Pith. sign in

Paper Citation Record · LEDGER

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models

As of 13 August 2026, this Paper Citation Record lists 100 of 168 outbound references and 2 inbound Pith citation observations for arXiv:2411.09945.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2411.09945 v1

Coverage vector

measured 100 of 168 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-12T20:14:25.101829Z

measured 102 of 102 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-13T06:32:02.005865+00:00

measured 2 of 2 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-05-08T17:56:09.884837Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-05-12T10:46:31.754330Z

Reference resolution

100 of 168 outbound references displayed

  • verified exact5
  • verified fuzzy0
  • unresolved88
  • parse uncertain0
  • malformed identifier2
  • metadata mismatch5

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 643f8c6e-fd56-42fc-9b24-07c09f37e176 · outbound

This paper cites Knockoff Nets Demo Code.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Knockoff Nets Demo Code

Reference 1

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.668940Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.668940Z digest=sha256:8f2da0afe87551a664836f3217512e555cc3ed5b0f8d4c0b8b1c61af55e0e2d5

Observation 3f7f9ba0-eed8-41f8-8422-6b3642ffb75c · outbound

This paper cites ML-Doctor Demo Code.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models ML-Doctor Demo Code

Reference 2

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.673346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.673346Z digest=sha256:b06302c0a6227672fef86dc949285cc99d62b0db5c711c84e034273b48c2ddd5

Observation dd16bda5-cc4e-4b38-8277-b42355194de2 · outbound

This paper cites One-time pad.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models One-time pad

Reference 3

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.677750Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.677750Z digest=sha256:5e6226dbffec8f7f9e95c00849f31592182506c4efe686f8b7f4dd454cf3e163

Observation 7d535393-30eb-42e7-8b5a-91c9984d64f5 · outbound

This paper cites Android 7.0 Compatibility Definition.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Android 7.0 Compatibility Definition

Reference 4

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.682073Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.682073Z digest=sha256:3d89485b6970d5dd817fb52065c7bc695a385fab9cd01f8076e2761e6364e2f9

Observation f89c8110-8574-4014-9197-634e2106465d · outbound

This paper cites Artifact.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Artifact

Reference 5

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.686111Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.686111Z digest=sha256:0c1e41c68542de764fbb620b861a52e75cb56bf4f90e2b601f886f5ab99ced19

Observation 86f76f0f-d50b-43df-8827-a7bb9fd450c0 · outbound

This paper cites Full Supplementary.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Full Supplementary

Reference 6

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.690071Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.690071Z digest=sha256:2649920bcc862c69c1c5a10738e8316a98bb518b6e2258cc4ea47377f2cb0d6d

Observation f0af1495-0601-40ee-9b1b-90cda497101f · outbound

This paper cites OP-TEE documentation Raspberry Pi 3.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models OP-TEE documentation Raspberry Pi 3

Reference 7

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.694133Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.694133Z digest=sha256:e4d636f35516fd2fcb09dd8c3724bf3af5a0b18141080a250841305d8275559c

Observation 2f0d6b9a-d261-48f2-8e86-946fbfa5aebf · outbound

This paper cites Artifact for LLM.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Artifact for LLM

Reference 8

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.697956Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.697956Z digest=sha256:0ab80b9ec4da4f1680e1df06c29776b3cc455b34d9587dd20ef2620991fb118f

Observation c44992c3-45b5-4c26-8efa-10053b8d8624 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 9

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.702189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.702189Z digest=sha256:7c16c3fe220c00465ad2b58bcdb7073fef0c1aa1b000ce782455a268aeb828ba

Observation b12ed0ed-43fd-4acc-a402-0279edb7d7ff · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 10

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.705810Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.705810Z digest=sha256:23001b8be736ccf4ca9ffa43301d206b61e41706a5dc44f0fcdab91f0b82b15c

Observation 4fae174b-e775-495b-b453-237b3e0c304f · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 11

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.709574Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.709574Z digest=sha256:9c855914c0bd1c1a9c3c49be5ff10d0f143d9d8377c166aa78c900d98b442b91

