{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,13]],"date-time":"2026-06-13T09:10:32Z","timestamp":1781341832967,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":33,"publisher":"ACM","license":[{"start":{"date-parts":[[2021,4,19]],"date-time":"2021-04-19T00:00:00Z","timestamp":1618790400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2021,4,19]]},"DOI":"10.1145\/3442381.3449907","type":"proceedings-article","created":{"date-parts":[[2021,6,3]],"date-time":"2021-06-03T19:02:07Z","timestamp":1622746927000},"page":"1017-1028","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":9,"title":["DAPter: Preventing User Data Abuse in Deep Learning Inference Services"],"prefix":"10.1145","author":[{"given":"Hao","family":"Wu","sequence":"first","affiliation":[{"name":"National Key Lab for Novel Software Technology, Nanjing University, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xuejin","family":"Tian","sequence":"additional","affiliation":[{"name":"National Key Lab for Novel Software Technology, Nanjing University, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yuhang","family":"Gong","sequence":"additional","affiliation":[{"name":"National Key Lab for Novel Software Technology, Nanjing University, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xing","family":"Su","sequence":"additional","affiliation":[{"name":"National Key Lab for Novel Software Technology, Nanjing University, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Minghao","family":"Li","sequence":"additional","affiliation":[{"name":"National Key Laboratory for Novel Software Technology, Nanjing University and Cornell University, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fengyuan","family":"Xu","sequence":"additional","affiliation":[{"name":"National Key Lab for Novel Software Technology, Nanjing University, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2021,6,3]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2011. Popular Synsets of ImageNet. http:\/\/image-net.org\/explore.php. [Online; accessed Jan-28-2020].  2011. Popular Synsets of ImageNet. http:\/\/image-net.org\/explore.php. [Online; accessed Jan-28-2020]."},{"key":"e_1_3_2_1_2_1","unstructured":"2019. Zao\u2019s deepfake face-swapping app shows uploading your photos is riskier than ever. https:\/\/blogs.lse.ac.uk\/medialse\/2019\/09\/10\/zaos-deepfake-face-swapping-app-shows-uploading-your-photos-is-riskier-than-ever\/. [Online; accessed Jan-28-2020].  2019. Zao\u2019s deepfake face-swapping app shows uploading your photos is riskier than ever. https:\/\/blogs.lse.ac.uk\/medialse\/2019\/09\/10\/zaos-deepfake-face-swapping-app-shows-uploading-your-photos-is-riskier-than-ever\/. [Online; accessed Jan-28-2020]."},{"key":"e_1_3_2_1_3_1","volume-title":"AI\u2019s new workforce: the data-labelling industry spreads globally. https:\/\/www.ft.com\/content\/56dde36c-aa40-11e9-984c-fac8325aaa04. [Online","year":"2020","unstructured":"2020. AI\u2019s new workforce: the data-labelling industry spreads globally. https:\/\/www.ft.com\/content\/56dde36c-aa40-11e9-984c-fac8325aaa04. [Online ; accessed Jan-28- 2020 ]. 2020. AI\u2019s new workforce: the data-labelling industry spreads globally. https:\/\/www.ft.com\/content\/56dde36c-aa40-11e9-984c-fac8325aaa04. [Online; accessed Jan-28-2020]."},{"key":"e_1_3_2_1_4_1","volume-title":"Technology (Machine Learning and Deep Learning, and Natural Language Processing)","year":"2023","unstructured":"2020. Artificial Intelligence as a Service Market by Service Type (Software Tools and Services) , Technology (Machine Learning and Deep Learning, and Natural Language Processing) , Organization Size , Vertical , and Region - Global Forecast 2023 . https:\/\/www.marketsandmarkets.com\/Market-Reports\/artificial-intelligence-ai-as-a-service-market-121842268.html. [Online; accessed Sep-18-2020]. 