{"id":"https://openalex.org/W2946622848","doi":null,"title":"YerbaBuena: Securing Deep Learning Inference Data via Enclave-based Ternary Model Partitioning","display_name":"YerbaBuena: Securing Deep Learning Inference Data via Enclave-based Ternary Model Partitioning","publication_year":2018,"publication_date":"2018-07-03","ids":{"openalex":"https://openalex.org/W2946622848","mag":"2946622848"},"language":"en","primary_location":{"id":"mag:2946622848","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/pdf/1807.00969","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/1807.00969","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5057478629","display_name":"Zhongshu Gu","orcid":"https://orcid.org/0000-0001-9624-2669","observed_orcids":["https://orcid.org/0000-0001-9624-2669"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhongshu Gu","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0001-9624-2669","affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101650393","display_name":"Heqing Huang","orcid":"https://orcid.org/0009-0009-4321-2621","observed_orcids":["https://orcid.org/0009-0009-4321-2621","https://orcid.org/0000-0001-8113-3531"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Heqing Huang","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0001-8113-3531","affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101437565","display_name":"Jialong Zhang","orcid":"https://orcid.org/0000-0003-0752-8740","observed_orcids":["https://orcid.org/0000-0003-0752-8740","https://orcid.org/0000-0001-7320-5232","https://orcid.org/0009-0005-4943-8016"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jialong Zhang","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0003-0752-8740","affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102944086","display_name":"Dong Su","orcid":"https://orcid.org/0000-0002-1410-2468","observed_orcids":["https://orcid.org/0000-0002-1410-2468"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dong Su","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-1410-2468","affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071982602","display_name":"Hani T. Jamjoom","orcid":"https://orcid.org/0000-0001-6143-1064","observed_orcids":["https://orcid.org/0000-0001-6143-1064"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hani Jamjoom","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0001-6143-1064","affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033144884","display_name":"Ankita Lamba","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ankita Lamba","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006668000","display_name":"Dimitrios E. Pendarakis","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dimitrios Pendarakis","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5040348286","display_name":"Ian Molloy","orcid":"https://orcid.org/0009-0008-2157-1140","observed_orcids":["https://orcid.org/0009-0008-2157-1140"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ian Molloy","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":26,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9940999746322632,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9940999746322632,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.002300000051036477,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.0007999999797903001,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/secure-enclaves","display_name":"secure enclaves","score":0.7490000128746033},{"id":"https://openalex.org/keywords/information-disclosure","display_name":"information disclosure","score":0.6119999885559082},{"id":"https://openalex.org/keywords/model-serving","display_name":"model serving","score":0.656000018119812},{"id":"https://openalex.org/keywords/data-protection","display_name":"data protection","score":0.4339999854564667},{"id":"https://openalex.org/keywords/workload-partitioning","display_name":"workload partitioning","score":0.5540000200271606}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.778247594833374},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5241183042526245},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.515696108341217},{"id":"https://openalex.org/C46934059","wikidata":"https://www.wikidata.org/wiki/Q61515","display_name":"Outsourcing","level":2,"score":0.49867868423461914},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.4934028685092926},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.45984944701194763},{"id":"https://openalex.org/C42812","wikidata":"https://www.wikidata.org/wiki/Q1082910","display_name":"Partition (number