Observation cc488c5f-1345-40cb-afbb-917bd4e9d8b8 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 12

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.714166Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.714166Z digest=sha256:190242f764ba4a9197f13c7634427482b5bd1acd04b380583e970b6d4de5beec

Observation 1f8bcc7a-a47f-457b-a245-f806802dece7 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 13

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.718491Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.718491Z digest=sha256:c2634b96cfa4a79618f6971363d3ad3a338ee91c4098de5b05275f6c92c9e84c

Observation a2161b3b-23aa-4ea2-9be8-9f18c87072e9 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 14

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.722325Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.722325Z digest=sha256:d4e0601eebee59c5a8f00f5152b761fca3f771eccb29b84c93f5a787423897fa

Observation 856f8e72-e3bf-47e7-ae7b-d9dd39b8ffac · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 15

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.725792Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.725792Z digest=sha256:18cc186e86766600f43ac83fadbd0a6f5ee8f9735e5695f6492313546b91fc8b

Observation 96545283-6be7-439e-95e2-069aba818146 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 16

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.729702Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.729702Z digest=sha256:77e5e4b2afac1ffb7ef0baf76b2eed34bb97498a77074e3a380585c0d624b6db

Observation dcc6e380-e367-4988-9305-b3d60e4413f8 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 19

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.742597Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.742597Z digest=sha256:147dabfe8d24d0aceb92a30e1ed0e0dfcbcf6c6b2f23eb29f06550a2ff1f2721

Observation 481bb3fd-6efc-48ba-8f59-aedb5849ff10 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 20

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.746419Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.746419Z digest=sha256:5636c32f7f679cd8e4075586d7fcb07aaa64ca9eeffd89779fba483f41984f8b

Observation 3edb8cec-e2a6-48d0-bb15-1f186075a2aa · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 21

Resolution
metadata mismatch
raw_fallback, observed 2026-08-12T20:14:28.405325Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T20:14:24.750285Z digest=sha256:d4154fc231196ca8a411c026f507daca06d77b4ef3e4a22ad9c679548d724b55

Observation f27ad94f-619c-406d-9f48-19f9500cdde7 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 22

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.754094Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.754094Z digest=sha256:357eb4b15b88d72ebfad8e2d673dfdd538ce3834cbbc8fe71ff00cb012b47280

Observation 5de53a38-292c-4f11-8bc3-26a1878d7d68 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 23

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.757979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.757979Z digest=sha256:a98397e0fba98b600ed4356625b6151b96c6f46e565295d54806aad7d2cf55c0

Observation 4df8a29b-5e32-42cf-b368-bb201f219607 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 24

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.766081Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.766081Z digest=sha256:d63d7b4b691e69aa145907ecc0a8a03d2b38d2b7653f5587deb1f7b11d9db89e

Observation f59f7827-3907-4fad-bc57-4a23c7b61343 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 25

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.770410Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.770410Z digest=sha256:ad6409566e7fa2d5d48fc365d26d7796addaab550f0138a78b8254aa969e47df

Observation c17396c0-e19f-4383-a35e-123b7649bbcb · outbound

This paper cites Ng, and Honglak Lee.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Ng, and Honglak Lee

Reference 26

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.774768Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.774768Z digest=sha256:3178060bcd0cee2deeaa674e77600c218259aabe57bc5feb652b605167d0d3de

Observation a3e698a2-fd82-4342-8bc4-41543c31df8d · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 27

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.779200Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.779200Z digest=sha256:5239716548d7c121cfc3c5ca9a6b0135aa0c316e49ba804a595865741210cd89

Observation e96ed687-e805-492c-93ee-886693db1e5e · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 28

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.783626Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.783626Z digest=sha256:572a74147df76f10c141e438aa6311d316b7166b11c274c09020f33742eb03d4

Observation f3e32d19-b154-4e06-8d23-daf6b7ef403d · outbound

This paper cites Lightweight Convolutional Representations for On-Device Natural Language Processing.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Lightweight Convolutional Representations for On-Device Natural Language Processing

