{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,7]],"date-time":"2026-10-07T17:07:01Z","timestamp":1791392821601,"version":"4.3.3"},"reference-count":84,"publisher":"Association for Computing Machinery (ACM)","issue":"10","content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["Proc. VLDB Endow."],"published-print":{"date-parts":[[2023,6]]},"abstract":"<jats:p>Combining Federated Learning (FL) with a Trusted Execution Environment (TEE) is a promising approach for realizing privacy-preserving FL, which has garnered significant academic attention in recent years. Implementing the TEE on the server side enables each round of FL to proceed without exposing the client's gradient information to untrusted servers. This addresses usability gaps in existing secure aggregation schemes as well as utility gaps in differentially private FL. However, to address the issue using a TEE, the vulnerabilities of server-side TEEs need to be considered---this has not been sufficiently investigated in the context of FL. The main technical contribution of this study is the analysis of the vulnerabilities of TEE in FL and the defense. First, we theoretically analyze the leakage of memory access patterns, revealing the risk of sparsified gradients, which are commonly used in FL to enhance communication efficiency and model accuracy. Second, we devise an inference attack to link memory access patterns to sensitive information in the training dataset. Finally, we propose an oblivious yet efficient aggregation algorithm to prevent memory access pattern leakage. Our experiments on real-world data demonstrate that the proposed method functions efficiently in practical scales.<\/jats:p>","DOI":"10.14778\/3603581.3603583","type":"journal-article","created":{"date-parts":[[2023,8,8]],"date-time":"2023-08-08T19:06:48Z","timestamp":1691521608000},"page":"2404-2417","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":18,"title":["Olive: Oblivious Federated Learning on Trusted Execution Environment against the Risk of Sparsification"],"prefix":"10.14778","volume":"16","author":[{"given":"Fumiyuki","family":"Kato","sequence":"first","affiliation":[{"name":"Kyoto University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yang","family":"Cao","sequence":"additional","affiliation":[{"name":"Hokkaido University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Masatoshi","family":"Yoshikawa","sequence":"additional","affiliation":[{"name":"Osaka Seikei University"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,8,8]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"crossref","first-page":"140699","DOI":"10.1109\/ACCESS.2020.3013541","article-title":"Federated learning: A survey on enabling technologies, protocols, and applications","volume":"8","author":"Aledhari Mohammed","year":"2020","unstructured":"Mohammed Aledhari , Rehma Razzak , Reza M Parizi , and Fahad Saeed . 2020 . Federated learning: A survey on enabling technologies, protocols, and applications . IEEE Access 8 (2020), 140699 -- 140725 . Mohammed Aledhari, Rehma Razzak, Reza M Parizi, and Fahad Saeed. 2020. Federated learning: A survey on enabling technologies, protocols, and applications. IEEE Access 8 (2020), 140699--140725.","journal-title":"IEEE Access"},{"key":"e_1_2_1_2_1","volume-title":"An algorithmic framework for differentially private data analysis on trusted processors. Advances in Neural Information Processing Systems 32","author":"Allen Joshua","year":"2019","unstructured":"Joshua Allen , Bolin Ding , Janardhan Kulkarni , Harsha Nori , Olga Ohrimenko , and Sergey Yekhanin . 2019. An algorithmic framework for differentially private data analysis on trusted processors. Advances in Neural Information Processing Systems 32 ( 2019 ). Joshua Allen, Bolin Ding, Janardhan Kulkarni, Harsha Nori, Olga Ohrimenko, and Sergey Yekhanin. 2019. An algorithmic framework for differentially private data analysis on trusted processors. Advances in Neural Information Processing Systems 32 (2019)."},{"key":"e_1_2_1_3_1","volume-title":"Differentially Private Learning with Adaptive Clipping. Advances in Neural Information Processing Systems (NeurIPS 2021)","author":"Andrew Galen","year":"2021","unstructured":"Galen Andrew , Om Thakkar , H Brendan McMahan , and Swaroop Ramaswamy . 2021. Differentially Private Learning with Adaptive Clipping. Advances in Neural Information Processing Systems (NeurIPS 2021) ( 2021 ). Galen Andrew, Om Thakkar, H Brendan McMahan, and Swaroop Ramaswamy. 2021. Differentially Private Learning with Adaptive Clipping. Advances in Neural Information Processing Systems (NeurIPS 2021) (2021)."},{"key":"e_1_2_1_4_1","first-page":"1333","article-title":"Privacy-preserving deep learning via additively homomorphic encryption","volume":"13","author":"Aono Yoshinori","year":"2017","unstructured":"Yoshinori Aono , Takuya Hayashi , Lihua Wang , Shiho Moriai , 2017 . Privacy-preserving deep learning via additively homomorphic encryption . IEEE Transactions on Information Forensics and Security 13 , 5 (2017), 1333 -- 1345 . Yoshinori Aono, Takuya Hayashi, Lihua Wang, Shiho Moriai, et al. 2017. Privacy-preserving deep learning via additively homomorphic encryption. IEEE Transactions on Information Forensics and Security 13, 5 (2017), 1333--1345.","journal-title":"IEEE Transactions on Information Forensics and Security"},{"key":"e_1_2_1_5_1","volume-title":"Proceedings of the Twenty Third International Conference on Artificial Intelligence and Statistics (Proceedings of Machine Learning Research), Silvia Chiappa and Roberto Calandra (Eds.)","volume":"108","author":"Bagdasaryan Eugene","year":"2020","unstructured":"Eugene Bagdasaryan , Andreas Veit , Yiqing Hua , Deborah Estrin , and Vitaly Shmatikov . 2020 . How To Backdoor Federated Learning . In Proceedings of the Twenty Third International Conference on Artificial Intelligence and Statistics (Proceedings of Machine Learning Research), Silvia Chiappa and Roberto Calandra (Eds.) , Vol. 108 . PMLR, 2938--2948. https:\/\/proceedings.mlr.press\/v108\/bagdasaryan20a.html Eugene Bagdasaryan, Andreas Veit, Yiqing Hua, Deborah Estrin, and Vitaly Shmatikov. 2020. How To Backdoor Federated Learning. In Proceedings of the Twenty Third International Conference on Artificial Intelligence and Statistics (Proceedings of Machine Learning Research), Silvia Chiappa and Roberto Calandra (Eds.), Vol. 108. PMLR, 2938--2948. https:\/\/proceedings.mlr.press\/v108\/bagdasaryan20a.html"},{"key":"e_1_2_1_6_1","volume-title":"Proceedings of the April 30--May 2, 1968, spring joint computer conference. 307--314","author":"Batcher Kenneth E","year":"1968","unstructured":"Kenneth E Batcher . 1968 . Sorting networks and their applications . In Proceedings of the April 30--May 2, 1968, spring joint computer conference. 307--314 . Kenneth E Batcher. 1968. Sorting networks and their applications. In Proceedings of the April 30--May 2, 1968, spring joint computer conference. 307--314."},{"key":"e_1_2_1_7_1","volume-title":"Protection against reconstruction and its applications in private federated learning. arXiv preprint arXiv:1812.00984","author":"Bhowmick Abhishek","year":"2018","unstructured":"Abhishek Bhowmick , John Duchi , Julien Freudiger , Gaurav Kapoor , and Ryan Rogers . 2018. Protection against reconstruction and its applications in private federated learning. arXiv preprint arXiv:1812.00984 ( 2018 ). Abhishek Bhowmick, John Duchi, Julien Freudiger, Gaurav Kapoor, and Ryan Rogers. 