{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T05:00:22Z","timestamp":1750309222776,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":79,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,7,1]],"date-time":"2024-07-01T00:00:00Z","timestamp":1719792000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"US National Science Foundation","award":["2148358","2133407","1914635"],"award-info":[{"award-number":["2148358","2133407","1914635"]}]},{"name":"US Department of Energy","award":["DE-SC0023392"],"award-info":[{"award-number":["DE-SC0023392"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,7]]},"DOI":"10.1145\/3634737.3657015","type":"proceedings-article","created":{"date-parts":[[2024,6,28]],"date-time":"2024-06-28T11:51:38Z","timestamp":1719575498000},"page":"1246-1260","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["A Generative Framework for Low-Cost Result Validation of Machine Learning-as-a-Service Inference"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-5291-040X","authenticated-orcid":false,"given":"Abhinav","family":"Kumar","sequence":"first","affiliation":[{"name":"Computer Science, Saint Louis University, Saint Louis, MO, United States"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0168-362X","authenticated-orcid":false,"given":"Miguel A. Guirao","family":"Aguilera","sequence":"additional","affiliation":[{"name":"Computer Science, New Mexico State University, Las Cruces, NM, United States"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4561-4546","authenticated-orcid":false,"given":"Reza","family":"Tourani","sequence":"additional","affiliation":[{"name":"Computer Science, Saint Louis University, Saint Louis, MO, United States"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7347-984X","authenticated-orcid":false,"given":"Satyajayant","family":"Misra","sequence":"additional","affiliation":[{"name":"Computer Science, New Mexico State University, Las Cruces, NM, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,7]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Trustzone: Integrated hardware and software security. White paper","author":"Alves Tiago","year":"2004","unstructured":"Tiago Alves. 2004. Trustzone: Integrated hardware and software security. White paper (2004)."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_2_1","DOI":"10.1109\/JPROC.2014.2332007"},{"key":"e_1_3_2_1_3_1","volume-title":"Label refinery: Improving imagenet classification through label progression. arXiv preprint arXiv:1805.02641","author":"Bagherinezhad Hessam","year":"2018","unstructured":"Hessam Bagherinezhad, Maxwell Horton, Mohammad Rastegari, and Ali Farhadi. 2018. Label refinery: Improving imagenet classification through label progression. arXiv preprint arXiv:1805.02641 (2018)."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_4_1","DOI":"10.1145\/3055399.3055491"},{"unstructured":"Xinyun Chen Chang Liu Bo Li Kimberly Lu and Dawn Song. 2017. Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning. arXiv:1712.05526 [cs.CR]","key":"e_1_3_2_1_5_1"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_6_1","DOI":"10.1609\/aaai.v35i2.16201"},{"key":"e_1_3_2_1_7_1","volume-title":"A survey of model compression and acceleration for deep neural networks. arXiv preprint arXiv:1710.09282","author":"Cheng Yu","year":"2017","unstructured":"Yu Cheng, Duo Wang, Pan Zhou, and Tao Zhang. 2017. A survey of model compression and acceleration for deep neural networks. arXiv preprint arXiv:1710.09282 (2017)."},{"key":"e_1_3_2_1_8_1","volume-title":"Intel SGX explained. Cryptology ePrint Archive","author":"Costan Victor","year":"2016","unstructured":"Victor Costan and Srinivas Devadas. 2016. Intel SGX explained. Cryptology ePrint Archive (2016)."},{"volume-title":"Privately and Publicly Verifiable Computing Techniques","author":"Demirel Denise","unstructured":"Denise Demirel, Lucas Schabh\u00fcser, and Johannes Buchmann. 2017. Proof and Argument Based Verifiable Computing. In Privately and Publicly Verifiable Computing Techniques. Springer, 13--22.","key":"e_1_3_2_1_9_1"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_10_1","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"e_1_3_2_1_11_1","volume-title":"Fusion: Efficient and Secure Inference Resilient to Malicious Server and Curious Clients. arXiv preprint arXiv:2205.03040","author":"Dong Caiqin","year":"2022","unstructured":"Caiqin Dong, Jian Weng, Yao Tong, Jia-Nan Liu, Anjia Yang, Yudan Cheng, and Shun Hu. 2022. Fusion: Efficient and Secure Inference Resilient to Malicious Server and Curious Clients. arXiv preprint arXiv:2205.03040 (2022)."