Reference 29

Resolution
verified exact
local_arxiv, observed 2026-08-12T20:14:28.080938Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T20:14:24.788243Z digest=sha256:29cc27e9ddf8d4488db3f1b8776f72b9e2982df46e7f4e04750f7a27178a1196

Observation 130f49ad-de38-4a0f-b525-7d42ef90b7ee · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 30

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.793049Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.793049Z digest=sha256:2e1da07473fd35697474447bab96b6c4f198bdb43bd10bb59ae5b197b6935f9c

Observation 1e7a0664-5de4-47d6-9c83-104e17de5b7c · outbound

This paper cites An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale

Reference 31

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.797643Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.797643Z digest=sha256:e0da59145300ff6076138778bbd5f385863f007e24f4a6b0c1df126fcfa1aeea

Observation d985ed68-6a46-46f6-9ee1-b3d3a12005d1 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 32

Resolution
metadata mismatch
raw_fallback, observed 2026-08-12T20:14:28.051984Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T20:14:24.803028Z digest=sha256:37dfa9d9f1ee3481cd5778325dae22213466b50adf1763391eed08ce4449718b

Observation 0dcbf7d6-ed46-4ec3-9429-864e74e3bf90 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 33

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.807564Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.807564Z digest=sha256:066babd8da38a4b15fbb9837cf39fac19337edf2a08563dbb19dd3dc4e0bb88d

Observation 78664bee-6f86-4786-8330-8d17e56ee497 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 34

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.811995Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.811995Z digest=sha256:153b6af76a8f2b938c31ebd93a8572bb51b6f4d6e2fdb25dfa5aa4ea627fee1a

Observation 36a6b583-ba00-4d6e-8bda-cc5e0a15457b · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 35

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.816820Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.816820Z digest=sha256:c21b630595e1816e4abdfaacdae2b93d65b14bceae7b49391c025d6a663949cc

Observation 9a96c959-7689-4c83-94a4-3cab0bc894fa · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 36

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.821294Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.821294Z digest=sha256:093501e258241877d35fd66f6519f4c333b3c20b5f9bd6fe034d34ca955005c3

Observation af055236-2dfa-4b8d-9b01-3c3f86d99ef8 · outbound

This paper cites Lauter, Michael Naehrig, and John Wernsing.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Lauter, Michael Naehrig, and John Wernsing

Reference 37

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.825571Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.825571Z digest=sha256:0cf774327a1fa81553dd1cdda40632624e9ac69433510adfba9cb40bbad0f127

Observation 16e2686c-7a21-4c10-9eb4-0984284a68bf · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 38

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.830504Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.830504Z digest=sha256:55dda91d9b36260ff9d6bd866bfd429981f1588bcce23aee6b5416aafee1f049

Observation 8e6d014b-228d-43d1-83d9-e39cc0982033 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 39

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.834094Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.834094Z digest=sha256:70a50426c7a2c4a96fa6c92b4af343c74a3c209e0c17d7833d4ce9901f720cca

Observation 9cea6395-6948-49bd-a5cd-89463ec30dab · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 40

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.838042Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.838042Z digest=sha256:cfb390000ad387f8f009404a569252898b59feac6c024f0ea3f8de1461179262

Observation 0c9a995f-f2bd-40c3-bbd4-347a36acf812 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 41

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.841808Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.841808Z digest=sha256:53994215c2b43e0f92f279926b88e530d1de548d40ffde7b1315f45e2b982fdf

Observation 1e09350b-d344-4c4b-b480-f3ec6ed5d770 · outbound

This paper cites Confidential Inference via Ternary Model Partitioning.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Confidential Inference via Ternary Model Partitioning

Reference 42

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.845578Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.845578Z digest=sha256:baad9b019e7a389ea8310cf175bd5990baf02e6d3498cd9471140e9a36dcfaa9

