{"id":"https://openalex.org/W4403792250","doi":"https://doi.org/10.1145/3664647.3680786","title":"TransLinkGuard: Safeguarding Transformer Models Against Model Stealing in Edge Deployment","display_name":"TransLinkGuard: Safeguarding Transformer Models Against Model Stealing in Edge Deployment","publication_year":2024,"publication_date":"2024-10-26","ids":{"openalex":"https://openalex.org/W4403792250","doi":"https://doi.org/10.1145/3664647.3680786"},"language":"en","primary_location":{"id":"doi:10.1145/3664647.3680786","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3664647.3680786","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 32nd ACM International Conference on Multimedia","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5108941194","display_name":"Qinfeng Li","orcid":"https://orcid.org/0009-0001-9037-7535"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qinfeng Li","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0001-9037-7535","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103446080","display_name":"Zhiru Shen","orcid":"https://orcid.org/0009-0002-8713-3545"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhiqiang Shen","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0002-8713-3545","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056851659","display_name":"Zhenghan Qin","orcid":"https://orcid.org/0000-0002-5358-5933"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhenghan Qin","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0000-8878-0539","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101339322","display_name":"Yangfan Xie","orcid":null},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yangfan Xie","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0000-9720-0356","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101722406","display_name":"Xuhong Zhang","orcid":"https://orcid.org/0000-0002-8571-9780"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xuhong Zhang","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-8571-9780","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061219446","display_name":"Tianyu Du","orcid":"https://orcid.org/0000-0003-0896-0690"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tianyu Du","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-0896-0690","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101298760","display_name":"Cheng Sheng","orcid":"https://orcid.org/0009-0003-4919-7924"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sheng Cheng","raw_affiliation_strings":["Shenzhou Aerospace Software Technology Company Limited, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0003-4919-7924","affiliations":[{"raw_affiliation_string":"Shenzhou Aerospace Software Technology Company Limited, Beijing, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":null,"display_name":"Xun Wang","orcid":"https://orcid.org/0009-0008-7364-8461"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xun Wang","raw_affiliation_strings":["Shenzhou Aerospace Software Technology Company Limited, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0008-7364-8461","affiliations":[{"raw_affiliation_string":"Shenzhou Aerospace Software Technology Company Limited, Beijing, China","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5069353502","display_name":"Jianwei Yin","orcid":"https://orcid.org/0000-0003-4703-7348"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianwei Yin","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-4703-7348","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.8448,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.92707726,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"3479","last_page":"3488"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9965000152587891,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9783999919891357,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.7124717235565186},{"id":"https://openalex.org/keywords/safeguarding","display_name":"Safeguarding","score":0.70417720079422},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6054858565330505},{"id":"https://openalex.org/keywords/transformer","display_name":"Transformer","score":0.48036083579063416},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3890232443809509},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.1990554928779602},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.15513557195663452},{"id":"https://openalex.org/keywords/electrical-engineering","display_name":"Electrical