{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,13]],"date-time":"2026-06-13T17:14:24Z","timestamp":1781370864228,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":72,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,10,2]],"date-time":"2023-10-02T00:00:00Z","timestamp":1696204800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000001","name":"NSF (National Science Foundation)","doi-asserted-by":"publisher","award":["CNS-2211301"],"award-info":[{"award-number":["CNS-2211301"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,10,2]]},"DOI":"10.1145\/3570361.3592501","type":"proceedings-article","created":{"date-parts":[[2023,9,30]],"date-time":"2023-09-30T22:39:36Z","timestamp":1696113576000},"page":"1-16","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":7,"title":["Enc2: Privacy-Preserving Inference for Tiny IoTs via Encoding and Encryption"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0009-9569-8897","authenticated-orcid":false,"given":"Hao-Jen","family":"Chien","sequence":"first","affiliation":[{"name":"UCLA, Los Angeles, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-3721-5118","authenticated-orcid":false,"given":"Hossein","family":"Khalili","sequence":"additional","affiliation":[{"name":"UCLA, Los Angeles, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-1115-8060","authenticated-orcid":false,"given":"Amin","family":"Hass","sequence":"additional","affiliation":[{"name":"Accenture, Washington, DC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7181-2258","authenticated-orcid":false,"given":"Nader","family":"Sehatbakhsh","sequence":"additional","affiliation":[{"name":"UCLA, Los Angeles, CA, United States"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,10,2]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978318"},{"key":"e_1_3_2_1_2_1","volume-title":"Privacy Enhancing Machine Learning via Removal of Unwanted Dependencies","author":"Al Mert","year":"2021","unstructured":"Mert Al , Semih Yagli , and Sun-Yuan Kung . 2021. Privacy Enhancing Machine Learning via Removal of Unwanted Dependencies . IEEE Transactions on Neural Networks and Learning Systems ( 2021 ). Mert Al, Semih Yagli, and Sun-Yuan Kung. 2021. Privacy Enhancing Machine Learning via Removal of Unwanted Dependencies. IEEE Transactions on Neural Networks and Learning Systems (2021)."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/2633600"},{"key":"e_1_3_2_1_4_1","volume-title":"International Conference on Machine Learning. PMLR, 812--821","author":"Brutzkus Alon","year":"2019","unstructured":"Alon Brutzkus , Ran Gilad-Bachrach , and Oren Elisha . 2019 . Low latency privacy preserving inference . In International Conference on Machine Learning. PMLR, 812--821 . Alon Brutzkus, Ran Gilad-Bachrach, and Oren Elisha. 2019. Low latency privacy preserving inference. In International Conference on Machine Learning. PMLR, 812--821."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"crossref","unstructured":"Nicholas Carlini and David Wagner. 2017. Towards evaluating the robustness of neural networks. In 2017 ieee symposium on security and privacy (sp). Ieee 39--57.  Nicholas Carlini and David Wagner. 2017. Towards evaluating the robustness of neural networks. In 2017 ieee symposium on security and privacy (sp). Ieee 39--57.","DOI":"10.1109\/SP.2017.49"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-70694-8_15"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00145-019-09319-x"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/CCGrid49817.2020.00-41"},{"key":"e_1_3_2_1_9_1","volume-title":"Somewhat practical fully homomorphic encryption. Cryptology ePrint Archive","author":"Fan Junfeng","year":"2012","unstructured":"Junfeng Fan and Frederik Vercauteren . 2012. Somewhat practical fully homomorphic encryption. Cryptology ePrint Archive ( 2012 ). Junfeng Fan and Frederik Vercauteren. 2012. Somewhat practical fully homomorphic encryption. Cryptology ePrint Archive (2012)."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/CCGrid51090.2021.00043"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40041-4_5"},{"key":"e_1_3_2_1_12_1","first-page":"16961","article-title":"Cryptonas: Private inference on a relu budget","volume":"33","author":"Ghodsi Zahra","year":"2020","unstructured":"Zahra Ghodsi , Akshaj Kumar Veldanda , Brandon Reagen , and Siddharth Garg . 2020 . Cryptonas: Private inference on a relu budget . Advances in Neural Information Processing Systems 33 (2020), 16961 -- 16971 . Zahra Ghodsi, Akshaj Kumar Veldanda, Brandon Reagen, and Siddharth Garg. 2020. Cryptonas: Private inference on a relu budget. Advances in Neural Information Processing Systems 33 (2020), 16961--16971.