Observation be11c6b7-710e-48ab-b43c-9284da4387c5 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 43

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.849721Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.849721Z digest=sha256:88b2b6696bd8e4b2fe52c1b38b62036cbc4adf19990f240c4e29d6de2b9df37e

Observation dddee61b-b8e5-4b39-a929-af0479b4147a · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 44

Resolution
malformed identifier
no resolver link, observed 2026-08-12T20:14:24.857616Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.857616Z digest=sha256:08159e643a148fec522c0c6dcc7a3418152976a9ee28e5614e86450fc1a6af03

Observation aebd2840-6720-4a9e-8468-7f3b344727e6 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 45

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.862114Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.862114Z digest=sha256:c72c584c45ff5e6477111e5904c0b3eff9cc258a378e9e841cf611839e5a1686

Observation 754833bc-8c9e-4586-a6a6-c191ae778a2e · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 46

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.869983Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.869983Z digest=sha256:40eda3d3d4c16acb2a5aef31bd54d1029c09ecec19aba396154387352e58b8a2

Observation 8bb21246-4186-436f-99fb-4db158792bf1 · outbound

This paper cites Hu, Yelong Shen, Phillip Wallis, Zeyuan Allen-Zhu, Yuanzhi Li, Shean Wang, Lu Wang, and Weizhu Chen.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Hu, Yelong Shen, Phillip Wallis, Zeyuan Allen-Zhu, Yuanzhi Li, Shean Wang, Lu Wang, and Weizhu Chen

Reference 47

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.873955Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.873955Z digest=sha256:0f6330a69e17acc21639c38b106cbc60cd1629e3b0de4d2425393169f4699ce1

Observation 6c41d576-1722-4f32-98a0-0a7a4966d5bc · outbound

This paper cites Yu, and Xuyun Zhang.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Yu, and Xuyun Zhang

Reference 48

Resolution
malformed identifier
no resolver link, observed 2026-08-12T20:14:24.881024Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.881024Z digest=sha256:60d0cc9b3497c5c061a42528b28918e5963f72f4e6f7a01ab360c341d4795198

Observation 30d81876-abc7-416c-8fa5-a1663615b9be · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 49

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.884616Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.884616Z digest=sha256:63e039b2b6da83ebe1d0758ad02d29b7317749f26a2df839765da06c17145348

Observation 6d25424d-4000-416c-b284-ccaf23f6dddd · outbound

This paper cites In The Tenth International Conference on Learning Representations, ICLR 2022, Virtual Event, April 25-29, 2022.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models In The Tenth International Conference on Learning Representations, ICLR 2022, Virtual Event, April 25-29, 2022

Reference 50

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.877647Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.877647Z digest=sha256:9e2777cb6326cde6db6d6b08363e3a84cc3a4bf0b72c7b569601f1a7dbad7b25

Observation 746e166b-c1ed-47ff-ad92-2be7cf827f08 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 51

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.892906Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.892906Z digest=sha256:7dc099bb3491c976ab094c065f033f73b6db84d1c45cedd585a7946f9cccc3f3

Observation aa12fe3b-79f9-48ce-9a3a-ef244e6219f7 · outbound

This paper cites GuardNN: Secure Accelerator Architecture for Privacy-Preserving Deep Learning.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models GuardNN: Secure Accelerator Architecture for Privacy-Preserving Deep Learning

Reference 52

Resolution
verified exact
local_arxiv, observed 2026-08-12T20:14:27.653762Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T20:14:24.897240Z digest=sha256:d58f2cf4324eb044a3e6bc39766ab648faef453836a90d28c7a49f8a27611cbb

Observation b197a880-88c2-4197-a14a-f3da73ff797c · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 53

Resolution
verified exact
doi, observed 2026-08-12T20:14:25.456988Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T20:14:24.888432Z digest=sha256:e973147a72b13429411e10d12259e7e13c9120e6631eedb484f29bd69a536f55

Observation 6d30b0b3-274d-48bf-95a4-3e108b2e05ab · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 54