2018. Protection against reconstruction and its applications in private federated learning. arXiv preprint arXiv:1812.00984 (2018)."},{"key":"e_1_2_1_8_1","volume-title":"Federated Learning: Collaborative Machine Learning without Centralized Training Data. https:\/\/ai.googleblog.com\/2017\/04\/federated-learning-collaborative.html","author":"Blog Google AI","year":"2017","unstructured":"Google AI Blog . 2017 . Federated Learning: Collaborative Machine Learning without Centralized Training Data. https:\/\/ai.googleblog.com\/2017\/04\/federated-learning-collaborative.html Google AI Blog. 2017. Federated Learning: Collaborative Machine Learning without Centralized Training Data. https:\/\/ai.googleblog.com\/2017\/04\/federated-learning-collaborative.html"},{"key":"e_1_2_1_9_1","volume-title":"Ilia Shumailov, and Nicolas Papernot.","author":"Boenisch Franziska","year":"2021","unstructured":"Franziska Boenisch , Adam Dziedzic , Roei Schuster , Ali Shahin Shamsabadi , Ilia Shumailov, and Nicolas Papernot. 2021 . When the curious abandon honesty: Federated learning is not private. arXiv preprint arXiv:2112.02918 (2021). Franziska Boenisch, Adam Dziedzic, Roei Schuster, Ali Shahin Shamsabadi, Ilia Shumailov, and Nicolas Papernot. 2021. When the curious abandon honesty: Federated learning is not private. arXiv preprint arXiv:2112.02918 (2021)."},{"key":"e_1_2_1_10_1","volume-title":"Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security","author":"Bonawitz Keith","year":"2017","unstructured":"Keith Bonawitz , Vladimir Ivanov , Ben Kreuter , Antonio Marcedone , H. Brendan McMahan , Sarvar Patel , Daniel Ramage , Aaron Segal , and Karn Seth . 2017 . Practical Secure Aggregation for Privacy-Preserving Machine Learning . In Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security ( Dallas, Texas, USA) (CCS '17). Association for Computing Machinery, New York, NY, USA, 1175--1191. 10.1145\/3133956.3133982 Keith Bonawitz, Vladimir Ivanov, Ben Kreuter, Antonio Marcedone, H. Brendan McMahan, Sarvar Patel, Daniel Ramage, Aaron Segal, and Karn Seth. 2017. Practical Secure Aggregation for Privacy-Preserving Machine Learning. In Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security (Dallas, Texas, USA) (CCS '17). Association for Computing Machinery, New York, NY, USA, 1175--1191. 10.1145\/3133956.3133982"},{"key":"e_1_2_1_11_1","volume-title":"Verifiable Federated Learning. In Workshop on Federated Learning: Recent Advances and New Challenges (in Conjunction with NeurIPS","author":"Bottoni Simone","year":"2022","unstructured":"Simone Bottoni , Giulio Zizzo , Stefano Braghin , and Alberto Trombetta . 2022 . Verifiable Federated Learning. In Workshop on Federated Learning: Recent Advances and New Challenges (in Conjunction with NeurIPS 2022). https:\/\/openreview.net\/forum?id=0HIa3HIyIHN Simone Bottoni, Giulio Zizzo, Stefano Braghin, and Alberto Trombetta. 2022. Verifiable Federated Learning. In Workshop on Federated Learning: Recent Advances and New Challenges (in Conjunction with NeurIPS 2022). https:\/\/openreview.net\/forum?id=0HIa3HIyIHN"},{"key":"e_1_2_1_12_1","volume-title":"11th USENIX Workshop on Offensive Technologies.","author":"Brasser Ferdinand","year":"2017","unstructured":"Ferdinand Brasser , Urs M\u00fcller , Alexandra Dmitrienko , Kari Kostiainen , Srdjan Capkun , and Ahmad-Reza Sadeghi . 2017 . Software grand exposure:SGX cache attacks are practical . In 11th USENIX Workshop on Offensive Technologies. Ferdinand Brasser, Urs M\u00fcller, Alexandra Dmitrienko, Kari Kostiainen, Srdjan Capkun, and Ahmad-Reza Sadeghi. 2017. Software grand exposure:SGX cache attacks are practical. In 11th USENIX Workshop on Offensive Technologies."},{"key":"e_1_2_1_13_1","volume-title":"The Privacy-preserving Padding Problem: Non-negative Mechanisms for Conservative Answers with Differential Privacy. arXiv preprint arXiv:2110.08177","author":"Case Benjamin M","year":"2021","unstructured":"Benjamin M Case , James Honaker , and Mahnush Movahedi . 2021. The Privacy-preserving Padding Problem: Non-negative Mechanisms for Conservative Answers with Differential Privacy. arXiv preprint arXiv:2110.08177 ( 2021 ). Benjamin M Case, James Honaker, and Mahnush Movahedi. 2021. The Privacy-preserving Padding Problem: Non-negative Mechanisms for Conservative Answers with Differential Privacy. arXiv preprint arXiv:2110.08177 (2021)."},{"key":"e_1_2_1_14_1","volume-title":"Proceedings of the Thirtieth Annual ACM-SIAM Symposium on Discrete Algorithms. SIAM, 2448--2467","author":"Hubert Chan TH","year":"2019","unstructured":"TH Hubert Chan , Kai-Min Chung , Bruce M Maggs , and Elaine Shi . 2019 . Foundations of differentially oblivious algorithms . In Proceedings of the Thirtieth Annual ACM-SIAM Symposium on Discrete Algorithms. SIAM, 2448--2467 . TH Hubert Chan, Kai-Min Chung, Bruce M Maggs, and Elaine Shi. 2019. Foundations of differentially oblivious algorithms. In Proceedings of the Thirtieth Annual ACM-SIAM Symposium on Discrete Algorithms. SIAM, 2448--2467."},{"key":"e_1_2_1_15_1","volume-title":"2019 IEEE European Symposium on Security and Privacy (EuroS&P). IEEE, 142--157","author":"Chen Guoxing","year":"2019","unstructured":"Guoxing Chen , Sanchuan Chen , Yuan Xiao , Yinqian Zhang , Zhiqiang Lin , and Ten H Lai . 2019 . Sgxpectre: Stealing intel secrets from sgx enclaves via speculative execution . In 2019 IEEE European Symposium on Security and Privacy (EuroS&P). IEEE, 142--157 . Guoxing Chen, Sanchuan Chen, Yuan Xiao, Yinqian Zhang, Zhiqiang Lin, and Ten H Lai. 2019. Sgxpectre: Stealing intel secrets from sgx enclaves via speculative execution. In 2019 IEEE European Symposium on Security and Privacy (EuroS&P). IEEE, 142--157."},{"key":"e_1_2_1_16_1","volume-title":"Proceedings of the First Workshop on Systems Challenges in Reliable and Secure Federated Learning","author":"Cheng Pau-Chen","year":"2021","unstructured":"Pau-Chen Cheng , Kevin Eykholt , Zhongshu Gu , Hani Jamjoom , K. R. Jayaram , Enriquillo Valdez , and Ashish Verma . 2021 . Separation of Powers in Federated Learning (Poster Paper) . In Proceedings of the First Workshop on Systems Challenges in Reliable and Secure Federated Learning ( Virtual Event, Germany) (ResilientFL '21). Association for Computing Machinery, New York, NY, USA, 16--18. 10.1145\/3477114.3488765 Pau-Chen Cheng, Kevin Eykholt, Zhongshu Gu, Hani Jamjoom, K. R. Jayaram, Enriquillo Valdez, and Ashish Verma. 2021. Separation of Powers in Federated Learning (Poster Paper). In Proceedings of the First Workshop on Systems Challenges in Reliable and Secure Federated Learning (Virtual Event, Germany) (ResilientFL '21). Association for Computing Machinery, New York, NY, USA, 16--18. 10.1145\/3477114.3488765"},{"key":"e_1_2_1_17_1","volume-title":"Differentially Oblivious Database Joins: Overcoming the Worst-Case Curse of Fully Oblivious Algorithms. Cryptology ePrint Archive","author":"Chu Shumo","year":"2021","unstructured":"Shumo Chu , Danyang Zhuo , Elaine Shi , and TH Hubert Chan . 2021. Differentially Oblivious Database Joins: Overcoming the Worst-Case Curse of Fully Oblivious Algorithms. Cryptology ePrint Archive ( 2021 ). Shumo Chu, Danyang Zhuo, Elaine Shi, and TH Hubert Chan. 2021. Differentially Oblivious Database Joins: Overcoming the Worst-Case Curse of Fully Oblivious Algorithms. Cryptology ePrint Archive (2021)."