Youyeon Joo

dblp:351/5504 · DBLP profile ↗
← Back
4ranked-venue papers
0as first author
4since 2021 · last 2026
0009-0000-7310-2161ORCID · corroborated

Domains — the database's venue-derived domains; a paper can count in several

Systems, architecture and hardware · 2 · 2 since 2021Security and privacy · 2 · 2 since 2021Software engineering, systems software and programming languages · 1 · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
3 papers
Cryptographic protocols and secure computation · 38% Cryptographic primitives and cryptanalysis · 38% Privacy and data protection · 24%
Computer architecture, parallel and distributed computing, and storage systems
1 paper
Hardware accelerators and domain-specific architectures · 100%

Topics — the 6 heaviest of 6, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Cryptographic primitives and cryptanalysis
homomorphic encryption
2.732026
HEPIC: Private Inference over Homomorphic Encryption with Client Intervention · ASPLOS (2) 2026
LOHEN: Layer-wise Optimizations for Neural Network Inferences over Encrypted Data with High Performance or Accuracy · USENIX Security Symposium 2025
SLOTHE : Lazy Approximation of Non-Arithmetic Neural Network Functions over Encrypted Data · USENIX Security Symposium 2025
Privacy and data protection
privacy-preserving machine learning
1.722025
LOHEN: Layer-wise Optimizations for Neural Network Inferences over Encrypted Data with High Performance or Accuracy · USENIX Security Symposium 2025
SLOTHE : Lazy Approximation of Non-Arithmetic Neural Network Functions over Encrypted Data · USENIX Security Symposium 2025
Cryptographic protocols and secure computation › secure inference
secure neural network inference
1.722025
LOHEN: Layer-wise Optimizations for Neural Network Inferences over Encrypted Data with High Performance or Accuracy · USENIX Security Symposium 2025
SLOTHE : Lazy Approximation of Non-Arithmetic Neural Network Functions over Encrypted Data · USENIX Security Symposium 2025
Cryptographic protocols and secure computation
secure inference
1.012026
HEPIC: Private Inference over Homomorphic Encryption with Client Intervention · ASPLOS (2) 2026
Hardware accelerators and domain-specific architectures
machine learning accelerator
0.312026
HEPIC: Private Inference over Homomorphic Encryption with Client Intervention · ASPLOS (2) 2026
Hardware accelerators and domain-specific architectures › security accelerator
privacy-preserving inference accelerator
0.312026
HEPIC: Private Inference over Homomorphic Encryption with Client Intervention · ASPLOS (2) 2026

Methods — techniques the papers use, named apart from their topics

task scheduling · 2.0scheme conversion · 2.0pipelining · 2.0bootstrapping · 2.0
YearPublicationVenuePosition
2026 HEPIC: Private Inference over Homomorphic Encryption with Client Intervention
abstract
Homomorphic Encryption (HE) enables Private Inference (PI) in Machine Learning as a Service (MLaaS), protecting both client inputs and server-side neural network (NN) parameters. Existing PI techniques are predominantly implemented as either HE-based fire-and-forget methods or MPC-based interactive methods. Recent HE-based PI systems improve the accuracy--performance trade-off via a layer-wise scheme and parameter switching, yet remain bottlenecked by fire-and-forget execution in which the server alone performs costly ciphertext management (e.g., bootstrapping and scheme/parameter conversions). We present HEPIC, an HE-based PI system that explores a different design point by leveraging client interventions for ciphertext managements. In a sense, HEPIC shares a common ground with MPC-based PI of being interactive with the client, but differs in that the client only intervenes for ciphertext managements required in HE operations. Because ciphertext management has identical semantics on the client and the server, HEPIC lets developers decide where and how often to execute it, enabling fine-grained trade-offs among computation, communication, and ciphertext configuration. HEPIC makes such execution practical by overlapping client re-encryption, server computation, and communication via dependency-aware pipelining and streaming-based transfers. We further enhance the performance with a cache-aware task allocator (CATA) and a cost-aware client intervention scheduler (CACIS) to exploit ciphertext-level parallelism and to mitigate stalls under client-server performance disparity. Our evaluation shows that HEPIC achieves up to 2.20--41.93× speedup over state-of-the-art fire-and-forget HE-based PI, while maintaining zero loss in inference accuracy.
Kevin Nam, Youyeon Joo, Seungjin Ha, Hyungon Moon, Yunheung Paek
ASPLOS (2)2
2025 An Accelerator for Low-Computational Overhead Privacy-Preserving GNN Inference
abstract
Graph Neural Networks (GNNs) are increasingly used in domains such as finance and bioinformatics, where both node features and edge structures can contain sensitive information. While Fully Homomorphic Encryption (FHE) offers a promising solution for privacy-preserving GNN inference, existing approaches such as PPGNN rely on costly Homomorphic Rotation and MUX operations for operand obfuscation, resulting in significant computational overhead. In this work, we propose a new obfuscation method that leverages the probabilistic nature of FHE to duplicate ciphertexts at the client side, thereby eliminating the need for runtime selection logic. To support this method efficiently, we design a pipelined hardware accelerator with a simplified CKKS datapath and parallel TFHE execution, avoiding the complexity of rotation-heavy designs. Despite reduced ciphertext reuse, our architecture mitigates memory pressure through buffer-aware PBS unit design. Experimental results demonstrate up to$8.8 \times$speedup and$7.69 \times$energy efficiency improvement over PPGNN, while also outperforming existing multi-scheme accelerators such as Trinity and UFC even when applying the same obfuscation strategy. Our approach offers a practical and scalable solution for efficient, privacy-preserving GNN inference.
Heon Hui Jung, Whoi Ree Ha, Kevin Nam, Youyeon Joo, Lucas Oros, Yunheung Paek
HiPC4
2025 SLOTHE : Lazy Approximation of Non-Arithmetic Neural Network Functions over Encrypted Data
Kevin Nam, Youyeon Joo, Seungjin Ha, Yunheung Paek
USENIX Security Symposium2
2025 LOHEN: Layer-wise Optimizations for Neural Network Inferences over Encrypted Data with High Performance or Accuracy
Kevin Nam, Youyeon Joo, Dongju Lee, Seungjin Ha, Hyunyoung Oh, Hyungon Moon, Yunheung Paek
USENIX Security Symposium2