Resolution
metadata mismatch
raw_fallback, observed 2026-08-12T20:14:27.566618Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T20:14:24.905914Z digest=sha256:ca7a43168781c700db6659ac2151791b4b60fb7dd4c5f1e46e829674447763b7

Observation ad61212f-8063-4ff1-910a-3c68cd4976db · outbound

This paper cites Efficient Privacy-Preserving Machine Learning with Lightweight Trusted Hardware.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Efficient Privacy-Preserving Machine Learning with Lightweight Trusted Hardware

Reference 55

Resolution
verified exact
local_arxiv, observed 2026-08-12T20:14:27.492232Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T20:14:24.910390Z digest=sha256:45aece6b7338370581b2fc8d4526812ac81bc183b91dbd3f0d299c88cd161109

Observation 9c50dd22-863a-4f97-bf8d-0adf012412c3 · outbound

This paper cites Edward Suh.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Edward Suh

Reference 56

Resolution
metadata mismatch
raw_fallback, observed 2026-08-12T20:14:27.636964Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T20:14:24.901891Z digest=sha256:7fb919f08f33d360e6144ba1fa276e2f9ff7dd8b5b8b36e3b52e09aaa21696e2

Observation 2bd4e6db-d930-440e-8c53-a345ec6689ff · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 57

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.919059Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.919059Z digest=sha256:7878b0360cbea6b5a39c4f05d601f27f2101bacbf480f71747a9111d155a2949

Observation 78da335d-8b1b-406c-97b8-3362d19300ec · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 58

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.923057Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.923057Z digest=sha256:93ec054fbfa0a8fdfe8a47f8f60878bcffde657e7c1c7ccea69aba3d0f9e6290

Observation 1cd895ae-1f00-4cf5-9b35-d841f18a8fa0 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 59

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.914743Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.914743Z digest=sha256:a69b074a054ab225898486184481a170619b5fb7f15d877de5fb9aad0c160ee9

Observation a367a175-5ddc-47ad-8811-db89d8bfe558 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 60

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.930476Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.930476Z digest=sha256:3f5a9b5ab41b916120d4680115974592c02571a1f39fd548241151a3b919d575

Observation fa02125c-d018-4342-9177-f2a2ef5acc4c · outbound

This paper cites Chandrakasan.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Chandrakasan

Reference 61

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.934477Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.934477Z digest=sha256:c3e7815cc7d14a9e3c1d6952b84c9e486f56809964996ae772bedf57ba4ea85d

Observation eb1fd2e1-31c7-420c-9838-3d940c34b129 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 62

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.926740Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.926740Z digest=sha256:ab40f3013cbfa142abeae5c112fffb80c3fe749fc6b871df03993d2638f45e8c

Observation ea665e22-b3b2-4802-a553-01af658663e3 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 63

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.943191Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.943191Z digest=sha256:e79d88ac2773a5536d3e07dc098c69af0a9232733bd2046f8c1e2ffc035a84e2

Observation 728f9154-3e8f-4b9c-9a1c-fe6a2ed3100d · outbound

This paper cites On the Effectiveness of Regularization Against Membership Inference Attacks.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models On the Effectiveness of Regularization Against Membership Inference Attacks

Reference 64

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.947478Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.947478Z digest=sha256:72eef7abbfe6811249ec0373f6cb5ec2d986e47f75bd6e2e5d5ce210c58f5086

Observation 9bc0a84d-7037-4e48-8eae-9906996a4eb5 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 65

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.939172Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.939172Z digest=sha256:63647271599b42a34c3291e5352fc6884c88ff5676f7e8ed37f1aeceff2ef023

Observation 337f2da7-cdd0-4881-82e1-cba1155f5f37 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 66

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.956557Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.956557Z digest=sha256:1f46cb05114faaafe19d11b9ce2183b159cc0668eefc25d510b876479b3f8de5

Observation 2128416f-181f-4d11-8b80-1a287671cb7e · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 67

