{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,14]],"date-time":"2026-07-14T16:35:02Z","timestamp":1784046902046,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":83,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,6,19]],"date-time":"2024-06-19T00:00:00Z","timestamp":1718755200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Ontario Research Fund ? Research Excellence (ORF?RE)","award":["RE011-038"],"award-info":[{"award-number":["RE011-038"]}]},{"DOI":"10.13039\/501100006374","name":"Natural Sciences and Engineering Research Council of Canada","doi-asserted-by":"publisher","award":["RGPIN-2020-04744"],"award-info":[{"award-number":["RGPIN-2020-04744"]}],"id":[{"id":"10.13039\/501100006374","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,6,19]]},"DOI":"10.1145\/3714393.3726492","type":"proceedings-article","created":{"date-parts":[[2025,6,4]],"date-time":"2025-06-04T18:38:47Z","timestamp":1749062327000},"page":"317-328","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["<scp>Laminator:<\/scp>\n                    Verifiable ML Property Cards using Hardware-assisted Attestations"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2138-4341","authenticated-orcid":false,"given":"Vasisht","family":"Duddu","sequence":"first","affiliation":[{"name":"University of Waterloo, Waterloo, ON, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-0355-3742","authenticated-orcid":false,"given":"Oskari","family":"J\u00e4rvinen","sequence":"additional","affiliation":[{"name":"Aalto University, Espoo, Finland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1767-7897","authenticated-orcid":false,"given":"Lachlan J.","family":"Gunn","sequence":"additional","affiliation":[{"name":"Aalto University, Espoo, Finland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5093-9871","authenticated-orcid":false,"given":"N.","family":"Asokan","sequence":"additional","affiliation":[{"name":"University of Waterloo, Waterloo, ON, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,6,4]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","unstructured":"Martin Abadi et al. 2016. Deep Learning with Differential Privacy. In CCS (Vienna Austria). Association for Computing Machinery New York NY USA 308--318. https:\/\/doi.org\/10.1145\/2976749.2978318","DOI":"10.1145\/2976749.2978318"},{"key":"e_1_3_2_1_2_1","unstructured":"Kasra Abbaszadeh et al. 2024. Zero-Knowledge Proofs of Training for Deep Neural Networks. Cryptology ePrint Archive Paper 2024\/162. https:\/\/eprint.iacr.org\/2024\/162 https:\/\/eprint.iacr.org\/2024\/162."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"crossref","unstructured":"Rishi Bommasani et al. 2023. Ecosystem graphs: The social footprint of foundation models. arXiv preprint arXiv:2303.15772 (2023).","DOI":"10.21203\/rs.3.rs-2961271\/v1"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484583"},{"key":"e_1_3_2_1_5_1","volume-title":"Foreshadow: Extracting the Keys to the Intel SGX Kingdom with Transient Out-of-Order Execution. In USENIX Sec","author":"Bulck Jo Van","year":"2018","unstructured":"Jo Van Bulck et al. 2018. Foreshadow: Extracting the Keys to the Intel SGX Kingdom with Transient Out-of-Order Execution. In USENIX Sec. USENIX Association, Baltimore, MD, 991textendash1008. https:\/\/www.usenix.org\/conference\/usenixsecurity18\/presentation\/bulck"},{"key":"e_1_3_2_1_6_1","volume-title":"HOLMES: Efficient Distribution Testing for Secure Collaborative Learning. In USENIX Sec","author":"Ian Chang","year":"2023","unstructured":"Ian Chang et al. 2023. HOLMES: Efficient Distribution Testing for Secure Collaborative Learning. In USENIX Sec. USENIX Association, Anaheim, CA, 4823--4840. https:\/\/www.usenix.org\/conference\/usenixsecurity23\/presentation\/chang"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"crossref","unstructured":"Brian Christian. 