},{"key":"e_1_2_1_18_1","first-page":"1","article-title":"Intel sgx explained","volume":"2016","author":"Costan Victor","year":"2016","unstructured":"Victor Costan and Srinivas Devadas . 2016 . Intel sgx explained . IACR Cryptol. ePrint Arch. 2016 , 86 (2016), 1 -- 118 . Victor Costan and Srinivas Devadas. 2016. Intel sgx explained. IACR Cryptol. ePrint Arch. 2016, 86 (2016), 1--118.","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"e_1_2_1_19_1","volume-title":"Hasin Us Sami, and Basak Guler","author":"Ergun Irem","year":"2021","unstructured":"Irem Ergun , Hasin Us Sami, and Basak Guler . 2021 . Sparsified secure aggregation for privacy-preserving federated learning. arXiv preprint arXiv:2112.12872 (2021). Irem Ergun, Hasin Us Sami, and Basak Guler. 2021. Sparsified secure aggregation for privacy-preserving federated learning. arXiv preprint arXiv:2112.12872 (2021)."},{"key":"e_1_2_1_20_1","volume-title":"shuffle, analyze privacy revisited: Formalizations and empirical evaluation. arXiv preprint arXiv:2001.03618","author":"Erlingsson \u00dalfar","year":"2020","unstructured":"\u00dalfar Erlingsson , Vitaly Feldman , Ilya Mironov , Ananth Raghunathan , Shuang Song , Kunal Talwar , and Abhradeep Thakurta . 2020. Encode , shuffle, analyze privacy revisited: Formalizations and empirical evaluation. arXiv preprint arXiv:2001.03618 ( 2020 ). \u00dalfar Erlingsson, Vitaly Feldman, Ilya Mironov, Ananth Raghunathan, Shuang Song, Kunal Talwar, and Abhradeep Thakurta. 2020. Encode, shuffle, analyze privacy revisited: Formalizations and empirical evaluation. arXiv preprint arXiv:2001.03618 (2020)."},{"key":"e_1_2_1_21_1","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Fu Chong","year":"2022","unstructured":"Chong Fu , Xuhong Zhang , Shouling Ji , Jinyin Chen , Jingzheng Wu , Shanqing Guo , Jun Zhou , Alex X Liu , and Ting Wang . 2022 . Label inference attacks against vertical federated learning . In 31st USENIX Security Symposium (USENIX Security 22) . 1397--1414. Chong Fu, Xuhong Zhang, Shouling Ji, Jinyin Chen, Jingzheng Wu, Shanqing Guo, Jun Zhou, Alex X Liu, and Ting Wang. 2022. Label inference attacks against vertical federated learning. In 31st USENIX Security Symposium (USENIX Security 22). 1397--1414."},{"key":"e_1_2_1_22_1","volume-title":"NIPS 2017 Workshop: Machine Learning on the Phone and other Consumer Devices","author":"Geyer Robin C","year":"2017","unstructured":"Robin C Geyer , Tassilo Klein , and Moin Nabi . 2017 . Differentially private federated learning: A client level perspective . NIPS 2017 Workshop: Machine Learning on the Phone and other Consumer Devices (2017). Robin C Geyer, Tassilo Klein, and Moin Nabi. 2017. Differentially private federated learning: A client level perspective. NIPS 2017 Workshop: Machine Learning on the Phone and other Consumer Devices (2017)."},{"key":"e_1_2_1_23_1","volume-title":"Shuffled Model of Differential Privacy in Federated Learning. In International Conference on Artificial Intelligence and Statistics. PMLR, 2521--2529","author":"Girgis Antonious","year":"2021","unstructured":"Antonious Girgis , Deepesh Data , Suhas Diggavi , Peter Kairouz , and Ananda Theertha Suresh . 2021 . Shuffled Model of Differential Privacy in Federated Learning. In International Conference on Artificial Intelligence and Statistics. PMLR, 2521--2529 . Antonious Girgis, Deepesh Data, Suhas Diggavi, Peter Kairouz, and Ananda Theertha Suresh. 2021. Shuffled Model of Differential Privacy in Federated Learning. In International Conference on Artificial Intelligence and Statistics. PMLR, 2521--2529."},{"key":"e_1_2_1_24_1","doi-asserted-by":"crossref","first-page":"703","DOI":"10.2501\/IJMR-2017-050","article-title":"The EU General Data Protection Regulation (GDPR): European regulation that has a global impact","volume":"59","author":"Goddard Michelle","year":"2017","unstructured":"Michelle Goddard . 2017 . The EU General Data Protection Regulation (GDPR): European regulation that has a global impact . International Journal of Market Research 59 , 6 (2017), 703 -- 705 . Michelle Goddard. 2017. The EU General Data Protection Regulation (GDPR): European regulation that has a global impact. International Journal of Market Research 59, 6 (2017), 703--705.","journal-title":"International Journal of Market Research"},{"key":"e_1_2_1_25_1","volume-title":"Proceedings of the nineteenth annual ACM symposium on Theory of computing. 182--194","author":"Goldreich Oded","year":"1987","unstructured":"Oded Goldreich . 1987 . Towards a theory of software protection and simulation by oblivious RAMs . In Proceedings of the nineteenth annual ACM symposium on Theory of computing. 182--194 . Oded Goldreich. 1987. Towards a theory of software protection and simulation by oblivious RAMs. In Proceedings of the nineteenth annual ACM symposium on Theory of computing. 182--194."},{"key":"e_1_2_1_26_1","volume-title":"ICC 2019-2019 IEEE International Conference on Communications (ICC). IEEE, 1--6.","author":"Hao Meng","year":"2019","unstructured":"Meng Hao , Hongwei Li , Guowen Xu , Sen Liu , and Haomiao Yang . 2019 . Towards efficient and privacy-preserving federated deep learning . In ICC 2019-2019 IEEE International Conference on Communications (ICC). IEEE, 1--6. Meng Hao, Hongwei Li, Guowen Xu, Sen Liu, and Haomiao Yang. 2019. Towards efficient and privacy-preserving federated deep learning. In ICC 2019-2019 IEEE International Conference on Communications (ICC). IEEE, 1--6."},{"key":"e_1_2_1_27_1","volume-title":"Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security. 603--618","author":"Hitaj Briland","year":"2017","unstructured":"Briland Hitaj , Giuseppe Ateniese , and Fernando Perez-Cruz . 2017 . Deep models under the GAN: information leakage from collaborative deep learning . In Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security. 603--618 . Briland Hitaj, Giuseppe Ateniese, and Fernando Perez-Cruz. 2017. Deep models under the GAN: information leakage from collaborative deep learning. In Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security. 603--618."},{"key":"e_1_2_1_28_1","volume-title":"Federated learning with sparsified model perturbation: Improving accuracy under client-level differential privacy. arXiv preprint arXiv:2202.07178","author":"Hu Rui","year":"2022","unstructured":"Rui Hu , Yanmin Gong , and Yuanxiong Guo . 2022. Federated learning with sparsified model perturbation: Improving accuracy under client-level differential privacy. arXiv preprint arXiv:2202.07178 ( 2022 ). Rui Hu, Yanmin Gong, and Yuanxiong Guo. 2022. Federated learning with sparsified model perturbation: Improving accuracy under client-level differential privacy. arXiv preprint arXiv:2202.07178 (2022)."},{"key":"e_1_2_1_29_1","volume-title":"Chiron: Privacy-preserving machine learning as a service. arXiv preprint arXiv:1803.05961","author":"Hunt Tyler","year":"2018","unstructured":"Tyler Hunt , Congzheng Song , Reza Shokri , Vitaly Shmatikov , and Emmett Witchel . 2018 . Chiron: Privacy-preserving machine learning as a service. arXiv preprint arXiv:1803.05961 (2018). Tyler Hunt, Congzheng Song, Reza Shokri, Vitaly Shmatikov, and Emmett Witchel. 2018. Chiron: Privacy-preserving machine learning as a service. arXiv preprint arXiv:1803.05961 (2018)."},{"key":"e_1_2_1_30_1","volume-title":"Proceedings of the 2nd Workshop on System Software for Trusted Execution. 1--6.","author":"Jang Yeongjin","year":"2017","unstructured":"Yeongjin Jang , Jaehyuk Lee , Sangho Lee , and Taesoo Kim . 