{"id":"https://openalex.org/W3111925745","doi":"https://doi.org/10.1145/3427228.3427232","title":"Secure and Verifiable Inference in Deep Neural Networks","display_name":"Secure and Verifiable Inference in Deep Neural Networks","publication_year":2020,"publication_date":"2020-12-07","ids":{"openalex":"https://openalex.org/W3111925745","doi":"https://doi.org/10.1145/3427228.3427232","mag":"3111925745"},"language":"en","primary_location":{"id":"doi:10.1145/3427228.3427232","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3427228.3427232","pdf_url":null,"source":{"id":"https://openalex.org/S4306417673","display_name":"Annual Computer Security Applications Conference","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Annual Computer Security Applications Conference","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5046950426","display_name":"Guowen Xu","orcid":"https://orcid.org/0000-0002-9764-9345"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Guowen Xu","raw_affiliation_strings":["University of Electronic Science and Technology of China, China"],"affiliations":[{"raw_affiliation_string":"University of Electronic Science and Technology of China, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100325334","display_name":"Hongwei Li","orcid":"https://orcid.org/0000-0002-1961-7946"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hongwei Li","raw_affiliation_strings":["University of Electronic Science and Technology of China"],"affiliations":[{"raw_affiliation_string":"University of Electronic Science and Technology of China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028294527","display_name":"Hao Ren","orcid":"https://orcid.org/0000-0001-7909-3753"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hao Ren","raw_affiliation_strings":["University of Electronic Science and Technology of China"],"affiliations":[{"raw_affiliation_string":"University of Electronic Science and Technology of China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061961718","display_name":"Jianfei Sun","orcid":"https://orcid.org/0000-0002-6944-8378"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianfei Sun","raw_affiliation_strings":["University of Electronic Science and Technology of China"],"affiliations":[{"raw_affiliation_string":"University of Electronic Science and Technology of China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061574999","display_name":"Shengmin Xu","orcid":"https://orcid.org/0000-0002-9121-0171"},"institutions":[{"id":"https://openalex.org/I152815399","display_name":"Singapore University of Technology and Design","ror":"https://ror.org/05j6fvn87","country_code":"SG","type":"education","lineage":["https://openalex.org/I152815399"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Shengmin Xu","raw_affiliation_strings":["Singapore University of Technology and Design"],"affiliations":[{"raw_affiliation_string":"Singapore University of Technology and Design","institution_ids":["https://openalex.org/I152815399"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081596329","display_name":"Jianting Ning","orcid":"https://orcid.org/0000-0001-7165-398X"},"institutions":[{"id":"https://openalex.org/I79891267","display_name":"Singapore Management University","ror":"https://ror.org/050qmg959","country_code":"SG","type":"education","lineage":["https://openalex.org/I79891267"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Jianting Ning","raw_affiliation_strings":["Fujian Normal University & Singapore Management University"],"affiliations":[{"raw_affiliation_string":"Fujian Normal University & Singapore Management University","institution_ids":["https://openalex.org/I79891267"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048390686","display_name":"Haomiao Yang","orcid":"https://orcid.org/0000-0002-5968-3518"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haomiao Yang","raw_affiliation_strings":["University of Electronic Science and Technology of China"],"affiliations":[{"raw_affiliation_string":"University of Electronic Science and Technology of China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100329754","display_name":"Kan Yang","orcid":"https://orcid.org/0000-0003-4234-9596"},"institutions":[{"id":"https://openalex.org/I94658018","display_name":"University of Memphis","ror":"https://ror.org/01cq23130","country_code":"US","type":"education","lineage":["https://openalex.org/I94658018"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kan