},{"key":"e_1_3_2_1_12_1","volume-title":"APECS: A Distributed Access Control Framework for Pervasive Edge Computing Services. In ACM SIGSAC Conference on Computer and Communications Security. 1405--1420","author":"Dougherty Sean","year":"2021","unstructured":"Sean Dougherty, Reza Tourani, Gaurav Panwar, Roopa Vishwanathan, Satyajayant Misra, and Srikathyayani Srikanteswara. 2021. APECS: A Distributed Access Control Framework for Pervasive Edge Computing Services. In ACM SIGSAC Conference on Computer and Communications Security. 1405--1420."},{"key":"e_1_3_2_1_13_1","volume-title":"Raid: Randomized adversarial-input detection for neural networks. arXiv preprint arXiv:2002.02776","author":"Eniser Hasan Ferit","year":"2020","unstructured":"Hasan Ferit Eniser, Maria Christakis, and Valentin W\u00fcstholz. 2020. Raid: Randomized adversarial-input detection for neural networks. arXiv preprint arXiv:2002.02776 (2020)."},{"key":"e_1_3_2_1_14_1","volume-title":"International Conference on Machine Learning. PMLR, 1607--1616","author":"Furlanello Tommaso","year":"2018","unstructured":"Tommaso Furlanello, Zachary Lipton, Michael Tschannen, Laurent Itti, and Anima Anandkumar. 2018. Born again neural networks. In International Conference on Machine Learning. PMLR, 1607--1616."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_15_1","DOI":"10.1109\/AsianHOST51057.2020.9358260"},{"key":"e_1_3_2_1_16_1","volume-title":"Safetynets: Verifiable execution of deep neural networks on an untrusted cloud. Advances in Neural Information Processing Systems 30","author":"Ghodsi Zahra","year":"2017","unstructured":"Zahra Ghodsi, Tianyu Gu, and Siddharth Garg. 2017. Safetynets: Verifiable execution of deep neural networks on an untrusted cloud. Advances in Neural Information Processing Systems 30 (2017)."},{"key":"e_1_3_2_1_17_1","volume-title":"Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572","author":"Goodfellow Ian J","year":"2014","unstructured":"Ian J Goodfellow, Jonathon Shlens, and Christian Szegedy. 2014. Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572 (2014)."},{"key":"e_1_3_2_1_18_1","volume-title":"Privado: Practical and secure DNN inference with enclaves. arXiv preprint arXiv:1810.00602","author":"Grover Karan","year":"2018","unstructured":"Karan Grover, Shruti Tople, Shweta Shinde, Ranjita Bhagwan, and Ramachandran Ramjee. 2018. Privado: Practical and secure DNN inference with enclaves. arXiv preprint arXiv:1810.00602 (2018)."},{"key":"e_1_3_2_1_19_1","volume-title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain. arXiv preprint arXiv:1708.06733","author":"Gu Tianyu","year":"2017","unstructured":"Tianyu Gu, Brendan Dolan-Gavitt, and Siddharth Garg. 2017. Badnets: Identifying vulnerabilities in the machine learning model supply chain. arXiv preprint arXiv:1708.06733 (2017)."},{"key":"e_1_3_2_1_20_1","volume-title":"Deep compression: Compressing deep neural networks with pruning, trained quantization and huffman coding. arXiv preprint arXiv:1510.00149","author":"Han Song","year":"2015","unstructured":"Song Han, Huizi Mao, and William J Dally. 2015. Deep compression: Compressing deep neural networks with pruning, trained quantization and huffman coding. arXiv preprint arXiv:1510.00149 (2015)."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_21_1","DOI":"10.1145\/3466752.3480112"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_22_1","DOI":"10.1109\/CVPR.2016.90"},{"unstructured":"Geoffrey Hinton Oriol Vinyals Jeff Dean et al. 2015. Distilling the knowledge in a neural network. arXiv preprint arXiv:1503.02531 2 7 (2015).","key":"e_1_3_2_1_23_1"},{"key":"e_1_3_2_1_24_1","volume-title":"Improving efficient neural ranking models with cross-architecture knowledge distillation. arXiv preprint arXiv:2010.02666","author":"Hofst\u00e4tter Sebastian","year":"2020","unstructured":"Sebastian Hofst\u00e4tter, Sophia Althammer, Michael Schr\u00f6der, Mete Sertkan, and Allan Hanbury. 2020. Improving efficient neural ranking models with cross-architecture knowledge distillation. arXiv preprint arXiv:2010.02666 (2020)."