{"id":"https://openalex.org/W3196617585","doi":"https://doi.org/10.1186/s42400-021-00092-8","title":"Confidential machine learning on untrusted platforms: a survey","display_name":"Confidential machine learning on untrusted platforms: a survey","publication_year":2021,"publication_date":"2021-09-01","ids":{"openalex":"https://openalex.org/W3196617585","doi":"https://doi.org/10.1186/s42400-021-00092-8","mag":"3196617585","pmid":"https://pubmed.ncbi.nlm.nih.gov/34805760"},"language":"en","primary_location":{"id":"doi:10.1186/s42400-021-00092-8","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-021-00092-8","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-021-00092-8","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj","pubmed"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-021-00092-8","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5103996589","display_name":"Sharma Sagar","orcid":null},"institutions":[{"id":"https://openalex.org/I102461120","display_name":"Marquette University","ror":"https://ror.org/04gr4te78","country_code":"US","type":"education","lineage":["https://openalex.org/I102461120"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sharma Sagar","raw_affiliation_strings":["HP Inc., USA","Northwestern Mutual Data Science Associate Professor Director of Trustworthy and Intelligent Computing Lab Department of Computer Science Marquette University Milwaukee, Wisconsin, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"HP Inc., USA","institution_ids":[]},{"raw_affiliation_string":"Northwestern Mutual Data Science Associate Professor Director of Trustworthy and Intelligent Computing Lab Department of Computer Science Marquette University Milwaukee, Wisconsin, USA","institution_ids":["https://openalex.org/I102461120"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5002572745","display_name":"Keke Chen","orcid":"https://orcid.org/0000-0002-9996-156X"},"institutions":[{"id":"https://openalex.org/I102461120","display_name":"Marquette University","ror":"https://ror.org/04gr4te78","country_code":"US","type":"education","lineage":["https://openalex.org/I102461120"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Chen Keke","raw_affiliation_strings":["Northwestern Mutual Data Science Associate Professor Director of Trustworthy and Intelligent Computing Lab Department of Computer Science Marquette University Milwaukee, Wisconsin, USA"],"raw_orcid":"https://orcid.org/0000-0002-9996-156X","affiliations":[{"raw_affiliation_string":"Northwestern Mutual Data Science Associate Professor Director of Trustworthy and Intelligent Computing Lab Department of Computer Science Marquette University Milwaukee, Wisconsin, USA","institution_ids":["https://openalex.org/I102461120"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5002572745"],"corresponding_institution_ids":["https://openalex.org/I102461120"],"apc_list":null,"apc_paid":null,"fwci":1.5607,"has_fulltext":true,"cited_by_count":15,"citation_normalized_percentile":{"value":0.85981401,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"4","issue":"1","first_page":"30","last_page":"30"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9959999918937683,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7519024610519409},{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.7000442147254944},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.6326395273208618},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5309668779373169},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5280892252922058},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.5158194899559021},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.4651642143726349},{"id":"https://openalex.org/keywords/outsourcing","display_name":"Outsourcing","score":0.442124605178833},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4241371154785156},{"id":"https://openalex.org/keywords/service-provider","display_name":"Service provider","score":0.41329607367515564},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.36964502930641174},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.2245001196861267},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.12366458773612976}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7519024610519409},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.7000442147254944},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.6326395273208618},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5309668779373169},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5280892252922058},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.5158194899559021},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.4651642143726349},{"id":"https://openalex.org/C46934059","wikidata":"https://www.wikidata.org/wiki/Q61515","display_name":"Outsourcing","level":2,"score":0.442124605178833},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4241371154785156},{"id":"https://openalex.org/C116537","wikidata":"https://www.wikidata.org/wiki/Q2169973","display_name":"Service