2021. The Alignment Problem: How Can Machines Learn Human Values? Atlantic Books.","DOI":"10.56315\/PSCF12-21Christian"},{"key":"e_1_3_2_1_8_1","volume-title":"https:\/\/artificialintelligenceact.eu\/","author":"European Commission","year":"2024","unstructured":"European Commission. 2024. Regulation (EU) 2024\/1689 (Artificial Intelligence Act). https:\/\/artificialintelligenceact.eu\/ (2024)."},{"key":"e_1_3_2_1_9_1","volume-title":"6580 -- Algorithmic Accountability Act. https:\/\/www.congress.gov\/bill\/117th-congress\/house-bill\/6580\/text","author":"Congress U.S.","year":"2022","unstructured":"U.S. Congress. 2022. H.R. 6580 -- Algorithmic Accountability Act. https:\/\/www.congress.gov\/bill\/117th-congress\/house-bill\/6580\/text (2022)."},{"key":"e_1_3_2_1_10_1","unstructured":"Victor Costan et al. 2016. Sanctum: Minimal Hardware Extensions for Strong Software Isolation. In Usenix Sec Thorsten Holz and Stefan Savage (Eds.). 857--874. https:\/\/www.usenix.org\/conference\/usenixsecurity16\/technical-sessions\/presentation\/costan"},{"key":"e_1_3_2_1_11_1","unstructured":"I\u00f1igo de Miguel Beriain et al. 2022. Auditing the quality of datasets used in algorithmic decision-making systems. Technical Report. European Parliamentary Research Service. PE 729.541."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"crossref","unstructured":"Vasisht Duddu et al. 2024. Attesting Distributional Properties of Training Data for Machine Learning. In ESORICS. Springer Cham.","DOI":"10.1007\/978-3-031-70879-4_1"},{"key":"e_1_3_2_1_13_1","unstructured":"Thorsten Eisenhofer et al. 2022. Verifiable and provably secure machine unlearning. arXiv preprint arXiv:2210.09126 (2022)."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","unstructured":"C. Fang et al. 2023. Proof-of-Learning is Currently More Broken Than You Think. In EuroS&P. IEEE Los Alamitos CA USA 797--816. https:\/\/doi.org\/10.1109\/EuroSP57164.2023.00052","DOI":"10.1109\/EuroSP57164.2023.00052"},{"key":"e_1_3_2_1_15_1","volume-title":"ZEN: An Optimizing Compiler for Verifiable, Zero-Knowledge Neural Network Inferences. Cryptology ePrint Archive, Paper 2021\/087. https:\/\/eprint.iacr.org\/2021\/087 https:\/\/eprint.iacr.org\/2021\/087.","author":"Boyuan Feng","year":"2021","unstructured":"Boyuan Feng et al. 2021. ZEN: An Optimizing Compiler for Verifiable, Zero-Knowledge Neural Network Inferences. Cryptology ePrint Archive, Paper 2021\/087. https:\/\/eprint.iacr.org\/2021\/087 https:\/\/eprint.iacr.org\/2021\/087."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3623202"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3458723"},{"key":"e_1_3_2_1_18_1","unstructured":"Zahra Ghodsi et al. 2017. SafetyNets: Verifiable Execution of Deep Neural Networks on an Untrusted Cloud. In NeurIPS (Long Beach California USA). Curran Associates Inc. Red Hook NY USA 4675--4684."},{"key":"e_1_3_2_1_19_1","volume-title":"Google Cloud Model Cards -- modelcards.withgoogle.com. https:\/\/modelcards.withgoogle.com\/","year":"2024","unstructured":"Google. 2024. Google Cloud Model Cards -- modelcards.withgoogle.com. https:\/\/modelcards.withgoogle.com\/ (2024). [Accessed 11-04--2024]."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3236009"},{"key":"e_1_3_2_1_21_1","unstructured":"Moritz Hardt et al. 2016. Equality of opportunity in supervised learning. In NeurIPS (Barcelona Spain). Curran Associates Inc. Red Hook NY USA 3323--3331."},{"key":"e_1_3_2_1_22_1","volume-title":"Ethics guidelines for trustworthy AI. Report. European Commission","author":"High-Level Expert Group on AI. 2019.","unstructured":"High-Level Expert Group on AI. 2019. Ethics guidelines for trustworthy AI. Report. European Commission, Brussels. https:\/\/ec.europa.eu\/digital-single-market\/en\/news\/ethics-guidelines-trustworthy-ai"},{"key":"e_1_3_2_1_23_1","volume-title":"Guidance for Regulation of Artificial Intelligence Applications. Memorandum For The Heads Of Executive Departments And Agencies","author":"House White","year":"2020","unstructured":"White House. 