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.961644Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.961644Z digest=sha256:7c6e8740e6e05b2db44933b7e860f7f6195e269f9e09a7acd7bda54fe1e4a38c

Observation 858abe51-cf85-4c30-b2fb-1446143f1788 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 68

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.952467Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.952467Z digest=sha256:fe0e78695ac9d19a53a80c9c52450c6eba1d41e13d2f5e4b10ea7b2abf9193c7

Observation 03c31983-5997-42ab-885c-d7c2516b4183 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 69

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.970877Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.970877Z digest=sha256:eacf04c87be6a1b86dc6d68ac51c0a9b2c5078d8d492bae8691c76f0f706c9a7

Observation ab810b80-d82c-4e02-b0ea-946477018765 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 70

Resolution
metadata mismatch
raw_fallback, observed 2026-08-12T20:14:27.282563Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T20:14:24.975594Z digest=sha256:4545db89d203c8c8eeab7df35f3847ce1496263b7b0bfc4435cde89937cb8a21

Observation fd256c4e-ce67-4e00-8965-0b139e3bbba8 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 71

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.966108Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.966108Z digest=sha256:a0324bba31c91c46cb1a4798312f4a9b92ddcba312a9358857cf69db368dbad6

Observation f7555294-4fef-4dff-a571-ee8e1631f93e · outbound

This paper cites Molloy, and Dong Su.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Molloy, and Dong Su

Reference 72

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.984053Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.984053Z digest=sha256:4b7ba3866705acaf2240aa92ab6f14f130893cfbb418798c2a038496319640d3

Observation 5b4833bf-c71d-485f-9aa5-ab355128e852 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 73

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.987806Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.987806Z digest=sha256:4b0beb1e1a6d3e9cb3571646ee4620310cc414a4f8f80286c379187dc1a5d75a

Observation aa22915e-ba1e-4111-b736-e013ff2efc0c · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 74

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.979692Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.979692Z digest=sha256:f4eb9dec160a451a4358a875717d3faef9b780c1e4d32b0ff262021edb4b8c15

Observation 31006564-d1b1-4d7c-8f70-f0ba738b99f3 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 75

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.995559Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.995559Z digest=sha256:9c56a56e20b26b17aeb3cbc34f92a0fbd10a4a35f02a6760e0b3ab3aa0de4492

Observation 7c0cbd72-f705-4463-ac3c-2f8578314ed2 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 76

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.999820Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.999820Z digest=sha256:10a3de9881ad29cb1c0e31847c3da9077954fc64022c64df4cc03e93ec6301f8

Observation f10ceab6-d963-4f71-b911-584ba916fe0d · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 77

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:24.991458Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:24.991458Z digest=sha256:7d961d5ea5275220aa9e47c38bdfeb4a4871da10dc48e0881ec4ef344d4a5894

Observation 3a6f5ff7-ef35-4352-88a4-3531ab111517 · outbound

This paper cites Zomaya, and Minyi Guo.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Zomaya, and Minyi Guo

Reference 78

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:25.008008Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:25.008008Z digest=sha256:fab163effa8dc436f483714894785fe50d6d703d7e0a04749e3de35702cfce83

Observation 2b552ec7-1d09-45a0-b2bd-341621e2e7eb · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 79

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:25.011605Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:25.011605Z digest=sha256:08e254b67b6ee3f2299950bbb9a844a596000e47d4c0abf9927b9b5bbbc78b86

Observation b6b3514c-e7f8-439e-8e7e-dca534b20f04 · outbound

This paper cites TransLinkGuard: Safeguarding Transformer Models Against Model Stealing in Edge Deployment.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models TransLinkGuard: Safeguarding Transformer Models Against Model Stealing in Edge Deployment

Reference 80

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:25.003751Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:25.003751Z digest=sha256:3b2bb9744920175c1a04827bc6b41850893948eeeda14913c65864d9eb8263fa

Observation 57edd652-09a6-4ed6-99ff-03e73311b3f0 · outbound

This paper cites Belongie, James Hays, Pietro Perona, Deva Ramanan, Piotr Dollár, and C.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Belongie, James Hays, Pietro Perona, Deva Ramanan, Piotr Dollár, and C

