{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,11]],"date-time":"2026-03-11T17:09:12Z","timestamp":1773248952197,"version":"3.50.1"},"reference-count":58,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100004543","name":"China Scholarship Council","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100004543","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100005230","name":"Natural Science Foundation of Chongqing","doi-asserted-by":"crossref","award":["CSTB2025NSCQ-LZX0085"],"award-info":[{"award-number":["CSTB2025NSCQ-LZX0085"]}],"id":[{"id":"10.13039\/501100005230","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100005230","name":"Natural Science Foundation of Chongqing","doi-asserted-by":"crossref","award":["CSTB2023NSCQ-LZX0149"],"award-info":[{"award-number":["CSTB2023NSCQ-LZX0149"]}],"id":[{"id":"10.13039\/501100005230","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U20A20176"],"award-info":[{"award-number":["U20A20176"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62576053"],"award-info":[{"award-number":["62576053"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62302068"],"award-info":[{"award-number":["62302068"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/tifs.2025.3650384","type":"journal-article","created":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T18:36:22Z","timestamp":1767292582000},"page":"798-811","source":"Crossref","is-referenced-by-count":1,"title":["FSAT: A Faster Secure Convolutional Neural Network Inference Framework With Adversarial Training in Resource-Constrained Scenarios"],"prefix":"10.1109","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0009-0000-3221-2671","authenticated-orcid":false,"given":"Dong","family":"Li","sequence":"first","affiliation":[{"name":"Key Laboratory of Dependable Services Computing in Cyber Physical and Society-Ministry of Education, the College of Computer, Chongqing University, Chongqing, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8818-6983","authenticated-orcid":false,"given":"Anupam","family":"Chattopadhyay","sequence":"additional","affiliation":[{"name":"College of Computing and Data Science, Nanyang Technological University, Nanyang, Singapore"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3602-0946","authenticated-orcid":false,"given":"Qingguo","family":"L\u00fc","sequence":"additional","affiliation":[{"name":"Key Laboratory of Dependable Services Computing in Cyber Physical and Society-Ministry of Education, the College of Computer, Chongqing University, Chongqing, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0121-5575","authenticated-orcid":false,"given":"Jiahui","family":"Wu","sequence":"additional","affiliation":[{"name":"Peng Cheng Laboratory, Shenzhen, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9439-4623","authenticated-orcid":false,"given":"Tao","family":"Xiang","sequence":"additional","affiliation":[{"name":"Key Laboratory of Dependable Services Computing in Cyber Physical and Society-Ministry of Education, the College of Computer, Chongqing University, Chongqing, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3566-8161","authenticated-orcid":false,"given":"Xiaofeng","family":"Liao","sequence":"additional","affiliation":[{"name":"Key Laboratory of Dependable Services Computing in Cyber Physical and Society-Ministry of Education, the College of Computer, Chongqing University, Chongqing, China"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/s00500-017-2536-4"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2025.3561685"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2022.3169552"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134077"},{"key":"ref5","article-title":"Understanding membership inferences on well-generalized learning models","author":"Long","year":"2018","journal-title":"arXiv:1802.04889"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.12"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23113"},{"key":"ref8","first-page":"35","article-title":"ABY3: A mixed protocol framework for machine learning","volume-title":"Proc. ACM SIGSAC Conf. Comput. Commun. Secur.","author":"Mohassel"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417274"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3420216"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2021.3076123"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/MCI.2022.3180883"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2023.3305754"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TSC.2024.3399648"},{"key":"ref15","first-page":"1","article-title":"Somewhat practical fully homomorphic encryption","author":"Fan","year":"2012","journal-title":"Cryptol. ePrint Arch."},{"key":"ref16","first-page":"1","article-title":"Partially encrypted machine learning using functional encryption","volume-title":"Proc. 33rd Conf. Neural Inf. Process. Syst.","author":"Ryffel"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2024.3353536"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-70694-8_15"},{"key":"ref19","first-page":"201","article-title":"CryptoNets: Applying neural networks to encrypted data with high throughput and accuracy","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Gilad-Bachrach"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3314221.3314628"},{"key":"ref21","article-title":"CryptoDL: Deep neural networks over encrypted data","author":"Hesamifard","year":"2017","journal-title":"arXiv:1711.05189"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3263631"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/TSC.2023.3349298"},{"key":"ref24","first-page":"1","article-title":"Privacy-preserving classification on deep neural network","author":"Chabanne","year":"2017","journal-title":"Cryptol. ePrint Arch."},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-34671-2_34"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3287072"},{"key":"ref27","first-page":"1651","article-title":"Gazelle: A low latency framework for secure neural network inference","volume-title":"Proc. 27th USENIX Secur. Symp.","author":"Juvekar"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3411501.3419418"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3138611"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3141391"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3339819"},{"key":"ref32","first-page":"1501","article-title":"XONN: XNOR-based oblivious deep neural network inference","volume-title":"Proc. USENIX Secur. Symp.","author":"Riazi"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484797"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134056"},{"key":"ref35","first-page":"809","article-title":"Cheetah: Lean and fast secure two-party deep neural network inference","volume-title":"Proc. 31st USENIX Secur. Symp.","author":"Huang"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2021.3093573"},{"key":"ref37","first-page":"5277","article-title":"Efficient 3PC for binary circuits with application to maliciously-secure DNN inference","volume-title":"Proc. 32nd USENIX Secur. Symp.","author":"Li"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.56553\/popets-2024-0107"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00130"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2025.242287"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2025.230057"},{"key":"ref42","first-page":"1","article-title":"Activation approximations can incur safety vulnerabilities in aligned LLMs: Comprehensive analysis and defense","volume-title":"Proc. 34th USENIX Secur. Symp.","author":"Zhang"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3335741.3335755"},{"key":"ref44","first-page":"585","article-title":"Controllable invariance through adversarial feature learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Xie"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01270-0_37"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i04.5850"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/3369816"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.2967734"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01195"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i13.17370"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i9.16931"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2023.3288523"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-13190-5_1"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1016\/0022-0000(84)90070-9"},{"key":"ref55","first-page":"1","article-title":"HTCNN: high-throughput batch CNN inference with homomorphic encryption for edge computing","author":"Ye","year":"2024","journal-title":"Cryptol. ePrint Arch."},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-36362-7_1"},{"key":"ref57","volume-title":"Pyfhel: Python for Homomorphic Encryption Libraries","author":"Alberto","year":"2018"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.36871\/ek.up.p.r.2024.12.08.009"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/11313711\/11322760.pdf?arnumber=11322760","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,1,12]],"date-time":"2026-01-12T21:59:35Z","timestamp":1768255175000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11322760\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":58,"URL":"https:\/\/doi.org\/10.1109\/tifs.2025.3650384","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}