provider","level":3,"score":0.41329607367515564},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.36964502930641174},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.2245001196861267},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.12366458773612976},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C136264566","wikidata":"https://www.wikidata.org/wiki/Q159810","display_name":"Economy","level":1,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.1186/s42400-021-00092-8","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-021-00092-8","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-021-00092-8","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},{"id":"pmid:34805760","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/34805760","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":null},{"id":"pmh:oai:epublications.marquette.edu:clinical_lab_fac-1060","is_oa":true,"landing_page_url":"https://epublications.marquette.edu/clinical_lab_fac/60","pdf_url":null,"source":{"id":"https://openalex.org/S4306401682","display_name":"e-Publications@Marquette (Marquette University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I102461120","host_organization_name":"Marquette University","host_organization_lineage":["https://openalex.org/I102461120"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Clinical Lab Sciences Faculty Research and Publications","raw_type":"text"},{"id":"pmh:oai:doaj.org/article:15a587fd436c4df788174caf3aa591fe","is_oa":true,"landing_page_url":"https://doaj.org/article/15a587fd436c4df788174caf3aa591fe","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Cybersecurity, Vol 4, Iss 1, Pp 1-19 (2021)","raw_type":"article"},{"id":"pmh:oai:pubmedcentral.nih.gov:8591683","is_oa":true,"landing_page_url":"https://www.ncbi.nlm.nih.gov/pmc/articles/8591683","pdf_url":null,"source":{"id":"https://openalex.org/S2764455111","display_name":"PubMed Central","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Cybersecur (Singap)","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.1186/s42400-021-00092-8","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-021-00092-8","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-021-00092-8","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.49000000953674316,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"},{"score":0.41999998688697815,"id":"https://metadata.un.org/sdg/17","display_name":"Partnerships for the goals"}],"awards":[{"id":"https://openalex.org/G2177712169","display_name":null,"funder_award_id":"R43 AI136357","funder_id":"https://openalex.org/F4320337355","funder_display_name":"National Institute of Allergy and Infectious Diseases"},{"id":"https://openalex.org/G4034061903","display_name":"CUTE: Instructional Laboratories for Cloud Computing Education","funder_award_id":"1245847","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320332161","display_name":"National Institutes of Health","ror":"https://ror.org/01cwqze88"},{"id":"https://openalex.org/F4320337355","display_name":"National Institute of Allergy and Infectious Diseases","ror":"https://ror.org/043z4tv69"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3196617585.pdf","grobid_xml":"https://content.openalex.org/works/W3196617585.grobid-xml"},"referenced_works_count":107,"referenced_works":["https://openalex.org/W21291514","https://openalex.org/W133884053","https://openalex.org/W236632755","https://openalex.org/W780859780","https://openalex.org/W1473189865","https://openalex.org/W1480376833","https://openalex.org/W1499695068","https://openalex.org/W1499934958","https://openalex.org/W1512194687","https://openalex.org/W1520270249","https://openalex.org/W1540371141","https://openalex.org/W1548445892","https://openalex.org/W1826277484","https://openalex.org/W1895952394","https://openalex.org/W1969009977","https://openalex.org/W1969019410","https://openalex.org/W1971991172","https://openalex.org/W1972622736","https://openalex.org/W1981029888","https://openalex.org/W1988374166","https://openalex.org/W2001084165","https://openalex.org/W2019891719","https://openalex.org/W2027471022","https://openalex.org/W2031533839","https://openalex.org/W2031738616","https://openalex.org/W2033050620","https://openalex.org/W2051267297","https://openalex.org/W2053637704","https://openalex.org/W2060036647","https://openalex.org/W2088339831","https://openalex.org/W2088492763","https://openalex.org/W2092071682","https://openalex.org/W2119028650","https://openalex.org/W2119948977","https://openalex.org/W2121727866","https://openalex.org/W2128906841","https://openalex.org/W2129870696","