2020. Guidance for Regulation of Artificial Intelligence Applications. Memorandum For The Heads Of Executive Departments And Agencies (2020). https:\/\/www.whitehouse.gov\/wp-content\/uploads\/2020\/11\/M-21-06.pdf"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","unstructured":"Chenyu Huang et al. 2022. zkMLaaS: a Verifiable Scheme for Machine Learning as a Service. In GLOBECOM. IEEE Los Alamitos CA USA 5475--5480. https:\/\/doi.org\/10.1109\/GLOBECOM48099.2022.10000784","DOI":"10.1109\/GLOBECOM48099.2022.10000784"},{"key":"e_1_3_2_1_25_1","volume-title":"Dataset Cards -- huggingface.co. https:\/\/huggingface.co\/docs\/hub\/en\/datasets-cards","year":"2024","unstructured":"HuggingFace. 2024a. Dataset Cards -- huggingface.co. https:\/\/huggingface.co\/docs\/hub\/en\/datasets-cards (2024). [Accessed 11-05--2024]."},{"key":"e_1_3_2_1_26_1","volume-title":"Model Cards -- huggingface.co. https:\/\/huggingface.co\/docs\/hub\/en\/model-cards","year":"2024","unstructured":"HuggingFace. 2024b. Model Cards -- huggingface.co. https:\/\/huggingface.co\/docs\/hub\/en\/model-cards (2024). [Accessed 11-04--2024]."},{"key":"e_1_3_2_1_27_1","unstructured":"Intel. 2014. Intel Software Guard Extensions Programming Reference. Documentation. Intel. https:\/\/www.intel.com\/content\/dam\/develop\/external\/us\/en\/documents\/329298-002--629101.pdf"},{"key":"e_1_3_2_1_28_1","unstructured":"Intel. 2019. Intel SGX Data Center Attestation Primitives (Intel SGX DCAP). Product Brief. Intel. https:\/\/www.intel.com\/content\/dam\/develop\/public\/us\/en\/documents\/intel-sgx-dcap-ecdsa-orientation.pdf"},{"key":"e_1_3_2_1_29_1","unstructured":"Intel. 2024. Accelerate AI Workloads with Intel Advanced Matrix Extensions (Intel AMX). Solution Brief. Intel."},{"key":"e_1_3_2_1_30_1","first-page":"22205","article-title":"Auditing differentially private machine learning: How private is private SGD","volume":"33","author":"Matthew Jagielski","year":"2020","unstructured":"Matthew Jagielski et al. 2020. Auditing differentially private machine learning: How private is private SGD? NeurIPS, Vol. 33 (2020), 22205--22216.","journal-title":"NeurIPS"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","unstructured":"Hengrui Jia et al. 2021. Proof-of-Learning: Definitions and Practice. In SP. IEEE Los Alamitos CA USA 1039--1056. https:\/\/doi.org\/10.1109\/SP40001.2021.00106","DOI":"10.1109\/SP40001.2021.00106"},{"key":"e_1_3_2_1_32_1","unstructured":"Jiayin Jin et al. 2022. Input-agnostic certified group fairness via gaussian parameter smoothing. In ICML. 10340--10361."},{"key":"e_1_3_2_1_33_1","unstructured":"Marc Juarez et al. 2022. Black-Box Audits for Group Distribution Shifts. arXiv preprint arXiv:2209.03620 (2022)."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/3491209"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","unstructured":"Emre Kazim et al. 2021. AI auditing and impact assessment: according to the UK information commissioner's office. AI and Ethics (Feb 2021). https:\/\/doi.org\/10.1007\/s43681-021-00039--2","DOI":"10.1007\/s43681-021-00039--2"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i7.25994"},{"key":"e_1_3_2_1_37_1","volume-title":"ICML","volume":"80","author":"Kilbertus Niki","year":"2018","unstructured":"Niki Kilbertus, Adria Gascon, Matt Kusner, Michael Veale, Krishna Gummadi, and Adrian Weller. 2018. Blind Justice: Fairness with Encrypted Sensitive Attributes. In ICML, Vol. 80. PMLR, 2630--2639. https:\/\/proceedings.mlr.press\/v80\/kilbertus18a.html"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","unstructured":"Ron Kohavi. 