2017 . SGX-Bomb: Locking down the processor via Rowhammer attack . In Proceedings of the 2nd Workshop on System Software for Trusted Execution. 1--6. Yeongjin Jang, Jaehyuk Lee, Sangho Lee, and Taesoo Kim. 2017. SGX-Bomb: Locking down the processor via Rowhammer attack. In Proceedings of the 2nd Workshop on System Software for Trusted Execution. 1--6."},{"key":"e_1_2_1_31_1","volume-title":"Evaluating Differentially Private Machine Learning in Practice. In 28th USENIX Security Symposium (USENIX Security 19)","author":"Jayaraman Bargav","year":"2019","unstructured":"Bargav Jayaraman and David Evans . 2019 . Evaluating Differentially Private Machine Learning in Practice. In 28th USENIX Security Symposium (USENIX Security 19) . USENIX Association, Santa Clara, CA , 1895--1912. https:\/\/www.usenix.org\/conference\/usenixsecurity19\/presentation\/jayaraman Bargav Jayaraman and David Evans. 2019. Evaluating Differentially Private Machine Learning in Practice. In 28th USENIX Security Symposium (USENIX Security 19). USENIX Association, Santa Clara, CA, 1895--1912. https:\/\/www.usenix.org\/conference\/usenixsecurity19\/presentation\/jayaraman"},{"key":"e_1_2_1_32_1","volume-title":"Proceedings of the 38th International Conference on Machine Learning, ICML 2021, 18--24","volume":"139","author":"Kairouz Peter","year":"2021","unstructured":"Peter Kairouz , Ziyu Liu , and Thomas Steinke . 2021 . The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregation . In Proceedings of the 38th International Conference on Machine Learning, ICML 2021, 18--24 July 2021, Virtual Event (Proceedings of Machine Learning Research), Marina Meila and Tong Zhang (Eds.) , Vol. 139 . PMLR, 5201--5212. http:\/\/proceedings.mlr.press\/v139\/kairouz21a.html Peter Kairouz, Ziyu Liu, and Thomas Steinke. 2021. The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregation. In Proceedings of the 38th International Conference on Machine Learning, ICML 2021, 18--24 July 2021, Virtual Event (Proceedings of Machine Learning Research), Marina Meila and Tong Zhang (Eds.), Vol. 139. PMLR, 5201--5212. http:\/\/proceedings.mlr.press\/v139\/kairouz21a.html"},{"key":"e_1_2_1_33_1","first-page":"1","article-title":"PCT-TEE: Trajectory-based Private Contact Tracing System with Trusted Execution Environment","volume":"8","author":"Kato Fumiyuki","year":"2021","unstructured":"Fumiyuki Kato , Yang Cao , and Mastoshi Yoshikawa . 2021 . PCT-TEE: Trajectory-based Private Contact Tracing System with Trusted Execution Environment . ACM Transactions on Spatial Algorithms and Systems (TSAS) 8 , 2 (2021), 1 -- 35 . Fumiyuki Kato, Yang Cao, and Mastoshi Yoshikawa. 2021. PCT-TEE: Trajectory-based Private Contact Tracing System with Trusted Execution Environment. ACM Transactions on Spatial Algorithms and Systems (TSAS) 8, 2 (2021), 1--35.","journal-title":"ACM Transactions on Spatial Algorithms and Systems (TSAS)"},{"key":"e_1_2_1_34_1","volume-title":"Olive: Oblivious Federated Learning on Trusted Execution Environment against the risk of sparsification. arXiv preprint arXiv:2202.07165","author":"Kato Fumiyuki","year":"2023","unstructured":"Fumiyuki Kato , Yang Cao , and Masatoshi Yoshikawa . 2023 . Olive: Oblivious Federated Learning on Trusted Execution Environment against the risk of sparsification. arXiv preprint arXiv:2202.07165 (2023). Fumiyuki Kato, Yang Cao, and Masatoshi Yoshikawa. 2023. Olive: Oblivious Federated Learning on Trusted Execution Environment against the risk of sparsification. arXiv preprint arXiv:2202.07165 (2023)."},{"key":"e_1_2_1_35_1","volume-title":"Ananda Theertha Suresh, and Dave Bacon","author":"Kone\u010dn\u1ef3 Jakub","year":"2016","unstructured":"Jakub Kone\u010dn\u1ef3 , H Brendan McMahan , Felix X Yu , Peter Richt\u00e1rik , Ananda Theertha Suresh, and Dave Bacon . 2016 . Federated learning: Strategies for improving communication efficiency. arXiv preprint arXiv:1610.05492 (2016). Jakub Kone\u010dn\u1ef3, H Brendan McMahan, Felix X Yu, Peter Richt\u00e1rik, Ananda Theertha Suresh, and Dave Bacon. 2016. Federated learning: Strategies for improving communication efficiency. arXiv preprint arXiv:1610.05492 (2016)."},{"key":"e_1_2_1_36_1","volume-title":"USENIX Security Symposium","volume":"19","author":"Lee Sangho","year":"2017","unstructured":"Sangho Lee , Ming-Wei Shih , Prasun Gera , Taesoo Kim , Hyesoon Kim , and Marcus Peinado . 2017 . Inferring Fine-grained Control Flow Inside SGX Enclaves with Branch Shadowing .. In USENIX Security Symposium , Vol. 19 . 16--18. Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim, Hyesoon Kim, and Marcus Peinado. 2017. Inferring Fine-grained Control Flow Inside SGX Enclaves with Branch Shadowing.. In USENIX Security Symposium, Vol. 19. 16--18."},{"key":"e_1_2_1_37_1","volume-title":"The International Conference on Learning Representations.","author":"Lin Yujun","year":"2018","unstructured":"Yujun Lin , Song Han , Huizi Mao , Yu Wang , and William J Dally . 2018 . Deep Gradient Compression: Reducing the communication bandwidth for distributed training . In The International Conference on Learning Representations. Yujun Lin, Song Han, Huizi Mao, Yu Wang, and William J Dally. 2018. Deep Gradient Compression: Reducing the communication bandwidth for distributed training. In The International Conference on Learning Representations."},{"key":"e_1_2_1_38_1","volume-title":"Flame: Differentially private federated learning in the shuffle model. In AAAI.","author":"Liu Ruixuan","year":"2021","unstructured":"Ruixuan Liu , Yang Cao , Hong Chen , Ruoyang Guo , and Masatoshi Yoshikawa . 2021 . Flame: Differentially private federated learning in the shuffle model. In AAAI. Ruixuan Liu, Yang Cao, Hong Chen, Ruoyang Guo, and Masatoshi Yoshikawa. 2021. Flame: Differentially private federated learning in the shuffle model. In AAAI."},{"key":"e_1_2_1_39_1","volume-title":"International Conference on Database Systems for Advanced Applications. Springer, 485--501","author":"Liu Ruixuan","year":"2020","unstructured":"Ruixuan Liu , Yang Cao , Masatoshi Yoshikawa , and Hong Chen . 2020 . Fedsel: Federated sgd under local differential privacy with top-k dimension selection . In International Conference on Database Systems for Advanced Applications. Springer, 485--501 . Ruixuan Liu, Yang Cao, Masatoshi Yoshikawa, and Hong Chen. 2020. Fedsel: Federated sgd under local differential privacy with top-k dimension selection. In International Conference on Database Systems for Advanced Applications. Springer, 485--501."},{"key":"e_1_2_1_40_1","doi-asserted-by":"crossref","first-page":"102993","DOI":"10.1016\/j.cose.2022.102993","article-title":"Top-k sparsification with secure aggregation for privacy-preserving federated learning","volume":"124","author":"Lu Shiwei","year":"2023","unstructured":"Shiwei Lu , Ruihu Li , Wenbin Liu , Chaofeng Guan , and Xiaopeng Yang . 2023 . Top-k sparsification with secure aggregation for privacy-preserving federated learning . Computers & Security 124 (2023), 102993 . Shiwei Lu, Ruihu Li, Wenbin Liu, Chaofeng Guan, and Xiaopeng Yang. 2023. Top-k sparsification with secure aggregation for privacy-preserving federated learning. Computers & Security 124 (2023), 102993.","journal-title":"Computers & Security"},{"key":"e_1_2_1_41_1","doi-asserted-by":"crossref","first-page":"659","DOI":"10.14778\/3494124.3494146","article-title":"What is the price for joining securely? benchmarking equi-joins in trusted execution environments","volume":"15","author":"Maliszewski Kajetan","year":"2021","unstructured":"Kajetan Maliszewski , Jorge-Arnulfo Quian\u00e9-Ruiz , Jonas Traub , and Volker Markl . 