Reference 81

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:25.018966Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:25.018966Z digest=sha256:3679e44425ecedb3e169c8221d697d28b19a77b8e25c8ccaf8abcb632845fb3c

Observation ab6708d9-54ab-4a9e-9a84-4080ef2e651b · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 82

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:25.022775Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:25.022775Z digest=sha256:ed89279047b6156a8e9b946e7f294e0faff157abd6f002fa47541a75c4262d9d

Observation 29371ebe-ce0b-4807-a8e7-ad245a8b1e3b · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 83

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:25.015162Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:25.015162Z digest=sha256:e100135f5f4bcc78e67766bbf0f3d42e5f07668208a7ed98f28f62a5b4556039

Observation d4e164a7-4b63-4cda-9ec0-9f3e2d15b0cd · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 84

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:25.034091Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:25.034091Z digest=sha256:d06f75616b168478afed7c135fcc8cc0e4c22c819110b41491d6e7aa130e60c1

Observation f2ade33a-c858-4c95-926e-20eb7f83617a · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 85

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:25.038000Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:25.038000Z digest=sha256:7ab98b105c9ff46fc50058fac673f20f9592682e75b9a8a295220f4942ab8d84

Observation 0a3b716e-89dd-455d-bba2-96c798b2fedc · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 86

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:25.026561Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:25.026561Z digest=sha256:6a551d47f63a15a95b62070b650b6cbef783d0ba0ea17a650db67742feb99737

Observation afb90b72-b337-4cf9-8c70-292b5a3706fe · outbound

This paper cites In 2021 IEEE Symposium on Security and Privacy (SP).

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models In 2021 IEEE Symposium on Security and Privacy (SP)

Reference 87

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:25.030496Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:25.030496Z digest=sha256:98a464d241fd9cc4f24965a5515b2c3159cba7ee3592f9198239752b537b4ed3

Observation 7b58f324-080c-4e82-9148-89c7b4bcc25c · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 88

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:25.049578Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:25.049578Z digest=sha256:df7a3bd25667bf2fffb24045625d7ba18f8bcd5164d0dd41e1451458aef6218a

Observation 3fdffa5c-b24f-4022-97af-528065c28832 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 89

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:25.053164Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:25.053164Z digest=sha256:c3ed470ee385f3febdb31d8f7b384cfca0ca1f484cebeb9c1da34bb9b4bedc2f

Observation ef0945c2-b8e9-469f-ad05-0ce86dc0c5fd · outbound

This paper cites MirrorNet: A TEE-Friendly Framework for Secure On-device DNN Inference.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models MirrorNet: A TEE-Friendly Framework for Secure On-device DNN Inference

Reference 90

Resolution
verified exact
local_arxiv, observed 2026-08-12T20:14:25.431814Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T20:14:25.041759Z digest=sha256:7b4e35684b1d8926784aa0abee251ae9f3734002e402dbbd864ba9723e5aa51c

Observation 8af40926-cfff-40ad-b1c4-08ca27e3e583 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 91

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:25.045814Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:25.045814Z digest=sha256:b27cded1913a1b29498df9bab10e99520a64c343f443aadc43524dfac34c5532

Observation c26bfcfb-b284-4a75-91cb-5c4eb267c5db · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 92

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:25.065247Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:25.065247Z digest=sha256:290be97b0c09c7735a38855df073a911aa378f48eae679ee5b17b52f9d0e2c17

Observation c640dfac-4190-4320-87d0-602ac47b0632 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 93

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:25.069971Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:25.069971Z digest=sha256:a1621979291afc529b56bdbef5386c62fe8ded05718cbd6e5ff1d3d7bad5f7f1

Observation 0a6e27a4-d7b2-45de-901a-624d3959a7c2 · outbound

This paper cites Rozas, Hisham Shafi, Vedvyas Shanbhogue, and Uday R.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Rozas, Hisham Shafi, Vedvyas Shanbhogue, and Uday R

