{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T06:19:19Z","timestamp":1778048359145,"version":"3.51.4"},"reference-count":54,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,3,6]],"date-time":"2026-03-06T00:00:00Z","timestamp":1772755200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,3,6]],"date-time":"2026-03-06T00:00:00Z","timestamp":1772755200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,3,6]]},"DOI":"10.1109\/wacv61042.2026.00070","type":"proceedings-article","created":{"date-parts":[[2026,5,5]],"date-time":"2026-05-05T19:59:32Z","timestamp":1778011172000},"page":"647-656","source":"Crossref","is-referenced-by-count":0,"title":["Marshaled Learning: Bridging Large Neural Networks with Memory-Constrained Trusted Execution Environments in Federated Learning"],"prefix":"10.1109","author":[{"given":"Shiwei","family":"Ding","sequence":"first","affiliation":[{"name":"Michigan Technological University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiaoyong","family":"Yuan","sequence":"additional","affiliation":[{"name":"Clemson University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhenlin","family":"Wang","sequence":"additional","affiliation":[{"name":"Michigan Technological University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lan Emily","family":"Zhang","sequence":"additional","affiliation":[{"name":"Clemson University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Giuseppe","family":"Ateniese","sequence":"additional","affiliation":[{"name":"George Mason University"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"Maximum size of op-tee","year":"2023"},{"key":"ref2","volume-title":"Trusted little kernel (tlk) dispatcher - trusted firmware-a documentation","year":"2023"},{"key":"ref3","volume-title":"Intel trust domain extensions (intel tdx)","year":"2024"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978318"},{"key":"ref5","article-title":"Prospect pruning: Finding trainable weights at initialization using meta-gradients","author":"Alizadeh","year":"2022"},{"key":"ref6","article-title":"Compression-aware training of deep networks","volume":"30","author":"Alvarez","year":"2017","journal-title":"NeurIPS \u201917"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2787987"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/2799647"},{"key":"ref9","article-title":"Language models are few-shot learners","author":"Brown","year":"2020"},{"key":"ref10","article-title":"An image is worth 16x16 words: Transformers for image recognition at scale","author":"Dosovitskiy","year":"2020"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/11787006_1"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-79228-4_1"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.29012\/jpc.v7i3.405"},{"key":"ref14","first-page":"275","article-title":"Scalable memory protection in the penglai enclave","volume-title":"OSDI","author":"Feng"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/SPW53761.2021.00017"},{"key":"ref16","article-title":"The lottery ticket hypothesis: Finding sparse, trainable neural networks","author":"Frankle","year":"2018"},{"key":"ref17","first-page":"16937","article-title":"Inverting gradients-how easy is it to break privacy in federated learning?","volume":"33","author":"Geiping","year":"2020","journal-title":"NeurIPS \u201920"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134012"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.01534"},{"key":"ref21","article-title":"Evaluating differentially private machine learning in practice","volume-title":"USENIX Security Symposium","author":"Jayaraman"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CCGrid49817.2020.00-52"},{"key":"ref23","article-title":"Olive: Oblivious and differentially private federated learning on trusted execution environment","author":"Kato","year":"2022"},{"key":"ref24","first-page":"20750","article-title":"Propile: Probing privacy leakage in large language models","volume":"36","author":"Kim","year":"2023","journal-title":"NeurIPS \u201923"},{"key":"ref25","article-title":"Federated learning: Strategies for improving communication efficiency","author":"Kone\u010dn\u1ef3","year":"2016"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ISPASS55109.2022.00014"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3453142.3492909"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE53745.2022.00077"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2020.2975749"},{"key":"ref30","article-title":"On the convergence of fedavg on non-iid data","author":"Li","year":"2019"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-92307-5_50"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2022.3216981"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/2487726.2488368"},{"key":"ref34","first-page":"1273","article-title":"Communication-efficient learning of deep networks from decentralized data","author":"McMahan","year":"2017","journal-title":"AISTATS \u201917"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00029"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3386901.3388946"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3458864.3466628"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00065"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3291047"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3565010.3569064"},{"key":"ref41","article-title":"Secfl: Confidential federated learning using tees","author":"Quoc","year":"2021"},{"key":"ref42","article-title":"Openfl: An open-source framework for federated learning","author":"Reina","year":"2021"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00474"},{"key":"ref44","article-title":"Ldp-fl: Practical private aggregation in federated learning with local differential privacy","author":"Sun","year":"2020"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3296957.3177155"},{"key":"ref46","first-page":"6105","article-title":"Efficientnet: Rethinking model scaling for convolutional neural networks","author":"Tan","year":"2019","journal-title":"ICML \u201919"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i8.20825"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/3378679.3394533"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2019.8737416"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00090"},{"key":"ref51","article-title":"Tee based cross-silo trustworthy federated learning infrastructure","author":"Yu"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM41043.2020.9155414"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/3457388.3458665"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00072"}],"event":{"name":"2026 IEEE\/CVF Winter Conference on Applications of Computer Vision (WACV)","location":"Tucson, AZ, USA","start":{"date-parts":[[2026,3,6]]},"end":{"date-parts":[[2026,3,10]]}},"container-title":["2026 IEEE\/CVF Winter Conference on Applications of Computer Vision (WACV)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11491838\/11491925\/11492724.pdf?arnumber=11492724","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T05:59:53Z","timestamp":1778047193000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11492724\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,3,6]]},"references-count":54,"URL":"https:\/\/doi.org\/10.1109\/wacv61042.2026.00070","relation":{},"subject":[],"published":{"date-parts":[[2026,3,6]]}}}