{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,5]],"date-time":"2026-08-05T14:54:11Z","timestamp":1785941651437,"version":"3.56.0"},"publisher-location":"New York, NY, USA","reference-count":58,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,11,7]],"date-time":"2022-11-07T00:00:00Z","timestamp":1667779200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100010663","name":"H2020 European Research Council","doi-asserted-by":"publisher","award":["957197"],"award-info":[{"award-number":["957197"]}],"id":[{"id":"10.13039\/100010663","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,11,7]]},"DOI":"10.1145\/3528535.3565255","type":"proceedings-article","created":{"date-parts":[[2022,12,20]],"date-time":"2022-12-20T13:40:01Z","timestamp":1671543601000},"page":"335-348","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":18,"title":["Shielding federated learning systems against inference attacks with ARM TrustZone"],"prefix":"10.1145","author":[{"given":"Aghiles Ait","family":"Messaoud","sequence":"first","affiliation":[{"name":"INSA Lyon, Lyon, France"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sonia Ben","family":"Mokhtar","sequence":"additional","affiliation":[{"name":"INSA Lyon, Lyon, France"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Vlad","family":"Nitu","sequence":"additional","affiliation":[{"name":"Integrate.ai, Toronto, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Valerio","family":"Schiavoni","sequence":"additional","affiliation":[{"name":"University of Neuch\u00e2tel, Neuch\u00e2tel, Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2022,11,8]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICEngTechnol.2017.8308186"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-22496-7_9"},{"key":"e_1_3_2_1_3_1","unstructured":"Android. 2020. Trusty TEE. Retrieved October 8 2022 from https:\/\/source.android.com\/security\/trusty?hl=en"},{"key":"e_1_3_2_1_4_1","volume-title":"Arm CPU Architecture: A Foundation for Computing Everywhere. Retrieved","author":"ARM.","year":"2022","unstructured":"ARM. 2022. Arm CPU Architecture: A Foundation for Computing Everywhere. Retrieved October 8, 2022 from https:\/\/www.arm.com\/architecture\/cpu"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-78198-9_8"},{"key":"e_1_3_2_1_6_1","volume-title":"Fully Connected Deep Networks. Retrieved","author":"Zadeh Bharath Ramsundar Reza Bosagh","year":"2022","unstructured":"Reza Bosagh Zadeh Bharath Ramsundar. 2022. Fully Connected Deep Networks. Retrieved October 8, 2022 from https:\/\/www.oreilly.com\/library\/view\/tensorflow-for-deep\/9781491980446\/ch04.html"},{"key":"e_1_3_2_1_7_1","article-title":"Trusted Execution Environment for Privacy Preserving Biometric Authentication","volume":"18","author":"Bhargav-Spantzel Abhilasha","year":"2014","unstructured":"Abhilasha Bhargav-Spantzel. 2014. Trusted Execution Environment for Privacy Preserving Biometric Authentication. Intel Technology Journal 18, 4 (2014), 16 pages.","journal-title":"Intel Technology Journal"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133982"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1902.01046"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","unstructured":"Kallista A. Bonawitz Vladimir Ivanov Ben Kreuter Antonio Marcedone H. Brendan McMahan Sarvar Patel Daniel Ramage Aaron Segal and Karn Seth. 2016. Practical Secure Aggregation for Federated Learning on User-Held Data. (2016). arXiv:1611.04482 10.48550\/arXiv.1611.04482","DOI":"10.48550\/arXiv.1611.04482"},{"key":"e_1_3_2_1_11_1","volume-title":"Android now powers over 3 billion devices. Google. Retrieved","author":"Bradshaw Kyle","year":"2022","unstructured":"Kyle Bradshaw. 2021. Android now powers over 3 billion devices. Google. Retrieved October 8, 2022 from https:\/\/9to5google.com\/2021\/05\/18\/android-now-powers-over-3-billion-devices\/"},{"key":"e_1_3_2_1_12_1","volume-title":"How Do Convolutional Layers Work in Deep Learning Neural Networks? Retrieved","author":"Brownlee Jason","year":"2022","unstructured":"Jason Brownlee. 2019. How Do Convolutional Layers Work in Deep Learning Neural Networks? Retrieved October 8, 2022 from https:\/\/machinelearningmastery.com\/convolutional-layers-for-deep-learning-neural-networks\/"},{"key":"e_1_3_2_1_13_1","first-page":"1","article-title":"Intel sgx explained","volume":"2016","author":"Costan Victor","year":"2016","unstructured":"Victor Costan and Srinivas Devadas. 2016. Intel sgx explained. IACR Cryptol. ePrint Arch. 2016, 86 (2016), 1--118.","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"e_1_3_2_1_14_1","volume-title":"What is Federated Learning (FL)? Techniques & Benefits","author":"Dilmegani Cem","year":"2022","unstructured":"Cem Dilmegani. 