{"id":"https://openalex.org/W7161690786","doi":"https://doi.org/10.1109/tdsc.2026.3694706","title":"Palladium: Guarding Neural Network Training With Confidential Computing","display_name":"Palladium: Guarding Neural Network Training With Confidential Computing","publication_year":2026,"publication_date":"2026-05-19","ids":{"openalex":"https://openalex.org/W7161690786","doi":"https://doi.org/10.1109/tdsc.2026.3694706"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2026.3694706","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3694706","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136482819","display_name":"Wenzhe Yi","orcid":"https://orcid.org/0000-0003-1096-2505"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenzhe Yi","raw_affiliation_strings":["Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0003-1096-2505","affiliations":[{"raw_affiliation_string":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078273319","display_name":"Mengda Yang","orcid":"https://orcid.org/0000-0002-7808-852X"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mengda Yang","raw_affiliation_strings":["Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0002-7808-852X","affiliations":[{"raw_affiliation_string":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100347410","display_name":"Juan Wang","orcid":"https://orcid.org/0000-0001-8813-7842"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Juan Wang","raw_affiliation_strings":["Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0001-8813-7842","affiliations":[{"raw_affiliation_string":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136486265","display_name":"Hongxin Hu","orcid":"https://orcid.org/0000-0001-8710-247X"},"institutions":[{"id":"https://openalex.org/I63190737","display_name":"University at Buffalo, State University of New York","ror":"https://ror.org/01y64my43","country_code":"US","type":"education","lineage":["https://openalex.org/I63190737"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hongxin Hu","raw_affiliation_strings":["Department of Computer Science and Engineering, University at Buffalo, Buffalo, NY, USA"],"raw_orcid":"https://orcid.org/0000-0001-8710-247X","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, University at Buffalo, Buffalo, NY, USA","institution_ids":["https://openalex.org/I63190737"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084678383","display_name":"Z L Li","orcid":null},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ziang Li","raw_affiliation_strings":["Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0003-1015-5594","affiliations":[{"raw_affiliation_string":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5136480032","display_name":"Xiaoyang Xu","orcid":"https://orcid.org/0000-0002-2672-9145"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoyang Xu","raw_affiliation_strings":["Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0002-2672-9145","affiliations":[{"raw_affiliation_string":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.63192224,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"4","first_page":"9649","last_page":"9663"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.39259999990463257,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.39259999990463257,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.0966000035405159,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.05719999969005585,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5974000096321106},{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.5680999755859375},{"id":"https://openalex.org/keywords/training","display_name":"Training (meteorology)","score":0.5257999897003174},{"id":"https://openalex.org/keywords/intelligent-network","display_name":"Intelligent Network","score":0.3215999901294708},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.3057999908924103},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.27230000495910645}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8307999968528748},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5974000096321106},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.5680999755859375},{"id":"https://openalex.org/C2777211547","wikidata":"https://www.wikidata.org/wiki/Q17141490","display_name":"Training (meteorology)","level":2,"score":0.5257999897003174},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4471000134944916},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3905999958515167},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3889999985694885},{"id":"https://openalex.org/C51675839","wikidata":"https://www.wikidata.org/wiki/Q1665681","display_name":"Intelligent Network","level":2,"score":0.3215999901294708},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.3057999908924103},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.27230000495910645},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.265500009059906},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.26019999384880066},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.25769999623298645},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.25589999556541443}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2026.3694706","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3694706","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"In":[0],"the":[1,7,116,164,171,192,196,199,223],"era":[2],"of":[3,13,166,173,232],"deep":[4],"learning,":[5],"protecting":[6],"training":[8,67,131,270],"data":[9,28,61],"and":[10,59,65,97,123,130,143,176,239,241,250,272],"model":[11,128,274],"parameters":[12,129,168],"high-performance":[14],"Deep":[15],"Neural":[16],"Networks":[17],"(DNNs)":[18],"is":[19],"critical.":[20],"Data":[21],"holders":[22],"often":[23],"want":[24],"to":[25,29,51,71,87,119,140,153,156],"use":[26],"private":[27,66],"train":[30],"dedicated":[31],"DNNs":[32],"while":[33,146],"leveraging":[34],"AI":[35],"accelerators":[36,73],"hosted":[37],"on":[38,82,237,246],"remote":[39],"servers,":[40],"such":[41],"as":[42],"GPUs":[43,155],"or":[44],"TPUs.":[45],"However,":[46],"cloud":[47],"systems":[48],"are":[49,98],"vulnerable":[50],"adversaries":[52],"who":[53],"may":[54],"compromise":[55],"both":[56,127],"computational":[57,208],"integrity":[58],"user":[60],"privacy.":[62,275],"Performing":[63],"verifiable":[64],"without":[68],"losing":[69],"access":[70],"untrusted":[72,154],"remains":[74],"a":[75,181,214,230,243],"significant":[76],"challenge.":[77],"While":[78],"previous":[79],"works":[80],"rely":[81],"Trusted":[83],"Execution":[84],"Environments":[85],"(TEEs)":[86],"safeguard":[88],"privacy":[89,142],"during":[90],"inference,":[91],"they":[92],"primarily":[93],"address":[94,107],"forward":[95],"propagation":[96,103],"not":[99],"suitable":[100],"for":[101,126],"backward":[102],"in":[104],"training.":[105],"To":[106,205],"this":[108,110],"limitation,":[109],"paper":[111],"proposes":[112],"<sc":[113,133,160,210,233,257],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[114,134,161,185,202,211,234,258],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Palladium</small>,":[115],"first":[117],"system":[118],"achieve":[120],"confidentiality,":[121],"integrity,":[122,145,209],"low":[124],"latency":[125],"data.":[132],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Palladium</small>":[135,162,212,235,259],"leverages":[136],"TEE-empowered":[137],"confidential":[138],"computing":[139],"protect":[141],"verify":[144],"securely":[147],"outsourcing":[148],"most":[149],"linear":[150,174],"layer":[151],"computations":[152],"optimize":[157],"performance.":[158],"Specifically,":[159],"preserves":[163,268],"confidentiality":[165],"outsourced":[167],"by":[169],"transforming":[170],"weights":[172],"operators":[175],"generating":[177],"input":[178],"masks":[179],"through":[180],"carefully":[182],"designed":[183],"<italic":[184,201],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Cloak</i>":[186],"strategy.":[187,204],"It":[188],"then":[189],"fully":[190],"recovers":[191],"execution":[193],"results":[194,254],"inside":[195],"TEE":[197,224],"using":[198],"corresponding":[200],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">UnCloak</i>":[203],"further":[206],"ensure":[207],"incorporates":[213],"stochastic":[215],"operator":[216],"verification":[217],"mechanism":[218],"that":[219,256],"detects":[220],"breaches":[221],"outside":[222],"with":[225,264],"99%":[226],"confidence.":[227],"We":[228],"implement":[229],"prototype":[231],"based":[236],"Libtorch":[238],"Occlum":[240],"conduct":[242],"comprehensive":[244],"evaluation":[245],"four":[247,251],"network":[248],"architectures":[249],"datasets.":[252],"Evaluation":[253],"show":[255],"provides":[260],"strong":[261],"security":[262],"guarantees":[263],"reasonable":[265],"performance":[266],"overhead,":[267],"high":[269],"accuracy,":[271],"protects":[273]},"counts_by_year":[],"updated_date":"2026-07-20T07:56:41.581041","created_date":"2026-05-20T00:00:00"}