engineering","score":0.11667260527610779}],"concepts":[{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.7124717235565186},{"id":"https://openalex.org/C2776743756","wikidata":"https://www.wikidata.org/wiki/Q5097921","display_name":"Safeguarding","level":2,"score":0.70417720079422},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6054858565330505},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.48036083579063416},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3890232443809509},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.1990554928779602},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.15513557195663452},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.11667260527610779},{"id":"https://openalex.org/C159110408","wikidata":"https://www.wikidata.org/wiki/Q121176","display_name":"Nursing","level":1,"score":0.0},{"id":"https://openalex.org/C165801399","wikidata":"https://www.wikidata.org/wiki/Q25428","display_name":"Voltage","level":2,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3664647.3680786","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3664647.3680786","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 32nd ACM International Conference on Multimedia","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.4099999964237213,"id":"https://metadata.un.org/sdg/13","display_name":"Climate action"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W1247015877","https://openalex.org/W2018098791","https://openalex.org/W2194775991","https://openalex.org/W2734941459","https://openalex.org/W2809523935","https://openalex.org/W2963106566","https://openalex.org/W2963303354","https://openalex.org/W2979832172","https://openalex.org/W3001001866","https://openalex.org/W3016075089","https://openalex.org/W3042794281","https://openalex.org/W3092557510","https://openalex.org/W3096785379","https://openalex.org/W3097981673","https://openalex.org/W3105175523","https://openalex.org/W3173524712","https://openalex.org/W3176786489","https://openalex.org/W3186574069","https://openalex.org/W3205334056","https://openalex.org/W3209210773","https://openalex.org/W3213793813","https://openalex.org/W4200633448","https://openalex.org/W4293024088","https://openalex.org/W4293065234","https://openalex.org/W4311165734","https://openalex.org/W4385679786","https://openalex.org/W4392903998"],"related_works":["https://openalex.org/W3183948672","https://openalex.org/W3173606202","https://openalex.org/W3110381201","https://openalex.org/W2948807893","https://openalex.org/W2935909890","https://openalex.org/W2899084033","https://openalex.org/W2778153218","https://openalex.org/W2758277628","https://openalex.org/W2748952813","https://openalex.org/W1531601525"],"abstract_inverted_index":{"Proprietary":[0],"large":[1],"language":[2],"models":[3,36],"(LLMs)":[4],"have":[5],"been":[6],"widely":[7],"applied":[8],"in":[9,134],"various":[10],"scenarios.":[11],"Additionally,":[12],"deploying":[13],"LLMs":[14,30],"on":[15,120,147],"edge":[16,26,121],"devices":[17],"is":[18,81,128],"trending":[19],"for":[20],"efficiency":[21],"and":[22],"privacy":[23],"reasons.":[24],"However,":[25],"deployment":[27],"of":[28,126],"proprietary":[29],"introduces":[31],"new":[32],"security":[33,99,158],"challenges:":[34],"edge-deployed":[35],"are":[37],"exposed":[38],"as":[39,159],"white-box":[40],"accessible":[41],"to":[42,46,57,72],"users,":[43],"enabling":[44],"adversaries":[45],"conduct":[47],"model":[48,80,86,114,118],"stealing":[49,119],"(MS)":[50],"attacks.":[51],"Unfortunately,":[52],"existing":[53,69],"defense":[54],"mechanisms":[55],"fail":[56,71],"provide":[58],"effective":[59],"protection.":[60],"Specifically,":[61],"we":[62,109],"identify":[63],"four":[64],"critical":[65],"protection":[66,77,115],"properties":[67],"that":[68,153],"methods":[70],"simultaneously":[73],"satisfy:":[74],"(1)":[75],"maintaining":[76],"after":[78],"a":[79,112,129,135],"physically":[82],"copied;":[83],"(2)":[84],"authorizing":[85],"access":[87],"at":[88],"request":[89,145],"level;":[90],"(3)":[91],"safeguarding":[92],"runtime":[93,102],"reverse":[94],"engineering;":[95],"(4)":[96],"achieving":[97],"high":[98],"with":[100,163],"negligible":[101,164],"overhead.":[103,165],"To":[104],"address":[105],"the":[106,156,160],"above":[107],"issues,":[108],"propose":[110],"TransLinkGuard,":[111],"plug-and-play":[113],"approach":[116],"against":[117],"devices.":[122],"The":[123],"core":[124],"part":[125],"TransLinkGuard":[127,154],"lightweight":[130],"authorization":[131],"module":[132],"residing":[133],"secure":[136],"environment,":[137],"e.g.,":[138],"TEE,":[139],"which":[140],"can":[141],"freshly":[142],"authorize":[143],"each":[144],"based":[146],"its":[148],"input.":[149],"Extensive":[150],"experiments":[151],"show":[152],"achieves":[155],"same":[157],"black-box":[161],"guarantees":[162]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":5}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}