1996. Census Income. UCI Machine Learning Repository. DOI: https:\/\/doi.org\/10.24432\/C5GP7S.","DOI":"10.24432\/C5GP7S"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","unstructured":"Zhifeng Kong et al. 2022. Forgeability and Membership Inference Attacks. In AISec (Los Angeles CA USA). Association for Computing Machinery New York NY USA 25--31. https:\/\/doi.org\/10.1145\/3560830.3563731","DOI":"10.1145\/3560830.3563731"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","unstructured":"Kari Kostiainen et al. 2010. Key Attestation from Trusted Execution Environments. In TRUST. https:\/\/doi.org\/10.1007\/978--3--642--13869-0_3","DOI":"10.1007\/978--3--642--13869-0_3"},{"key":"e_1_3_2_1_41_1","unstructured":"Dmitrii Kuvaiskii et al. 2022. Computation offloading to hardware accelerators in Intel SGX and Gramine library OS. arXiv preprint arXiv:2203.01813 (2022)."},{"key":"e_1_3_2_1_42_1","volume-title":"35 GDPR Data protection impact assessment. General Data Protection Regulation (GDPR)","author":"Law European Union","year":"2018","unstructured":"European Union Law. 2018. Art. 35 GDPR Data protection impact assessment. General Data Protection Regulation (GDPR) (2018). https:\/\/gdpr-info.eu\/art-35-gdpr\/"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179303"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","unstructured":"Tianyi Liu et al. 2021. zkCNN: Zero Knowledge Proofs for Convolutional Neural Network Predictions and Accuracy. In CCS (Virtual Event Republic of Korea). Association for Computing Machinery New York NY USA 2968--2985. https:\/\/doi.org\/10.1145\/3460120.3485379","DOI":"10.1145\/3460120.3485379"},{"key":"e_1_3_2_1_45_1","unstructured":"Hidde Lycklama et al. 2024. Holding Secrets Accountable: Auditing Privacy-Preserving Machine Learning. In USENIX Sec. USENIX Association Baltimore MD 991textendash1008. https:\/\/www.usenix.org\/conference\/usenixsecurity24\/presentation\/lycklama"},{"key":"e_1_3_2_1_46_1","volume-title":"Maas et al","author":"Andrew","year":"2011","unstructured":"Andrew L. Maas et al. 2011. Learning Word Vectors for Sentiment Analysis. In ACL. Association for Computational Linguistics, Portland, Oregon, USA, 142--150. http:\/\/www.aclweb.org\/anthology\/P11--1015"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2021-0012"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","unstructured":"Margaret Mitchell et al. 2019. Model Cards for Model Reporting. In FaccT (Atlanta GA USA). Association for Computing Machinery New York NY USA 220--229. https:\/\/doi.org\/10.1145\/3287560.3287596","DOI":"10.1145\/3287560.3287596"},{"key":"e_1_3_2_1_49_1","unstructured":"Mithril-Security. 2023. PoisonGPT: How to poison LLM supply chain on Hugging Face -- blog.mithrilsecurity.io. https:\/\/blog.mithrilsecurity.io\/poisongpt-how-we-hid-a-lobotomized-llm-on-hugging-face-to-spread-fake-news\/. [Accessed 10-05--2024]."},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","unstructured":"Fan Mo et al. 2020. DarkneTZ: towards model privacy at the edge using trusted execution environments. In MobiSys (Toronto Ontario Canada). Association for Computing Machinery New York NY USA 161--174. https:\/\/doi.org\/10.1145\/3386901.3388946","DOI":"10.1145\/3386901.3388946"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","unstructured":"Fan Mo et al. 2021. PPFL: privacy-preserving federated learning with trusted execution environments. In MobiSys (Virtual Event Wisconsin). Association for Computing Machinery New York NY USA 94--108. https:\/\/doi.org\/10.1145\/3458864.3466628","DOI":"10.1145\/3458864.3466628"},{"key":"e_1_3_2_1_52_1","unstructured":"Fan Mo et al. 2022. SoK: machine learning with confidential computing. arXiv preprint arXiv:2208.10134 (2022)."