{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,14]],"date-time":"2026-07-14T16:34:48Z","timestamp":1784046888063,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":61,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,4,17]],"date-time":"2024-04-17T00:00:00Z","timestamp":1713312000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["2124039"],"award-info":[{"award-number":["2124039"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"name":"CloudBank"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,4,27]]},"DOI":"10.1145\/3617232.3624852","type":"proceedings-article","created":{"date-parts":[[2024,4,17]],"date-time":"2024-04-17T20:10:56Z","timestamp":1713384656000},"page":"450-464","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":10,"title":["ZENO: A Type-based Optimization Framework for Zero Knowledge Neural Network Inference"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1975-4027","authenticated-orcid":false,"given":"Boyuan","family":"Feng","sequence":"first","affiliation":[{"name":"UC Santa Barbara, Santa Barbara, United States of America"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8575-9432","authenticated-orcid":false,"given":"Zheng","family":"Wang","sequence":"additional","affiliation":[{"name":"University of California, Santa Barbara, Santa Barbara, United States of America"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5914-586X","authenticated-orcid":false,"given":"Yuke","family":"Wang","sequence":"additional","affiliation":[{"name":"University of California Santa Barbara, Santa Barbara, United States of America"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-8866-4788","authenticated-orcid":false,"given":"Shu","family":"Yang","sequence":"additional","affiliation":[{"name":"University of California Santa Barbara, Santa Barbara, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8716-5793","authenticated-orcid":false,"given":"Yufei","family":"Ding","sequence":"additional","affiliation":[{"name":"UC Santa Barbara, Santa Barbara, United States of America"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,4,17]]},"reference":[{"key":"e_1_3_2_1_1_1","first-page":"308","volume-title":"CCS","author":"Abadi Mart\u00edn","year":"2016","unstructured":"Mart\u00edn Abadi, Andy Chu, Ian J. Goodfellow, H. Brendan McMahan, Ilya Mironov, Kunal Talwar, and Li Zhang. Deep learning with differential privacy. In CCS, pages 308--318. ACM, 2016."},{"key":"e_1_3_2_1_2_1","first-page":"2087","volume-title":"CCS","author":"Ames Scott","year":"2017","unstructured":"Scott Ames, Carmit Hazay, Yuval Ishai, and Muthuramakrishnan Venkitasubramaniam. Ligero: Lightweight sublinear arguments without a trusted setup. In CCS, pages 2087--2104. ACM, 2017."},{"key":"e_1_3_2_1_3_1","volume-title":"Anoma network. https:\/\/anoma.network\/","year":"2020","unstructured":"Anoma. Anoma network. https:\/\/anoma.network\/, 2020."},{"key":"e_1_3_2_1_4_1","unstructured":"arkworks. arks-snark. https:\/\/github.com\/arkworks-rs\/snark."},{"key":"e_1_3_2_1_5_1","first-page":"15453","volume-title":"NeurIPS","author":"Bagdasaryan Eugene","year":"2019","unstructured":"Eugene Bagdasaryan, Omid Poursaeed, and Vitaly Shmatikov. Differential privacy has disparate impact on model accuracy. In NeurIPS, pages 15453--15462, 2019."},{"key":"e_1_3_2_1_6_1","series-title":"Lecture Notes in Computer Science","first-page":"319","volume-title":"Selected Areas in Cryptography","author":"Paulo S. L.","year":"2005","unstructured":"Paulo S. L. M. Barreto and Michael Naehrig. Pairing-friendly elliptic curves of prime order. In Selected Areas in Cryptography, volume 3897 of Lecture Notes in Computer Science, pages 319--331. Springer, 2005."},{"key":"e_1_3_2_1_7_1","volume-title":"transparent, and post-quantum secure computational integrity. IACR Cryptol. ePrint Arch","author":"Ben-Sasson Eli","year":"2018","unstructured":"Eli Ben-Sasson, Iddo Bentov, Yinon Horesh, and Michael Riabzev. Scalable, transparent, and post-quantum secure computational integrity. IACR Cryptol. ePrint Arch., 2018:46, 2018."