2022. What is Federated Learning (FL)? Techniques & Benefits in 2022. Retrieved October 8, 2022 from https:\/\/research.aimultiple.com\/federated-learning\/"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/3477314.3507128"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-79228-4_1"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.3390\/fi13040094"},{"key":"e_1_3_2_1_18_1","volume-title":"Feedforward neural network methodology","author":"Fine Terrence L","unstructured":"Terrence L Fine. 2006. Feedforward neural network methodology. Springer Science & Business Media, New York, NY."},{"key":"e_1_3_2_1_19_1","volume-title":"Why Is Federated Learning Getting So Popular. Retrieved","year":"2022","unstructured":"Google. 2021. Why Is Federated Learning Getting So Popular. Retrieved October 8, 2022 from https:\/\/trends.google.com\/trends\/explore?date=today%205-y&q=federated%20learning"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/Trustcom.2015.378"},{"key":"e_1_3_2_1_21_1","volume-title":"ML Privacy Meter. github. Retrieved","author":"Hongyan Chang Reza Shokri","year":"2022","unstructured":"Reza Shokri Hongyan Chang, Martin Strobel. 2019. ML Privacy Meter. github. Retrieved October 8, 2022 from https:\/\/github.com\/privacytrustlab\/ml_privacy_meter"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23189"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-67270-6_6"},{"key":"e_1_3_2_1_25_1","volume-title":"AMD memory encryption. AMD. Retrieved","author":"Kaplan David","year":"2022","unstructured":"David Kaplan, Jeremy Powell, and Tom Woller. 2016. AMD memory encryption. AMD. Retrieved October 8, 2022 from https:\/\/developer.amd.com\/wordpress\/media\/2013\/12\/AMD_Memory_Encryption_Whitepaper_v9-Public.pdf"},{"key":"e_1_3_2_1_26_1","volume-title":"3rd International Conference on Learning Representations, ICLR 2015, Conference Track Proceedings","author":"Kingma Diederik P","year":"2015","unstructured":"Diederik P Kingma and Jimmy Ba. 2015. Adam: A method for stochastic optimization. In 3rd International Conference on Learning Representations, ICLR 2015, Conference Track Proceedings (San Diego, CA, USA, May 7--9). arXiv.org, Ithaca, NY, USA, 13 pages."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-21599-5_6"},{"key":"e_1_3_2_1_28_1","unstructured":"Alex Krizhevsky Geoffrey Hinton et al. 2009. Learning multiple layers of features from tiny images. Technical Report. University of Toronto Toronto ON M5S Canada."},{"key":"e_1_3_2_1_29_1","volume-title":"ImageNet Classification with Deep Convolutional Neural Networks. In Advances in Neural Information Processing Systems 25: 26th Annual Conference on Neural Information Processing Systems 2012","author":"Krizhevsky Alex","year":"2012","unstructured":"Alex Krizhevsky, Ilya Sutskever, and Geoffrey E. Hinton. 2012. ImageNet Classification with Deep Convolutional Neural Networks. In Advances in Neural Information Processing Systems 25: 26th Annual Conference on Neural Information Processing Systems 2012 (Lake Tahoe, Nevada, USA, December 3--6). Curran Associates, Inc., New York, NY, USA, 1106--1114. https:\/\/proceedings.neurips.cc\/paper\/2012\/hash\/c399862d3b9d6b76c8436e924a68c45b-Abstract.html"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cie.2020.106854"},{"key":"e_1_3_2_1_32_1","unstructured":"Song Han Ligeng Zhu Zhijian Liu. 2019. Deep Leakage From Gradients implementation. github. Retrieved October 8 2022 from https:\/\/github.com\/mit-han-lab\/dlg"},{"key":"e_1_3_2_1_33_1","volume-title":"Proceedings of the Eighteenth International Joint Conference on Artificial Intelligence","author":"Ling Charles X.","year":"2003","unstructured":"Charles X. Ling, Jin Huang, and Harry Zhang. 2003. AUC: a Statistically Consistent and more Discriminating Measure than Accuracy. In IJCAI-03, Proceedings of the Eighteenth International Joint Conference on Artificial Intelligence (Acapulco, Mexico, August 9--15), Georg Gottlob and Toby Walsh (Eds.). Morgan Kaufmann, San Francisco, CA, USA, 519--526. http:\/\/ijcai.org\/Proceedings\/03\/Papers\/077.pdf"},{"key":"e_1_3_2_1_34_1","volume-title":"On the limited memory BFGS method for large scale optimization. Mathematical programming 45, 1","author":"Liu Dong C","year":"1989","unstructured":"Dong C Liu and Jorge Nocedal. 1989. On the limited memory BFGS method for large scale optimization. Mathematical programming 45, 1 (1989), 503--528."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00029"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/3529706.3529715"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/3386901.3388946"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS54860.2022.00116"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00065"},{"key":"e_1_3_2_1_40_1","volume-title":"Categorical crossentropy. Retrieved","year":"2022","unstructured":"Peltarion. 2022. Categorical crossentropy. Retrieved October 8, 2022 from https:\/\/peltarion.com\/knowledge-center\/documentation\/modeling-view\/build-an-ai-model\/loss-functions\/categorical-crossentropy"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/3291047"},{"key":"e_1_3_2_1_42_1","volume-title":"2013--2016. Darknet: Open Source Neural Networks in C. Retrieved","author":"Redmon Joseph","year":"2022","unstructured":"Joseph Redmon. 