{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T15:27:22Z","timestamp":1783438042277,"version":"3.54.6"},"reference-count":64,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"10","license":[{"start":{"date-parts":[[2021,10,1]],"date-time":"2021-10-01T00:00:00Z","timestamp":1633046400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,10,1]],"date-time":"2021-10-01T00:00:00Z","timestamp":1633046400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2021,10,1]],"date-time":"2021-10-01T00:00:00Z","timestamp":1633046400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","award":["2020AAA0107700"],"award-info":[{"award-number":["2020AAA0107700"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U20B2049"],"award-info":[{"award-number":["U20B2049"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61822207"],"award-info":[{"award-number":["61822207"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61572412"],"award-info":[{"award-number":["61572412"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61572278"],"award-info":[{"award-number":["61572278"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61822309"],"award-info":[{"award-number":["61822309"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61773310"],"award-info":[{"award-number":["61773310"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U1736205"],"award-info":[{"award-number":["U1736205"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Research Grants Council of Hong Kong","award":["11217819"],"award-info":[{"award-number":["11217819"]}]},{"name":"Research Grants Council of Hong Kong","award":["11217620"],"award-info":[{"award-number":["11217620"]}]},{"name":"Innovation and Technology Commission of Hong Kong","award":["ITS\/145\/19"],"award-info":[{"award-number":["ITS\/145\/19"]}]},{"name":"BNRist","award":["BNR2020RC01013"],"award-info":[{"award-number":["BNR2020RC01013"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Parallel Distrib. Syst."],"published-print":{"date-parts":[[2021,10,1]]},"DOI":"10.1109\/tpds.2021.3068195","type":"journal-article","created":{"date-parts":[[2021,3,23]],"date-time":"2021-03-23T19:53:11Z","timestamp":1616529191000},"page":"2524-2540","source":"Crossref","is-referenced-by-count":82,"title":["VeriML: Enabling Integrity Assurances and Fair Payments for Machine Learning as a Service"],"prefix":"10.1109","volume":"32","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1700-3836","authenticated-orcid":false,"given":"Lingchen","family":"Zhao","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8967-8525","authenticated-orcid":false,"given":"Qian","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0547-315X","authenticated-orcid":false,"given":"Cong","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8776-8730","authenticated-orcid":false,"given":"Qi","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chao","family":"Shen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6959-0569","authenticated-orcid":false,"given":"Bo","family":"Feng","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","article-title":"Zero knowledge contingent payment","author":"maxwell","year":"2011"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3026543"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/1403027.1403046"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/2492002.2482561"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/2213977.2214069"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-38348-9_37"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2020.3000372"},{"key":"ref36","first-page":"601","article-title":"Stealing machine learning models via prediction APIs","author":"tram\u00e8r","year":"2016","journal-title":"Proc USENIX Conf Secur Symp"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813677"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-68711-7_4"},{"key":"ref60","article-title":"Integrated public use microdata series-international: Version 5.0","year":"2009"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1201\/9781315139470"},{"key":"ref61","year":"0"},{"key":"ref63","first-page":"201","article-title":"Cryptonets: Applying neural networks to encrypted data with high throughput and accuracy","author":"gilad-bachrach","year":"2016","journal-title":"Proc 33rd Int Conf Mach Learn"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2016.2603511"},{"key":"ref64","article-title":"On polynomial approximations for privacy-preserving and verifiable relu networks","author":"ali","year":"2020"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2019-0035"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2019.2954133"},{"key":"ref2","year":"0"},{"key":"ref1","year":"0"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00018"},{"key":"ref22","year":"0"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2019.2957091"},{"key":"ref24","article-title":"Slalom: Fast, verifiable and private execution of neural networks in trusted hardware","author":"tramer","year":"2018"},{"key":"ref23","first-page":"619","article-title":"Oblivious multi-party machine learning on trusted processors","author":"ohrimenko","year":"2016","journal-title":"Proc USENIX Security07"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.3029899"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243760"},{"key":"ref50","author":"motwani","year":"2010","journal-title":"Randomized Algorithms"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.2986205"},{"key":"ref59","year":"0"},{"key":"ref58","year":"0"},{"key":"ref57","year":"0"},{"key":"ref56","year":"0"},{"key":"ref55","author":"lindell","year":"2014","journal-title":"Introduction to Modern Cryptography"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00020"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00060"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2939713"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2013.47"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.14778\/2752939.2752944"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134060"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660354"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/FSCS.1990.89518"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40084-1_5"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.43"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/BFb0055745"},{"key":"ref17","article-title":"A zero knowledge sumcheck and its applications","author":"chiesa","year":"2017"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23097"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.23"},{"key":"ref4","year":"0"},{"key":"ref3","year":"0"},{"key":"ref6","first-page":"4672","article-title":"Safetynets: Verifiable execution of deep neural networks on an untrusted cloud","author":"ghodsi","year":"2017","journal-title":"Proc 31st Int Conf Neural Inf Process Syst"},{"key":"ref5","year":"0"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.12"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134056"},{"key":"ref49","first-page":"3146","article-title":"LightGBM: A highly efficient gradient boosting decision tree","author":"ke","year":"2017","journal-title":"Proc 31st Int Conf Neural Inf Process Syst"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40084-1_6"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-70278-0_4"},{"key":"ref45","first-page":"3059","article-title":"Noisy activation functions","author":"gulcehre","year":"2016","journal-title":"Proc 33rd Int Conf Int Conf Mach Learn"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/1772690.1772862"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/s10107-010-0420-4"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243857"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-76578-5_11"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/12130.12168"},{"key":"ref43","year":"0"}],"container-title":["IEEE Transactions on Parallel and Distributed Systems"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/71\/9399068\/09384314.pdf?arnumber=9384314","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,10]],"date-time":"2022-05-10T14:50:24Z","timestamp":1652194224000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9384314\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,10,1]]},"references-count":64,"journal-issue":{"issue":"10"},"URL":"https:\/\/doi.org\/10.1109\/tpds.2021.3068195","relation":{},"ISSN":["1045-9219","1558-2183","2161-9883"],"issn-type":[{"value":"1045-9219","type":"print"},{"value":"1558-2183","type":"electronic"},{"value":"2161-9883","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,10,1]]}}}