Yang","raw_affiliation_strings":["The University of Memphis, United States of America"],"affiliations":[{"raw_affiliation_string":"The University of Memphis, United States of America","institution_ids":["https://openalex.org/I94658018"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5001712801","display_name":"Robert H. Deng","orcid":"https://orcid.org/0000-0003-3491-8146"},"institutions":[{"id":"https://openalex.org/I79891267","display_name":"Singapore Management University","ror":"https://ror.org/050qmg959","country_code":"SG","type":"education","lineage":["https://openalex.org/I79891267"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Robert H. Deng","raw_affiliation_strings":["Singapore Management University, Singapore"],"affiliations":[{"raw_affiliation_string":"Singapore Management University, Singapore","institution_ids":["https://openalex.org/I79891267"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":9,"corresponding_author_ids":["https://openalex.org/A5046950426"],"corresponding_institution_ids":["https://openalex.org/I150229711"],"apc_list":null,"apc_paid":null,"fwci":1.4506,"has_fulltext":false,"cited_by_count":26,"citation_normalized_percentile":{"value":0.85308877,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"784","last_page":"797"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9926999807357788,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/verifiable-secret-sharing","display_name":"Verifiable secret sharing","score":0.9107780456542969},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7638646364212036},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.685235857963562},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.6114358901977539},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5700585842132568},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5291871428489685},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.41478702425956726},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.10140261054039001}],"concepts":[{"id":"https://openalex.org/C85847156","wikidata":"https://www.wikidata.org/wiki/Q59015987","display_name":"Verifiable secret sharing","level":3,"score":0.9107780456542969},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7638646364212036},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.685235857963562},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.6114358901977539},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5700585842132568},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5291871428489685},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.41478702425956726},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.10140261054039001},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3427228.3427232","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3427228.3427232","pdf_url":null,"source":{"id":"https://openalex.org/S4306417673","display_name":"Annual Computer Security Applications Conference","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Annual Computer Security Applications Conference","raw_type":"proceedings-article"},{"id":"pmh:oai:ink.library.smu.edu.sg:sis_research-6913","is_oa":false,"landing_page_url":"https://ink.library.smu.edu.sg/sis_research/5910","pdf_url":null,"source":{"id":"https://openalex.org/S4377196871","display_name":"Institutional Knowledge (InK) - Institutional Knowledge at Singapore Management University (Singapore Management University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79891267","host_organization_name":"Singapore Management University","host_organization_lineage":["https://openalex.org/I79891267"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"https://doi.org/10.1145/3427228.3427232","raw_type":"Conference Proceeding Article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.550000011920929,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":60,"referenced_works":["https://openalex.org/W236632755","https://openalex.org/W1518815044","https://openalex.org/W1825240531","https://openalex.org/W1982306593","https://openalex.org/W1993855803","https://openalex.org/W2013498927","https://openalex.org/W2044732262","https://openalex.org/W2053637704","https://openalex.org/W2054195354","https://openalex.org/W2073330885","https://openalex.org/W2082849992","https://openalex.org/W2094043756","https://openalex.org/W2113585721","https://openalex.org/W2119487894","https://openalex.org/W2148825261