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_25_1","DOI":"10.1109\/CVPR.2017.243"},{"key":"e_1_3_2_1_26_1","first-page":"207","article-title":"Cheetah: Lean and Fast Secure Two-Party Deep Neural Network Inference","volume":"2022","author":"Huang Zhicong","year":"2022","unstructured":"Zhicong Huang, Wen-jie Lu, Cheng Hong, and Jiansheng Ding. 2022. Cheetah: Lean and Fast Secure Two-Party Deep Neural Network Inference. IACR Cryptol. ePrint Arch. 2022 (2022), 207.","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"e_1_3_2_1_27_1","volume-title":"Chiron: Privacy-preserving machine learning as a service. arXiv preprint arXiv:1803.05961","author":"Hunt Tyler","year":"2018","unstructured":"Tyler Hunt, Congzheng Song, Reza Shokri, Vitaly Shmatikov, and Emmett Witchel. 2018. Chiron: Privacy-preserving machine learning as a service. arXiv preprint arXiv:1803.05961 (2018)."},{"key":"e_1_3_2_1_28_1","volume-title":"Integrating remote attestation with transport layer security. arXiv preprint arXiv:1801.05863","author":"Knauth Thomas","year":"2018","unstructured":"Thomas Knauth, Michael Steiner, Somnath Chakrabarti, Li Lei, Cedric Xing, and Mona Vij. 2018. Integrating remote attestation with transport layer security. arXiv preprint arXiv:1801.05863 (2018)."},{"key":"e_1_3_2_1_29_1","first-page":"4961","article-title":"Crypten: Secure multi-party computation meets machine learning","volume":"34","author":"Knott Brian","year":"2021","unstructured":"Brian Knott, Shobha Venkataraman, Awni Hannun, Shubho Sengupta, Mark Ibrahim, and Laurens van der Maaten. 2021. Crypten: Secure multi-party computation meets machine learning. Advances in Neural Information Processing Systems 34 (2021), 4961--4973.","journal-title":"Advances in Neural Information Processing Systems"},{"unstructured":"Alex Krizhevsky Geoffrey Hinton et al. 2009. Learning multiple layers of features from tiny images. (2009).","key":"e_1_3_2_1_30_1"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_31_1","DOI":"10.1109\/PerComWorkshops53856.2022.9767528"},{"unstructured":"Alexey Kurakin Ian Goodfellow Samy Bengio et al. 2016. Adversarial examples in the physical world.","key":"e_1_3_2_1_32_1"},{"key":"e_1_3_2_1_33_1","volume-title":"A simple unified framework for detecting out-of-distribution samples and adversarial attacks. Advances in neural information processing systems 31","author":"Lee Kimin","year":"2018","unstructured":"Kimin Lee, Kibok Lee, Honglak Lee, and Jinwoo Shin. 2018. A simple unified framework for detecting out-of-distribution samples and adversarial attacks. Advances in neural information processing systems 31 (2018)."},{"key":"e_1_3_2_1_34_1","volume-title":"vCNN: Verifiable convolutional neural network based on zk-SNARKs. Cryptology ePrint Archive","author":"Lee Seunghwa","year":"2020","unstructured":"Seunghwa Lee, Hankyung Ko, Jihye Kim, and Hyunok Oh. 2020. vCNN: Verifiable convolutional neural network based on zk-SNARKs. Cryptology ePrint Archive (2020)."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_35_1","DOI":"10.1145\/3436755"},{"key":"e_1_3_2_1_36_1","volume-title":"A survey on security threats and defensive techniques of machine learning: A data driven view","author":"Liu Qiang","year":"2018","unstructured":"Qiang Liu, Pan Li, Wentao Zhao, Wei Cai, Shui Yu, and Victor CM Leung. 2018. A survey on security threats and defensive techniques of machine learning: A data driven view. IEEE access 6 (2018), 12103--12117."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_37_1","DOI":"10.1109\/JPROC.2019.2915983"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_38_1","DOI":"10.1145\/3460120.3485379"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_39_1","DOI":"10.1109\/ICCV.2017.56"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_40_1","DOI":"10.1007\/978-3-030-61638-0_17"},{"key":"e_1_3_2_1_41_1","volume-title":"On the benefits of knowledge distillation for adversarial robustness. arXiv preprint arXiv:2203.07159","author":"Maroto Javier","year":"2022","unstructured":"Javier Maroto, Guillermo Ortiz-Jim\u00e9nez, and Pascal Frossard. 2022. On the benefits of knowledge distillation for adversarial robustness. arXiv preprint arXiv:2203.07159 (2022)."},{"key":"e_1_3_2_1_42_1","volume-title":"On detecting adversarial perturbations. arXiv preprint arXiv:1702.04267","author":"Metzen Jan Hendrik","year":"2017","unstructured":"Jan Hendrik Metzen, Tim Genewein, Volker Fischer, and Bastian Bischoff. 2017. On detecting adversarial perturbations. arXiv preprint arXiv:1702.04267 (2017)."