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-17653-2_4"},{"key":"e_1_3_2_1_9_1","first-page":"781","volume-title":"USENIX Security Symposium","author":"Ben-Sasson Eli","year":"2014","unstructured":"Eli Ben-Sasson, Alessandro Chiesa, Eran Tromer, and Madars Virza. Succinct non-interactive zero knowledge for a von neumann architecture. In USENIX Security Symposium, pages 781--796, 2014."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/2488608.2488623"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45682-1_30"},{"key":"e_1_3_2_1_12_1","unstructured":"Sean Bowe. Bls12-381: New zk-snark elliptic curve construction. https:\/\/electriccoin.co\/blog\/new-snark-curve\/."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00050"},{"key":"e_1_3_2_1_14_1","first-page":"315","volume-title":"IEEE Symposium on Security and Privacy (S&P)","author":"B\u00fcnz Benedikt","year":"2018","unstructured":"Benedikt B\u00fcnz, Jonathan Bootle, Dan Boneh, Andrew Poelstra, Pieter Wuille, and Gregory Maxwell. Bulletproofs: Short proofs for confidential transactions and more. In IEEE Symposium on Security and Privacy (S&P), pages 315--334. IEEE Computer Society, 2018."},{"key":"e_1_3_2_1_15_1","volume-title":"Celo cryptocurrency. https:\/\/celo.org\/","year":"2018","unstructured":"Celo. Celo cryptocurrency. https:\/\/celo.org\/, 2018."},{"key":"e_1_3_2_1_16_1","first-page":"578","volume-title":"OSDI","author":"Chen Tianqi","year":"2018","unstructured":"Tianqi Chen, Thierry Moreau, Ziheng Jiang, Lianmin Zheng, Eddie Q. Yan, Haichen Shen, Meghan Cowan, Leyuan Wang, Yuwei Hu, Luis Ceze, Carlos Guestrin, and Arvind Krishnamurthy. TVM: an automated end-to-end optimizing compiler for deep learning. In OSDI, pages 578--594. USENIX Association, 2018."},{"key":"e_1_3_2_1_17_1","volume-title":"cudnn: Efficient primitives for deep learning. CoRR, abs\/1410.0759","author":"Chetlur Sharan","year":"2014","unstructured":"Sharan Chetlur, Cliff Woolley, Philippe Vandermersch, Jonathan Cohen, John Tran, Bryan Catanzaro, and Evan Shelhamer. cudnn: Efficient primitives for deep learning. CoRR, abs\/1410.0759, 2014."},{"key":"e_1_3_2_1_18_1","unstructured":"World Coin. Introducing world id and sdk. https:\/\/worldcoin.org\/blog\/announcements\/introducing-world-id-and-sdk."},{"key":"e_1_3_2_1_19_1","volume-title":"Porcupine: A synthesizing compiler for vectorized homomorphic encryption","author":"Cowan Meghan","year":"2021","unstructured":"Meghan Cowan, Deeksha Dangwal, Armin Alaghi, Caroline Trippel, Vincent T. Lee, and Brandon Reagen. Porcupine: A synthesizing compiler for vectorized homomorphic encryption. 2021."},{"key":"e_1_3_2_1_20_1","volume-title":"ICLR","author":"Das Dipankar","year":"2018","unstructured":"Dipankar Das, Naveen Mellempudi, Dheevatsa Mudigere, Dhiraj Kalamkar, Sasikanth Avancha, Kunal Banerjee, Srinivas Sridharan, Karthik Vaidyanathan, Bharat Kaul, Evangelos Georganas, Alexander Heinecke, Pradeep Dubey, Jesus Corbal, Nikita Shustrov, Roma Dubtsov, Evarist Fomenko, and Vadim Pirogov. Mixed precision training of convolutional neural networks using integer operations. In ICLR, 2018."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/3385412.3386023"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3314221.3314628"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.acl-main.179"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-86520-7_36"},{"key":"e_1_3_2_1_26_1","first-page":"1","volume-title":"SC","author":"Feng Boyuan","year":"2021","unstructured":"Boyuan Feng, Yuke Wang, Tong Geng, Ang Li, and Yufei Ding. APNN-TC: accelerating arbitrary precision neural networks on ampere GPU tensor cores. In SC, pages 37:1--37:13. ACM, 2021."},{"key":"e_1_3_2_1_27_1","unstructured":"filecoin project. Bellperson. https:\/\/github.com\/filecoin-project\/bellperson."},{"key":"e_1_3_2_1_28_1","first-page":"4672","volume-title":"NIPS","author":"Ghodsi Zahra","year":"2017","unstructured":"Zahra Ghodsi, Tianyu Gu, and Siddharth Garg. Safetynets: Verifiable execution of deep neural networks on an untrusted cloud. In NIPS, pages 4672--4681, 2017."},{"key":"e_1_3_2_1_29_1","first-page":"201","volume-title":"ICML","volume":"48","author":"Gilad-Bachrach Ran","year":"2016","unstructured":"Ran Gilad-Bachrach, Nathan Dowlin, Kim Laine, Kristin E. Lauter, Michael Naehrig, and John Wernsing. Cryptonets: Applying neural networks to encrypted data with high throughput and accuracy. In ICML, volume 48, pages 201--210, 2016."