{"id":"https://openalex.org/W4408358980","doi":"https://doi.org/10.1109/tifs.2025.3550834","title":"MD-SONIC: Maliciously-Secure Outsourcing Neural Network Inference With Reduced Online Communication","display_name":"MD-SONIC: Maliciously-Secure Outsourcing Neural Network Inference With Reduced Online Communication","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4408358980","doi":"https://doi.org/10.1109/tifs.2025.3550834"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2025.3550834","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3550834","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Yansong Zhang","orcid":"https://orcid.org/0009-0005-0672-4354"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yansong Zhang","raw_affiliation_strings":["Institute of Information Engineering, State Key Laboratory of Cyberspace Security Defense, Chinese Academy of Sciences, Beijing, China","State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0005-0672-4354","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, State Key Laboratory of Cyberspace Security Defense, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"raw_affiliation_string":"State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101407251","display_name":"Xiaojun Chen","orcid":"https://orcid.org/0000-0003-0362-847X"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaojun Chen","raw_affiliation_strings":["Institute of Information Engineering, State Key Laboratory of Cyberspace Security Defense, Chinese Academy of Sciences, Beijing, China","State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-0362-847X","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, State Key Laboratory of Cyberspace Security Defense, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"raw_affiliation_string":"State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Ye Dong","orcid":"https://orcid.org/0000-0002-2105-8047"},"institutions":[{"id":"https://openalex.org/I152815399","display_name":"Singapore University of Technology and Design","ror":"https://ror.org/05j6fvn87","country_code":"SG","type":"education","lineage":["https://openalex.org/I152815399"]},{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Ye Dong","raw_affiliation_strings":["National University of Singapore, Tampines, Singapore","iTrust, Singapore University of Technology and Design, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-2105-8047","affiliations":[{"raw_affiliation_string":"National University of Singapore, Tampines, Singapore","institution_ids":["https://openalex.org/I165932596"]},{"raw_affiliation_string":"iTrust, Singapore University of Technology and Design, Singapore","institution_ids":["https://openalex.org/I152815399"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Qinghui Zhang","orcid":"https://orcid.org/0009-0003-0271-7507"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qinghui Zhang","raw_affiliation_strings":["Institute of Information Engineering, State Key Laboratory of Cyberspace Security Defense, Chinese Academy of Sciences, Beijing, China","State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0003-0271-7507","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, State Key Laboratory of Cyberspace Security Defense, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"raw_affiliation_string":"State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013903881","display_name":"Rui Hou","orcid":"https://orcid.org/0000-0002-9215-7632"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Rui Hou","raw_affiliation_strings":["Institute of Information Engineering, State Key Laboratory of Cyberspace Security Defense, Chinese Academy of Sciences, Beijing, China","State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-9215-7632","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, State Key Laboratory of Cyberspace Security Defense, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"raw_affiliation_string":"State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Qiang Liu","orcid":"https://orcid.org/0000-0002-0046-7001"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiang Liu","raw_affiliation_strings":["Institute of Information Engineering, State Key Laboratory of Cyberspace Security Defense, Chinese Academy of Sciences, Beijing, China","State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-0046-7001","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, State Key Laboratory of Cyberspace Security Defense, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"raw_affiliation_string":"State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"last","author":{"id":null,"display_name":"Xudong Chen","orcid":"https://orcid.org/0009-0007-0369-9899"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xudong Chen","raw_affiliation_strings":["Institute of Information Engineering, State Key Laboratory of Cyberspace Security Defense, Chinese Academy of Sciences, Beijing, China","State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0007-0369-9899","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, State Key Laboratory of Cyberspace Security Defense, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"raw_affiliation_string":"State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.6847,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.92385946,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":"20","issue":null,"first_page":"3534","last_page":"3549"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9613000154495239,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.953000009059906,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.826000452041626},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.6396676898002625},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5842646956443787},{"id":"https://openalex.org/keywords/outsourcing","display_name":"Outsourcing","score":0.4565041661262512},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3828482925891876},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3497407138347626}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