{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,28]],"date-time":"2026-01-28T17:08:56Z","timestamp":1769620136589,"version":"3.49.0"},"reference-count":63,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"the Postdoctoral Innovation Talents Support Program","award":["BX20240053"],"award-info":[{"award-number":["BX20240053"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/tifs.2025.3648121","type":"journal-article","created":{"date-parts":[[2025,12,24]],"date-time":"2025-12-24T18:45:00Z","timestamp":1766601900000},"page":"1127-1141","source":"Crossref","is-referenced-by-count":0,"title":["Conan: Secure and Reliable Machine Learning Inference Against Malicious Service Providers"],"prefix":"10.1109","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-0136-073X","authenticated-orcid":false,"given":"Hanxiao","family":"Chen","sequence":"first","affiliation":[{"name":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1961-7946","authenticated-orcid":false,"given":"Hongwei","family":"Li","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1545-1926","authenticated-orcid":false,"given":"Meng","family":"Hao","sequence":"additional","affiliation":[{"name":"School of Computing and Information Systems, Singapore Management University, Bras Basah, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1488-5546","authenticated-orcid":false,"given":"Pengzhi","family":"Xing","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jia","family":"Hu","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4592-8094","authenticated-orcid":false,"given":"Wenbo","family":"Jiang","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6595-6650","authenticated-orcid":false,"given":"Tianwei","family":"Zhang","sequence":"additional","affiliation":[{"name":"College of Computing and Data Science, Nanyang Technological University, Jurong West, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9764-9345","authenticated-orcid":false,"given":"Guowen","family":"Xu","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1038\/s41591-018-0316-z"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1038\/s41467-020-18073-9"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417274"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00086"},{"key":"ref6","first-page":"809","article-title":"Cheetah: Lean and fast secure two-party deep neural network inference","volume-title":"Proc. USENIX Secur.","author":"Huang"},{"key":"ref7","first-page":"730","article-title":"Mystique: Efficient conversions for zero-knowledge proofs with applications to machine learning","volume-title":"Proc. USENIX Secur.","author":"Weng"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3485379"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-46800-5_26"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.23199"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-32009-5_38"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40203-6_1"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978357"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-78372-7_6"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-56880-1_29"},{"key":"ref16","first-page":"426","article-title":"MHz2k: MPC from he over $\\mathbb{Z}_{2^{\\kappa}}$\n with new packing, simpler reshare, and better ZKP","volume-title":"Proc. CRYPTO","author":"Cheon"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.56553\/popets-2023-0084"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3411501.3419418"},{"key":"ref19","first-page":"2201","article-title":"Muse: Secure inference resilient to malicious clients","volume-title":"Proc. USENIX Secur.","author":"Lehmkuhl"},{"key":"ref20","first-page":"1361","article-title":"SIMC: ML inference secure against malicious clients at semi-honest cost","volume-title":"Proc. USENIX Secur.","author":"Chandran"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/359168.359176"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-20465-4_11"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-32009-5_40"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484556"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-70936-7_31"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-53008-5_3"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SFCS.1986.25"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/100216.100287"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-47989-6_35"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354255"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00056"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2025.230057"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.56553\/popets-2024-0107"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00270"},{"key":"ref35","first-page":"3819","article-title":"Scalable zero-knowledge proofs for non-linear functions in machine learning","volume-title":"Proc. USENIX Secur.","author":"Hao"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23113"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.12"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560667"},{"key":"ref39","volume-title":"EMP Toolkit","year":"2025"},{"key":"ref40","volume-title":"Seal Homomorphic Encryption Library","year":"2025"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134056"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00286"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/s10278-024-01384-4"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.3233\/faia240477"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2025.242287"},{"key":"ref46","first-page":"1651","article-title":"Gazelle: A low latency framework for secure neural network inference","volume-title":"Proc. USENIX Secur.","author":"Juvekar"},{"key":"ref47","first-page":"1501","article-title":"XONN: XNOR-based oblivious deep neural network inference","volume-title":"Proc. USENIX Secur.","author":"Riazi"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/3310273.3323047"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833697"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560709"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516738"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/1536414.1536440"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/3314221.3314628"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3339819"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2020-0077"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.24034"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-96878-0_13"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00078"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417278"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2021.3068195"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3348760"},{"key":"ref62","article-title":"ZEN: An optimizing compiler for verifiable, zero-knowledge neural network inferences","author":"Feng","year":"2021","journal-title":"Cryptol. ePrint Arch."},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-45146-4_9"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/11313711\/11314627.pdf?arnumber=11314627","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,1,28]],"date-time":"2026-01-28T05:11:16Z","timestamp":1769577076000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11314627\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":63,"URL":"https:\/\/doi.org\/10.1109\/tifs.2025.3648121","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}