{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,23]],"date-time":"2026-09-23T06:02:52Z","timestamp":1790143372976,"version":"4.0.1"},"reference-count":75,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,3,1]],"date-time":"2026-03-01T00:00:00Z","timestamp":1772323200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,3,1]],"date-time":"2026-03-01T00:00:00Z","timestamp":1772323200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,3,1]],"date-time":"2026-03-01T00:00:00Z","timestamp":1772323200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"National Science Foundation"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,3]]},"DOI":"10.1109\/satml68715.2026.00056","type":"proceedings-article","created":{"date-parts":[[2026,9,22]],"date-time":"2026-09-22T19:13:18Z","timestamp":1790104398000},"page":"912-927","source":"Crossref","is-referenced-by-count":0,"title":["Towards Zero Rotation and Beyond: Architecting Neural Networks for Fast Secure Inference with Homomorphic Encryption"],"prefix":"10.1109","author":[{"given":"Yifei","family":"Cai","sequence":"first","affiliation":[{"name":"Iowa State University","place":["Ames, IA"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yizhou","family":"Feng","sequence":"additional","affiliation":[{"name":"Old Dominion University","place":["Norfolk, VA"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Qiao","family":"Zhang","sequence":"additional","affiliation":[{"name":"Shandong University","place":["Qingdao"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chunsheng","family":"Xin","sequence":"additional","affiliation":[{"name":"Iowa State University","place":["Ames, IA"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hongyi","family":"Wu","sequence":"additional","affiliation":[{"name":"University of Arizona","place":["Tucson, AZ"]}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.14778\/3282495.3282499"},{"key":"ref2","first-page":"201","article-title":"Cryptonets: Applying neural networks to encrypted data with high throughput and accuracy","volume-title":"Proceedings of the ICML","author":"Gilad-Bachrach"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.12"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134056"},{"key":"ref5","first-page":"1651","article-title":"{GAZELLE}: A low latency framework for secure neural network inference","volume-title":"Proceedings of the USENIX Security","author":"Juvekar"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3411501.3419418"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417274"},{"key":"ref8","first-page":"809","article-title":"Cheetah: Lean and fast secure Two-Party deep neural network inference","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Huang"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.52202\/068431-1143"},{"key":"ref10","article-title":"Bolt: Privacy-preserving, accurate and efficient inference for transformers","author":"Pang","year":"2023","journal-title":"Cryptology ePrint Archive"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2025.230057"},{"key":"ref12","first-page":"144","article-title":"Somewhat practical fully homomorphic encryption","author":"Fan","year":"2012","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382279"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-47721-7_17"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/359168.359176"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/1536414.1536440"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1137\/120868669"},{"key":"ref18","first-page":"2173","article-title":"{AutoFHE}: Automated adaption of {CNNs} for efficient evaluation over {FHE}","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Ao"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3348170"},{"key":"ref20","article-title":"Developer reference for alexa interface","year":"2021"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24351"},{"key":"ref23","first-page":"28718","article-title":"Spencnn: orchestrating encoding and sparsity for fast homomorphically encrypted neural network inference","volume-title":"International Conference on Machine Learning","author":"Ran"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2024.3448406"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.56553\/popets-2023-0020"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.24034"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3634737.3637680"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/IOLTS59296.2023.10224890"},{"key":"ref29","article-title":"Very deep convolutional networks for large-scale image recognition","author":"Simonyan","year":"2014"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.243"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00474"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-24574-4_28"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.195"},{"key":"ref34","article-title":"Mobilenets: Efficient convolutional neural networks for mobile vision applications","author":"Howard","year":"2017"},{"key":"ref35","article-title":"Squeezenet: Alexnet-level accuracy with 50x fewer parameters and\u00a1 0.5 mb model size","author":"Iandola","year":"2016"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00716"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23113"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196522"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3195970.3196023"},{"key":"ref40","first-page":"35","article-title":"Aby3: A mixed protocol framework for machine learning","volume-title":"Proceedings of the ACM SIGSAC","author":"Mohassel"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2021-0011"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24202"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243837"},{"key":"ref44","first-page":"1501","article-title":"Xonn: Xnor-based oblivious deep neural network inference","volume-title":"USENIX Security Symposium","author":"Riazi"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00098"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2019-0035"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00092"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2018\/547"},{"key":"ref49","article-title":"Gforce: Gpu-friendly oblivious and rapid neural network inference","volume-title":"Proceedings of the USENIX Security","author":"Ng"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/3407023.3407045"},{"key":"ref51","article-title":"Aby2. 0: Improved mixed-protocol secure two-party computation","volume-title":"Proceedings of the USENIX Security","author":"Patra"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.23199"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298682"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/3065386"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-70694-8_15"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-48910-X_16"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-36362-7_1"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-77287-1_2"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.46586\/tches.v2021.i3.756-779"},{"key":"ref60","article-title":"Microsoft SEAL (release 3.3)","year":"2019"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.308"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/3488932.3517401"},{"key":"ref63","first-page":"19637","article-title":"Only train once: A one-shot neural network training and pruning framework","volume":"34","author":"Chen","year":"2021","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref64","first-page":"8024","article-title":"Pytorch: An imperative style, high-performance deep learning library","volume-title":"Advances in Neural Information Processing Systems 32.","author":"Paszke","year":"2019"},{"key":"ref65","article-title":"Microsoft seal 4.x for python","year":"2023"},{"key":"ref66","article-title":"Microsoft ezpc (easy secure multi-party computation)","author":"Research","year":"2019"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-015-0816-y"},{"key":"ref68","article-title":"Tiny imagenet dataset","year":"2015"},{"key":"ref69","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref70","article-title":"TensorFlow Model Garden","author":"Hongkun Yu","year":"2020"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.56553\/popets-2022-0109"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD57390.2023.10323672"},{"key":"ref73","article-title":"Market analysis of mobile and fixed broadband speeds, us","year":"2024"},{"key":"ref74","article-title":"Ciphergpt: Secure two-party gpt inference","author":"Hou","year":"2023","journal-title":"Cryptology ePrint Archive"},{"key":"ref75","article-title":"Pytorch tutorials: Training with distributed data parallelism","year":"2024"}],"event":{"name":"2026 IEEE Conference on Secure and Trustworthy Machine Learning (SaTML)","location":"Munich, Germany","start":{"date-parts":[[2026,3,23]]},"end":{"date-parts":[[2026,3,25]]}},"container-title":["2026 IEEE Conference on Secure and Trustworthy Machine Learning (SaTML)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11691582\/11691603\/11691702.pdf?arnumber=11691702","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,9,23]],"date-time":"2026-09-23T05:21:05Z","timestamp":1790140865000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11691702\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,3]]},"references-count":75,"URL":"https:\/\/doi.org\/10.1109\/satml68715.2026.00056","relation":{},"subject":[],"published":{"date-parts":[[2026,3]]}}}