Memory-Efficient Deep Learning Inference in Trusted Execution Environments

P. J. Denning, “Thrashing: Its causes and prevention,” in Proceedings of the December 9-11, 1968, Fall Joint Computer Conference, Part I , ser. AFIPS ’68 (Fall, part I). New York, NY, USA: Association for Computing Machinery, 1968, p. 915–922

1968

Earlier work this paper cites.

G. Dundar and K. Rose, “The effects of quantization on multilayer neural networks,” IEEE Transactions on Neural Networks , 1995

1995

Earlier work this paper cites.

Z. Xianyi, W. Qian, and Z. Chothia, “Openblas,” URL: http://xianyi.github.io/OpenBLAS , 2012

2012

Earlier work this paper cites.

K. Simonyan and A. Zisserman, “Very deep convolutional networks for large-scale image recognition,” arXiv preprint arXiv:1409.1556 , 2014

Original

2014

Earlier work this paper cites.

“Intel, Software Guard Extensions (SGX),” https://software.intel.com/content/www/us/en/develop/topics/software-guard-extensions.html

2015

Earlier work this paper cites.

R. Gilad-Bachrach, N. Dowlin, K. Laine, K. Lauter, M. Naehrig, and J. Wernsing, “Cryptonets: Applying neural networks to encrypted data with high throughput and accuracy,” in International Conference on Machine Learning (ICML) , 2016

2016

Earlier work this paper cites.

N. Papernot, P. McDaniel, I. Goodfellow, S. Jha, Z. B. Celik, and A. Swami, “Practical black-box attacks against machine learning,” in Proceedings of the 2017 ACM on Asia conference on computer and communications security , 2017, pp. 506–519

2017

Cited alongside, same era.

A. Zhou, A. Yao, Y. Guo, L. Xu, and Y. Chen, “Incremental network quantization: Towards lossless cnns with low-precision weights,” in International Conference on Learning Representations (ICLR) , 2017

Original

2017

Cited alongside, same era.

J. Gordon, “Microsoft azure confidential computing with intel sgx,” https://software.intel.com/en-us/blogs/2018/11/08/microsoft-azure-confidential-computing-with-intel-sgx

2018

Cited alongside, same era.

T. Hunt, C. Song, R. Shokri, V. Shmatikov, and E. Witchel, “Chiron: Privacy-preserving machine learning as a service,” arXiv preprint arXiv:1803.05961 , 2018

Original

2018

Cited alongside, same era.

T. Lee, Z. Lin, S. Pushp, C. Li, Y. Liu, Y. Lee, F. Xu, C. Xu, L. Zhang, and J. Song, “Occlumency: Privacy-preserving remote deep-learning inference using sgx,” in The 25th Annual International Conference on Mobile Computing and Networking (MobiCom) , 2019

2019

Later among the works it cites.

T. B. Brown, B. Mann, N. Ryder, M. Subbiah, J. Kaplan, P. Dhariwal, A. Neelakantan, P. Shyam, G. Sastry, A. Askell et al. , “Language models are few-shot learners,” arXiv preprint arXiv:2005.14165 , 2020

Original

2020

Later among the works it cites.

A. Dosovitskiy, L. Beyer, A. Kolesnikov, D. Weissenborn, X. Zhai, T. Unterthiner, M. Dehghani, M. Minderer, G. Heigold, S. Gelly et al. , “An image is worth 16x16 words: Transformers for image recognition at scale,” arXiv preprint arXiv:2010.11929 , 2020

Original

2020

Later among the works it cites.

K. Kim, C. H. Kim, J. J. Rhee, X. Yu, H. Chen, D. Tian, and B. Lee, “Vessels: efficient and scalable deep learning prediction on trusted processors,” in Proceedings of the 11th ACM Symposium on Cloud Computing , 2020, pp. 462–476