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_1_13_1","volume-title":"International conference on machine learning. PMLR, 201--210","author":"Gilad-Bachrach Ran","year":"2016","unstructured":"Ran Gilad-Bachrach , Nathan Dowlin , Kim Laine , Kristin Lauter , Michael Naehrig , and John Wernsing . 2016 . Cryptonets: Applying neural networks to encrypted data with high throughput and accuracy . In International conference on machine learning. PMLR, 201--210 . Ran Gilad-Bachrach, Nathan Dowlin, Kim Laine, Kristin Lauter, Michael Naehrig, and John Wernsing. 2016. Cryptonets: Applying neural networks to encrypted data with high throughput and accuracy. In International conference on machine learning. PMLR, 201--210."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i13.17370"},{"key":"e_1_3_2_1_15_1","volume-title":"Adversarial Mask Generation for Preserving Visual Privacy. In 2021 16th IEEE International Conference on Automatic Face and Gesture Recognition (FG","author":"Gupta Aayush","year":"2021","unstructured":"Aayush Gupta , Ayush Jaiswal , Yue Wu , Vivek Yadav , and Pradeep Natarajan . 2021 . Adversarial Mask Generation for Preserving Visual Privacy. In 2021 16th IEEE International Conference on Automatic Face and Gesture Recognition (FG 2021). IEEE, 1--5. Aayush Gupta, Ayush Jaiswal, Yue Wu, Vivek Yadav, and Pradeep Natarajan. 2021. Adversarial Mask Generation for Preserving Visual Privacy. In 2021 16th IEEE International Conference on Automatic Face and Gesture Recognition (FG 2021). IEEE, 1--5."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"crossref","unstructured":"Umang Gupta. 2022. Code for \"Controllable Guarantees for Fair Outcomes via Contrastive Information Estimation\". https:\/\/github.com\/umgupta\/fairness-via-contrastive-estimation  Umang Gupta. 2022. Code for \"Controllable Guarantees for Fair Outcomes via Contrastive Information Estimation\". https:\/\/github.com\/umgupta\/fairness-via-contrastive-estimation","DOI":"10.1609\/aaai.v35i9.16931"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i9.16931"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/3466752.3480112"},{"key":"e_1_3_2_1_19_1","volume-title":"International conference on machine learning. PMLR, 4507--4518","author":"Huang Yangsibo","year":"2020","unstructured":"Yangsibo Huang , Zhao Song , Kai Li , and Sanjeev Arora . 2020 . Instahide: Instance-hiding schemes for private distributed learning . In International conference on machine learning. PMLR, 4507--4518 . Yangsibo Huang, Zhao Song, Kai Li, and Sanjeev Arora. 2020. Instahide: Instance-hiding schemes for private distributed learning. In International conference on machine learning. PMLR, 4507--4518."},{"key":"e_1_3_2_1_20_1","volume-title":"17th USENIX Symposium on Networked Systems Design and Implementation (NSDI 20)","author":"Hunt Tyler","year":"2020","unstructured":"Tyler Hunt , Zhipeng Jia , Vance Miller , Ariel Szekely , Yige Hu , Christopher J Rossbach , and Emmett Witchel . 2020 . Telekine: Secure Computing with Cloud {GPUs} . In 17th USENIX Symposium on Networked Systems Design and Implementation (NSDI 20) . 817--833. Tyler Hunt, Zhipeng Jia, Vance Miller, Ariel Szekely, Yige Hu, Christopher J Rossbach, and Emmett Witchel. 2020. Telekine: Secure Computing with Cloud {GPUs}. In 17th USENIX Symposium on Networked Systems Design and Implementation (NSDI 20). 817--833."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i04.5850"},{"key":"e_1_3_2_1_22_1","volume-title":"27th USENIX Security Symposium (USENIX Security 18)","author":"Juvekar Chiraag","year":"2018","unstructured":"Chiraag Juvekar , Vinod Vaikuntanathan , and Anantha Chandrakasan . 2018 . {GAZELLE}: A low latency framework for secure neural network inference . In 27th USENIX Security Symposium (USENIX Security 18) . 1651--1669. Chiraag Juvekar, Vinod Vaikuntanathan, and Anantha Chandrakasan. 2018. {GAZELLE}: A low latency framework for secure neural network inference. In 27th USENIX Security Symposium (USENIX Security 18). 1651--1669."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3419111.3421282"},{"key":"e_1_3_2_1_24_1","first-page":"4961","article-title":"Crypten: Secure multi-party computation meets machine learning","volume":"34","author":"Knott Brian","year":"2021","unstructured":"Brian Knott , Shobha Venkataraman , Awni Hannun , Shubho Sengupta , Mark Ibrahim , and Laurens van der Maaten . 