2020. Artificial Intelligence as a Service Market by Service Type (Software Tools and Services), Technology (Machine Learning and Deep Learning, and Natural Language Processing), Organization Size, Vertical, and Region - Global Forecast 2023. https:\/\/www.marketsandmarkets.com\/Market-Reports\/artificial-intelligence-ai-as-a-service-market-121842268.html. [Online; accessed Sep-18-2020]."},{"key":"e_1_3_2_1_5_1","volume-title":"https:\/\/www.faceplusplus.com\/privacy-policy\/. [Online","author":"Policy Privacy","year":"2020","unstructured":"2020. Face++ Privacy Policy . https:\/\/www.faceplusplus.com\/privacy-policy\/. [Online ; accessed Jan-28- 2020 ]. 2020. Face++ Privacy Policy. https:\/\/www.faceplusplus.com\/privacy-policy\/. [Online; accessed Jan-28-2020]."},{"key":"e_1_3_2_1_6_1","volume-title":"USENIX symposium on operating systems design and implementation (OSDI 16)","author":"Abadi Mart\u00edn","year":"2016","unstructured":"Mart\u00edn Abadi , Paul Barham , Jianmin Chen , Zhifeng Chen , Andy Davis , Jeffrey Dean , Matthieu Devin , Sanjay Ghemawat , Geoffrey Irving , Michael Isard , 2016 . Tensorflow: A system for large-scale machine learning . In USENIX symposium on operating systems design and implementation (OSDI 16) . 265\u2013283. Mart\u00edn Abadi, Paul Barham, Jianmin Chen, Zhifeng Chen, Andy Davis, Jeffrey Dean, Matthieu Devin, Sanjay Ghemawat, Geoffrey Irving, Michael Isard, 2016. Tensorflow: A system for large-scale machine learning. In USENIX symposium on operating systems design and implementation (OSDI 16). 265\u2013283."},{"key":"e_1_3_2_1_7_1","unstructured":"Herv\u00e9 Chabanne Amaury de Wargny Jonathan Milgram Constance Morel and Emmanuel Prouff. 2017. Privacy-preserving classification on deep neural network. IACR Cryptology ePrint Archive(2017) 35.  Herv\u00e9 Chabanne Amaury de Wargny Jonathan Milgram Constance Morel and Emmanuel Prouff. 2017. Privacy-preserving classification on deep neural network. IACR Cryptology ePrint Archive(2017) 35."},{"key":"e_1_3_2_1_8_1","volume-title":"ImageNet: A Large-Scale Hierarchical Image Database. In Conference on Computer Vision and Pattern Recognition.","author":"Deng J.","unstructured":"J. Deng , W. Dong , R. Socher , L.-J. Li , K. Li , and L. Fei-Fei . 2009 . ImageNet: A Large-Scale Hierarchical Image Database. In Conference on Computer Vision and Pattern Recognition. J. Deng, W. Dong, R. Socher, L.-J. Li, K. Li, and L. Fei-Fei. 2009. ImageNet: A Large-Scale Hierarchical Image Database. In Conference on Computer Vision and Pattern Recognition."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.522"},{"key":"e_1_3_2_1_10_1","volume-title":"International Conference on Machine Learning. 201\u2013210","author":"Gilad-Bachrach Ran","year":"2016","unstructured":"Ran Gilad-Bachrach , Nathan Dowlin , Kim Laine , Kristin Lauter , Michael Naehrig , and John Wernsing . 2016 . Cryptonets: Applying neural networks to encrypted data with high throughput and accuracy . In International Conference on Machine Learning. 201\u2013210 . Ran Gilad-Bachrach, Nathan Dowlin, Kim Laine, Kristin Lauter, Michael Naehrig, and John Wernsing. 2016. Cryptonets: Applying neural networks to encrypted data with high throughput and accuracy. In International Conference on Machine Learning. 201\u2013210."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"e_1_3_2_1_12_1","volume-title":"Cryptodl: Deep neural networks over encrypted data. arXiv preprint arXiv:1711.05189(2017).","author":"Hesamifard Ehsan","year":"2017","unstructured":"Ehsan Hesamifard , Hassan Takabi , and Mehdi Ghasemi . 2017 . Cryptodl: Deep neural networks over encrypted data. arXiv preprint arXiv:1711.05189(2017). Ehsan Hesamifard, Hassan Takabi, and Mehdi Ghasemi. 2017. Cryptodl: Deep neural networks over encrypted data. arXiv preprint arXiv:1711.05189(2017)."},{"key":"e_1_3_2_1_13_1","unstructured":"Gary\u00a0B. Huang Marwan Mattar Honglak Lee and Erik Learned-Miller. 2012. Learning to Align from Scratch. In Neural Information Processing Systems.  Gary\u00a0B. Huang Marwan Mattar Honglak Lee and Erik Learned-Miller. 2012. Learning to Align from Scratch. In Neural Information Processing Systems."