{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T16:45:21Z","timestamp":1783788321037,"version":"3.55.0"},"reference-count":59,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100021171","name":"Basic and Applied Basic Research Foundation of Guangdong Province","doi-asserted-by":"publisher","award":["2021A1515110027"],"award-info":[{"award-number":["2021A1515110027"]}],"id":[{"id":"10.13039\/501100021171","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Shenzhen High-Level Talents Research Start-up Funds"},{"name":"HITSZ Research Start-up Funds"},{"DOI":"10.13039\/501100000923","name":"Australian Research Council","doi-asserted-by":"publisher","award":["DP200103308"],"award-info":[{"award-number":["DP200103308"]}],"id":[{"id":"10.13039\/501100000923","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100000923","name":"Australian Research Council","doi-asserted-by":"publisher","award":["DP180103251"],"award-info":[{"award-number":["DP180103251"]}],"id":[{"id":"10.13039\/501100000923","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100000923","name":"Australian Research Council","doi-asserted-by":"publisher","award":["DP190102835"],"award-info":[{"award-number":["DP190102835"]}],"id":[{"id":"10.13039\/501100000923","id-type":"DOI","asserted-by":"publisher"}]},{"name":"ARC Linkage Project","award":["LP160101766"],"award-info":[{"award-number":["LP160101766"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2023,1,1]]},"DOI":"10.1109\/tdsc.2022.3141391","type":"journal-article","created":{"date-parts":[[2022,1,7]],"date-time":"2022-01-07T20:34:18Z","timestamp":1641587658000},"page":"620-636","source":"Crossref","is-referenced-by-count":67,"title":["Securely Outsourcing Neural Network Inference to the Cloud With Lightweight Techniques"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9874-8839","authenticated-orcid":false,"given":"Xiaoning","family":"Liu","sequence":"first","affiliation":[{"name":"School of Computing Technologies, RMIT University, Melbourne, VIC, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7852-6051","authenticated-orcid":false,"given":"Yifeng","family":"Zheng","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3701-4946","authenticated-orcid":false,"given":"Xingliang","family":"Yuan","sequence":"additional","affiliation":[{"name":"Faculty of Information Technology, Monash University, Clayton, VIC, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7351-5724","authenticated-orcid":false,"given":"Xun","family":"Yi","sequence":"additional","affiliation":[{"name":"School of Computing Technologies, RMIT University, Melbourne, VIC, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2016.12.038"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2016.2568460"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2018.2832251"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TCC.2017.2769645"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2016.2520473"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813677"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref9","article-title":"Trustworthy AI inference systems: An industry research view","author":"Cammarota","year":"2020"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2019.2912748"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134056"},{"key":"ref12","first-page":"1651","article-title":"GAZELLE: A low latency framework for secure neural network inference","volume-title":"Proc. 27th USENIX Conf. Secur. Symp.","author":"Juvekar"},{"key":"ref13","first-page":"2505","article-title":"Delphi: A cryptographic inference service for neural networks","volume-title":"Proc. 29th USENIX Secur. Symp.","author":"Pratyush"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/1029179.1029204"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-46766-1_34"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-29959-0_2"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196522"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.12"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3339819"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2018.2819134"},{"key":"ref22","article-title":"Crypten: Secure multi-party computation meets machine learning","volume-title":"Proc. NeurIPS Workshop Privacy-Preserving Mach. Learn.","author":"Knott"},{"key":"ref23","article-title":"TF encrypted: Encrypted deep learning in tensorflow","year":"2020"},{"key":"ref24","first-page":"1501","article-title":"XONN: XNOR-based oblivious deep neural network inference","volume-title":"Proc. 28th USENIX Conf. Secur. Symp.","author":"Riazi"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.5555\/3241094.3241142"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134077"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813687"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00019"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00001"},{"key":"ref30","first-page":"1895","article-title":"Evaluating differentially private machine learning in practice","volume-title":"Proc. 28th USENIX Secur. Symp.","author":"Jayaraman"},{"key":"ref31","first-page":"267","article-title":"The secret sharer: Evaluating and testing unintended memorization in neural networks","volume-title":"Proc. 28th USENIX Secur. Symp.","author":"Carlini"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2019.00020"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274740"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2019.00044"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2019-0035"},{"key":"ref36","first-page":"448","article-title":"Batch normalization: Accelerating deep network training by reducing internal covariate shift","volume":"37","author":"Ioffe","year":"2015"},{"key":"ref38","first-page":"201","article-title":"CryptoNets: Applying neural networks to encrypted data with high throughput and accuracy","volume-title":"Proc. 33rd Int. Conf. Mach. Learn.","author":"Gilad-Bachrach"},{"key":"ref39","first-page":"10 035","article-title":"SHE: A fast and accurate deep neural network for encrypted data","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Lou"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/ACSSC.2003.1292373"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-88418-5_25"},{"key":"ref42","first-page":"2165","article-title":"ABY2. 0: Improved mixed-protocol secure two-party computation","volume-title":"Proc. 30th USENIX Secur. Symp.","author":"Patra"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3194048"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3407023.3407045"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23113"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/3335741.3335755"},{"key":"ref48","article-title":"FitNets: Hints for thin deep nets","author":"Romero","year":"2014"},{"key":"ref49","first-page":"496","article-title":"EzPC: Programmable, efficient, and scalable secure two-party computation for machine learning","volume":"1109","author":"Chandran","year":"2017","journal-title":"ePrint Rep."},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/3447582"},{"key":"ref51","article-title":"CryptoDL: Deep neural networks over encrypted data","author":"Hesamifard","year":"2017"},{"key":"ref52","article-title":"Leia: A lightweight cryptographic neural network inference system at the edge","volume":"2020","author":"Liu","year":"2020","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"ref53","first-page":"35","article-title":"ABY3: A mixed protocol framework for machine learning","volume-title":"Proc. ACM SIGSAC Conf. Comput. Commun. Secur.","author":"Mohassel"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.23005"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00092"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2013.30"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24119"},{"key":"ref58","article-title":"Privacy-preserving video classification with convolutional neural networks","author":"Pentyala","year":"2021"},{"key":"ref59","first-page":"1039","article-title":"Visor: Privacy-preserving video analytics as a cloud service","volume-title":"Proc. 29th USENIX Secur. Symp.","author":"Poddar"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1145\/3411501.3419420"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2021.3068195"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2018.00027"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00038"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/10016903\/09674792.pdf?arnumber=9674792","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,13]],"date-time":"2024-01-13T22:54:08Z","timestamp":1705186448000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9674792\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,1,1]]},"references-count":59,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2022.3141391","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,1,1]]}}}