE)":[73],"achieve":[75,145],"verifiable":[78,106,146],"execution":[79],"efficient":[81],"computation":[82],"all":[83],"once.":[85],"We":[86],"first":[87],"point":[88],"out":[89],"that,":[90],"while":[91],"trivial":[93],"solution":[94],"of":[95,127],"executing":[96],"entirely":[98],"within":[99,111],"TEE":[100,112,133],"ensure":[102],"both":[103],"computing,":[107],"limited":[109],"resource":[110],"becomes":[113],"severe":[115],"computational":[116],"bottleneck.":[117],"To":[118],"solve":[119],"dilemma,":[121],"devise":[123],"new":[125],"strategy":[126],"securely":[128],"outsourcing":[129],"computation-heavy":[130],"untrusted":[135],"environments.":[136],"By":[137],"rigorous":[138],"experiments,":[139],"show":[141],"with":[151,155],"up":[152],"to$15\\times$speedup":[153],"compared":[154],"state-of-the-art":[157],"solution.":[158]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-10T00:00:00"}