},{"key":"e_1_3_2_1_14_1","volume-title":"Chiron: Privacy-preserving machine learning as a service. arXiv preprint arXiv:1803.05961(2018).","author":"Hunt Tyler","year":"2018","unstructured":"Tyler Hunt , Congzheng Song , Reza Shokri , Vitaly Shmatikov , and Emmett Witchel . 2018 . Chiron: Privacy-preserving machine learning as a service. arXiv preprint arXiv:1803.05961(2018). Tyler Hunt, Congzheng Song, Reza Shokri, Vitaly Shmatikov, and Emmett Witchel. 2018. Chiron: Privacy-preserving machine learning as a service. arXiv preprint arXiv:1803.05961(2018)."},{"key":"e_1_3_2_1_15_1","unstructured":"Andrew Ilyas Shibani Santurkar Dimitris Tsipras Logan Engstrom Brandon Tran and Aleksander Madry. 2019. Adversarial examples are not bugs they are features. arXiv preprint arXiv:1905.02175(2019).  Andrew Ilyas Shibani Santurkar Dimitris Tsipras Logan Engstrom Brandon Tran and Aleksander Madry. 2019. Adversarial examples are not bugs they are features. arXiv preprint arXiv:1905.02175(2019)."},{"key":"e_1_3_2_1_16_1","volume-title":"A new method for gray-level picture thresholding using the entropy of the histogram. Computer vision, graphics, and image processing","author":"Kapur Jagat\u00a0Narain","year":"1985","unstructured":"Jagat\u00a0Narain Kapur , Prasanna\u00a0 K Sahoo , and Andrew\u00a0 KC Wong . 1985. A new method for gray-level picture thresholding using the entropy of the histogram. Computer vision, graphics, and image processing ( 1985 ), 273\u2013285. Jagat\u00a0Narain Kapur, Prasanna\u00a0K Sahoo, and Andrew\u00a0KC Wong. 1985. A new method for gray-level picture thresholding using the entropy of the histogram. Computer vision, graphics, and image processing (1985), 273\u2013285."},{"key":"e_1_3_2_1_18_1","volume-title":"Gradient-based learning applied to document recognition. Proc","author":"LeCun Yann","year":"1998","unstructured":"Yann LeCun , L\u00e9on Bottou , Yoshua Bengio , Patrick Haffner , 1998. Gradient-based learning applied to document recognition. Proc . IEEE ( 1998 ), 2278\u20132324. Yann LeCun, L\u00e9on Bottou, Yoshua Bengio, Patrick Haffner, 1998. Gradient-based learning applied to document recognition. Proc. IEEE (1998), 2278\u20132324."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/3369816"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.425"},{"key":"e_1_3_2_1_21_1","unstructured":"Fatemehsadat Mirshghallah Mohammadkazem Taram Praneeth Vepakomma Abhishek Singh Ramesh Raskar and Hadi Esmaeilzadeh. 2020. Privacy in Deep Learning: A Survey. arXiv preprint arXiv:2004.12254(2020).  Fatemehsadat Mirshghallah Mohammadkazem Taram Praneeth Vepakomma Abhishek Singh Ramesh Raskar and Hadi Esmaeilzadeh. 2020. Privacy in Deep Learning: A Survey. arXiv preprint arXiv:2004.12254(2020)."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2014.222"},{"key":"e_1_3_2_1_23_1","unstructured":"Seyed\u00a0Ali Osia Ali\u00a0Shahin Shamsabadi Ali Taheri Kleomenis Katevas Sina Sajadmanesh Hamid\u00a0R Rabiee Nicholas\u00a0D Lane and Hamed Haddadi. 2017. A hybrid deep learning architecture for privacy-preserving mobile analytics. arXiv preprint arXiv:1703.02952(2017).  Seyed\u00a0Ali Osia Ali\u00a0Shahin Shamsabadi Ali Taheri Kleomenis Katevas Sina Sajadmanesh Hamid\u00a0R Rabiee Nicholas\u00a0D Lane and Hamed Haddadi. 2017. A hybrid deep learning architecture for privacy-preserving mobile analytics. arXiv preprint arXiv:1703.02952(2017)."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-24574-4_28"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"crossref","unstructured":"Olga Russakovsky Jia Deng Hao Su Jonathan Krause Sanjeev Satheesh Sean Ma Zhiheng Huang Andrej Karpathy Aditya Khosla Michael Bernstein Alexander\u00a0C. Berg and Li Fei-Fei. 2015. ImageNet Large Scale Visual Recognition Challenge. International Journal of Computer Vision(2015) 211\u2013252.  