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-49896-5_11"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.123"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"e_1_3_2_1_33_1","unstructured":"Horizen. ginger-lib: a rust library for zk-snarks. https:\/\/github.com\/HorizenOfficial\/ginger-lib."},{"key":"e_1_3_2_1_34_1","series-title":"JMLR Workshop and Conference Proceedings","first-page":"448","volume-title":"ICML","author":"Ioffe Sergey","year":"2015","unstructured":"Sergey Ioffe and Christian Szegedy. Batch normalization: Accelerating deep network training by reducing internal covariate shift. In ICML, volume 37 of JMLR Workshop and Conference Proceedings, pages 448--456. JMLR.org, 2015."},{"key":"e_1_3_2_1_35_1","first-page":"1209","volume-title":"CCS","author":"Jiang Xiaoqian","year":"2018","unstructured":"Xiaoqian Jiang, Miran Kim, Kristin E. Lauter, and Yongsoo Song. Secure outsourced matrix computation and application to neural networks. In CCS, pages 1209--1222. ACM, 2018."},{"key":"e_1_3_2_1_36_1","first-page":"1651","volume-title":"USENIX Security Symposium","author":"Juvekar Chiraag","year":"2018","unstructured":"Chiraag Juvekar, Vinod Vaikuntanathan, and Anantha Chandrakasan. GAZELLE: A low latency framework for secure neural network inference. In USENIX Security Symposium, pages 1651--1669. USENIX Association, 2018."},{"key":"e_1_3_2_1_37_1","series-title":"Proceedings of Machine Learning Research","first-page":"10912","volume-title":"ICML","author":"Keller Marcel","year":"2022","unstructured":"Marcel Keller and Ke Sun. Secure quantized training for deep learning. In ICML, volume 162 of Proceedings of Machine Learning Research, pages 10912--10938. PMLR, 2022."},{"key":"e_1_3_2_1_38_1","first-page":"4961","volume-title":"NeurIPS","author":"Knott Brian","year":"2021","unstructured":"Brian Knott, Shobha Venkataraman, Awni Y. Hannun, Shubho Sengupta, Mark Ibrahim, and Laurens van der Maaten. Crypten: Secure multi-party computation meets machine learning. In NeurIPS, pages 4961--4973, 2021."},{"key":"e_1_3_2_1_39_1","volume-title":"Tech report","author":"Krizhevsky Alex","year":"2009","unstructured":"Alex Krizhevsky, Vinod Nair, and Geoffrey Hinton. Cifar-10 (canadian institute for advanced research). Tech report, 2009."},{"key":"e_1_3_2_1_40_1","unstructured":"Modulus Labs. Leela vs the world. https:\/\/www.leelavstheworld.xyz\/."},{"key":"e_1_3_2_1_41_1","volume-title":"Mina cryptocurrency. https:\/\/minaprotocol.com\/","author":"Labs O.","year":"2017","unstructured":"O. Labs. Mina cryptocurrency. https:\/\/minaprotocol.com\/, 2017."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"e_1_3_2_1_44_1","volume-title":"vcnn: Verifiable convolutional neural network. IACR Cryptol. ePrint Arch","author":"Lee Seunghwa","year":"2020","unstructured":"Seunghwa Lee, Hankyung Ko, Jihye Kim, and Hyunok Oh. vcnn: Verifiable convolutional neural network. IACR Cryptol. ePrint Arch., 2020:584, 2020."},{"key":"e_1_3_2_1_45_1","volume-title":"P. Flajolet, M. Ismail, T.Y. Lam, and E. Lutwak. Finite Fields. Number v. 20, pt. 1 in EBL-Schweitzer","author":"Lidl R.","year":"1997","unstructured":"R. Lidl, H. Niederreiter, P.M. Cohn, G.C. Rota, B. Doran, Cambridge University Press, P. Flajolet, M. Ismail, T.Y. Lam, and E. Lutwak. Finite Fields. Number v. 20, pt. 1 in EBL-Schweitzer. Cambridge University Press, 1997."},{"key":"e_1_3_2_1_46_1","first-page":"2968","volume-title":"CCS","author":"Liu Tianyi","year":"2021","unstructured":"Tianyi Liu, Xiang Xie, and Yupeng Zhang. zkcnn: Zero knowledge proofs for convolutional neural network predictions and accuracy. In CCS, pages 2968--2985. ACM, 2021."