%PDF-1.5
%
461 0 obj
<>
endobj
xref
461 145
0000000016 00000 n
0000003293 00000 n
0000004057 00000 n
0000004102 00000 n
0000004138 00000 n
0000004460 00000 n
0000004502 00000 n
0000004611 00000 n
0000004645 00000 n
0000004692 00000 n
0000004753 00000 n
0000004794 00000 n
0000004836 00000 n
0000004958 00000 n
0000005013 00000 n
0000005060 00000 n
0000005134 00000 n
0000005194 00000 n
0000005241 00000 n
0000005315 00000 n
0000005358 00000 n
0000005400 00000 n
0000005522 00000 n
0000005554 00000 n
0000005601 00000 n
0000005710 00000 n
0000005762 00000 n
0000005814 00000 n
0000005888 00000 n
0000005950 00000 n
0000006002 00000 n
0000006076 00000 n
0000006131 00000 n
0000006178 00000 n
0000006252 00000 n
0000006298 00000 n
0000006340 00000 n
0000006462 00000 n
0000006491 00000 n
0000006538 00000 n
0000006647 00000 n
0000006681 00000 n
0000006733 00000 n
0000006807 00000 n
0000006856 00000 n
0000006908 00000 n
0000006982 00000 n
0000007027 00000 n
0000007074 00000 n
0000007161 00000 n
0000007216 00000 n
0000007263 00000 n
0000007337 00000 n
0000007394 00000 n
0000007436 00000 n
0000007558 00000 n
0000007600 00000 n
0000007647 00000 n
0000007721 00000 n
0000007776 00000 n
0000007823 00000 n
0000007910 00000 n
0000007942 00000 n
0000007989 00000 n
0000008076 00000 n
0000008106 00000 n
0000008153 00000 n
0000008227 00000 n
0000008259 00000 n
0000008301 00000 n
0000008375 00000 n
0000008407 00000 n
0000008479 00000 n
0000008636 00000 n
0000008791 00000 n
0000008955 00000 n
0000009120 00000 n
0000009278 00000 n
0000009436 00000 n
0000009593 00000 n
0000009749 00000 n
0000009907 00000 n
0000010063 00000 n
0000010224 00000 n
0000010385 00000 n
0000010545 00000 n
0000010705 00000 n
0000010865 00000 n
0000011026 00000 n
0000011186 00000 n
0000011345 00000 n
0000011502 00000 n
0000011663 00000 n
0000011825 00000 n
0000015310 00000 n
0000015484 00000 n
0000015737 00000 n
0000015787 00000 n
0000015810 00000 n
0000015833 00000 n
0000015965 00000 n
0000016097 00000 n
0000016228 00000 n
0000016359 00000 n
0000016490 00000 n
0000016621 00000 n
0000016753 00000 n
0000016885 00000 n
0000017018 00000 n
0000017151 00000 n
0000017283 00000 n
0000017366 00000 n
0000017630 00000 n
0000018240 00000 n
0000029054 00000 n
0000029348 00000 n
0000030001 00000 n
0000044535 00000 n
0000044853 00000 n
0000045475 00000 n
0000059040 00000 n
0000059280 00000 n
0000060155 00000 n
0000068133 00000 n
0000068372 00000 n
0000069205 00000 n
0000077197 00000 n
0000077505 00000 n
0000078213 00000 n
0000093685 00000 n
0000093900 00000 n
0000094272 00000 n
0000102254 00000 n
0000102480 00000 n
0000102770 00000 n
0000111920 00000 n
0000112300 00000 n
0000112977 00000 n
0000129747 00000 n
0000130152 00000 n
0000130909 00000 n
0000152603 00000 n
0000153143 00000 n
0000153964 00000 n
0000003430 00000 n
trailer<]>>
startxref
0
%%EOF
462 0 obj
<>
endobj
605 0 obj
<
>stream
xQ]HSa~ώ95ggMtCa!鰛I*3dAT$(@
BK-uYZ[?ZVSZ즋]tѥwvggt]=<
!~edڶ*?U$)NoUdtf,
LYʦHEgHxyG3_te$}WG'&_]s«[s7㛙ٹ
M'*)0(̊r,ӈP)$`
H
6^ʊd/E'zImF3 h
hE'HDpBq!ʃhg!Ĉܥ6P#lYŭbTiF/dj$?3x~qܵе{g}v?