},{"key":"e_1_3_2_1_53_1","unstructured":"Milad Nasr et al. 2023. Tight auditing of differentially private machine learning. In USENIX Sec. 1631--1648."},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i17.17746"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179483"},{"key":"e_1_3_2_1_56_1","unstructured":"Nvidia. 2024. NVIDIA H100 Tensor Core GPU. Datasheet. Nvidia."},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","unstructured":"Saerom Park et al. 2022. Fairness Audit of Machine Learning Models with Confidential Computing. In WWW (Virtual Event Lyon France). Association for Computing Machinery New York NY USA 3488--3499. https:\/\/doi.org\/10.1145\/3485447.3512244","DOI":"10.1145\/3485447.3512244"},{"key":"e_1_3_2_1_58_1","volume-title":"NeurIPS","volume":"32","author":"Adam","year":"2019","unstructured":"Adam Paszke et al. 2019. Pytorch: An imperative style, high-performance deep learning library. NeurIPS, Vol. 32 (2019)."},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1145\/3531146.3533231"},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00780"},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1145\/1065907.1066038"},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1186\/S42400-023-00144--1"},{"key":"e_1_3_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1145\/3461702.3462554"},{"key":"e_1_3_2_1_64_1","unstructured":"Ali Shahin Shamsabadi et al. 2023. Confidential-PROFITT: Confidential PROof of FaIr Training of Trees. In ICLR. https:\/\/openreview.net\/forum?id=iIfDQVyuFD"},{"key":"e_1_3_2_1_65_1","unstructured":"Ali Shahin Shamsabadi et al. 2024. Confidential-DPproof: Confidential Proof of Differentially Private Training. In ICLR. https:\/\/openreview.net\/forum?id=PQY2v6VtGe"},{"key":"e_1_3_2_1_66_1","volume-title":"Very deep convolutional networks for large-scale image recognition. arXiv preprint arXiv:1409.1556","author":"Simonyan Karen","year":"2014","unstructured":"Karen Simonyan. 2014. Very deep convolutional networks for large-scale image recognition. arXiv preprint arXiv:1409.1556 (2014)."},{"key":"e_1_3_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.1145\/3292500.3330885"},{"key":"e_1_3_2_1_68_1","volume-title":"The Thirty-eighth Annual Conference on Neural Information Processing Systems. https:\/\/openreview.net\/forum?id=bf0MdFlz1i","author":"Megha","unstructured":"Megha Srivastava et al. 2024. Optimistic Verifiable Training by Controlling Hardware Nondeterminism. In The Thirty-eighth Annual Conference on Neural Information Processing Systems. https:\/\/openreview.net\/forum?id=bf0MdFlz1i"},{"key":"e_1_3_2_1_69_1","volume-title":"NeurIPS","volume":"36","author":"Thomas","year":"2024","unstructured":"Thomas Steinke et al. 2024. Privacy auditing with one (1) training run. NeurIPS, Vol. 36 (2024)."},{"key":"e_1_3_2_1_70_1","unstructured":"Haochen Sun et al. 2024. zkLLM: Zero Knowledge Proofs for Large Language Models. arXiv preprint arXiv:2404.16109 (2024)."},{"key":"e_1_3_2_1_71_1","unstructured":"Haochen Sun and Hongyang Zhang. 2023. zkDL: Efficient Zero-Knowledge Proofs of Deep Learning Training. Cryptology ePrint Archive Paper 2023\/1174. https:\/\/eprint.iacr.org\/2023\/1174 https:\/\/eprint.iacr.org\/2023\/1174."},{"key":"e_1_3_2_1_72_1","unstructured":"Elham Tabassi et al. 2019. A Taxonomy and Terminology of Adversarial Machine Learning. NIST Interagency\/Internal Report. NIST. https:\/\/nvlpubs.nist.gov\/nistpubs\/ir\/2019\/NIST.IR.8269-draft.pdf"},{"key":"e_1_3_2_1_73_1","volume-title":"Slalom: Fast, Verifiable and Private Execution of Neural Networks in Trusted Hardware. In ICLR. https:\/\/openreview.net\/forum?id=rJVorjCcKQ","author":"Tramer Florian","year":"2019","unstructured":"Florian Tramer and Dan Boneh. 