1: \begin{abstract} 

2: Deep neural networks (DNNs) are prominent due to their superior performance in many fields. %However, this success crucially relies on the availability of both hardware and software resources, as well as human expertise for many tasks (e.g., configuration of the DNN architectures and hyper-parameters). As the complexity of these tasks is often beyond non-DL-experts, the rapid growth of deep  learning applications has created a demand for cost-efficient solutions. This emerged 

3: The deep-learning-as-a-service (DLaaS) paradigm  enables individuals and organizations (clients) to outsource their DNN learning tasks to the cloud-based platforms. 

4: %for their needs of  flexibility, ease-of-use, and economics. 

5: However, the DLaaS server may return incorrect  DNN models due to various reasons (e.g., Byzantine failures). 

6: %Or An adversarial server can launch a variety of attacks to leave a backdoor in the DNNs and force them to misbehave in certain direction. 

7: This raises the serious concern of how to verify if the DNN models trained by potentially untrusted DLaaS servers are indeed correct.

8: To address this concern, in this paper, we design \system, a framework that supports efficient correctness verification of DNN models in the DLaaS paradigm. 

9: %We focus on a particular type of incorrect local model updates that does not reach local convergence. 

10: The key idea of \system is the design of a small-size cryptographic proof of the training process of the DNN model, which is  associated with the model and returned to the client. Through the proof, \system can verify the correctness of the DNN model returned by the DLaaS server with a deterministic guarantee and cheap overhead. 

11: Our experiments on four real-world datasets  demonstrate the efficiency and effectiveness of \system.

12: \vspace{-0.1in}

13: \keywords{Deep learning, integrity verification, deep-learning-as-a-service}

14: \end{abstract}

15: