# Secure Convolution Neural Network Inference Based on Homomorphic Encryption
## 4 Our Scheme
### Batch Processing in Inference Stage
* (16) [PERSON]; [PERSON]; [PERSON] {GAZELLE}: A low latency framework for secure neural network inference. In Proceedings of the 27 th USENIX Security Symposium (USENIX Security 18), Baltimore, MD, USA, 15-17 August 2018; pp. 1651-1669. * (17) [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Falcon: A fourier transform based approach for fast and secure convolutional neural network predictions. In Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition, Seattle, WA, USA, 13-19 June 2020; pp. 8705-8714. * (18) [PERSON]; [PERSON]; [PERSON] [PERSON]; [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON] Cryptflow: Secure tensorflow inference. In Proceedings of the 2020 IEEE Symposium on Security and Privacy (SP), San Francisco, CA, USA, 18-21 May 2020; pp. 336-353. * [PERSON] et al. (2017) [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] DELPHI: A Cryptographic Inference Service for Neural Networks. In Proceedings of the 29 th USENIX Conference on Security Symposium (SEC'20), Vancouver, BC, Canada, 16-18 August 2017. * [PERSON] and [PERSON] (2021) [PERSON]; [PERSON] [PERSON] GForce: GPU-Friendly Oblivious and Rapid Neural Network Inference. In Proceedings of the 30 th USENIX Security Symposium (USENIX Security 21), Online, 11-13 August 2021; pp. 2147-2164. * [PERSON] (1999) [PERSON] Public-key cryptosystems based on composite degree residuosity classes. In _Advances in Cryptology, Proceedings of the EUROCRYPT'99: International Conference on the Theory and Application of Cryptographic Techniques Prague, Czech Republic, 2-6 May 1999_; Springer: Berlin/Heidelberg, Germany, 1999; Proceedings 18; pp. 223-238. * [PERSON] and [PERSON] (2012) [PERSON]; [PERSON] Somewhat Practical Fully Homomorphic Encryption. Cryptology ePrint Archive. 2012. Available online: [[https://eprint.iacr.org/2012/144](https://eprint.iacr.org/2012/144)]([https://eprint.iacr.org/2012/144](https://eprint.iacr.org/2012/144)) (accessed on 2 November 2022). * [PERSON] et al. (2014) [PERSON]; [PERSON]; [PERSON] (Leveled) fully homomorphic encryption without bootstrapping. _ACM Trans. Comput. Theory (TOCT)_**2014**, 6, 1-36. [CrossRef]
* [PERSON] and [PERSON] (2015) [PERSON]; [PERSON] [PERSON] FHEW: Bootstrapping homomorphic encryption in less than a second. In _Advances in Cryptology, Proceedings of the EUROCRYPT 2015: 34 th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Sofia, Bulgaria, 26-30 April 2015_; Proceedings, Part I 34; Springer: Berlin/Heidelberg, Germany, 2015; pp. 617-640. * [PERSON] et al. (2020) [PERSON]; [PERSON]; [PERSON]; [PERSON] [PERSON] TFHE: Fast fully homomorphic encryption over the torus. _J. Cryptol._**2020**, 33, 34-91. [CrossRef]
* [PERSON] et al. (2017) [PERSON]; [PERSON]; [PERSON]; [PERSON] Homomorphic encryption for arithmetic of approximate numbers. In Proceedings of the International Conference on the Theory and Application of Cryptology and Information Security, Hong Kong, China, 3-7 December 2017; Springer: Berlin/Heidelberg, Germany, 2017; pp. 409-437. * [PERSON] et al. (2018) [PERSON]; [PERSON]; [PERSON]; [PERSON] Secure outsourced matrix computation and application to neural networks. In Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, Toronto, ON, Canada, 15-19 October 2018; pp. 1209-1222. * CIFAR-10-Canadian Institute For Advanced Research. Available online: [[https://www.cs.toronto.edu/~kriz/cifar.html](https://www.cs.toronto.edu/~kriz/cifar.html)]([https://www.cs.toronto.edu/~kriz/cifar.html](https://www.cs.toronto.edu/~kriz/cifar.html)) (accessed on 1 May 2023). * [PERSON] and [PERSON] (2017) [PERSON]; [PERSON] _Deep Learning with Keras_; Packt Publishing Ltd.: Birmingham, UK, 2017. * Microsoft SEAL (Release 4.0) Microsoft Research, Redmond, WA, USA, 2022. Available online: [[https://github.com/Microsoft/SEAL](https://github.com/Microsoft/SEAL)]([https://github.com/Microsoft/SEAL](https://github.com/Microsoft/SEAL)) (accessed on 15 July 2022).