{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,13]],"date-time":"2026-07-13T13:23:47Z","timestamp":1783949027216,"version":"3.55.0"},"reference-count":200,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"National Key Research and Development Program of China","award":["2023YFF0905300"],"award-info":[{"award-number":["2023YFF0905300"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U2468205"],"award-info":[{"award-number":["U2468205"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62372149"],"award-info":[{"award-number":["62372149"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U23A20303"],"award-info":[{"award-number":["U23A20303"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62372020"],"award-info":[{"award-number":["62372020"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["72031007"],"award-info":[{"award-number":["72031007"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62472036"],"award-info":[{"award-number":["62472036"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62202258"],"award-info":[{"award-number":["62202258"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Key Laboratory of Knowledge Engineering with Big Data","award":["BigKEOpen2025-04"],"award-info":[{"award-number":["BigKEOpen2025-04"]}]},{"name":"\u201cPioneer\u201d and \u201cLeading Goose\u201d Research and Development Program of Zhejiang Province","award":["2024C01073"],"award-info":[{"award-number":["2024C01073"]}]},{"DOI":"10.13039\/501100004543","name":"China Scholarship Council","doi-asserted-by":"publisher","award":["202406690030"],"award-info":[{"award-number":["202406690030"]}],"id":[{"id":"10.13039\/501100004543","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004543","name":"China Scholarship Council","doi-asserted-by":"publisher","award":["202206030042"],"award-info":[{"award-number":["202206030042"]}],"id":[{"id":"10.13039\/501100004543","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Commun. Surv. Tutorials"],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/comst.2025.3561657","type":"journal-article","created":{"date-parts":[[2025,4,16]],"date-time":"2025-04-16T13:55:08Z","timestamp":1744811708000},"page":"985-1024","source":"Crossref","is-referenced-by-count":31,"title":["Zero-Knowledge Proof-Based Verifiable Decentralized Machine Learning in Communication Network: A Comprehensive Survey"],"prefix":"10.1109","volume":"28","author":[{"ORCID":"https:\/\/orcid.org\/0009-0006-7354-1838","authenticated-orcid":false,"given":"Zhibo","family":"Xing","sequence":"first","affiliation":[{"name":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6313-4407","authenticated-orcid":false,"given":"Zijian","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ziang","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhen","family":"Li","sequence":"additional","affiliation":[{"name":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3553-0813","authenticated-orcid":false,"given":"Meng","family":"Li","sequence":"additional","affiliation":[{"name":"Key Laboratory of Knowledge Engineering with Big Data, Ministry of Education, the School of Computer Science and Information Engineering, and the Intelligent Interconnected Systems Laboratory of Anhui Province, Hefei University of Technology, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0824-0899","authenticated-orcid":false,"given":"Jiamou","family":"Liu","sequence":"additional","affiliation":[{"name":"School of Computer Science, The University of Auckland, Auckland, New Zealand"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1358-4933","authenticated-orcid":false,"given":"Zongyang","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Technology, Beihang University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3632-3381","authenticated-orcid":false,"given":"Yi","family":"Zhao","sequence":"additional","affiliation":[{"name":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Qi","family":"Sun","sequence":"additional","affiliation":[{"name":"Department of Bioinformatics, Hangzhou Nuowei Information Technology Company Ltd., Zhejiang, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3277-3887","authenticated-orcid":false,"given":"Liehuang","family":"Zhu","sequence":"additional","affiliation":[{"name":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Giovanni","family":"Russello","sequence":"additional","affiliation":[{"name":"School of Computer Science, The University of Auckland, Auckland, New Zealand"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"An analysis of deep neural network models for practical applications","author":"Canziani","year":"2016","journal-title":"arXiv:1605.07678"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/BDCloud-SocialCom-SustainCom.2016.76"},{"key":"ref3","first-page":"1273","article-title":"Communication-efficient learning of deep networks from decentralized data","volume-title":"Proc. Artif. Intell. Stat.","author":"McMahan"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2021.3128646"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3551636"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-33-6726-5_6"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2023.3321803"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3679013"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TBDATA.2024.3362191"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2022\/792"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/OJCOMS.2024.3438264"},{"key":"ref12","volume-title":"The cost of intelligence: Proving machine learning inference with zero-knowledge","author":"Labs","year":"2023"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-59107-5_7"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.54097\/6awase9w"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1016\/j.jksuci.2024.102207"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3348760"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3485379"},{"key":"ref18","article-title":"ZEN: An optimizing compiler for verifiable, zero-knowledge neural network inferences","author":"Feng","year":"2021"},{"key":"ref19","article-title":"Zero-knowledge proof-based practical federated learning on