{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,29]],"date-time":"2026-10-29T16:15:38Z","timestamp":1793290538140,"version":"4.5.0"},"reference-count":72,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100003725","name":"National Research Foundation of Korea","doi-asserted-by":"publisher","award":["2021R1F1A1061420"],"award-info":[{"award-number":["2021R1F1A1061420"]}],"id":[{"id":"10.13039\/501100003725","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Institute of Information & communications Technology Planning & Evaluation","award":["IITP-2021-0-01810"],"award-info":[{"award-number":["IITP-2021-0-01810"]}],"id":[{"id":"https:\/\/ror.org\/01g0hqq23","id-type":"ROR","asserted-by":"crossref"}]},{"name":"Institute of Information & communications Technology Planning & Evaluation","award":["IITP-2021-2020-0-01819"],"award-info":[{"award-number":["IITP-2021-2020-0-01819"]}],"id":[{"id":"https:\/\/ror.org\/01g0hqq23","id-type":"ROR","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100003725","name":"National Research Foundation of Korea","doi-asserted-by":"publisher","award":["NRF-2021R1A6A1A13044830"],"award-info":[{"award-number":["NRF-2021R1A6A1A13044830"]}],"id":[{"id":"10.13039\/501100003725","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2023,1,1]]},"DOI":"10.1109\/tdsc.2021.3126323","type":"journal-article","created":{"date-parts":[[2021,11,9]],"date-time":"2021-11-09T15:39:46Z","timestamp":1636472386000},"page":"36-52","source":"Crossref","is-referenced-by-count":122,"title":["VerSA: Verifiable Secure Aggregation for Cross-Device Federated Learning"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-4334-0411","authenticated-orcid":false,"given":"Changhee","family":"Hahn","sequence":"first","affiliation":[{"name":"Department of Electrical and Information Engineering, Seoul National University of Science and Technology, Seoul, Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3906-7240","authenticated-orcid":false,"given":"Hodong","family":"Kim","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, Korea University, Seoul, Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5392-9110","authenticated-orcid":false,"given":"Minjae","family":"Kim","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, Korea University, Seoul, Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4823-4194","authenticated-orcid":false,"given":"Junbeom","family":"Hur","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, Korea University, Seoul, Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1561\/2000000039"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/j.ymssp.2017.11.024"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1016\/j.heliyon.2018.e00938"},{"key":"ref4","article-title":"A berkeley view of systems challenges for AI","author":"Stoica","year":"2017"},{"key":"ref5","article-title":"Federated optimization: Distributed machine learning for on-device intelligence","author":"Kone\u010dn\u1ef3","year":"2016"},{"key":"ref6","article-title":"Federated learning of deep networks using model averaging","author":"McMahan","year":"2016"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813677"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813687"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978318"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134012"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00057"},{"key":"ref13","first-page":"267","article-title":"The secret sharer: Evaluating and testing unintended memorization in neural networks","volume-title":"Proc. 28th USENIX Secur. Symp.","author":"Carlini"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00029"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00065"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2019.8737416"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-63076-8_2"},{"key":"ref18","article-title":"Learning differentially private recurrent language models","author":"McMahan","year":"2017"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-32692-0_16"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00019"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1515\/popets-2018-0024"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2019.00011"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24119"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.12"},{"key":"ref25","first-page":"35","article-title":"ABY3: A mixed protocol framework for machine learning","volume-title":"Proc. ACM SIGSAC Conf. Comput. Commun. Secur.","author":"Mohassel"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-36594-2_28"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-46497-7_6"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-93387-0_33"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2018.05.005"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2929409"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00045"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2020.3036166"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1561\/9781680837896"},{"key":"ref34","article-title":"Understanding top-K sparsification in distributed deep learning","author":"Shi","year":"2019"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2004.1301326"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660366"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133982"},{"key":"ref38","article-title":"Revisiting distributed synchronous SGD","author":"Chen","year":"2016"},{"key":"ref39","volume-title":"Deep Learning","author":"Goodfellow","year":"2016"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref41","article-title":"Reading digits in natural images with unsupervised feature learning","author":"Netzer","year":"2011","journal-title":"NIPS Workshop Deep Learn. Unsupervised Feature Learn."},{"key":"ref42","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref43","article-title":"Federated learning: Strategies for improving communication efficiency","author":"Kone\u010dn\u1ef3","year":"2016"},{"key":"ref44","article-title":"Towards federated learning at scale: System design","author":"Bonawitz","year":"2019"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1038\/s41598-020-69250-1"},{"key":"ref46","first-page":"493","article-title":"BatchCrypt: Efficient homomorphic encryption for cross-silo federated learning","volume-title":"Proc. USENIX Annu. Tech. Conf.","author":"Zhang"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/359168.359176"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1007\/s10623-004-3808-4"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-70936-7_7"},{"key":"ref50","first-page":"265","article-title":"TensorFlow: A system for large-scale machine learning","volume-title":"Proc. 12th USENIX Symp. Oper. Syst. Des. Implementation","author":"Abadi"},{"key":"ref51","article-title":"PBC library manual 0.5. 11.","author":"Lynn","year":"2006"},{"key":"ref52","first-page":"4672","article-title":"SafetyNets: Verifiable execution of deep neural networks on an untrusted cloud","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Ghodsi"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2787987"},{"key":"ref54","first-page":"1737","article-title":"Deep learning with limited numerical precision","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Gupta"},{"key":"ref55","first-page":"7675","article-title":"Training deep neural networks with 8-bit floating point numbers","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Wang"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-68339-9_29"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/586110.586125"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1137\/S0097539793244708"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-61770-1_45"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45539-6_22"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-49896-5_26"},{"key":"ref62","volume-title":"A Fully Homomorphic Encryption Scheme","author":"Gentry","year":"2009"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/ISCC.2011.5983948"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref65","article-title":"Improved regularization of convolutional neural networks with cutout","author":"Devries","year":"2017"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3043139"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM41043.2020.9155414"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2021.3050781"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1145\/3427228.3427232"},{"key":"ref70","article-title":"Slalom: Fast, verifiable and private execution of neural networks in trusted hardware","author":"Tramer","year":"2018"},{"issue":"86","key":"ref71","first-page":"1","article-title":"Intel SGX explained","volume":"2016","author":"Costan","year":"2016","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.3035591"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/10016903\/09609695.pdf?arnumber=9609695","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,11]],"date-time":"2024-01-11T20:12:26Z","timestamp":1705003946000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9609695\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,1,1]]},"references-count":72,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2021.3126323","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,1,1]]}}}