2021 . What is the price for joining securely? benchmarking equi-joins in trusted execution environments . Proceedings of the VLDB Endowment 15 , 3 (2021), 659 -- 672 . Kajetan Maliszewski, Jorge-Arnulfo Quian\u00e9-Ruiz, Jonas Traub, and Volker Markl. 2021. What is the price for joining securely? benchmarking equi-joins in trusted execution environments. Proceedings of the VLDB Endowment 15, 3 (2021), 659--672.","journal-title":"Proceedings of the VLDB Endowment"},{"key":"e_1_2_1_42_1","volume-title":"Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security","author":"Mazloom Sahar","unstructured":"Sahar Mazloom and S. Dov Gordon . 2018. Secure Computation with Differentially Private Access Patterns . In Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security ( Toronto, Canada) (CCS '18). Association for Computing Machinery, New York, NY, USA, 490--507. 10.1145\/3243734.3243851 Sahar Mazloom and S. Dov Gordon. 2018. Secure Computation with Differentially Private Access Patterns. In Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security (Toronto, Canada) (CCS '18). Association for Computing Machinery, New York, NY, USA, 490--507. 10.1145\/3243734.3243851"},{"key":"e_1_2_1_43_1","volume-title":"Federated learning of deep networks using model averaging. arXiv preprint arXiv:1602.05629","author":"McMahan H Brendan","year":"2016","unstructured":"H Brendan McMahan , Eider Moore , Daniel Ramage , and Blaise Ag\u00fcera y Arcas . 2016. Federated learning of deep networks using model averaging. arXiv preprint arXiv:1602.05629 ( 2016 ). H Brendan McMahan, Eider Moore, Daniel Ramage, and Blaise Ag\u00fcera y Arcas. 2016. Federated learning of deep networks using model averaging. arXiv preprint arXiv:1602.05629 (2016)."},{"key":"e_1_2_1_44_1","volume-title":"6th International Conference on Learning Representations, ICLR","author":"McMahan H. Brendan","year":"2018","unstructured":"H. Brendan McMahan , Daniel Ramage , Kunal Talwar , and Li Zhang . 2018. Learning Differentially Private Recurrent Language Models . In 6th International Conference on Learning Representations, ICLR 2018 , Vancouver, BC , Canada, April 30 - May 3, 2018, Conference Track Proceedings. OpenReview .net. https:\/\/openreview.net\/forum?id=BJ0hF1Z0b H. Brendan McMahan, Daniel Ramage, Kunal Talwar, and Li Zhang. 2018. Learning Differentially Private Recurrent Language Models. In 6th International Conference on Learning Representations, ICLR 2018, Vancouver, BC, Canada, April 30 - May 3, 2018, Conference Track Proceedings. OpenReview.net. https:\/\/openreview.net\/forum?id=BJ0hF1Z0b"},{"key":"e_1_2_1_45_1","volume-title":"Proceedings of the 19th Annual International Conference on Mobile Systems, Applications, and Services","author":"Mo Fan","year":"2021","unstructured":"Fan Mo , Hamed Haddadi , Kleomenis Katevas , Eduard Marin , Diego Perino , and Nicolas Kourtellis . 2021 . PPFL: Privacy-Preserving Federated Learning with Trusted Execution Environments . In Proceedings of the 19th Annual International Conference on Mobile Systems, Applications, and Services ( Virtual Event, Wisconsin) (MobiSys '21). Association for Computing Machinery, New York, NY, USA, 94--108. 10.1145\/3458864.3466628 Fan Mo, Hamed Haddadi, Kleomenis Katevas, Eduard Marin, Diego Perino, and Nicolas Kourtellis. 2021. PPFL: Privacy-Preserving Federated Learning with Trusted Execution Environments. In Proceedings of the 19th Annual International Conference on Mobile Systems, Applications, and Services (Virtual Event, Wisconsin) (MobiSys '21). Association for Computing Machinery, New York, NY, USA, 94--108. 10.1145\/3458864.3466628"},{"key":"e_1_2_1_46_1","volume-title":"Proceedings of Privacy Enhancing Technologies Symposium","volume":"1","author":"Mohamad Mansouri","year":"2023","unstructured":"Mansouri Mohamad , Malek Onen , Wafa Ben Jaballah , and Mauro Contu . 2023 . SoK: Secure Aggregation based on cryptographic schemes for Federated Learning . In Proceedings of Privacy Enhancing Technologies Symposium , Vol. 1 . Mansouri Mohamad, Malek Onen, Wafa Ben Jaballah, and Mauro Contu. 2023. SoK: Secure Aggregation based on cryptographic schemes for Federated Learning. In Proceedings of Privacy Enhancing Technologies Symposium, Vol. 1."},{"key":"e_1_2_1_47_1","volume-title":"Poster: FLATEE: Federated Learning Across Trusted Execution Environments. In 2021 IEEE European Symposium on Security and Privacy (EuroS&P). IEEE Computer Society","author":"Mondal A.","year":"1992","unstructured":"A. Mondal , Y. More , R. Rooparaghunath , and D. Gupta . 2021 . Poster: FLATEE: Federated Learning Across Trusted Execution Environments. In 2021 IEEE European Symposium on Security and Privacy (EuroS&P). IEEE Computer Society , Los Alamitos, CA, USA, 707--709. 10.1109\/EuroSP5 1992 .2021.00054 A. Mondal, Y. More, R. Rooparaghunath, and D. Gupta. 2021. Poster: FLATEE: Federated Learning Across Trusted Execution Environments. In 2021 IEEE European Symposium on Security and Privacy (EuroS&P). IEEE Computer Society, Los Alamitos, CA, USA, 707--709. 10.1109\/EuroSP51992.2021.00054"},{"key":"e_1_2_1_48_1","volume-title":"2020 IEEE Symposium on Security and Privacy (SP). IEEE, 1466--1482","author":"Murdock Kit","year":"2020","unstructured":"Kit Murdock , David Oswald , Flavio D Garcia , Jo Van Bulck , Daniel Gruss , and Frank Piessens . 2020 . Plundervolt: Software-based fault injection attacks against Intel SGX . In 2020 IEEE Symposium on Security and Privacy (SP). IEEE, 1466--1482 . Kit Murdock, David Oswald, Flavio D Garcia, Jo Van Bulck, Daniel Gruss, and Frank Piessens. 2020. Plundervolt: Software-based fault injection attacks against Intel SGX. In 2020 IEEE Symposium on Security and Privacy (SP). IEEE, 1466--1482."},{"key":"e_1_2_1_49_1","volume-title":"2019 IEEE symposium on security and privacy (SP). IEEE, 739--753","author":"Nasr Milad","year":"2019","unstructured":"Milad Nasr , Reza Shokri , and Amir Houmansadr . 2019 . Comprehensive privacy analysis of deep learning: Passive and active white-box inference attacks against centralized and federated learning . In 2019 IEEE symposium on security and privacy (SP). IEEE, 739--753 . Milad Nasr, Reza Shokri, and Amir Houmansadr. 2019. Comprehensive privacy analysis of deep learning: Passive and active white-box inference attacks against centralized and federated learning. In 2019 IEEE symposium on security and privacy (SP). IEEE, 739--753."},{"key":"e_1_2_1_50_1","volume-title":"International Conference on Artificial Intelligence and Statistics. PMLR, 3581--3607","author":"Nguyen John","year":"2022","unstructured":"John Nguyen , Kshitiz Malik , Hongyuan Zhan , Ashkan Yousefpour , Mike Rabbat , Mani Malek , and Dzmitry Huba . 2022 . Federated learning with buffered asynchronous aggregation . In International Conference on Artificial Intelligence and Statistics. PMLR, 3581--3607 . John Nguyen, Kshitiz Malik, Hongyuan Zhan, Ashkan Yousefpour, Mike Rabbat, Mani Malek, and Dzmitry Huba. 2022. Federated learning with buffered asynchronous aggregation. In International Conference on Artificial Intelligence and Statistics. PMLR, 3581--3607."},{"key":"e_1_2_1_51_1","volume-title":"Pegah Nikbakht Bideh, and Joakim Brorsson","author":"Nilsson Alexander","year":"2020","unstructured":"Alexander Nilsson , Pegah Nikbakht Bideh, and Joakim Brorsson . 