2019. Slalom: Fast, Verifiable and Private Execution of Neural Networks in Trusted Hardware. In ICLR. https:\/\/openreview.net\/forum?id=rJVorjCcKQ"},{"key":"e_1_3_2_1_74_1","volume-title":"Proceedings of the ACM on Programming Languages (OOPSLA)","volume":"4","author":"Caterina","year":"2020","unstructured":"Caterina Urban et al. 2020. Perfectly parallel fairness certification of neural networks. Proceedings of the ACM on Programming Languages (OOPSLA), Vol. 4, Article 185 (Nov 2020), 30 pages."},{"key":"e_1_3_2_1_75_1","doi-asserted-by":"publisher","unstructured":"Stephan Van Schaik et al. 2024. SoK: SGX.Fail: How Stuff Gets eXposed. In SP. IEEE Computer Society Los Alamitos CA USA 4143--4162. https:\/\/doi.org\/10.1109\/SP54263.2024.00260","DOI":"10.1109\/SP54263.2024.00260"},{"key":"e_1_3_2_1_76_1","first-page":"730","article-title":"Mystique: Efficient Conversions for Zero-Knowledge Proofs with Applications to Machine Learning","volume":"2021","author":"Chenkai Weng","year":"2021","unstructured":"Chenkai Weng et al. 2021. Mystique: Efficient Conversions for Zero-Knowledge Proofs with Applications to Machine Learning. IACR Cryptology ePrint Arch. , Vol. 2021 (2021), 730. https:\/\/api.semanticscholar.org\/CorpusID:235349056","journal-title":"IACR Cryptology ePrint Arch."},{"key":"e_1_3_2_1_77_1","unstructured":"Chhavi Yadav et al. 2024. FairProof: Confidential and Certifiable Fairness for Neural Networks. arXiv preprint arXiv:2402.12572 (2024)."},{"key":"e_1_3_2_1_78_1","doi-asserted-by":"publisher","DOI":"10.1109\/MM.2020.2985359"},{"key":"e_1_3_2_1_79_1","doi-asserted-by":"publisher","unstructured":"R. Zhang et al. 2022. ''Adversarial Examples'' for Proof-of-Learning. In SP. IEEE Computer Society Los Alamitos CA USA 1542--1542. https:\/\/doi.org\/10.1109\/SP46214.2022.00113","DOI":"10.1109\/SP46214.2022.00113"},{"key":"e_1_3_2_1_80_1","doi-asserted-by":"publisher","unstructured":"Xiaokuan Zhang et al. 2023. VeriTrain: Validating MLaaS Training Efforts via Anomaly Detection. IEEE TIFS (2023) 1--17. https:\/\/doi.org\/10.1109\/TDSC.2023.3266427","DOI":"10.1109\/TDSC.2023.3266427"},{"key":"e_1_3_2_1_81_1","doi-asserted-by":"crossref","unstructured":"Zhifei Zhang et al. 2017. Age Progression\/Regression by Conditional Adversarial Autoencoder. In CVPR. IEEE.","DOI":"10.1109\/CVPR.2017.463"},{"key":"e_1_3_2_1_82_1","doi-asserted-by":"publisher","unstructured":"Z. Zhang et al. 2024. No Privacy Left Outside: On the (In-)Security of TEE-Shielded DNN Partition for On-Device ML. In SP. IEEE Computer Society Los Alamitos CA USA 55--55. https:\/\/doi.org\/10.1109\/SP54263.2024.00052","DOI":"10.1109\/SP54263.2024.00052"},{"key":"e_1_3_2_1_83_1","unstructured":"Jianwei Zhu et al. 2024. Confidential Computing on NVIDIA Hopper GPUs: A Performance Benchmark Study. arXiv preprint arXiv:2409.03992 (2024)."}],"event":{"name":"CODASPY '25: Fifteenth ACM Conference on Data and Application Security and Privacy","location":"Pittsburgh PA USA","acronym":"CODASPY '25","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the Fifteenth ACM Conference on Data and Application Security and Privacy"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3714393.3726492","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3714393.3726492","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,2]],"date-time":"2026-06-02T16:23:59Z","timestamp":1780417439000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3714393.3726492"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,6,19]]},"references-count":83,"alternative-id":["10.1145\/3714393.3726492","10.1145\/3714393"],"URL":"https:\/\/doi.org\/10.1145\/3714393.3726492","relation":{},"subject":[],"published":{"date-parts":[[2024,6,19]]},"assertion":[{"value":"2025-06-04","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}