2013--2016. Darknet: Open Source Neural Networks in C. Retrieved October 8, 2022 from http:\/\/pjreddie.com\/darknet\/"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"crossref","unstructured":"Nicola Rieke Jonny Hancox Wenqi Li Fausto Milletari Holger R Roth Shadi Albarqouni Spyridon Bakas Mathieu N Galtier Bennett A Landman Klaus Maier-Hein et al. 2020. The future of digital health with federated learning. NPJ digital medicine 3 1 (2020) 1--7.","DOI":"10.1038\/s41746-020-00323-1"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-016-0280-4"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/Trustcom.2015.357"},{"key":"e_1_3_2_1_46_1","volume-title":"Property Inference in Collaborative ML implementation. github. Retrieved","author":"Song Congzheng","year":"2022","unstructured":"Congzheng Song. 2018. Property Inference in Collaborative ML implementation. github. Retrieved October 8, 2022 from https:\/\/github.com\/csong27\/property-inference-collaborative-ml"},{"key":"e_1_3_2_1_47_1","volume-title":"Verifiable and Private Execution of Neural Networks in Trusted Hardware. In 7th International Conference on Learning Representations, ICLR 2019","author":"Tram\u00e8r Florian","year":"2019","unstructured":"Florian Tram\u00e8r and Dan Boneh. 2019. Slalom: Fast, Verifiable and Private Execution of Neural Networks in Trusted Hardware. In 7th International Conference on Learning Representations, ICLR 2019 (New Orleans, LA, USA, May 6--9). OpenReview.net, Online website, 19 pages. https:\/\/openreview.net\/forum?id=rJVorjCcKQ"},{"key":"e_1_3_2_1_48_1","unstructured":"TrustedFirmware. 2021. OP-TEE Documentation. TrustedFirmware. Retrieved October 8 2022 from https:\/\/optee.readthedocs.io\/en\/latest\/"},{"key":"e_1_3_2_1_49_1","volume-title":"Secure storage. TrustedFirmware. Retrieved","year":"2022","unstructured":"TrustedFirmware. 2021. Secure storage. TrustedFirmware. Retrieved October 8, 2022 from https:\/\/optee.readthedocs.io\/en\/latest\/architecture\/secure_storage.html"},{"key":"e_1_3_2_1_50_1","volume-title":"Kinibi-520a: The latest Trustonic Trusted Execution Environment (TEE). Retrieved","year":"2022","unstructured":"Trustonic. 2021. Kinibi-520a: The latest Trustonic Trusted Execution Environment (TEE). Retrieved October 8, 2022 from https:\/\/www.trustonic.com\/technical-articles\/kinibi-520a-the-latest-trusted-execution-environment-tee\/"},{"key":"e_1_3_2_1_51_1","volume-title":"Smart Cards, Tokens, Security and Applications","author":"Umar Assad","unstructured":"Assad Umar and Keith Mayes. 2017. Trusted Execution Environment and Host Card Emulation. In Smart Cards, Tokens, Security and Applications. Springer, New York, NY, USA, 497--519."},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.2988575"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","unstructured":"Timothy Yang Galen Andrew Hubert Eichner Haicheng Sun Wei Li Nicholas Kong Daniel Ramage and Francoise Beaufays. 2018. Applied Federated Learning: Improving Google Keyboard Query Suggestions. (2018). arXiv:1812.02903 10.48550\/arXiv.1812.02903","DOI":"10.48550\/arXiv.1812.02903"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01607"},{"key":"e_1_3_2_1_55_1","volume-title":"Proceedings of the 2020 USENIX Conference on Usenix Annual Technical Conference (Online event, July 15--17)","author":"Zhang Chengliang","year":"2020","unstructured":"Chengliang Zhang, Suyi Li, Junzhe Xia, Wei Wang, Feng Yan, and Yang Liu. 2020. BatchCrypt: Efficient Homomorphic Encryption for Cross-Silo Federated Learning. In Proceedings of the 2020 USENIX Conference on Usenix Annual Technical Conference (Online event, July 15--17). USENIX Association, Berkeley, CA, USA, 493--506."},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/3472883.3486998"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3093711"},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1145\/2666141.2666145"},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1906.08935"}],"event":{"name":"Middleware '22: 23rd International Middleware Conference","location":"Quebec QC Canada","acronym":"Middleware '22","sponsor":["ACM Association for Computing Machinery","IFIP"]},"container-title":["Proceedings of the 23rd ACM\/IFIP International Middleware Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3528535.3565255","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3528535.3565255","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T19:02:43Z","timestamp":1750186963000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3528535.3565255"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,11,7]]},"references-count":58,"alternative-id":["10.1145\/3528535.3565255","10.1145\/3528535"],"URL":"https:\/\/doi.org\/10.1145\/3528535.3565255","relation":{},"subject":[],"published":{"date-parts":[[2022,11,7]]},"assertion":[{"value":"2022-11-08","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}