2020 . A survey of published attacks on Intel SGX. arXiv preprint arXiv:2006.13598 (2020). Alexander Nilsson, Pegah Nikbakht Bideh, and Joakim Brorsson. 2020. A survey of published attacks on Intel SGX. arXiv preprint arXiv:2006.13598 (2020)."},{"key":"e_1_2_1_52_1","volume-title":"25th USENIX Security Symposium (USENIX Security 16)","author":"Ohrimenko Olga","year":"2016","unstructured":"Olga Ohrimenko , Felix Schuster , C\u00e9dric Fournet , Aastha Mehta , Sebastian Nowozin , Kapil Vaswani , and Manuel Costa . 2016 . Oblivious multi-party machine learning on trusted processors . In 25th USENIX Security Symposium (USENIX Security 16) . 619--636. Olga Ohrimenko, Felix Schuster, C\u00e9dric Fournet, Aastha Mehta, Sebastian Nowozin, Kapil Vaswani, and Manuel Costa. 2016. Oblivious multi-party machine learning on trusted processors. In 25th USENIX Security Symposium (USENIX Security 16). 619--636."},{"key":"e_1_2_1_53_1","volume-title":"Luke Carlson, Filip Granqvist, Chris Vandevelde, et al.","author":"Paulik Matthias","year":"2021","unstructured":"Matthias Paulik , Matt Seigel , Henry Mason , Dominic Telaar , Joris Kluivers , Rogier van Dalen , Chi Wai Lau , Luke Carlson, Filip Granqvist, Chris Vandevelde, et al. 2021 . Federated Evaluation and Tuning for On-Device Personalization: System Design & Applications . arXiv preprint arXiv:2102.08503 (2021). Matthias Paulik, Matt Seigel, Henry Mason, Dominic Telaar, Joris Kluivers, Rogier van Dalen, Chi Wai Lau, Luke Carlson, Filip Granqvist, Chris Vandevelde, et al. 2021. Federated Evaluation and Tuning for On-Device Personalization: System Design & Applications. arXiv preprint arXiv:2102.08503 (2021)."},{"key":"e_1_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.14778\/3574245.3574267"},{"key":"e_1_2_1_55_1","volume-title":"Federated learning for emoji prediction in a mobile keyboard. arXiv preprint arXiv:1906.04329","author":"Ramaswamy Swaroop","year":"2019","unstructured":"Swaroop Ramaswamy , Rajiv Mathews , Kanishka Rao , and Fran\u00e7oise Beaufays . 2019. Federated learning for emoji prediction in a mobile keyboard. arXiv preprint arXiv:1906.04329 ( 2019 ). Swaroop Ramaswamy, Rajiv Mathews, Kanishka Rao, and Fran\u00e7oise Beaufays. 2019. Federated learning for emoji prediction in a mobile keyboard. arXiv preprint arXiv:1906.04329 (2019)."},{"key":"e_1_2_1_56_1","volume-title":"Raccoon: Closing digital side-channels through obfuscated execution. In 24th {USENIX} Security Symposium ({USENIX} Security 15). 431--446.","author":"Rane Ashay","year":"2015","unstructured":"Ashay Rane , Calvin Lin , and Mohit Tiwari . 2015 . Raccoon: Closing digital side-channels through obfuscated execution. In 24th {USENIX} Security Symposium ({USENIX} Security 15). 431--446. Ashay Rane, Calvin Lin, and Mohit Tiwari. 2015. Raccoon: Closing digital side-channels through obfuscated execution. In 24th {USENIX} Security Symposium ({USENIX} Security 15). 431--446."},{"key":"e_1_2_1_57_1","volume-title":"2015 IEEE Trustcom\/BigDataSE\/ISPA","volume":"1","author":"Sabt Mohamed","year":"2015","unstructured":"Mohamed Sabt , Mohammed Achemlal , and Abdelmadjid Bouabdallah . 2015 . Trusted execution environment: what it is, and what it is not . In 2015 IEEE Trustcom\/BigDataSE\/ISPA , Vol. 1 . IEEE, 57--64. Mohamed Sabt, Mohammed Achemlal, and Abdelmadjid Bouabdallah. 2015. Trusted execution environment: what it is, and what it is not. In 2015 IEEE Trustcom\/BigDataSE\/ISPA, Vol. 1. IEEE, 57--64."},{"key":"e_1_2_1_58_1","first-page":"8133","article-title":"Rethinking gradient sparsification as total error minimization","volume":"34","author":"Sahu Atal","year":"2021","unstructured":"Atal Sahu , Aritra Dutta , Ahmed M Abdelmoniem , Trambak Banerjee , Marco Canini , and Panos Kalnis . 2021 . Rethinking gradient sparsification as total error minimization . Advances in Neural Information Processing Systems 34 (2021), 8133 -- 8146 . Atal Sahu, Aritra Dutta, Ahmed M Abdelmoniem, Trambak Banerjee, Marco Canini, and Panos Kalnis. 2021. Rethinking gradient sparsification as total error minimization. Advances in Neural Information Processing Systems 34 (2021), 8133--8146.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_2_1_59_1","volume-title":"25th Annual Network and Distributed System Security Symposium, NDSS 2018","author":"Sasy Sajin","year":"2018","unstructured":"Sajin Sasy , Sergey Gorbunov , and Christopher W. Fletcher . 2018. ZeroTrace: Oblivious Memory Primitives from Intel SGX . In 25th Annual Network and Distributed System Security Symposium, NDSS 2018 , San Diego, California, USA, February 18--21 , 2018 . The Internet Society. Sajin Sasy, Sergey Gorbunov, and Christopher W. Fletcher. 2018. ZeroTrace: Oblivious Memory Primitives from Intel SGX. In 25th Annual Network and Distributed System Security Symposium, NDSS 2018, San Diego, California, USA, February 18--21, 2018. The Internet Society."},{"key":"e_1_2_1_60_1","volume-title":"Robust and communication-efficient federated learning from non-iid data","author":"Sattler Felix","year":"2019","unstructured":"Felix Sattler , Simon Wiedemann , Klaus-Robert M\u00fcller , and Wojciech Samek . 2019. Robust and communication-efficient federated learning from non-iid data . IEEE transactions on neural networks and learning systems 31, 9 ( 2019 ), 3400--3413. Felix Sattler, Simon Wiedemann, Klaus-Robert M\u00fcller, and Wojciech Samek. 2019. Robust and communication-efficient federated learning from non-iid data. IEEE transactions on neural networks and learning systems 31, 9 (2019), 3400--3413."},{"key":"e_1_2_1_61_1","volume-title":"Quan Z. Sheng, Gautam Srivastava, and Liang Zhao.","author":"Shahid Osama","year":"2021","unstructured":"Osama Shahid , Seyedamin Pouriyeh , Reza Meimandi Parizi , Quan Z. Sheng, Gautam Srivastava, and Liang Zhao. 2021 . Communication Efficiency in Federated Learning : Achievements and Challenges. ArXiv abs\/2107.10996 (2021). Osama Shahid, Seyedamin Pouriyeh, Reza Meimandi Parizi, Quan Z. Sheng, Gautam Srivastava, and Liang Zhao. 2021. Communication Efficiency in Federated Learning: Achievements and Challenges. ArXiv abs\/2107.10996 (2021)."},{"key":"e_1_2_1_62_1","doi-asserted-by":"crossref","unstructured":"Shaohuai Shi Kaiyong Zhao Qiang Wang Zhenheng Tang and Xiaowen Chu. 2019. A Convergence Analysis of Distributed SGD with Communication-Efficient Gradient Sparsification.. In IJCAI. 3411--3417. Shaohuai Shi Kaiyong Zhao Qiang Wang Zhenheng Tang and Xiaowen Chu. 2019. A Convergence Analysis of Distributed SGD with Communication-Efficient Gradient Sparsification.. In IJCAI. 3411--3417.","DOI":"10.24963\/ijcai.2019\/473"},{"key":"e_1_2_1_63_1","volume-title":"2017 IEEE symposium on security and privacy (SP). IEEE, 3--18","author":"Shokri Reza","year":"2017","unstructured":"Reza Shokri , Marco Stronati , Congzheng Song , and Vitaly Shmatikov . 2017 . Membership inference attacks against machine learning models . In 2017 IEEE symposium on security and privacy (SP). IEEE, 3--18 . Reza Shokri, Marco Stronati, Congzheng Song, and Vitaly Shmatikov. 2017. Membership inference attacks against machine learning models. In 2017 IEEE symposium on security and privacy (SP). IEEE, 3--18."},{"key":"e_1_2_1_64_1","volume-title":"Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering. 649--660","author":"Sinha Rohit","year":"2017","unstructured":"Rohit Sinha , Sriram Rajamani , and Sanjit A Seshia . 