Privacy-Preserving Inference in Machine Learning Services Using Trusted Execution Environments

T. Ryffel, E. Dufour Sans, R. Gay, F. Bach, and D. Pointcheval, “Partially encrypted machine learning using functional encryption,” CoRR , vol. abs/1905.10214, 2019. [Online]. Available: http://arxiv.org/abs/1905.10214

Original

1905

Earlier work this paper cites.

T. Alves, “Trustzone : Integrated hardware and software security,” 2004

2004

Earlier work this paper cites.

Zhou Wang, A. C. Bovik, H. R. Sheikh, and E. P. Simoncelli, “Image quality assessment: from error visibility to structural similarity,” IEEE Transactions on Image Processing , vol. 13, no. 4, pp. 600–612, April 2004

2004

Earlier work this paper cites.

J. Deng, W. Dong, R. Socher, L.-J. Li, K. Li, and L. Fei-Fei, “Imagenet: A large-scale hierarchical image database,” in Proc. IEEE conf. Computer Vision and Pattern Recognition (CVPR) , 2009, pp. 248–255

2009

Earlier work this paper cites.

E. Cuervo, A. Balasubramanian, D.-k. Cho, A. Wolman, S. Saroiu, R. Chandra, and P. Bahl, “Maui: Making smartphones last longer with code offload,” in Proceedings of the 8th International Conference on Mobile Systems, Applications, and Services , ser. MobiSys ’10. New York, NY, USA: ACM, 2010, pp. 49–62. [Online]. Available: http://doi.acm.org/10.1145/1814433.1814441

2010

Earlier work this paper cites.

B.-G. Chun, S. Ihm, P. Maniatis, M. Naik, and A. Patti, “Clonecloud: Elastic execution between mobile device and cloud,” in Proceedings of the Sixth Conference on Computer Systems , ser. EuroSys ’11. New York, NY, USA: ACM, 2011, pp. 301–314. [Online]. Available: http://doi.acm.org/10.1145/1966445.1966473

2011

Earlier work this paper cites.

M.-R. Ra, A. Sheth, L. Mummert, P. Pillai, D. Wetherall, and R. Govindan, “Odessa: Enabling interactive perception applications on mobile devices,” in Proceedings of the 9th International Conference on Mobile Systems, Applications, and Services , ser. MobiSys ’11. New York, NY, USA: ACM, 2011, pp. 43–56. [Online]. Available: http://doi.acm.org/10.1145/1999995.2000000

2011

Earlier work this paper cites.

M. S. Gordon, D. Anoushe, J. Scott, M. Z. Morley, and M. X. Chen, “Comet: Code offload by migrating execution transparently,” in In Proc. USENIX OSDI , 2012

2012

Earlier work this paper cites.

F. McKeen, I. Alexandrovich, A. Berenzon, C. V. Rozas, H. Shafi, V. Shanbhogue, and U. R. Savagaonkar, “Innovative instructions and software model for isolated execution,” in Proceedings of the 2Nd International Workshop on Hardware and Architectural Support for Security and Privacy , ser. HASP ’13. New York, NY, USA: ACM, 2013, pp. 10:1–10:1. [Online]. Available: http://doi.acm.org/10.1145/2487726.2488368

2013

Earlier work this paper cites.

I. J. Goodfellow, J. Pouget-Abadie, M. Mirza, B. Xu, D. Warde-Farley, S. Ozair, A. C. Courville, and Y. Bengio, “Generative adversarial networks,” ArXiv , vol. abs/1406.2661, 2014

Original

2014

Earlier work this paper cites.

M. Mirza and S. Osindero, “Conditional generative adversarial nets,” CoRR , vol. abs/1411.1784, 2014. [Online]. Available: http://arxiv.org/abs/1411.1784

Original

2014

Earlier work this paper cites.

K. Simonyan and A. Zisserman, “Very deep convolutional networks for large-scale image recognition,” CoRR , vol. abs/1409.1556, 2014

Original

2014

Earlier work this paper cites.

A. Dosovitskiy and T. Brox, “Inverting convolutional networks with convolutional networks,” CoRR , vol. abs/1506.02753, 2015. [Online]. Available: http://arxiv.org/abs/1506.02753

Original

2015

Earlier work this paper cites.

A. Mahendran and A. Vedaldi, “Understanding deep image representations by inverting them,” in 2015 IEEE Conference on Computer Vision and Pattern Recognition (CVPR) , June 2015, pp. 5188–5196

2015

Cited alongside, same era.

V. Costan and S. Devadas, “Intel sgx explained,” IACR Cryptology ePrint Archive , vol. 2016, p. 86, 2016

2016

Cited alongside, same era.

V. Costan, I. Lebedev, and S. Devadas, “Sanctum: Minimal hardware extensions for strong software isolation,” in Proceedings of the 25th USENIX Conference on Security Symposium , ser. SEC’16. Berkeley, CA, USA: USENIX Association, 2016, pp. 857–874. [Online]. Available: http://dl.acm.org/citation.cfm?id=3241094.3241161

2016

Cited alongside, same era.

N. Dowlin, R. Gilad-Bachrach, K. Laine, K. Lauter, M. Naehrig, and J. Wernsing, “Cryptonets: Applying neural networks to encrypted data with high throughput and accuracy,” in Proceedings of the 33rd International Conference on International Conference on Machine Learning - Volume 48 , ser. ICML’16. JMLR.org, 2016, pp. 201–210. [Online]. Available: http://dl.acm.org/citation.cfm?id=3045390.3045413

Z. Gu, H. Huang, J. Zhang, D. Su, A. Lamba, D. Pendarakis, and I. Molloy, “Securing input data of deep learning inference systems via partitioned enclave execution,” CoRR , vol. abs/1807.00969, 2018. [Online]. Available: http://arxiv.org/abs/1807.00969

Original

2018

Later among the works it cites.

C. Juvekar, V. Vaikuntanathan, and A. Chandrakasan, “Gazelle: A low latency framework for secure neural network inference,” in Proceedings of the 27th USENIX Conference on Security Symposium , ser. SEC’18. Berkeley, CA, USA: USENIX Association, 2018, pp. 1651–1668. [Online]. Available: http://dl.acm.org/citation.cfm?id=3277203.3277326

2018

Later among the works it cites.

M. Lipp, M. Schwarz, D. Gruss, T. Prescher, W. Haas, S. Mangard, P. Kocher, D. Genkin, Y. Yarom, and M. Hamburg, “Meltdown,” 2018

2018

Later among the works it cites.

L. Liu, S. Li, Y. Chen, and G. Wang, “X-gans: Image reconstruction made easy for extreme cases,” CoRR , vol. abs/1808.04432, 2018. [Online]. Available: http://arxiv.org/abs/1808.04432

Original

2018