blockchain","author":"Xing","year":"2023","journal-title":"arXiv:2304.05590"},{"key":"ref20","first-page":"501","article-title":"Mystique: Efficient conversions for zero-knowledge proofs with applications to machine learning","volume-title":"Proc. 30th USENIX Security Symp. (USENIX Security)","author":"Weng"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3341145"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2020.10.007"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.38094\/jastt1457"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1002\/cem.873"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/2.485891"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/22145.22178"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1137\/0220068"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1016\/0022-0000(88)90005-0"},{"issue":"3","key":"ref29","first-page":"379","article-title":"An overview on succinct non-interactive zero-knowledge proofs","volume":"9","author":"Wei-Han","year":"2022","journal-title":"J. Cryptologic Res."},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-49896-5_11"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-47721-7_12"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-63715-0_8"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-84259-8_12"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/146585.146605"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00060"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-38348-9_37"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/62212.62222"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-49896-5_12"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/322217.322225"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-09519-5_73"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/1250790.1250794"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/s001459910006"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2018.10.024"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/3214303"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-79228-4_1"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/Trustcom.2015.357"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-14623-7_25"},{"key":"ref48","article-title":"Very deep convolutional networks for large-scale image recognition","author":"Simonyan","year":"2014","journal-title":"arXiv:1409.1556"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/MWC.101.2100269"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/MWC.004.2300009"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/TWC.2023.3265201"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/LCOMM.2023.3269768"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/OJCS.2023.3260732"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1007\/s12652-021-03459-4"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2023.3338741"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.2024.3353301"},{"key":"ref57","first-page":"1","article-title":"SafetyNets: Verifiable execution of deep neural networks on an untrusted cloud","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"30","author":"Ghodsi"},{"key":"ref58","first-page":"675","article-title":"DIZK: A distributed zero knowledge proof system","volume-title":"Proc. 27th USENIX Security Symp. (USENIX Security)","author":"Wu"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3153084"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.2976612"},{"key":"ref61","article-title":"Secure weighted aggregation for federated learning","author":"Guo","year":"2020","journal-title":"arXiv:2010.08730"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-022-06267-9"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3133442"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/AIIoT52608.2021.9454203"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-99073-6_8"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2021.3068195"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417278"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179400"},{"key":"ref69","first-page":"1","article-title":"Confidential-PROFITT: Confidential PROof of fair training of trees","volume-title":"Proc. 11th Int. Conf. Learn. Represent.","author":"Shamsabadi"},{"key":"ref70","first-page":"3819","article-title":"Scalable zero-knowledge proofs for non-linear functions in machine learning","volume-title":"Proc. 33rd USENIX Security Symp. (USENIX Security)","author":"Hao"},{"key":"ref71","article-title":"An efficient and extensible zero-knowledge proof framework for neural networks","author":"Lu","year":"2024"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-70890-9_10"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2024.3369658"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3670316"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3262932"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1145\/3617232.3624852"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2023.01.036"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2024.3371643"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2024.124531"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1109\/TCC.2024.3350233"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-57722-2_11"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-18283-9_12"},{"key":"ref83","article-title":"Verifiable evaluations of machine learning models using zkSNARKs","author":"South","year":"2024","journal-title":"arXiv:2402.02675"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3347039"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.56553\/popets-2023-0061"},{"key":"ref86","article-title":"Scaling up trustless DNN inference with zero-knowledge proofs","author":"Kang","year":"2022","journal-title":"arXiv:2210.08674"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1145\/3627703.3650088"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-54773-7_15"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3623202"},{"key":"ref90","first-page":"1","article-title":"Confidential-DPproof: Confidential proof of differentially private