2017 . A compiler and verifier for page access oblivious computation . In Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering. 649--660 . Rohit Sinha, Sriram Rajamani, and Sanjit A Seshia. 2017. A compiler and verifier for page access oblivious computation. In Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering. 649--660."},{"key":"e_1_2_1_65_1","volume-title":"Proceedings of the 2013 ACM SIGSAC Conference on Computer & Communications Security","author":"Stefanov Emil","year":"2013","unstructured":"Emil Stefanov , Marten van Dijk , Elaine Shi , Christopher Fletcher , Ling Ren , Xiangyao Yu , and Srinivas Devadas . 2013 . Path ORAM: An Extremely Simple Oblivious RAM Protocol . In Proceedings of the 2013 ACM SIGSAC Conference on Computer & Communications Security ( Berlin, Germany) (CCS '13). Association for Computing Machinery, New York, NY, USA, 299--310. 10.1145\/2508859.2516660 Emil Stefanov, Marten van Dijk, Elaine Shi, Christopher Fletcher, Ling Ren, Xiangyao Yu, and Srinivas Devadas. 2013. Path ORAM: An Extremely Simple Oblivious RAM Protocol. In Proceedings of the 2013 ACM SIGSAC Conference on Computer & Communications Security (Berlin, Germany) (CCS '13). Association for Computing Machinery, New York, NY, USA, 299--310. 10.1145\/2508859.2516660"},{"key":"e_1_2_1_66_1","first-page":"10","volume-title":"Proc. ACM Meas. Anal. Comput. Syst. 3, 1, Article 12 (mar","author":"Su Lili","year":"2019","unstructured":"Lili Su and Jiaming Xu . 2019 . Securing Distributed Gradient Descent in High Dimensional Statistical Learning . Proc. ACM Meas. Anal. Comput. Syst. 3, 1, Article 12 (mar 2019), 41 pages. 10 .1145\/3322205.3311083 Lili Su and Jiaming Xu. 2019. Securing Distributed Gradient Descent in High Dimensional Statistical Learning. Proc. ACM Meas. Anal. Comput. Syst. 3, 1, Article 12 (mar 2019), 41 pages. 10.1145\/3322205.3311083"},{"key":"e_1_2_1_67_1","volume-title":"Proceedings of the Thirtieth International Joint Conference on Artificial Intelligence, IJCAI-21","author":"Sun Lichao","year":"2021","unstructured":"Lichao Sun , Jianwei Qian , and Xun Chen . 2021 . LDP-FL: Practical Private Aggregation in Federated Learning with Local Differential Privacy . In Proceedings of the Thirtieth International Joint Conference on Artificial Intelligence, IJCAI-21 , Zhi-Hua Zhou (Ed.). International Joint Conferences on Artificial Intelligence Organization, 1571--1578. Main Track. 10.24963\/ijcai. 2021\/217 Lichao Sun, Jianwei Qian, and Xun Chen. 2021. LDP-FL: Practical Private Aggregation in Federated Learning with Local Differential Privacy. In Proceedings of the Thirtieth International Joint Conference on Artificial Intelligence, IJCAI-21, Zhi-Hua Zhou (Ed.). International Joint Conferences on Artificial Intelligence Organization, 1571--1578. Main Track. 10.24963\/ijcai.2021\/217"},{"key":"e_1_2_1_68_1","volume-title":"Proceedings of the Twenty-Third International Conference on Architectural Support for Programming Languages and Operating Systems. 665--678","author":"Taassori Meysam","year":"2018","unstructured":"Meysam Taassori , Ali Shafiee , and Rajeev Balasubramonian . 2018 . VAULT: Reducing paging overheads in SGX with efficient integrity verification structures . In Proceedings of the Twenty-Third International Conference on Architectural Support for Programming Languages and Operating Systems. 665--678 . Meysam Taassori, Ali Shafiee, and Rajeev Balasubramonian. 2018. VAULT: Reducing paging overheads in SGX with efficient integrity verification structures. In Proceedings of the Twenty-Third International Conference on Architectural Support for Programming Languages and Operating Systems. 665--678."},{"key":"e_1_2_1_69_1","volume-title":"Proceedings fo the 27th USENIX Security Symposium. USENIX Association.","author":"Bulck Jo Van","year":"2018","unstructured":"Jo Van Bulck , Marina Minkin , Ofir Weisse , Daniel Genkin , Baris Kasikci , Frank Piessens , Mark Silberstein , Thomas F Wenisch , Yuval Yarom , and Raoul Strackx . 2018 . Foreshadow: Extracting the keys to the Intel SGX kingdom with transient out-of-order execution . In Proceedings fo the 27th USENIX Security Symposium. USENIX Association. Jo Van Bulck, Marina Minkin, Ofir Weisse, Daniel Genkin, Baris Kasikci, Frank Piessens, Mark Silberstein, Thomas F Wenisch, Yuval Yarom, and Raoul Strackx. 2018. Foreshadow: Extracting the keys to the Intel SGX kingdom with transient out-of-order execution. In Proceedings fo the 27th USENIX Security Symposium. USENIX Association."},{"key":"e_1_2_1_70_1","volume-title":"Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security. 1741--1758","author":"Bulck Jo Van","year":"2019","unstructured":"Jo Van Bulck , David Oswald , Eduard Marin , Abdulla Aldoseri , Flavio D Garcia , and Frank Piessens . 2019 . A tale of two worlds: Assessing the vulnerability of enclave shielding runtimes . In Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security. 1741--1758 . Jo Van Bulck, David Oswald, Eduard Marin, Abdulla Aldoseri, Flavio D Garcia, and Frank Piessens. 2019. A tale of two worlds: Assessing the vulnerability of enclave shielding runtimes. In Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security. 1741--1758."},{"key":"e_1_2_1_71_1","volume-title":"26th USENIX Security Symposium (USENIX Security 17)","author":"Bulck Jo Van","year":"2017","unstructured":"Jo Van Bulck , Nico Weichbrodt , R\u00fcdiger Kapitza , Frank Piessens , and Raoul Strackx . 2017 . Telling your secrets without page faults: Stealthy page table-based attacks on enclaved execution . In 26th USENIX Security Symposium (USENIX Security 17) . 1041--1056. Jo Van Bulck, Nico Weichbrodt, R\u00fcdiger Kapitza, Frank Piessens, and Raoul Strackx. 2017. Telling your secrets without page faults: Stealthy page table-based attacks on enclaved execution. In 26th USENIX Security Symposium (USENIX Security 17). 1041--1056."},{"key":"e_1_2_1_72_1","doi-asserted-by":"crossref","first-page":"227","DOI":"10.2478\/popets-2022-0043","article-title":"User-Level Label Leakage from Gradients in Federated Learning","volume":"2022","author":"Wainakh Aidmar","year":"2022","unstructured":"Aidmar Wainakh , Fabrizio Ventola , Till M\u00fc\u00dfig , Jens Keim , Carlos Garcia Cordero , Ephraim Zimmer , Tim Grube , Kristian Kersting , and Max M\u00fchlh\u00e4user . 2022 . User-Level Label Leakage from Gradients in Federated Learning . Proceedings on Privacy Enhancing Technologies 2022 , 2 (2022), 227 -- 244 . Aidmar Wainakh, Fabrizio Ventola, Till M\u00fc\u00dfig, Jens Keim, Carlos Garcia Cordero, Ephraim Zimmer, Tim Grube, Kristian Kersting, and Max M\u00fchlh\u00e4user. 2022. User-Level Label Leakage from Gradients in Federated Learning. Proceedings on Privacy Enhancing Technologies 2022, 2 (2022), 227--244.","journal-title":"Proceedings on Privacy Enhancing Technologies"},{"key":"e_1_2_1_73_1","doi-asserted-by":"publisher","DOI":"10.3390\/s20247030"},{"key":"e_1_2_1_74_1","volume-title":"IEEE INFOCOM 2019-IEEE conference on computer communications. IEEE, 2512--2520","author":"Wang Zhibo","year":"2019","unstructured":"Zhibo Wang , Mengkai Song , Zhifei Zhang , Yang Song , Qian Wang , and Hairong Qi . 2019 . Beyond inferring class representatives: User-level privacy leakage from federated learning . In IEEE INFOCOM 2019-IEEE conference on computer communications. IEEE, 2512--2520 . Zhibo Wang, Mengkai Song, Zhifei Zhang, Yang Song, Qian Wang, and Hairong Qi. 2019. Beyond inferring class representatives: User-level privacy leakage from federated learning. In IEEE INFOCOM 2019-IEEE conference on computer communications. IEEE, 2512--2520."