2021 . Crypten: Secure multi-party computation meets machine learning . Advances in Neural Information Processing Systems 34 (2021), 4961 -- 4973 . Brian Knott, Shobha Venkataraman, Awni Hannun, Shubho Sengupta, Mark Ibrahim, and Laurens van der Maaten. 2021. Crypten: Secure multi-party computation meets machine learning. Advances in Neural Information Processing Systems 34 (2021), 4961--4973.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00092"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/3300061.3345447"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/3394486.3403125"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/3450268.3453519"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134056"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3450268.3453524"},{"key":"e_1_3_2_1_32_1","first-page":"9193","article-title":"Glyph: Fast and accurately training deep neural networks on encrypted data","volume":"33","author":"Lou Qian","year":"2020","unstructured":"Qian Lou , Bo Feng , Geoffrey Charles Fox , and Lei Jiang . 2020 . Glyph: Fast and accurately training deep neural networks on encrypted data . Advances in Neural Information Processing Systems 33 (2020), 9193 -- 9202 . Qian Lou, Bo Feng, Geoffrey Charles Fox, and Lei Jiang. 2020. Glyph: Fast and accurately training deep neural networks on encrypted data. Advances in Neural Information Processing Systems 33 (2020), 9193--9202.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_1_33_1","volume-title":"She: A fast and accurate deep neural network for encrypted data. Advances in Neural Information Processing Systems 32","author":"Lou Qian","year":"2019","unstructured":"Qian Lou and Lei Jiang . 2019 . She: A fast and accurate deep neural network for encrypted data. Advances in Neural Information Processing Systems 32 (2019). Qian Lou and Lei Jiang. 2019. She: A fast and accurate deep neural network for encrypted data. Advances in Neural Information Processing Systems 32 (2019)."},{"key":"e_1_3_2_1_34_1","volume-title":"International conference on machine learning. PMLR, 7102--7110","author":"Lou Qian","year":"2021","unstructured":"Qian Lou and Lei Jiang . 2021 . Hemet: A homomorphic-encryption-friendly privacy-preserving mobile neural network architecture . In International conference on machine learning. PMLR, 7102--7110 . Qian Lou and Lei Jiang. 2021. Hemet: A homomorphic-encryption-friendly privacy-preserving mobile neural network architecture. In International conference on machine learning. PMLR, 7102--7110."},{"key":"e_1_3_2_1_35_1","first-page":"2364","article-title":"FALCON: fast spectral inference on encrypted data","volume":"33","author":"Lou Qian","year":"2020","unstructured":"Qian Lou , Wen-jie Lu, Cheng Hong , and Lei Jiang . 2020 . FALCON: fast spectral inference on encrypted data . Advances in Neural Information Processing Systems 33 (2020), 2364 -- 2374 . Qian Lou, Wen-jie Lu, Cheng Hong, and Lei Jiang. 2020. FALCON: fast spectral inference on encrypted data. Advances in Neural Information Processing Systems 33 (2020), 2364--2374.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_1_36_1","volume-title":"International Conference on Machine Learning. PMLR, 3384--3393","author":"Madras David","year":"2018","unstructured":"David Madras , Elliot Creager , Toniann Pitassi , and Richard Zemel . 2018 . Learning adversarially fair and transferable representations . In International Conference on Machine Learning. PMLR, 3384--3393 . David Madras, Elliot Creager, Toniann Pitassi, and Richard Zemel. 2018. Learning adversarially fair and transferable representations. In International Conference on Machine Learning. PMLR, 3384--3393."},{"key":"e_1_3_2_1_37_1","unstructured":"Microsoft. 2022. CryptoNets. https:\/\/github.com\/microsoft\/CryptoNets  Microsoft. 2022. CryptoNets. https:\/\/github.com\/microsoft\/CryptoNets"},{"key":"e_1_3_2_1_38_1","unstructured":"Microsoft. 2022. Microsoft SEAL. https:\/\/github.com\/Microsoft\/SEAL  Microsoft. 2022. Microsoft SEAL. https:\/\/github.com\/Microsoft\/SEAL"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/3442381.3449965"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/3373376.3378522"},{"key":"e_1_3_2_1_41_1","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Mishra Pratyush","year":"2020","unstructured":"Pratyush Mishra , Ryan Lehmkuhl , Akshayaram Srinivasan , Wenting Zheng , and Raluca Ada Popa . 2020 . Delphi: A cryptographic inference service for neural networks . In 29th USENIX Security Symposium (USENIX Security 20) . 2505--2522. Pratyush Mishra, Ryan Lehmkuhl, Akshayaram Srinivasan, Wenting Zheng, and Raluca Ada Popa. 2020. Delphi: A cryptographic inference service for neural networks. In 29th USENIX Security Symposium (USENIX Security 20). 