https://openalex.org/W2132172731","https://openalex.org/W2142827986","https://openalex.org/W2145426052","https://openalex.org/W2157253445","https://openalex.org/W2159884440","https://openalex.org/W2160553465","https://openalex.org/W2163992091","https://openalex.org/W2164327070","https://openalex.org/W2167094273","https://openalex.org/W2168635375","https://openalex.org/W2173213060","https://openalex.org/W2177209050","https://openalex.org/W2211263253","https://openalex.org/W2234785713","https://openalex.org/W2342414791","https://openalex.org/W2397423248","https://openalex.org/W2400124473","https://openalex.org/W2402811135","https://openalex.org/W2435473771","https://openalex.org/W2460441129","https://openalex.org/W2461943168","https://openalex.org/W2473418344","https://openalex.org/W2532325565","https://openalex.org/W2535690855","https://openalex.org/W2543343085","https://openalex.org/W2544957723","https://openalex.org/W2561955909","https://openalex.org/W2572504188","https://openalex.org/W2591882872","https://openalex.org/W2606882085","https://openalex.org/W2612012086","https://openalex.org/W2620512600","https://openalex.org/W2701059868","https://openalex.org/W2741593962","https://openalex.org/W2768174108","https://openalex.org/W2768347741","https://openalex.org/W2769353087","https://openalex.org/W2774510177","https://openalex.org/W2781091734","https://openalex.org/W2781970480","https://openalex.org/W2783286845","https://openalex.org/W2791319131","https://openalex.org/W2792900670","https://openalex.org/W2793031414","https://openalex.org/W2793957616","https://openalex.org/W2809641286","https://openalex.org/W2888798936","https://openalex.org/W2889746123","https://openalex.org/W2895865029","https://openalex.org/W2901267625","https://openalex.org/W2903850320","https://openalex.org/W2904873688","https://openalex.org/W2919115771","https://openalex.org/W2942255051","https://openalex.org/W2947642149","https://openalex.org/W2949776585","https://openalex.org/W2963106566","https://openalex.org/W2963311060","https://openalex.org/W2974626533","https://openalex.org/W2978662361","https://openalex.org/W2981207549","https://openalex.org/W3013196197","https://openalex.org/W3084260310","https://openalex.org/W3099984696","https://openalex.org/W3102407811","https://openalex.org/W3103940881","https://openalex.org/W3106542468","https://openalex.org/W3114128329","https://openalex.org/W4200549251","https://openalex.org/W6600883950"],"related_works":["https://openalex.org/W4387497383","https://openalex.org/W3183948672","https://openalex.org/W3173606202","https://openalex.org/W3110381201","https://openalex.org/W2948807893","https://openalex.org/W2778153218","https://openalex.org/W2758277628","https://openalex.org/W1531601525","https://openalex.org/W2382515644","https://openalex.org/W1930396972"],"abstract_inverted_index":{"With":[0,82],"the":[1,5,88,101,125,142],"ever-growing":[2],"data":[3,13,38,64,154],"and":[4,25,39,48,91,122,150,157],"need":[6],"for":[7,30,104],"developing":[8],"powerful":[9],"machine":[10,26,59,95,106],"learning":[11,27,60,96,107],"models,":[12,145],"owners":[14],"increasingly":[15],"depend":[16],"on":[17,62,100,110],"various":[18],"untrusted":[19],"platforms":[20],"(e.g.,":[21],"public":[22],"clouds,":[23],"edges,":[24],"service":[28],"providers)":[29],"scalable":[31],"processing":[32],"or":[33],"collaborative":[34],"learning.":[35],"Thus,":[36],"sensitive":[37],"models":[40,61],"are":[41],"in":[42,76,93,124],"danger":[43],"of":[44,55,80,141],"unauthorized":[45],"access,":[46],"misuse,":[47],"privacy":[49],"compromises.":[50],"A":[51],"relatively":[52],"new":[53],"body":[54],"research":[56],"confidentially":[57],"trains":[58],"protected":[63],"to":[65,136],"address":[66],"these":[67],"concerns.":[68],"In":[69],"this":[70,77],"survey,":[71],"we":[72,86],"summarize":[73],"notable":[74],"studies":[75],"emerging":[78],"area":[79],"research.":[81],"a":[83,133,138],"unified":[84],"framework,":[85],"highlight":[87],"critical":[89],"challenges":[90],"innovations":[92],"outsourcing":[94],"confidentially.":[97],"We":[98],"focus":[99],"cryptographic":[102],"approaches":[103,121],"confidential":[105],"(CML),":[108],"primarily":[109],"model":[111],"training,":[112],"while":[113],"also":[114],"covering":[115],"other":[116],"directions":[117],"such":[118],"as":[119],"perturbation-based":[120],"CML":[123],"hardware-assisted":[126],"computing":[127],"environment.":[128],"The":[129],"discussion":[130],"will":[131],"take":[132],"holistic":[134],"way":[135],"consider":[137],"rich":[139],"context":[140],"related":[143],"threat":[144],"security":[146],"assumptions,":[147],"design":[148],"principles,":[149],"associated":[151],"trade-offs":[152],"amongst":[153],"utility,":[155],"cost,":[156],"confidentiality.":[158]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}