},{"key":"e_1_2_1_75_1","volume-title":"Proceedings of the AAAI Conference on Artificial Intelligence","volume":"36","author":"Wu Donglei","year":"2022","unstructured":"Donglei Wu , Xiangyu Zou , Shuyu Zhang , Haoyu Jin , Wen Xia , and Binxing Fang . 2022 . SmartIdx: Reducing Communication Cost in Federated Learning by Exploiting the CNNs Structures . In Proceedings of the AAAI Conference on Artificial Intelligence , Vol. 36 . 4254--4262. Donglei Wu, Xiangyu Zou, Shuyu Zhang, Haoyu Jin, Wen Xia, and Binxing Fang. 2022. SmartIdx: Reducing Communication Cost in Federated Learning by Exploiting the CNNs Structures. In Proceedings of the AAAI Conference on Artificial Intelligence, Vol. 36. 4254--4262."},{"key":"e_1_2_1_76_1","volume-title":"2015 IEEE Symposium on Security and Privacy. IEEE, 640--656","author":"Xu Yuanzhong","year":"2015","unstructured":"Yuanzhong Xu , Weidong Cui , and Marcus Peinado . 2015 . Controlled-channel attacks: Deterministic side channels for untrusted operating systems . In 2015 IEEE Symposium on Security and Privacy. IEEE, 640--656 . Yuanzhong Xu, Weidong Cui, and Marcus Peinado. 2015. Controlled-channel attacks: Deterministic side channels for untrusted operating systems. In 2015 IEEE Symposium on Security and Privacy. IEEE, 640--656."},{"key":"e_1_2_1_77_1","volume-title":"Paarijaat Aditya, and Feng Yan.","author":"Zhang Chengliang","year":"2021","unstructured":"Chengliang Zhang , Junzhe Xia , Baichen Yang , Huancheng Puyang , Wei Wang , Ruichuan Chen , Istemi Ekin Akkus , Paarijaat Aditya, and Feng Yan. 2021 . Citadel : Protecting Data Privacy and Model Confidentiality for Collaborative Learning with SGX. arXiv preprint arXiv:2105.01281 (2021). Chengliang Zhang, Junzhe Xia, Baichen Yang, Huancheng Puyang, Wei Wang, Ruichuan Chen, Istemi Ekin Akkus, Paarijaat Aditya, and Feng Yan. 2021. Citadel: Protecting Data Privacy and Model Confidentiality for Collaborative Learning with SGX. arXiv preprint arXiv:2105.01281 (2021)."},{"key":"e_1_2_1_78_1","volume-title":"Proceedings of the 18th ACM International Conference on Computing Frontiers. 161--168","author":"Zhang Yuhui","year":"2021","unstructured":"Yuhui Zhang , Zhiwei Wang , Jiangfeng Cao , Rui Hou , and Dan Meng . 2021 . ShuffleFL: gradient-preserving federated learning using trusted execution environment . In Proceedings of the 18th ACM International Conference on Computing Frontiers. 161--168 . Yuhui Zhang, Zhiwei Wang, Jiangfeng Cao, Rui Hou, and Dan Meng. 2021. ShuffleFL: gradient-preserving federated learning using trusted execution environment. In Proceedings of the 18th ACM International Conference on Computing Frontiers. 161--168."},{"key":"e_1_2_1_79_1","volume-title":"Konda Reddy Mopuri, and Hakan Bilen","author":"Zhao Bo","year":"2020","unstructured":"Bo Zhao , Konda Reddy Mopuri, and Hakan Bilen . 2020 . idlg: Improved de ep leakage from gradients. arXiv preprint arXiv:2001.02610 (2020). Bo Zhao, Konda Reddy Mopuri, and Hakan Bilen. 2020. idlg: Improved deep leakage from gradients. arXiv preprint arXiv:2001.02610 (2020)."},{"key":"e_1_2_1_80_1","doi-asserted-by":"crossref","first-page":"3329","DOI":"10.1109\/TDSC.2021.3093711","article-title":"Sear: Secure and efficient aggregation for byzantine-robust federated learning","volume":"19","author":"Zhao Lingchen","year":"2021","unstructured":"Lingchen Zhao , Jianlin Jiang , Bo Feng , Qian Wang , Chao Shen , and Qi Li . 2021 . Sear: Secure and efficient aggregation for byzantine-robust federated learning . IEEE Transactions on Dependable and Secure Computing 19 , 5 (2021), 3329 -- 3342 . Lingchen Zhao, Jianlin Jiang, Bo Feng, Qian Wang, Chao Shen, and Qi Li. 2021. Sear: Secure and efficient aggregation for byzantine-robust federated learning. IEEE Transactions on Dependable and Secure Computing 19, 5 (2021), 3329--3342.","journal-title":"IEEE Transactions on Dependable and Secure Computing"},{"key":"e_1_2_1_81_1","doi-asserted-by":"crossref","first-page":"1262","DOI":"10.1002\/int.22241","article-title":"PrivateDL: privacy-preserving collaborative deep learning against leakage from gradient sharing","volume":"35","author":"Zhao Qi","year":"2020","unstructured":"Qi Zhao , Chuan Zhao , Shujie Cui , Shan Jing , and Zhenxiang Chen . 2020 . PrivateDL: privacy-preserving collaborative deep learning against leakage from gradient sharing . International Journal of Intelligent Systems 35 , 8 (2020), 1262 -- 1279 . Qi Zhao, Chuan Zhao, Shujie Cui, Shan Jing, and Zhenxiang Chen. 2020. PrivateDL: privacy-preserving collaborative deep learning against leakage from gradient sharing. International Journal of Intelligent Systems 35, 8 (2020), 1262--1279.","journal-title":"International Journal of Intelligent Systems"},{"key":"e_1_2_1_82_1","doi-asserted-by":"crossref","first-page":"8836","DOI":"10.1109\/JIOT.2020.3037194","article-title":"Local differential privacy-based federated learning for internet of things","volume":"8","author":"Zhao Yang","year":"2020","unstructured":"Yang Zhao , Jun Zhao , Mengmeng Yang , Teng Wang , Ning Wang , Lingjuan Lyu , Dusit Niyato , and Kwok-Yan Lam . 2020 . Local differential privacy-based federated learning for internet of things . IEEE Internet of Things Journal 8 , 11 (2020), 8836 -- 8853 . Yang Zhao, Jun Zhao, Mengmeng Yang, Teng Wang, Ning Wang, Lingjuan Lyu, Dusit Niyato, and Kwok-Yan Lam. 2020. Local differential privacy-based federated learning for internet of things. IEEE Internet of Things Journal 8, 11 (2020), 8836--8853.","journal-title":"IEEE Internet of Things Journal"},{"key":"e_1_2_1_83_1","first-page":"283","article-title":"Opaque: An Oblivious and Encrypted Distributed Analytics Platform","volume":"17","author":"Zheng Wenting","year":"2017","unstructured":"Wenting Zheng , Ankur Dave , Jethro G Beekman , Raluca Ada Popa , Joseph E Gonzalez , and Ion Stoica . 2017 . Opaque: An Oblivious and Encrypted Distributed Analytics Platform . In NSDI , Vol. 17. 283 -- 298 . Wenting Zheng, Ankur Dave, Jethro G Beekman, Raluca Ada Popa, Joseph E Gonzalez, and Ion Stoica. 2017. Opaque: An Oblivious and Encrypted Distributed Analytics Platform. In NSDI, Vol. 17. 283--298.","journal-title":"NSDI"},{"key":"e_1_2_1_84_1","volume-title":"Federated learning","author":"Zhu Ligeng","unstructured":"Ligeng Zhu and Song Han . 2020. Deep leakage from gradients . In Federated learning . Springer , 17--31. Ligeng Zhu and Song Han. 2020. Deep leakage from gradients. In Federated learning. Springer, 17--31."}],"container-title":["Proceedings of the VLDB Endowment"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.14778\/3603581.3603583","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,10,25]],"date-time":"2024-10-25T22:01:10Z","timestamp":1729893670000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.14778\/3603581.3603583"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,6]]},"references-count":84,"journal-issue":{"issue":"10","published-print":{"date-parts":[[2023,6]]}},"alternative-id":["10.14778\/3603581.3603583"],"URL":"https:\/\/doi.org\/10.14778\/3603581.3603583","relation":{},"ISSN":["2150-8097"],"issn-type":[{"value":"2150-8097","type":"print"}],"subject":[],"published":{"date-parts":[[2023,6]]},"assertion":[{"value":"2023-08-08","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}