2505--2522."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/3458864.3466628"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/3386901.3388946"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.12"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/CLOUD53861.2021.00021"},{"key":"e_1_3_2_1_46_1","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Ng Lucien KL","year":"2021","unstructured":"Lucien KL Ng and Sherman SM Chow . 2021 . {GForce}:{GPU-Friendly} Oblivious and Rapid Neural Network Inference . In 30th USENIX Security Symposium (USENIX Security 21) . 2147--2164. Lucien KL Ng and Sherman SM Chow. 2021. {GForce}:{GPU-Friendly} Oblivious and Rapid Neural Network Inference. In 30th USENIX Security Symposium (USENIX Security 21). 2147--2164."},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.2967734"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2018.2878698"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1109\/HPCA51647.2021.00013"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/3373376.3378523"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00269"},{"key":"e_1_3_2_1_53_1","volume-title":"2019 IEEE International symposium on high performance computer architecture (HPCA). IEEE, 387--398","author":"Roy Sujoy Sinha","year":"2019","unstructured":"Sujoy Sinha Roy , Furkan Turan , Kimmo Jarvinen , Frederik Vercauteren , and Ingrid Verbauwhede . 2019 . FPGA-based high-performance parallel architecture for homomorphic computing on encrypted data . In 2019 IEEE International symposium on high performance computer architecture (HPCA). IEEE, 387--398 . Sujoy Sinha Roy, Furkan Turan, Kimmo Jarvinen, Frederik Vercauteren, and Ingrid Verbauwhede. 2019. FPGA-based high-performance parallel architecture for homomorphic computing on encrypted data. In 2019 IEEE International symposium on high performance computer architecture (HPCA). IEEE, 387--398."},{"key":"e_1_3_2_1_54_1","volume-title":"Partially encrypted deep learning using functional encryption. Advances in Neural Information Processing Systems 32","author":"Ryffel Th\u00e9o","year":"2019","unstructured":"Th\u00e9o Ryffel , David Pointcheval , Francis Bach , Edouard Dufour-Sans , and Romain Gay . 2019. Partially encrypted deep learning using functional encryption. Advances in Neural Information Processing Systems 32 ( 2019 ). Th\u00e9o Ryffel, David Pointcheval, Francis Bach, Edouard Dufour-Sans, and Romain Gay. 2019. Partially encrypted deep learning using functional encryption. Advances in Neural Information Processing Systems 32 (2019)."},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00806"},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/3466752.3480070"},{"key":"e_1_3_2_1_57_1","unstructured":"Nikola Samardzic Axel Feldmann Aleksandar Krastev Nathan Manohar Nicholas Genise Srinivas Devadas Karim Eldefrawy Chris Peikert and Daniel Sanchez. 2022. CraterLake: a hardware accelerator for efficient unbounded computation on encrypted data.. In ISCA. 173--187.  Nikola Samardzic Axel Feldmann Aleksandar Krastev Nathan Manohar Nicholas Genise Srinivas Devadas Karim Eldefrawy Chris Peikert and Daniel Sanchez. 2022. CraterLake: a hardware accelerator for efficient unbounded computation on encrypted data.. In ISCA. 173--187."},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01195"},{"key":"e_1_3_2_1_60_1","volume-title":"Overlearning Reveals Sensitive Attributes. In 8th International Conference on Learning Representations, ICLR","author":"Song Congzheng","year":"2020","unstructured":"Congzheng Song and Vitaly Shmatikov . 2020 . Overlearning Reveals Sensitive Attributes. In 8th International Conference on Learning Representations, ICLR 2020. Congzheng Song and Vitaly Shmatikov. 2020. Overlearning Reveals Sensitive Attributes. In 8th International Conference on Learning Representations, ICLR 2020."},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00098"},{"key":"e_1_3_2_1_62_1","volume-title":"Slalom: Fast, verifiable and private execution of neural networks in trusted hardware. arXiv preprint arXiv:1806.03287","author":"Tramer Florian","year":"2018","unstructured":"Florian Tramer and Dan Boneh . 2018 . Slalom: Fast, verifiable and private execution of neural networks in trusted hardware. arXiv preprint arXiv:1806.03287 (2018). Florian Tramer and Dan Boneh. 2018. Slalom: Fast, verifiable and private execution of neural networks in trusted hardware. arXiv preprint arXiv:1806.03287 (2018)."