Reference 94

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:25.057208Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:25.057208Z digest=sha256:d368f5e80f64b8ac9b113945595b7f6f8db0444a4ca6f410b7763328cf85e68f

Observation b155e48a-63ff-4954-ae5a-e4974c99e62e · outbound

This paper cites Dibbo, Ehsanul Kabir, Ninghui Li, and Elisa Bertino.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Dibbo, Ehsanul Kabir, Ninghui Li, and Elisa Bertino

Reference 95

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:25.060949Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:25.060949Z digest=sha256:126d7646c3dde37208204cac5f2398bec0903ba2f191b91cf28c5f94d87d8444

Observation 000e036e-459d-40ed-a963-889d5d9ff120 · outbound

This paper cites Tullsen, and Hadi Esmaeilzadeh.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Tullsen, and Hadi Esmaeilzadeh

Reference 96

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:25.083162Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:25.083162Z digest=sha256:0dd2898de3659cfba3f90a7c2d7ae1e368130fe41d4b24f17f10a19eb29baad3

Observation 399c3ca5-2309-4477-8f14-352f61f594cb · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 97

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:25.086947Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:25.086947Z digest=sha256:471942060b706bffafd6933ffe8d88740be4a1238ca8a90bf2256f7479e6f8a7

Observation babd23f8-c1b0-46d0-8ca7-c6e7d2fe13cf · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 98

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:25.074308Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:25.074308Z digest=sha256:fc7d95991ea501ca1c1585f26fe76533d245f48fb42a67f9993c096c41eadfcb

Observation df093e89-a5fa-401b-abc7-51b3652abe27 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 99

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:25.078726Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:25.078726Z digest=sha256:7762aa8cee0a1c7c77bb46be8edb0b47f3adad607d6e1a5c902214aa739ed225

Observation 8c5b115d-b633-4a9d-b453-c01c02f9bd15 · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 100

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:25.097576Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:25.097576Z digest=sha256:b76f20b691a82e54ce07c52b6f3104378669ffdf2a25a410136d39146a22f870

Observation 8516e641-2637-4fc0-ad7f-8031570f320c · outbound

This paper cites Oswald, Flavio D.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Oswald, Flavio D

Reference 101

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:25.101829Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:25.101829Z digest=sha256:95f70dfd4afafeaaa0ac38d888aeda9505eba2c38725572c3b8c0a602c75dd86

Observation be3869f2-f44b-4b81-a73c-900b5e59737a · outbound

This paper cites an unresolved cited work.

TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models Unresolved cited work

Reference 102

Resolution
unresolved
no resolver link, observed 2026-08-12T20:14:25.090345Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T20:14:25.090345Z digest=sha256:504c29f9265d424feece863b9b7aa4c916fa690ca280d3f2480b065e5586774d

Pith citing papers

Observation 023da1d1-28ed-4a64-b2e3-b7d57a9b0d4c · inbound

When Agents Handle Secrets: A Survey of Confidential Computing for Agentic AI cites this paper.

When Agents Handle Secrets: A Survey of Confidential Computing for Agentic AI TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models

Reference 34

Resolution
verified exact
arxiv_id, observed 2026-05-12T10:46:31.757375Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-05-07T02:12:30.086152Z digest=sha256:05651b811a600cd25add560bbcc47b41ba2e0ac171f20923d51afcfe19843347

Observation 87fee389-56d2-44f0-95d9-27fc7bd8b083 · inbound

When Agents Handle Secrets: A Survey of Confidential Computing for Agentic AI cites this paper.

When Agents Handle Secrets: A Survey of Confidential Computing for Agentic AI TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models

Reference 34

Resolution
verified exact
arxiv_id, observed 2026-05-09T06:55:45.470510Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-05-08T17:56:09.884837Z digest=sha256:f546779b1ee44c22b18c148378179e3f3811fad0416f1e80bc464238be5d2c2f