{"id":"https://openalex.org/W4410475190","doi":"https://doi.org/10.56553/popets-2025-0090","title":"PIGEON: A High Throughput Framework for Private Inference of Neural Networks using Secure Multiparty Computation","display_name":"PIGEON: A High Throughput Framework for Private Inference of Neural Networks using Secure Multiparty Computation","publication_year":2025,"publication_date":"2025-05-19","ids":{"openalex":"https://openalex.org/W4410475190","doi":"https://doi.org/10.56553/popets-2025-0090"},"language":"en","primary_location":{"id":"doi:10.56553/popets-2025-0090","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2025-0090","pdf_url":null,"source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.56553/popets-2025-0090","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5060089539","display_name":"Christopher Harth-Kitzerow","orcid":null},"institutions":[{"id":"https://openalex.org/I1283382300","display_name":"BMW (Germany)","ror":"https://ror.org/05vs9tj88","country_code":"DE","type":"company","lineage":["https://openalex.org/I1283382300","https://openalex.org/I4210156768"]},{"id":"https://openalex.org/I4210156768","display_name":"BMW Group (Germany)","ror":"https://ror.org/044kkbh92","country_code":"DE","type":"company","lineage":["https://openalex.org/I4210156768"]},{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Christopher Harth-Kitzerow","raw_affiliation_strings":["Technical University of Munich, BMW Group"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technical University of Munich, BMW Group","institution_ids":["https://openalex.org/I1283382300","https://openalex.org/I4210156768","https://openalex.org/I62916508"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103063936","display_name":"Yongqin Wang","orcid":"https://orcid.org/0009-0005-5076-7706"},"institutions":[{"id":"https://openalex.org/I1174212","display_name":"University of Southern California","ror":"https://ror.org/03taz7m60","country_code":"US","type":"education","lineage":["https://openalex.org/I1174212"]},{"id":"https://openalex.org/I2800817003","display_name":"California Southern University","ror":"https://ror.org/058zz0t50","country_code":"US","type":"education","lineage":["https://openalex.org/I2800817003"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yongqin Wang","raw_affiliation_strings":["University of Southern California"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Southern California","institution_ids":["https://openalex.org/I1174212","https://openalex.org/I2800817003"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005448514","display_name":"Rachit Rajat","orcid":"https://orcid.org/0009-0005-6430-1819"},"institutions":[{"id":"https://openalex.org/I1174212","display_name":"University of Southern California","ror":"https://ror.org/03taz7m60","country_code":"US","type":"education","lineage":["https://openalex.org/I1174212"]},{"id":"https://openalex.org/I2800817003","display_name":"California Southern University","ror":"https://ror.org/058zz0t50","country_code":"US","type":"education","lineage":["https://openalex.org/I2800817003"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rachit Rajat","raw_affiliation_strings":["University of Southern California"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Southern California","institution_ids":["https://openalex.org/I1174212","https://openalex.org/I2800817003"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060144977","display_name":"Georg Carle","orcid":"https://orcid.org/0000-0002-2347-1839"},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Georg Carle","raw_affiliation_strings":["Technical University of Munich"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technical University of Munich","institution_ids":["https://openalex.org/I62916508"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5018033573","display_name":"Murali Annavaram","orcid":"https://orcid.org/0000-0002-4633-6867"},"institutions":[{"id":"https://openalex.org/I1174212","display_name":"University of Southern California","ror":"https://ror.org/03taz7m60","country_code":"US","type":"education","lineage":["https://openalex.org/I1174212"]},{"id":"https://openalex.org/I2800817003","display_name":"California Southern University","ror":"https://ror.org/058zz0t50","country_code":"US","type":"education","lineage":["https://openalex.org/I2800817003"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Murali Annavaram","raw_affiliation_strings":["University of Southern California"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Southern California","institution_ids":["https://openalex.org/I1174212","https://openalex.org/I2800817003"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.9129,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.94652142,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":"2025","issue":"3","first_page":"88","last_page":"105"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.992900013923645,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.992900013923645,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11612","display_name":"Stochastic Gradient Optimization Techniques","score":0.9909999966621399,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9258999824523926,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/throughput","display_name":"Throughput","score":0.7714531421661377},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.7074094414710999},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6977889537811279},{"id":"https://openalex.org/keywords/computation","display_name":"Computation","score":0.6265727877616882},{"id":"https://openalex.org/keywords/secure-multi-party-computation","display_name":"Secure