training","volume-title":"Proc. Int. Conf. Learn. Representat. (ICLR)","author":"Shamsabadi"},{"key":"ref91","first-page":"4273","article-title":"Efficient representation of numerical optimization problems for SNARKs","volume-title":"Proc. 31st USENIX Security Symp. (USENIX Security)","author":"Angel"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2021.108621"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1109\/GLOBECOM48099.2022.10000784"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-88428-4_31"},{"key":"ref95","first-page":"4805","article-title":"ACORN: Input validation for secure aggregation","volume-title":"Proc. 32nd USENIX Security Symp. (USENIX Security)","author":"Bell"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.14778\/3665844.3665860"},{"key":"ref97","article-title":"No vandalism: Privacy-preserving and Byzantine-robust federated learning","author":"Xing","year":"2024","journal-title":"arXiv:2406.01080"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2024.112115"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom56396.2022.00087"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560611"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00448"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2023.3302016"},{"key":"ref103","article-title":"Kick bad guys out! Zero-knowledge-proof-based anomaly detection in federated learning","author":"Han","year":"2023","journal-title":"arXiv:2310.04055"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1109\/DAPPS57946.2023.00012"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.14569\/IJACSA.2023.0140294"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-54129-2_34"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1109\/TBDATA.2024.3403370"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1109\/ICAIC60265.2024.10433831"},{"key":"ref109","article-title":"Evaluate and guard the wisdom of crowds: Zero knowledge proofs for crowdsourcing truth inference","author":"Liu","year":"2023","journal-title":"arXiv:2308.00985"},{"key":"ref110","article-title":"FedZKP: Federated model ownership verification with zero-knowledge proof","author":"Yang","year":"2023","journal-title":"arXiv:2305.04507"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1109\/DAC56929.2023.10247798"},{"key":"ref112","article-title":"Verifiable and provably secure machine unlearning","author":"Eisenhofer","year":"2022","journal-title":"arXiv:2210.09126"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3670334"},{"key":"ref114","article-title":"Trust the process: Zero-knowledge machine learning to enhance trust in generative AI interactions","author":"Ganescu","year":"2024","journal-title":"arXiv:2402.06414"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1145\/3297858.3304051"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00286"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484556"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-56880-1_29"},{"key":"ref119","volume-title":"Rosetta: A privacy-preserving framework based on TensorFlow","year":"2024"},{"key":"ref120","first-page":"265","article-title":"TensorFlow: A system for large-scale machine learning","volume-title":"Proc. 12th USENIX Symp. Oper. Syst. Design Implement. (OSDI)","author":"Abadi"},{"key":"ref121","first-page":"1435","article-title":"Two shuffles make a RAM: Improved constant overhead zero knowledge RAM","volume-title":"Proc. 33rd USENIX Security Symp. (USENIX Security)","author":"Yang"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00056"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.1201\/9781003162810-13"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00020"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-58751-1_7"},{"key":"ref126","article-title":"plookup: A simplified polynomial protocol for lookup tables","author":"Gabizon","year":"2020"},{"issue":"8","key":"ref127","first-page":"9","article-title":"Language models are unsupervised multitask learners","volume":"1","author":"Radford","year":"2019","journal-title":"OpenAI Blog"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1145\/2699436"},{"key":"ref129","first-page":"4291","article-title":"Experimenting with collaborative zk-SNARKs: Zero-knowledge proofs for distributed secrets","volume-title":"Proc. 31st USENIX Security Symp. (USENIX Security)","author":"Ozdemir"},{"key":"ref130","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00052"},{"key":"ref131","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-45721-1_27"},{"key":"ref132","article-title":"Recursive proof composition without a trusted setup","author":"Bowe","year":"2019"},{"key":"ref133","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-15985-5_13"},{"key":"ref134","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-18283-9_10"},{"key":"ref135","volume-title":"SNARK: Interfaces for relations and SNARKs for these relations","year":"2024"},{"key":"ref136","volume-title":"zk-SNARK library","year":"2024"},{"key":"ref137","volume-title":"Ginger-lib is a general purpose zk-SNARK library that supports recursive proof composition","year":"2024"},{"key":"ref138","first-page":"1","article-title":"High performance convolutional neural networks for document processing","volume-title":"Proc. 10th Int. Workshop Front. Handwriting Recognit.","author":"Chellapilla"},{"key":"ref139","first-page":"842","article-title":"Probabilistic machines can use less running time","volume-title":"Proc. IFIP Congr.","volume":"839","author":"Freivalds"},{"key":"ref140","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.435"},{"key":"ref141","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-04298-5_33"},{"key":"ref142","article-title":"CQ: Cached quotients for fast lookups","author":"Eagen","year":"2022"},{"key":"ref143","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-17373-8_11"},{"key":"ref144","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-92078-4_1"},{"key":"ref145","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-56877-1_25"},{"key":"ref146","doi-asserted-by":"publisher","DOI":"10.1109\/TSP.2007.896255"},{"key":"ref147","doi-asserted-by":"publisher","DOI":"10.1016\/0169-7439(87)80084-9"},{"key":"ref148","doi-asserted-by":"publisher","DOI":"10.1162\/089976603322385108"},{"key":"ref149","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00474"},{"key":"ref150","volume-title":"The