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_43_1","DOI":"10.1145\/3458864.3466628"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_44_1","DOI":"10.1145\/3386901.3388946"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_45_1","DOI":"10.1109\/GLOCOM.2018.8647679"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_46_1","DOI":"10.1109\/SP.2019.00065"},{"key":"e_1_3_2_1_47_1","volume-title":"CHEX-MIX: Combining Homomorphic Encryption with Trusted Execution Environments for Two-party Oblivious Inference in the Cloud. Cryptology ePrint Archive","author":"Natarajan Deepika","year":"2021","unstructured":"Deepika Natarajan, Wei Dai, and Ronald Dreslinski. 2021. CHEX-MIX: Combining Homomorphic Encryption with Trusted Execution Environments for Two-party Oblivious Inference in the Cloud. Cryptology ePrint Archive (2021)."},{"key":"e_1_3_2_1_48_1","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Nguyen Thien Duc","year":"2022","unstructured":"Thien Duc Nguyen, Phillip Rieger, Roberta De Viti, Huili Chen, Bj\u00f6rn B Brandenburg, Hossein Yalame, Helen M\u00f6llering, Hossein Fereidooni, Samuel Marchal, Markus Miettinen, et al. 2022. {FLAME}: Taming backdoors in federated learning. In 31st USENIX Security Symposium (USENIX Security 22). 1415--1432."},{"key":"e_1_3_2_1_49_1","volume-title":"Toward verifiable and privacy preserving machine learning prediction","author":"Niu Chaoyue","year":"2020","unstructured":"Chaoyue Niu, Fan Wu, Shaojie Tang, Shuai Ma, and Guihai Chen. 2020. Toward verifiable and privacy preserving machine learning prediction. IEEE Transactions on Dependable and Secure Computing (2020)."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_50_1","DOI":"10.1109\/JPROC.2021.3050042"},{"key":"e_1_3_2_1_51_1","volume-title":"Transferability in machine learning: from phenomena to black-box attacks using adversarial samples. arXiv preprint arXiv:1605.07277","author":"Papernot Nicolas","year":"2016","unstructured":"Nicolas Papernot, Patrick McDaniel, and Ian Goodfellow. 2016. Transferability in machine learning: from phenomena to black-box attacks using adversarial samples. arXiv preprint arXiv:1605.07277 (2016)."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_52_1","DOI":"10.1109\/SP.2016.41"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_53_1","DOI":"10.1007\/978-3-030-66415-2_4"},{"key":"e_1_3_2_1_54_1","volume-title":"Detecting adversarial examples in convolutional neural networks. arXiv preprint arXiv:1812.03303","author":"Pertigkiozoglou Stefanos","year":"2018","unstructured":"Stefanos Pertigkiozoglou and Petros Maragos. 2018. Detecting adversarial examples in convolutional neural networks. arXiv preprint arXiv:1812.03303 (2018)."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_55_1","DOI":"10.1016\/j.jnca.2019.05.005"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_56_1","DOI":"10.1109\/HPCA51647.2021.00013"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_57_1","DOI":"10.1109\/Trustcom.2015.357"},{"key":"e_1_3_2_1_58_1","volume-title":"Zero Knowledge Proofs towards Verifiable Decentralized AI Pipelines. Cryptology ePrint Archive","author":"Singh Nitin","year":"2021","unstructured":"Nitin Singh, Pankaj Dayama, and Vinayaka Pandit. 2021. Zero Knowledge Proofs towards Verifiable Decentralized AI Pipelines. Cryptology ePrint Archive (2021)."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_59_1","DOI":"10.1109\/COMST.2021.3061981"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_60_1","DOI":"10.1109\/CCGrid51090.2021.00101"},{"key":"e_1_3_2_1_61_1","volume-title":"International conference on machine learning. PMLR, 6105--6114","author":"Tan Mingxing","year":"2019","unstructured":"Mingxing Tan and Quoc Le. 2019. Efficientnet: Rethinking model scaling for convolutional neural networks. In International conference on machine learning. PMLR, 6105--6114."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_62_1","DOI":"10.1145\/3394486.3403064"},{"key":"e_1_3_2_1_63_1","volume-title":"Attacks meet interpretability: Attribute-steered detection of adversarial samples. Advances in Neural Information Processing Systems 31","author":"Tao Guanhong","year":"2018","unstructured":"Guanhong Tao, Shiqing Ma, Yingqi Liu, and Xiangyu Zhang. 2018. Attacks meet interpretability: Attribute-steered detection of adversarial samples. Advances in Neural Information Processing Systems 31 (2018)."