.826000452041626},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.6396676898002625},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5842646956443787},{"id":"https://openalex.org/C46934059","wikidata":"https://www.wikidata.org/wiki/Q61515","display_name":"Outsourcing","level":2,"score":0.4565041661262512},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3828482925891876},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3497407138347626},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2025.3550834","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3550834","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":55,"referenced_works":["https://openalex.org/W1499934958","https://openalex.org/W1550422670","https://openalex.org/W1579771234","https://openalex.org/W1635361314","https://openalex.org/W1969009977","https://openalex.org/W2049577860","https://openalex.org/W2073782860","https://openalex.org/W2112796928","https://openalex.org/W2117539524","https://openalex.org/W2194775991","https://openalex.org/W2262308442","https://openalex.org/W2402235285","https://openalex.org/W2539273492","https://openalex.org/W2551176409","https://openalex.org/W2701059868","https://openalex.org/W2765200655","https://openalex.org/W2933303456","https://openalex.org/W2947456252","https://openalex.org/W2951626733","https://openalex.org/W2963106566","https://openalex.org/W2973629179","https://openalex.org/W2994111940","https://openalex.org/W3008381581","https://openalex.org/W3014044251","https://openalex.org/W3093021001","https://openalex.org/W3108146280","https://openalex.org/W3108672920","https://openalex.org/W3141585064","https://openalex.org/W3155184874","https://openalex.org/W3168851959","https://openalex.org/W3175787086","https://openalex.org/W4205505117","https://openalex.org/W4362681578","https://openalex.org/W4367047526","https://openalex.org/W4381785624","https://openalex.org/W6629563985","https://openalex.org/W6630385351","https://openalex.org/W6637373629","https://openalex.org/W6681411391","https://openalex.org/W6682216196","https://openalex.org/W6684191040","https://openalex.org/W6697382359","https://openalex.org/W6745590709","https://openalex.org/W6745801896","https://openalex.org/W6749400219","https://openalex.org/W6753184333","https://openalex.org/W6769941224","https://openalex.org/W6778252690","https://openalex.org/W6784890237","https://openalex.org/W6785814594","https://openalex.org/W6787972765","https://openalex.org/W6794380750","https://openalex.org/W6795476670","https://openalex.org/W6855847400","https://openalex.org/W6995710673"],"related_works":["https://openalex.org/W2358200898","https://openalex.org/W2325765407","https://openalex.org/W618293728","https://openalex.org/W2291845669","https://openalex.org/W2788012436","https://openalex.org/W200604156","https://openalex.org/W4231184955","https://openalex.org/W2374784346","https://openalex.org/W4286615217","https://openalex.org/W3154723744"],"abstract_inverted_index":{"With":[0],"the":[1,24,61,88,115,141,196,218],"widespread":[2],"deployment":[3],"of":[4,39,128,137,170,188],"Deep-Learning-as-a-Service,":[5],"secure":[6,31,112,142],"multi-party":[7],"computation-based":[8],"outsourcing":[9,45,74,172],"neural":[10,192],"network":[11],"(NN)":[12],"inference":[13,32,76,143],"has":[14],"garnered":[15],"significant":[16,97],"attention":[17],"for":[18,73,87,114],"its":[19],"high-security":[20],"guarantee.":[21],"Nevertheless,":[22],"under":[23],"dishonest-majority":[25],"setting":[26],"with":[27,77,105],"malicious":[28],"adversaries,":[29],"prior":[30],"works":[33],"are":[34],"still":[35],"costly":[36],"in":[37,56,230],"terms":[38],"communication":[40,214],"and":[41,70,95,103,124,153,181,204,216],"run-time.":[42],"Additionally,":[43],"existing":[44],"frameworks":[46],"impose":[47],"a":[48,78,151,168],"substantial":[49],"client-side":[50],"design,":[51],"which":[52],"leads":[53],"to":[54,139,145,195],"obstacles":[55],"resource-constrained":[57],"devices.":[58],"To":[59,132],"address":[60],"above":[62],"challenges,":[63],"we":[64,109,149,208],"propose":[65,150],"MD-SONIC,":[66],"an":[67,134],"online":[68,219],"efficient":[69,171],"maliciously-secure":[71],"framework":[72],"NN":[75,118],"dishonest":[79],"majority.":[80],"We":[81,183],"first":[82],"construct":[83],"communication-efficient":[84],"n-party":[85],"protocols":[86,173],"basic":[89,130],"primitives":[90],"such":[91],"as":[92],"fixed-point":[93],"multiplication":[94],"most":[96],"bit":[98],"extraction":[99],"by":[100,198,222],"combining":[101],"mask-sharing":[102],"TinyOT-sharing":[104],"SPD$\\mathbb":[106],"{Z}_{2^{k}}$seamlessly.":[107],"Then,":[108],"build":[110],"fast":[111],"blocks":[113],"widely":[116],"used":[117],"operators,":[119],"including":[120],"matrix":[121],"multiplication,":[122],"ReLU,":[123],"Maxpool,":[125],"on":[126,190],"top":[127],"our":[129],"primitives.":[131],"enable":[133],"arbitrary":[135],"number":[136],"users":[138],"outsource":[140],"task":[144],"n":[146],"computing":[147],"servers,":[148],"lightweight-client":[152],"fast$\\Sigma":[154],"$paradigm":[155],"named":[156],"SPIN,":[157],"stemming":[158],"from":[159],"zero-knowledge":[160],"proofs.":[161],"Our":[162],"SPIN":[163],"can":[164],"be":[165],"instantiated":[166],"into":[167],"set":[169],"over":[174],"multiple":[175],"algebraic":[176],"structures":[177],"(e.g.,":[178],"finite":[179],"field":[180],"ring).":[182],"also":[184],"conduct":[185],"extensive":[186],"evaluations":[187],"MD-SONIC":[189],"various":[191],"networks.":[193],"Compared":[194],"work":[197],"Damg\u00e5rd":[199],"et":[200],"al.":[201],"(IEEE":[202],"S&P\u201919)":[203],"MD-ML":[205],"(USENIX":[206],"Security\u201924),":[207],"achieve":[209],"up":[210],"to$594.4\\times":[211],"$and$45.1\\times":[212],"$online":[213],"improvements,":[215],"improve":[217],"execution":[220],"time":[221],"at":[223],"most$14.3\\times":[224],"$(resp.$20.5\\times":[225],"$)":[226,229],"and$1.8\\times":[227],"$(resp.$2.3\\times":[228],"LAN":[231],"(resp.":[232],"WAN).":[233]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-10T00:00:00"}