theory)","level":2,"score":0.4450070559978485},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4295578896999359},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4187702536582947},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.41572073101997375},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.35513168573379517},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3348816931247711},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"mag:2946622848","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/pdf/1807.00969","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null}],"best_oa_location":{"id":"mag:2946622848","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/pdf/1807.00969","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":70,"referenced_works":["https://openalex.org/W104209573","https://openalex.org/W1510952750","https://openalex.org/W1528076390","https://openalex.org/W1533861849","https://openalex.org/W1569778844","https://openalex.org/W1674910155","https://openalex.org/W1686810756","https://openalex.org/W1787224781","https://openalex.org/W1825675169","https://openalex.org/W1849277567","https://openalex.org/W1915485278","https://openalex.org/W1922655562","https://openalex.org/W1991563835","https://openalex.org/W2009733253","https://openalex.org/W2036329595","https://openalex.org/W2053637704","https://openalex.org/W2093367651","https://openalex.org/W2100495367","https://openalex.org/W2107878631","https://openalex.org/W2108598243","https://openalex.org/W2123045220","https://openalex.org/W2130942839","https://openalex.org/W2143612262","https://openalex.org/W2150620897","https://openalex.org/W2160815625","https://openalex.org/W2163605009","https://openalex.org/W2165698076","https://openalex.org/W2167215970","https://openalex.org/W2169393322","https://openalex.org/W2194775991","https://openalex.org/W2257979135","https://openalex.org/W2273348943","https://openalex.org/W2283463896","https://openalex.org/W2295107390","https://openalex.org/W2397423248","https://openalex.org/W2412869215","https://openalex.org/W2435473771","https://openalex.org/W2461943168","https://openalex.org/W2484015479","https://openalex.org/W2507840786","https://openalex.org/W2541884796","https://openalex.org/W2550236071","https://openalex.org/W2565389256","https://openalex.org/W2576037784","https://openalex.org/W2593634001","https://openalex.org/W2596378825","https://openalex.org/W2599541228","https://openalex.org/W2604861932","https://openalex.org/W2606774910","https://openalex.org/W2616901112","https://openalex.org/W2620979425","https://openalex.org/W2701059868","https://openalex.org/W2765200655","https://openalex.org/W2766447205","https://openalex.org/W2773838446","https://openalex.org/W2793398195","https://openalex.org/W2805074088","https://openalex.org/W2807403537","https://openalex.org/W2885216147","https://openalex.org/W2886576854","https://openalex.org/W2888798936","https://openalex.org/W2945838820","https://openalex.org/W2953150480","https://openalex.org/W2954241526","https://openalex.org/W2962858109","https://openalex.org/W2962899986","https://openalex.org/W2963446712","https://openalex.org/W2963674932","https://openalex.org/W2964299589","https://openalex.org/W4394670654"],"related_works":["https://openalex.org/W2811166235","https://openalex.org/W3048665067","https://openalex.org/W2904885070","https://openalex.org/W3097924569","https://openalex.org/W2971687264","https://openalex.org/W4401110466","https://openalex.org/W2992389096","https://openalex.org/W7165961095","https://openalex.org/W2979832172","https://openalex.org/W3214274869"],"abstract_inverted_index":{"Deploying":[0],"and":[1,48,70,96,106,150,168],"serving":[2,90],"deep":[3,65],"learning":[4,66],"(DL)":[5],"models":[6,130],"in":[7,64,141],"the":[8,12,22,58,73,81,94,104,177],"public":[9],"cloud":[10],"facilitates":[11],"process":[13],"to":[14,31,92,124,145,155,184],"bootstrap":[15],"artificial":[16],"intelligence":[17],"(AI)":[18],"services.":[19],"Yet,":[20],"preserving":[21],"confidentiality":[23,95,186],"of":[24,37,61,98,109,158],"sensitive":[25,139],"input":[26,39,62,100,147],"data":[27,40,45,63],"remains":[28],"a":[29,115,142],"concern":[30],"most":[32],"service":[33,122],"users.":[34],"Accidental":[35],"disclosures":[36,149],"user":[38,99],"may":[41],"breach":[42],"increasingly":[43],"stringent":[44],"protection":[46],"regulations":[47],"inflict":[49],"reputation":[50],"damage.":[51],"In":[52],"this":[53],"paper,":[54],"we":[55,84,113,135],"systematically":[56],"investigate":[57],"life":[59],"cycles":[60],"image":[67],"classification":[68],"pipelines":[69],"further":[71],"identify":[72],"potential":[74],"places":[75],"for":[76,180],"information":[77,148],"disclosures.":[78],"Based":[79],"on":[80,131],"discovered":[82],"insights,":[83],"build":[85],"YerbaBuena,":[86],"an":[87],"enclave-based":[88],"model":[89],"system":[91],"protect":[93],"integrity":[97],"data.":[101],"To":[102],"accommodate":[103],"performance":[105,190],"capacity":[107],"limitations":[108],"today's":[110],"enclave":[111,144,159],"technology,":[112],"employ":[114],"Ternary":[116],"Model":[117],"Partitioning":[118],"strategy":[119],"that":[120],"allows":[121],"users":[123,173],"securely":[125],"partition":[126],"their":[127,181],"proprietary":[128],"DL":[129,162],"local":[132],"machines.":[133],"Therefore,":[134],"can":[136,174],"(I)":[137],"enclose":[138],"computation":[140],"secure":[143],"mitigate":[146],"(II)":[151],"delegate":[152],"non-sensitive":[153],"workloads":[154],"run":[156],"out":[157],"with":[160,188],"hardware-assisted":[161],"acceleration.":[163],"Our":[164],"comprehensive":[165],"partitioning":[166,179],"analysis":[167],"workload":[169],"measurement":[170],"demonstrate":[171],"how":[172],"automatically":[175],"determine":[176],"optimal":[178],"models,":[182],"thus":[183],"maximize":[185],"guarantees":[187],"low":[189],"costs.":[191]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":9},{"year":2020,"cited_by_count":10},{"year":2019,"cited_by_count":3}],"updated_date":"2026-11-03T10:50:19.383937","created_date":"2019-05-29T00:00:00"}