DTXzv×S ]_k&*nЂ^| yzH2YmeA؈Ũe>#ayg͗1nGO
+[zHi~+CH[f@i>3 j?&.
endstream
endobj
463 0 obj
<>
endobj
464 0 obj
<>
endobj
465 0 obj
<>
endobj
466 0 obj
<>
endobj
467 0 obj
<>
endobj
468 0 obj
(1 Introduction)
endobj
469 0 obj
<>
endobj
470 0 obj
<>
endobj
471 0 obj
(1.1 Our contributions)
endobj
472 0 obj
<>
endobj
473 0 obj
<>
endobj
474 0 obj
(2 Encrypted Prediction as a Service)
endobj
475 0 obj
<>
endobj
476 0 obj
<>
endobj
477 0 obj
(2.1 Privacy and computational guarantees)
endobj
478 0 obj
<>
endobj
479 0 obj
<>
endobj
480 0 obj
(2.2 Existing approaches)
endobj
481 0 obj
<>
endobj
482 0 obj
<>
endobj
483 0 obj
(3 Background)
endobj
484 0 obj
<>
endobj
485 0 obj
<>
endobj
486 0 obj
(3.1 Fully Homomorphic Encryption)
endobj
487 0 obj
<>
endobj
488 0 obj
<>
endobj
489 0 obj
(3.1.1 Encrypted Prediction with leveled HE)
endobj
490 0 obj
<>
endobj
491 0 obj
<>
endobj
492 0 obj
(3.1.2 Encrypted Prediction with FHE)
endobj
493 0 obj
<>
endobj
494 0 obj
<>
endobj
495 0 obj
(3.2 Binary Neural Networks)
endobj
496 0 obj
<>
endobj
497 0 obj
<>
endobj
498 0 obj
(4 Methods)
endobj
499 0 obj
<>
endobj
500 0 obj
<>
endobj
501 0 obj
(4.1 Binary OPs)
endobj
502 0 obj
<>
endobj
503 0 obj
<>
endobj
504 0 obj
(4.1.1 Encrypted inner product)
endobj
505 0 obj
<>
endobj
506 0 obj
<>
endobj
507 0 obj
(4.1.2 Batch normalization)
endobj
508 0 obj
<>
endobj
509 0 obj
<>
endobj
510 0 obj
(4.2 Sparsification via ``+1''-trick)
endobj
511 0 obj
<>
endobj
512 0 obj
<>
endobj
513 0 obj
(4.3 Ternarization \(Weight Dropping\))
endobj
514 0 obj
<>
endobj
515 0 obj
<>
endobj
516 0 obj
(5 Experimental Results)
endobj
517 0 obj
<>
endobj
518 0 obj
<>
endobj
519 0 obj
(5.1 Reduce tree vs. sorting network)
endobj
520 0 obj
<>
endobj
521 0 obj
<>
endobj
522 0 obj
(5.2 Datasets)
endobj
523 0 obj
<>
endobj
524 0 obj
<>
endobj
525 0 obj
(5.3 Timing)
endobj
526 0 obj
<>
endobj
527 0 obj
<>
endobj
528 0 obj
(5.4 Accuracy)
endobj
529 0 obj
<>
endobj
530 0 obj
<>
endobj
531 0 obj
(6 Conclusion)
endobj
532 0 obj
<>
endobj
533 0 obj
<>/BS<>/Border[0 0 1]/C[0 1 0]/H/I/Rect[ 488.449 270.4479 539.5889 282.403]>>
endobj
534 0 obj
<>/BS<>/Border[0 0 1]/C[0 1 0]/H/I/Rect[ 70.7549 258.493 92.274 270.4479]>>