","https://openalex.org/W2177209050","https://openalex.org/W2435473771","https://openalex.org/W2520442116","https://openalex.org/W2591882872","https://openalex.org/W2604672468","https://openalex.org/W2620512600","https://openalex.org/W2701059868","https://openalex.org/W2741951152","https://openalex.org/W2753783305","https://openalex.org/W2765200655","https://openalex.org/W2767079719","https://openalex.org/W2772825438","https://openalex.org/W2781091734","https://openalex.org/W2787597845","https://openalex.org/W2794888826","https://openalex.org/W2801491268","https://openalex.org/W2889349423","https://openalex.org/W2890880325","https://openalex.org/W2895865029","https://openalex.org/W2911912007","https://openalex.org/W2913608349","https://openalex.org/W2914549327","https://openalex.org/W2942224063","https://openalex.org/W2948833786","https://openalex.org/W2962763344","https://openalex.org/W2962867198","https://openalex.org/W2963106566","https://openalex.org/W2963189173","https://openalex.org/W2963313259","https://openalex.org/W2963343288","https://openalex.org/W2963540401","https://openalex.org/W2963695762","https://openalex.org/W2963733194","https://openalex.org/W2963888996","https://openalex.org/W2963999993","https://openalex.org/W2964082701","https://openalex.org/W2964276371","https://openalex.org/W2964345203","https://openalex.org/W2990183786","https://openalex.org/W3002779531","https://openalex.org/W3013394222","https://openalex.org/W3040384242","https://openalex.org/W3102360395","https://openalex.org/W3123057515","https://openalex.org/W4252979261"],"related_works":["https://openalex.org/W2355730523","https://openalex.org/W4377865163","https://openalex.org/W3042419602","https://openalex.org/W3193857078","https://openalex.org/W2966649771","https://openalex.org/W2888956734","https://openalex.org/W3000197790","https://openalex.org/W4315865067","https://openalex.org/W2979433843","https://openalex.org/W3208304128"],"abstract_inverted_index":{"Outsourced":[0],"inference":[1,47,85,190],"service":[2,35],"has":[3],"enormously":[4],"promoted":[5],"the":[6,46,55,59,62,74,113,121,135,162,167,180],"popularity":[7],"of":[8,18,27,61,96,115,176,183,187],"deep":[9],"learning,":[10],"and":[11,29,77,173,193],"helped":[12],"users":[13],"to":[14,54,72,98,107,120,133,147],"customize":[15],"a":[16,25,38,104,116,153],"range":[17],"personalized":[19],"applications.":[20],"However,":[21],"it":[22],"also":[23],"entails":[24],"variety":[26],"security":[28],"privacy":[30,44,79],"issues":[31],"brought":[32],"by":[33],"untrusted":[34],"providers.":[36],"Particularly,":[37],"malicious":[39],"adversary":[40],"may":[41],"violate":[42],"user":[43],"during":[45],"process,":[48],"or":[49],"worse,":[50],"return":[51],"incorrect":[52],"results":[53],"client":[56],"through":[57],"compromising":[58],"integrity":[60,76,114],"outsourced":[63,119],"model.":[64],"To":[65],"address":[66],"these":[67],"problems,":[68],"we":[69,89,102,178],"propose":[70],"SecureDL":[71,184],"protect":[73],"model\u2019s":[75,117],"user\u2019s":[78],"in":[80,156,161,185],"Deep":[81],"Neural":[82],"Networks":[83],"(DNNs)":[84],"process.":[86],"In":[87],"SecureDL,":[88],"first":[90],"transform":[91],"complicated":[92],"non-linear":[93],"activation":[94],"functions":[95],"DNNs":[97],"low-degree":[99],"polynomials.":[100],"Then,":[101],"give":[103],"novel":[105],"method":[106],"generate":[108],"sensitive-samples,":[109],"which":[110],"can":[111,158],"verify":[112],"parameters":[118,157],"server":[122],"with":[123],"high":[124],"accuracy.":[125],"Finally,":[126],"We":[127,138],"exploit":[128],"Leveled":[129],"Homomorphic":[130],"Encryption":[131],"(LHE)":[132],"achieve":[134],"privacy-preserving":[136],"inference.":[137],"shown":[139],"that":[140,151],"our":[141],"sensitive-samples":[142],"are":[143],"indeed":[144],"very":[145],"sensitive":[146],"model":[148,163],"changes,":[149],"such":[150],"even":[152],"small":[154],"change":[155],"be":[159],"reflected":[160],"outputs.":[164],"Based":[165],"on":[166,170],"experiments":[168],"conducted":[169],"real":[171],"data":[172],"different":[174],"types":[175],"attacks,":[177],"demonstrate":[179],"superior":[181],"performance":[182],"terms":[186],"detection":[188],"accuracy,":[189,191],"computation,":[192],"communication":[194],"overheads.":[195]},"counts_by_year":[{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":4}],"updated_date":"2026-04-04T16:13:02.066488","created_date":"2025-10-10T00:00:00"}