mlsanityData to 7 Oct 2026

ezDPS: An Efficient and Zero-Knowledge Machine Learning Inference Pipeline

arXiv 2212.05428 ↗First posted 11 Dec 2022cs.CR cs.LGcited by 10

Not on the map. Why?

Abstract (arXiv)

Machine Learning as a service (MLaaS) permits resource-limited clients to access powerful data analytics services ubiquitously. Despite its merits, MLaaS poses significant concerns regarding the integrity of delegated computation and the privacy of the server's model parameters. To address this issue, Zhang et al. (CCS'20) initiated the study of zero-knowledge Machine Learning (zkML). Few zkML schemes have been proposed afterward; however, they focus on sole ML classification algorithms that may not offer satisfactory accuracy or require large-scale training data and model parameters, which may not be desirable for some applications. We propose ezDPS, a new efficient and zero-knowledge ML inference scheme. Unlike prior works, ezDPS is a zkML pipeline in which the data is processed in multiple stages for high accuracy. Each stage of ezDPS is harnessed with an established ML algorithm that is shown to be effective in various applications, including Discrete Wavelet Transformation, Principal Components Analysis, and Support Vector Machine. We design new gadgets to prove ML operations effectively. We fully implemented ezDPS and assessed its performance on real datasets. Experimental results showed that ezDPS achieves one-to-three orders of magnitude more efficient than the generic circuit-based approach in all metrics while maintaining more desirable accuracy than single ML classification approaches.

Key facts. Cited by 10 papers in the map (data through 7 Oct 2026). Builds on 22 of its 77 references that are in the map. First posted on arXiv 11 Dec 2022.

Builds on

22 of 77 references.

References · 22

  1. 2020Sharpness-Aware Minimization for Efficiently Improving Generalizationcited by 1,404
  2. 2016Stealing Machine Learning Models via Prediction APIscited by 602
  3. 2018Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooringcited by 334
  4. 2019High Accuracy and High Fidelity Extraction of Neural Networkscited by 208
  5. 2018Gazelle: A Low Latency Framework for Secure Neural Network Inferencecited by 193
  6. 2018PRADA: Protecting against DNN Model Stealing Attackscited by 159
  7. 2020Dynamic Backdoor Attacks Against Machine Learning Modelscited by 147
  8. 2020Entangled Watermarks as a Defense against Model Extractioncited by 144
  9. 2018Slalom: Fast, Verifiable and Private Execution of Neural Networks in Trusted Hardwarecited by 101
  10. 2018Exploring Connections Between Active Learning and Model Extractioncited by 84
  11. 2019Prediction Poisoning: Towards Defenses Against DNN Model Stealing Attackscited by 79
  12. 2018Low Latency Privacy Preserving Inferencecited by 57
10 more
  1. 2017CryptoDL: Deep Neural Networks over Encrypted Datacited by 56
  2. 2019XONN: XNOR-based Oblivious Deep Neural Network Inferencecited by 51
  3. 2017SafetyNets: Verifiable Execution of Deep Neural Networks on an Untrusted Cloudcited by 50
  4. 2017Model Extraction Warning in MLaaS Paradigmcited by 39
  5. 2019VarGFaceNet: An Efficient Variable Group Convolutional Neural Network for Lightweight Face Recognitioncited by 30
  6. 2018Deep Gated Recurrent and Convolutional Network Hybrid Model for Univariate Time Series Classificationcited by 26
  7. 2019VeriML: Enabling Integrity Assurances and Fair Payments for Machine Learning as a Servicecited by 26
  8. 2020SWIFT: Super-fast and Robust Privacy-Preserving Machine Learningcited by 20
  9. 2020Don't Trigger Me! A Triggerless Backdoor Attack Against Deep Neural Networkscited by 19
  10. 2016Learning the image processing pipelinecited by 9

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2023: 2; 2024: 2; 2025: 4; 2026: 2.

10 papers.