},{"key":"e_1_3_2_1_63_1","volume-title":"25th USENIX security symposium (USENIX Security 16). 601--618.","author":"Tram\u00e8r Florian","unstructured":"Florian Tram\u00e8r , Fan Zhang , Ari Juels , Michael K Reiter , and Thomas Ristenpart . 2016. Stealing machine learning models via prediction {APIs} . In 25th USENIX security symposium (USENIX Security 16). 601--618. Florian Tram\u00e8r, Fan Zhang, Ari Juels, Michael K Reiter, and Thomas Ristenpart. 2016. Stealing machine learning models via prediction {APIs}. In 25th USENIX security symposium (USENIX Security 16). 601--618."},{"key":"e_1_3_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1145\/3503222.3507737"},{"key":"e_1_3_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1145\/3219819.3220106"},{"key":"e_1_3_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1145\/3447993.3448618"},{"key":"e_1_3_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01270-0_37"},{"key":"e_1_3_2_1_68_1","volume-title":"Controllable invariance through adversarial feature learning. Advances in neural information processing systems 30","author":"Xie Qizhe","year":"2017","unstructured":"Qizhe Xie , Zihang Dai , Yulun Du , Eduard Hovy , and Graham Neubig . 2017. Controllable invariance through adversarial feature learning. Advances in neural information processing systems 30 ( 2017 ). Qizhe Xie, Zihang Dai, Yulun Du, Eduard Hovy, and Graham Neubig. 2017. Controllable invariance through adversarial feature learning. Advances in neural information processing systems 30 (2017)."},{"key":"e_1_3_2_1_69_1","volume-title":"How transferable are features in deep neural networks? Advances in neural information processing systems 27","author":"Yosinski Jason","year":"2014","unstructured":"Jason Yosinski , Jeff Clune , Yoshua Bengio , and Hod Lipson . 2014. How transferable are features in deep neural networks? Advances in neural information processing systems 27 ( 2014 ). Jason Yosinski, Jeff Clune, Yoshua Bengio, and Hod Lipson. 2014. How transferable are features in deep neural networks? Advances in neural information processing systems 27 (2014)."},{"key":"e_1_3_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.463"},{"key":"e_1_3_2_1_71_1","first-page":"9485","article-title":"Trade-offs and guarantees of adversarial representation learning for information obfuscation","volume":"33","author":"Zhao Han","year":"2020","unstructured":"Han Zhao , Jianfeng Chi , Yuan Tian , and Geoffrey J Gordon . 2020 . Trade-offs and guarantees of adversarial representation learning for information obfuscation . Advances in Neural Information Processing Systems 33 (2020), 9485 -- 9496 . Han Zhao, Jianfeng Chi, Yuan Tian, and Geoffrey J Gordon. 2020. Trade-offs and guarantees of adversarial representation learning for information obfuscation. Advances in Neural Information Processing Systems 33 (2020), 9485--9496.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_1_72_1","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Zheng Wenting","year":"2021","unstructured":"Wenting Zheng , Ryan Deng , Weikeng Chen , Raluca Ada Popa , Aurojit Panda , and Ion Stoica . 2021 . Cerebro: A Platform for {Multi-Party} Cryptographic Collaborative Learning . In 30th USENIX Security Symposium (USENIX Security 21) . 2723--2740. Wenting Zheng, Ryan Deng, Weikeng Chen, Raluca Ada Popa, Aurojit Panda, and Ion Stoica. 2021. Cerebro: A Platform for {Multi-Party} Cryptographic Collaborative Learning. In 30th USENIX Security Symposium (USENIX Security 21). 2723--2740."},{"key":"e_1_3_2_1_73_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00054"}],"event":{"name":"ACM MobiCom '23: 29th Annual International Conference on Mobile Computing and Networking","location":"Madrid Spain","acronym":"ACM MobiCom '23","sponsor":["SIGMOBILE ACM Special Interest Group on Mobility of Systems, Users, Data and Computing"]},"container-title":["Proceedings of the 29th Annual International Conference on Mobile Computing and Networking"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3570361.3592501","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3570361.3592501","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T17:49:27Z","timestamp":1750182567000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3570361.3592501"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,10,2]]},"references-count":72,"alternative-id":["10.1145\/3570361.3592501","10.1145\/3570361"],"URL":"https:\/\/doi.org\/10.1145\/3570361.3592501","relation":{},"subject":[],"published":{"date-parts":[[2023,10,2]]},"assertion":[{"value":"2023-10-02","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}