},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"crossref","unstructured":"Michael L. Norman Vince Kellen Shava Smallen Brian DeMeulle Shawn Strande Ed Lazowska Naomi Alterman Rob Fatland Sarah Stone Amanda Tan Katherine A. Yelick Eric Van Dusen and James Mitchell. Cloudbank: Managed services to simplify cloud access for computer science research and education. In Joseph Paris Jackie Milhans Betsy Hillery Sharon Broude Geva Patrick Schmitz and Robert S. Sinkovits editors PEARC '21: Practice and Experience in Advanced Research Computing Boston MA USA July 18--22 2021 pages 45:1--45:4. ACM 2021.","DOI":"10.1145\/3437359.3465586"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2013.47"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1214\/aoms\/1177729586"},{"key":"e_1_3_2_1_50_1","volume-title":"ICLR","author":"Simonyan Karen","year":"2015","unstructured":"Karen Simonyan and Andrew Zisserman. Very deep convolutional networks for large-scale image recognition. In ICLR, 2015."},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-78524-8_1"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00060"},{"key":"e_1_3_2_1_53_1","unstructured":"Jonathan Wang. Bn254 for the rest of us. https:\/\/hackmd.io\/@jpw\/bn254."},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58586-0_25"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.521"},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-26954-8_24"},{"key":"e_1_3_2_1_57_1","volume-title":"Advances in Neural Information Processing Systems 33: Annual Conference on Neural Information Processing Systems 2020","author":"Yang Zhaohui","year":"2020","unstructured":"Zhaohui Yang, Yunhe Wang, Kai Han, Chunjing Xu, Chao Xu, Dacheng Tao, and Chang Xu. Searching for low-bit weights in quantized neural networks. In Hugo Larochelle, Marc'Aurelio Ranzato, Raia Hadsell, Maria-Florina Balcan, and Hsuan-Tien Lin, editors, Advances in Neural Information Processing Systems 33: Annual Conference on Neural Information Processing Systems 2020, NeurIPS 2020, December 6--12, 2020, virtual, 2020."},{"key":"e_1_3_2_1_58_1","series-title":"Proceedings of Machine Learning Research","first-page":"7543","volume-title":"ICML","author":"Zhao Ritchie","year":"2019","unstructured":"Ritchie Zhao, Yuwei Hu, Jordan Dotzel, Christopher De Sa, and Zhiru Zhang. Improving neural network quantization without retraining using outlier channel splitting. In ICML, volume 97 of Proceedings of Machine Learning Research, pages 7543--7552. PMLR, 2019."},{"key":"e_1_3_2_1_59_1","first-page":"863","volume-title":"OSDI","author":"Zheng Lianmin","year":"2020","unstructured":"Lianmin Zheng, Chengfan Jia, Minmin Sun, Zhao Wu, Cody Hao Yu, Ameer Haj-Ali, Yida Wang, Jun Yang, Danyang Zhuo, Koushik Sen, Joseph E. Gonzalez, and Ion Stoica. Ansor: Generating high-performance tensor programs for deep learning. In OSDI, pages 863--879. USENIX Association, 2020."},{"key":"e_1_3_2_1_60_1","volume-title":"CVPR","author":"Zhu Yuqing","year":"2020","unstructured":"Yuqing Zhu, Xiang Yu, Manmohan Chandraker, and Yu-Xiang Wang. Private-knn: Practical differential privacy for computer vision. In CVPR, June 2020."},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00156"},{"key":"e_1_3_2_1_62_1","unstructured":"zkcrypto. Bellman. https:\/\/github.com\/zkcrypto\/bellman."}],"event":{"name":"ASPLOS '24: 29th ACM International Conference on Architectural Support for Programming Languages and Operating Systems, Volume 1","location":"La Jolla CA USA","acronym":"ASPLOS '24","sponsor":["SIGARCH ACM Special Interest Group on Computer Architecture","SIGOPS ACM Special Interest Group on Operating Systems","SIGPLAN ACM Special Interest Group on Programming Languages","SIGBED ACM Special Interest Group on Embedded Systems"]},"container-title":["Proceedings of the 29th ACM International Conference on Architectural Support for Programming Languages and Operating Systems, Volume 1"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3617232.3624852","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3617232.3624852","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3617232.3624852","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T16:46:13Z","timestamp":1750178773000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3617232.3624852"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,4,17]]},"references-count":61,"alternative-id":["10.1145\/3617232.3624852","10.1145\/3617232"],"URL":"https:\/\/doi.org\/10.1145\/3617232.3624852","relation":{},"subject":[],"published":{"date-parts":[[2024,4,17]]},"assertion":[{"value":"2024-04-17","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}