Olga Russakovsky Jia Deng Hao Su Jonathan Krause Sanjeev Satheesh Sean Ma Zhiheng Huang Andrej Karpathy Aditya Khosla Michael Bernstein Alexander\u00a0C. Berg and Li Fei-Fei. 2015. ImageNet Large Scale Visual Recognition Challenge. International Journal of Computer Vision(2015) 211\u2013252.","DOI":"10.1007\/s11263-015-0816-y"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.74"},{"key":"e_1_3_2_1_27_1","unstructured":"Karen Simonyan and Andrew Zisserman. 2014. Very deep convolutional networks for large-scale image recognition. arXiv preprint arXiv:1409.1556(2014).  Karen Simonyan and Andrew Zisserman. 2014. Very deep convolutional networks for large-scale image recognition. arXiv preprint arXiv:1409.1556(2014)."},{"key":"e_1_3_2_1_28_1","volume-title":"USENIX Conference on Operational Machine Learning. USENIX Association, 15\u201317","author":"Soifer Jonathan","year":"2019","unstructured":"Jonathan Soifer , Jason Li , Mingqin Li , Jeffrey Zhu , Yingnan Li , Yuxiong He , Elton Zheng , Adi Oltean , Maya Mosyak , Chris Barnes , Thomas Liu , and Junhua Wang . 2019 . Deep Learning Inference Service at Microsoft . In USENIX Conference on Operational Machine Learning. USENIX Association, 15\u201317 . Jonathan Soifer, Jason Li, Mingqin Li, Jeffrey Zhu, Yingnan Li, Yuxiong He, Elton Zheng, Adi Oltean, Maya Mosyak, Chris Barnes, Thomas Liu, and Junhua Wang. 2019. Deep Learning Inference Service at Microsoft. In USENIX Conference on Operational Machine Learning. USENIX Association, 15\u201317."},{"key":"e_1_3_2_1_29_1","unstructured":"Lizhi Sun Shuocheng Wang Hao Wu Yuhang Gong Fengyuan Xu Yunxin Liu Hao Han and Sheng Zhong. 2021. App Developer Centric Trusted Execution Environment. arXiv preprint arXiv:2102.02465(2021).  Lizhi Sun Shuocheng Wang Hao Wu Yuhang Gong Fengyuan Xu Yunxin Liu Hao Han and Sheng Zhong. 2021. App Developer Centric Trusted Execution Environment. arXiv preprint arXiv:2102.02465(2021)."},{"key":"e_1_3_2_1_30_1","volume-title":"Slalom: Fast, verifiable and private execution of neural networks in trusted hardware. arXiv preprint arXiv:1806.03287(2018).","author":"Tramer Florian","year":"2018","unstructured":"Florian Tramer and Dan Boneh . 2018 . Slalom: Fast, verifiable and private execution of neural networks in trusted hardware. arXiv preprint arXiv:1806.03287(2018). Florian Tramer and Dan Boneh. 2018. Slalom: Fast, verifiable and private execution of neural networks in trusted hardware. arXiv preprint arXiv:1806.03287(2018)."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.5555\/3152676"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/3219819.3220106"},{"key":"e_1_3_2_1_33_1","volume-title":"Image quality assessment: from error visibility to structural similarity","author":"Wang Zhou","year":"2004","unstructured":"Zhou Wang , Alan\u00a0 C Bovik , Hamid\u00a0 R Sheikh , and Eero\u00a0 P Simoncelli . 2004. Image quality assessment: from error visibility to structural similarity . IEEE transactions on image processing 13, 4 ( 2004 ), 600\u2013612. Zhou Wang, Alan\u00a0C Bovik, Hamid\u00a0R Sheikh, and Eero\u00a0P Simoncelli. 2004. Image quality assessment: from error visibility to structural similarity. IEEE transactions on image processing 13, 4 (2004), 600\u2013612."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/3447993.3448618"}],"event":{"name":"WWW '21: The Web Conference 2021","location":"Ljubljana Slovenia","acronym":"WWW '21","sponsor":["SIGWEB ACM Special Interest Group on Hypertext, Hypermedia, and Web"]},"container-title":["Proceedings of the Web Conference 2021"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3442381.3449907","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3442381.3449907","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T21:24:31Z","timestamp":1750195471000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3442381.3449907"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,4,19]]},"references-count":33,"alternative-id":["10.1145\/3442381.3449907","10.1145\/3442381"],"URL":"https:\/\/doi.org\/10.1145\/3442381.3449907","relation":{},"subject":[],"published":{"date-parts":[[2021,4,19]]},"assertion":[{"value":"2021-06-03","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}