},{"key":"e_1_3_2_1_64_1","volume-title":"Democratizing the Edge: A Pervasive Edge Computing Framework. arXiv preprint arXiv:2007.00641","author":"Tourani Reza","year":"2020","unstructured":"Reza Tourani, Srikathyayani Srikanteswara, Satyajayant Misra, Richard Chow, Lily Yang, Xiruo Liu, and Yi Zhang. 2020. Democratizing the Edge: A Pervasive Edge Computing Framework. arXiv preprint arXiv:2007.00641 (2020)."},{"key":"e_1_3_2_1_65_1","volume-title":"Slalom: Fast, verifiable and private execution of neural networks in trusted hardware. arXiv preprint arXiv:1806.03287","author":"Tramer Florian","year":"2018","unstructured":"Florian Tramer and Dan Boneh. 2018. Slalom: Fast, verifiable and private execution of neural networks in trusted hardware. arXiv preprint arXiv:1806.03287 (2018)."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_66_1","DOI":"10.1145\/3548606.3560554"},{"key":"e_1_3_2_1_67_1","volume-title":"Spectral signatures in backdoor attacks. Advances in neural information processing systems 31","author":"Tran Brandon","year":"2018","unstructured":"Brandon Tran, Jerry Li, and Aleksander Madry. 2018. Spectral signatures in backdoor attacks. Advances in neural information processing systems 31 (2018)."},{"key":"e_1_3_2_1_68_1","volume-title":"pvCNN: Privacy-Preserving and Verifiable Convolutional Neural Network Testing. arXiv preprint arXiv:2201.09186","author":"Weng Jiasi","year":"2022","unstructured":"Jiasi Weng, Jian Weng, Gui Tang, Anjia Yang, Ming Li, and Jia-Nan Liu. 2022. pvCNN: Privacy-Preserving and Verifiable Convolutional Neural Network Testing. arXiv preprint arXiv:2201.09186 (2022)."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_69_1","DOI":"10.1145\/3427228.3427232"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_70_1","DOI":"10.1016\/j.neucom.2020.07.061"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_71_1","DOI":"10.1145\/3319535.3354209"},{"key":"e_1_3_2_1_72_1","volume-title":"label private deep learning training based on secure multiparty computation and differential privacy. Cryptology ePrint Archive","author":"Yuan Sen","year":"2021","unstructured":"Sen Yuan, Milan Shen, Ilya Mironov, and Anderson CA Nascimento. 2021. Practical, label private deep learning training based on secure multiparty computation and differential privacy. Cryptology ePrint Archive (2021)."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_73_1","DOI":"10.1145\/3372297.3417278"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_74_1","DOI":"10.1109\/JIOT.2018.2845898"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_75_1","DOI":"10.1109\/EuroSP51992.2021.00022"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_76_1","DOI":"10.1109\/TPDS.2021.3068195"},{"key":"e_1_3_2_1_77_1","volume-title":"Dorefa-net: Training low bitwidth convolutional neural networks with low bitwidth gradients. arXiv preprint arXiv:1606.06160","author":"Zhou Shuchang","year":"2016","unstructured":"Shuchang Zhou, Yuxin Wu, Zekun Ni, Xinyu Zhou, He Wen, and Yuheng Zou. 2016. Dorefa-net: Training low bitwidth convolutional neural networks with low bitwidth gradients. arXiv preprint arXiv:1606.06160 (2016)."},{"key":"e_1_3_2_1_78_1","volume-title":"Trained ternary quantization. arXiv preprint arXiv:1612.01064","author":"Zhu Chenzhuo","year":"2016","unstructured":"Chenzhuo Zhu, Song Han, Huizi Mao, and William J Dally. 2016. Trained ternary quantization. arXiv preprint arXiv:1612.01064 (2016)."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_79_1","DOI":"10.1145\/3433210.3437529"}],"event":{"sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"acronym":"ASIA CCS '24","name":"ASIA CCS '24: 19th ACM Asia Conference on Computer and Communications Security","location":"Singapore Singapore"},"container-title":["Proceedings of the 19th ACM Asia Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3634737.3657015","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3634737.3657015","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3634737.3657015","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T23:44:07Z","timestamp":1750290247000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3634737.3657015"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,7]]},"references-count":79,"alternative-id":["10.1145\/3634737.3657015","10.1145\/3634737"],"URL":"https:\/\/doi.org\/10.1145\/3634737.3657015","relation":{},"subject":[],"published":{"date-parts":[[2024,7]]},"assertion":[{"value":"2024-07-01","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}