endobj
535 0 obj
<>/BS<>/Border[0 0 1]/C[0 1 0]/H/I/Rect[ 95.9039 258.493 153.2779 270.4479]>>
endobj
536 0 obj
<>/BS<>/Border[0 0 1]/C[0 1 0]/H/I/Rect[ 156.9089 258.493 178.4279 270.4479]>>
endobj
537 0 obj
<>/BS<>/Border[0 0 1]/C[0 1 0]/H/I/Rect[ 373.048 258.493 448.6499 270.4479]>>
endobj
538 0 obj
<>/BS<>/Border[0 0 1]/C[0 1 0]/H/I/Rect[ 452.281 258.493 473.7999 270.4479]>>
endobj
539 0 obj
<>/BS<>/Border[0 0 1]/C[0 1 0]/H/I/Rect[ 224.0449 246.537 268.4909 258.493]>>
endobj
540 0 obj
<>/BS<>/Border[0 0 1]/C[0 1 0]/H/I/Rect[ 272.0159 246.537 293.536 258.493]>>
endobj
541 0 obj
<>/BS<>/Border[0 0 1]/C[0 1 0]/H/I/Rect[ 509.204 199.27 541.3649 210.1179]>>
endobj
542 0 obj
<>/BS<>/Border[0 0 1]/C[0 1 0]/H/I/Rect[ 73.79 186.7619 96.106 198.7169]>>
endobj
543 0 obj
<>/BS<>/Border[0 0 1]/C[0 1 0]/H/I/Rect[ 297.8949 186.7619 354.5539 198.7169]>>
endobj
544 0 obj
<>/BS<>/Border[0 0 1]/C[0 1 0]/H/I/Rect[ 359.2049 186.7619 381.5209 198.7169]>>
endobj
545 0 obj
<>/BS<>/Border[0 0 1]/C[0 1 0]/H/I/Rect[ 158.787 174.8059 216.0789 186.7619]>>
endobj
546 0 obj
<>/BS<>/Border[0 0 1]/C[0 1 0]/H/I/Rect[ 221.2189 174.8059 242.858 186.7619]>>
endobj
547 0 obj
<>/BS<>/Border[0 0 1]/C[0 1 0]/H/I/Rect[ 246.9049 174.8059 268.544 186.7619]>>
endobj
548 0 obj
<>/BS<>/Border[0 0 1]/C[0 1 0]/H/I/Rect[ 276.4119 174.8059 410.2269 186.7619]>>
endobj
549 0 obj
<>/BS<>/Border[0 0 1]/C[0 1 0]/H/I/Rect[ 415.3659 174.8059 437.005 186.7619]>>
endobj
550 0 obj
<>/BS<>/Border[0 0 1]/C[0 1 0]/H/I/Rect[ 444.872 174.8059 540.9959 186.7619]>>
endobj
551 0 obj
<>/BS<>/Border[0 0 1]/C[0 1 0]/H/I/Rect[ 73.635 162.8509 95.1539 174.8059]>>
endobj
552 0 obj
<>/BS<>/Border[0 0 1]/C[0 1 0]/H/I/Rect[ 102.776 162.8509 165.2519 174.8059]>>
endobj
553 0 obj
<>/BS<>/Border[0 0 1]/C[0 1 0]/H/I/Rect[ 170.1609 162.8509 191.6799 174.8059]>>
endobj
554 0 obj
<>stream
xڭZIsϯ@Vm_,;Ixd"!!pF6 Ey\ok*
vAy}ݫ/Iet삻 T(n폫$ouaZ[nVƇi}ͦ6]GzM'x/[Xym-7}rm~(7귻I*cLXk뀔(ǼW& V&Cm^Iŷ&%&e 6sEzЩZ`K.,XNA>|Cw)]]8ʦ~Uvma?-EƬ\|&6@+E!9g R9,_V)F;ԢηtT\}|+}a`mRbUel}WU]٣{=13My6HD%IFA'"ݾVy͟C
mYxuח?P+KFEC?fυf4Ua ,|7RM@WA2)%Vi X%=o7KlVnh1ɂ(!'e
wƆU5iGǢCێ)y+mQ=#/d)?>b,FB"j0b$ʤ*b۸4.*Iҥ8?tl)1;9rF$R-d^9(*.T-Q^6\ht[%ͷȣ}%