multi-party computation","score":0.5580741763114929},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.508290708065033},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.4875761866569519},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4187317490577698},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.33683979511260986},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.12840020656585693},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.1251840591430664},{"id":"https://openalex.org/keywords/wireless","display_name":"Wireless","score":0.07833415269851685}],"concepts":[{"id":"https://openalex.org/C157764524","wikidata":"https://www.wikidata.org/wiki/Q1383412","display_name":"Throughput","level":3,"score":0.7714531421661377},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.7074094414710999},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6977889537811279},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.6265727877616882},{"id":"https://openalex.org/C18396474","wikidata":"https://www.wikidata.org/wiki/Q2465888","display_name":"Secure multi-party computation","level":3,"score":0.5580741763114929},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.508290708065033},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.4875761866569519},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4187317490577698},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.33683979511260986},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.12840020656585693},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.1251840591430664},{"id":"https://openalex.org/C555944384","wikidata":"https://www.wikidata.org/wiki/Q249","display_name":"Wireless","level":2,"score":0.07833415269851685}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.56553/popets-2025-0090","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2025-0090","pdf_url":null,"source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.56553/popets-2025-0090","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2025-0090","pdf_url":null,"source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2136583354","https://openalex.org/W2111238207","https://openalex.org/W2055243143","https://openalex.org/W4231775656","https://openalex.org/W2069340834","https://openalex.org/W2550686250","https://openalex.org/W2083288298","https://openalex.org/W3042419602","https://openalex.org/W2966649771","https://openalex.org/W2607129240"],"abstract_inverted_index":{"Privacy-Preserving":[0],"Machine":[1],"Learning":[2],"(PPML)":[3],"is":[4,35,81],"one":[5,229,243],"of":[6,20,38,44,171,221,231,247,264],"the":[7,41,97,113,116,189,196,205,209],"most":[8],"relevant":[9],"use":[10],"cases":[11],"for":[12,55,69,168,191,252],"Secure":[13],"Multiparty":[14],"Computation":[15],"(MPC).":[16],"While":[17,86],"private":[18,56],"training":[19],"large":[21,237,253],"neural":[22,76],"networks":[23],"such":[24,32],"as":[25,33],"VGG-16":[26],"or":[27],"ResNet-50":[28],"on":[29,156,188,195],"state-of-the-art":[30,134,210],"datasets":[31],"ImageNet":[34,254],"still":[36],"out":[37],"reach,":[39],"given":[40],"performance":[42,127],"overhead":[43,107],"MPC,":[45],"GPU-based":[46,135],"MPC":[47,95,98],"frameworks":[48],"are":[49],"starting":[50],"to":[51,93,101,118,142,204,208,242,244],"achieve":[52],"practical":[53],"runtimes":[54],"inference.":[57],"However,":[58],"we":[59,162],"show":[60],"that,":[61],"unlike":[62],"plaintext":[63],"machine":[64],"learning,":[65],"using":[66],"GPU":[67,114,130,225],"acceleration":[68],"both":[70],"linear":[71,90,202],"(e.g.,":[72,79,257],"convolutions)":[73],"and":[74,108,115,128,149,186,233,259],"non-linear":[75,103,192],"network":[77,120],"layers":[78,91,104,193,203],"ReLU)":[80],"actually":[82],"counterproductive":[83],"in":[84,124,133,250],"PPML.":[85],"GPUs":[87],"effectively":[88],"accelerate":[89],"compared":[92],"CPU-based":[94],"implementations,":[96],"circuits":[99],"required":[100,199],"evaluate":[102],"introduce":[105],"memory":[106,131,226],"frequent":[109],"data":[110],"movement":[111],"between":[112,183],"CPU":[117,190],"handle":[119],"communication.":[121],"This":[122,240],"results":[123],"slow":[125],"ReLU":[126,216],"high":[129],"requirements":[132],"PPML":[136,211],"frameworks,":[137],"hindering":[138],"them":[139],"from":[140],"scaling":[141],"multiple":[143],"images":[144,153],"per":[145,154],"second":[146],"inference":[147],"throughput":[148,217,251],"more":[150,260],"than":[151,261],"eight":[152],"batch":[155,238,255],"ImageNet.":[157],"To":[158],"overcome":[159],"these":[160],"limitations,":[161],"propose":[163],"PIGEON,":[164],"an":[165],"open-source":[166],"framework":[167,212],"Private":[169],"Inference":[170],"Neural":[172],"Networks.":[173],"PIGEON":[174,214],"employs":[175],"a":[176,265],"novel":[177],"ABG":[178],"programming":[179],"model":[180],"that":[181],"switches":[182],"Arithmetic":[184],"Vectorization":[185],"Bitslicing":[187],"depending":[194],"MPC-specific":[197],"computation":[198],"while":[200],"offloading":[201],"GPU.":[206],"Compared":[207],"Piranha,":[213],"improves":[215],"by":[218,228],"two":[219,245],"orders":[220,246],"magnitude,":[222,232],"reduces":[223],"peak":[224],"utilization":[227],"order":[230],"scales":[234],"better":[235],"with":[236],"sizes.":[239],"translates":[241],"magnitude":[248],"improvements":[249],"sizes":[256],"192)":[258],"70%":[262],"saturation":[263],"25":[266],"Gbit/s":[267],"network.":[268]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":2}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-10T00:00:00"}