Halo2 book","year":"2021"},{"key":"ref151","article-title":"PLONK: Permutations over lagrange-bases for oecumenical noninteractive arguments of knowledge","author":"Gabizon","year":"2019"},{"key":"ref152","article-title":"DistilBERT, a distilled version of BERT: Smaller, faster, cheaper and lighter","author":"Sanh","year":"2019","journal-title":"arXiv:1910.01108"},{"key":"ref153","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-45146-4_15"},{"key":"ref154","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-32009-5_38"},{"key":"ref155","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978318"},{"key":"ref156","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484800"},{"key":"ref157","volume-title":"EMP-toolkit: Efficient MultiParty computation toolkit","author":"Wang","year":"2016"},{"key":"ref158","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-17653-2_4"},{"key":"ref159","doi-asserted-by":"publisher","DOI":"10.1145\/2647868.2654889"},{"key":"ref160","doi-asserted-by":"publisher","DOI":"10.1145\/234313.234327"},{"key":"ref161","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40084-1_6"},{"key":"ref162","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-26954-8_24"},{"key":"ref163","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.43"},{"key":"ref164","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24434"},{"key":"ref165","article-title":"Measuring the intrinsic dimension of objective landscapes","author":"Li","year":"2018","journal-title":"arXiv:1804.08838"},{"key":"ref166","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-06944-4_16"},{"key":"ref167","doi-asserted-by":"publisher","DOI":"10.1007\/11496137_32"},{"key":"ref168","first-page":"1","article-title":"Certified defenses for data poisoning attacks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"30","author":"Steinhardt"},{"key":"ref169","first-page":"2938","article-title":"How to backdoor federated learning","volume-title":"Proc. Int. Conf. Artif. Intell. Stat.","author":"Bagdasaryan"},{"key":"ref170","first-page":"10495","article-title":"Zeno++: Robust fully asynchronous SGD","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Xie"},{"key":"ref171","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017","journal-title":"arXiv:1706.06083"},{"key":"ref172","article-title":"Secure federated learning against model poisoning attacks via client filtering","author":"Yaldiz","year":"2023","journal-title":"arXiv:2304.00160"},{"key":"ref173","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133982"},{"key":"ref174","first-page":"259","article-title":"Prio: Private, robust, and scalable computation of aggregate statistics","volume-title":"Proc. 14th USENIX Symp. Netw. Syst. Design Implement. (NSDI)","author":"Corrigan-Gibbs"},{"key":"ref175","volume-title":"Error Control Coding\u2014Fundamentals and Applications","author":"Lin","year":"1983"},{"key":"ref176","volume-title":"Sketching algorithms","author":"Nelson","year":"2020"},{"key":"ref177","article-title":"Can you really backdoor federated learning?","author":"Sun","year":"2019","journal-title":"arXiv:1911.07963"},{"key":"ref178","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2020.3041404"},{"key":"ref179","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_13"},{"key":"ref180","doi-asserted-by":"publisher","DOI":"10.1145\/2090236.2090263"},{"key":"ref181","first-page":"1","article-title":"Machine learning with adversaries: Byzantine tolerant gradient descent","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"30","author":"Blanchard"},{"key":"ref182","first-page":"301","article-title":"The limitations of federated learning in sybil settings","volume-title":"Proc. 23rd Int. Symp. Res. Attacks, Intrusions Defenses (RAID)","author":"Fung"},{"key":"ref183","doi-asserted-by":"publisher","DOI":"10.1109\/TSP.2022.3153135"},{"key":"ref184","first-page":"1","article-title":"Equality of opportunity in supervised learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"29","author":"Hardt"},{"key":"ref185","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-92078-4_3"},{"key":"ref186","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-48658-5_19"},{"key":"ref187","doi-asserted-by":"publisher","DOI":"10.1145\/3320269.3384720"},{"key":"ref188","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-34961-4_40"},{"key":"ref189","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3195956"},{"key":"ref190","doi-asserted-by":"publisher","DOI":"10.1007\/springerreference_6023"},{"key":"ref191","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/K16-1029"},{"key":"ref192","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.23087"},{"key":"ref193","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i13.17371"},{"key":"ref194","volume-title":"What is EZKL?","year":"2024"},{"key":"ref195","first-page":"253","article-title":"Taking proof-based verified computation a few steps closer to practicality","volume-title":"Proc. 21st USENIX Security Symp. (USENIX Security)","author":"Setty"},{"key":"ref196","doi-asserted-by":"publisher","DOI":"10.1109\/ISCA52012.2021.00040"},{"key":"ref197","doi-asserted-by":"publisher","DOI":"10.1002\/eng2.12639"},{"key":"ref198","doi-asserted-by":"publisher","DOI":"10.1145\/3575693.3575711"},{"key":"ref199","doi-asserted-by":"publisher","DOI":"10.46586\/tches.v2023.i3.194-220"},{"key":"ref200","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2019-0035"}],"container-title":["IEEE Communications Surveys & Tutorials"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/9739\/11321210\/10966041.pdf?arnumber=10966041","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,1,2]],"date-time":"2026-01-02T18:18:27Z","timestamp":1767377907000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10966041\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":200,"URL":"https:\/\/doi.org\/10.1109\/comst.2025.3561657","relation":{},"ISSN":["1553-877X","2373-745X"],"issn-type":[{"value":"1553-877X","type":"electronic"},{"value":"2373-745X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}