refs.bib

@inproceedings{freivalds1979,
  author = {Rusins Freivalds},
  title = {Fast Probabilistic Algorithms},
  booktitle = {Mathematical Foundations of Computer Science 1979},
  series = {Lecture Notes in Computer Science},
  volume = {74},
  pages = {57--69},
  publisher = {Springer},
  year = {1979},
  doi = {10.1007/3-540-09526-8_5}
}

@inproceedings{merkle1987,
  author = {Ralph C. Merkle},
  title = {A Digital Signature Based on a Conventional Encryption Function},
  booktitle = {Advances in Cryptology -- CRYPTO '87},
  series = {Lecture Notes in Computer Science},
  volume = {293},
  pages = {369--378},
  publisher = {Springer},
  year = {1987},
  doi = {10.1007/3-540-48184-2_32}
}

@article{goldwasser1989knowledge,
  author = {Shafi Goldwasser and Silvio Micali and Charles Rackoff},
  title = {The Knowledge Complexity of Interactive Proof Systems},
  journal = {SIAM Journal on Computing},
  volume = {18},
  number = {1},
  pages = {186--208},
  year = {1989},
  doi = {10.1137/0218012}
}

@inproceedings{goldwasser2008delegating,
  author = {Shafi Goldwasser and Yael Tauman Kalai and Guy N. Rothblum},
  title = {Delegating Computation: Interactive Proofs for Muggles},
  booktitle = {Proceedings of the 40th Annual ACM Symposium on Theory of Computing},
  pages = {113--122},
  year = {2008},
  doi = {10.1145/1374376.1374396}
}

@inproceedings{ghodsi2017safetynets,
  author = {Zahra Ghodsi and Tianyu Gu and Siddharth Garg},
  title = {{SafetyNets}: Verifiable Execution of Deep Neural Networks on an Untrusted Cloud},
  booktitle = {Advances in Neural Information Processing Systems 30},
  year = {2017},
  url = {https://papers.nips.cc/paper/7053-safetynets-verifiable-execution-of-deep-neural-networks-on-an-untrusted-cloud}
}

@inproceedings{liu2021zkcnn,
  author = {Tianyi Liu and Xiang Xie and Yupeng Zhang},
  title = {{zkCNN}: Zero Knowledge Proofs for Convolutional Neural Network Predictions and Accuracy},
  booktitle = {Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security},
  pages = {2968--2985},
  year = {2021},
  doi = {10.1145/3460120.3485379}
}

@inproceedings{mishra2020delphi,
  author = {Pratyush Mishra and Ryan Lehmkuhl and Akshayaram Srinivasan and Wenting Zheng and Raluca Ada Popa},
  title = {Delphi: A Cryptographic Inference Service for Neural Networks},
  booktitle = {29th USENIX Security Symposium (USENIX Security 20)},
  pages = {2505--2522},
  publisher = {USENIX Association},
  year = {2020},
  url = {https://www.usenix.org/conference/usenixsecurity20/presentation/mishra}
}

@techreport{birkholz2023rats,
  author = {Henk Birkholz and Dave Thaler and Michael Richardson and Ned Smith and Wei Pan},
  title = {{Remote ATtestation procedureS (RATS) Architecture}},
  institution = {Internet Engineering Task Force},
  number = {RFC 9334},
  year = {2023},
  month = jan,
  doi = {10.17487/RFC9334},
  url = {https://www.rfc-editor.org/rfc/rfc9334.html}
}

@inproceedings{dao2022flashattention,
  author = {Tri Dao and Daniel Y. Fu and Stefano Ermon and Atri Rudra and Christopher R{\'e}},
  title = {{FlashAttention}: Fast and Memory-Efficient Exact Attention with {IO}-Awareness},
  booktitle = {Advances in Neural Information Processing Systems 35},
  year = {2022},
  url = {https://arxiv.org/abs/2205.14135}
}

@inproceedings{kwon2023pagedattention,
  author = {Woosuk Kwon and Zhuohan Li and Siyuan Zhuang and Ying Sheng and Lianmin Zheng and Cody Hao Yu and Joseph E. Gonzalez and Hao Zhang and Ion Stoica},
  title = {Efficient Memory Management for Large Language Model Serving with {PagedAttention}},
  booktitle = {Proceedings of the 29th ACM Symposium on Operating Systems Principles},
  pages = {611--626},
  year = {2023},
  doi = {10.1145/3600006.3613165}
}

@misc{grattafiori2024llama3,
  author = {{Llama Team, AI @ Meta}},
  title = {The {Llama} 3 Herd of Models},
  year = {2024},
  howpublished = {arXiv preprint arXiv:2407.21783},
  url = {https://arxiv.org/abs/2407.21783}
}

@inproceedings{menetrey2022attestation,
  author = {J{\"a}mes M{\'e}n{\'e}trey and Christian G{\"o}ttel and Anum Khurshid and Marcelo Pasin and Pascal Felber and Valerio Schiavoni and Shahid Raza},
  title = {Attestation Mechanisms for Trusted Execution Environments Demystified},
  booktitle = {Distributed Applications and Interoperable Systems},
  series = {Lecture Notes in Computer Science},
  volume = {13272},
  pages = {95--113},
  publisher = {Springer},
  year = {2022},
  doi = {10.1007/978-3-031-16092-9_7}
}