{"id":"https://openalex.org/W4402349126","doi":"https://doi.org/10.1145/3665314.3670821","title":"Securing Deep Neural Networks on Edge from Membership Inference Attacks Using Trusted Execution Environments","display_name":"Securing Deep Neural Networks on Edge from Membership Inference Attacks Using Trusted Execution Environments","publication_year":2024,"publication_date":"2024-08-05","ids":{"openalex":"https://openalex.org/W4402349126","doi":"https://doi.org/10.1145/3665314.3670821"},"language":"en","primary_location":{"id":"doi:10.1145/3665314.3670821","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3665314.3670821","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 29th ACM/IEEE International Symposium on Low Power Electronics and Design","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3665314.3670821","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101748476","display_name":"Cheng-Yun Yang","orcid":null},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Cheng-Yun Yang","raw_affiliation_strings":["Purdue University, WEST LAFAYETTE, IN, United States"],"raw_orcid":"https://orcid.org/0000-0002-2008-0621","affiliations":[{"raw_affiliation_string":"Purdue University, WEST LAFAYETTE, IN, United States","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063436191","display_name":"Gowri Ramshankar","orcid":null},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gowri Ramshankar","raw_affiliation_strings":["Purdue University, West Lafayette, IN, United States"],"raw_orcid":"https://orcid.org/0009-0005-4254-6663","affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, United States","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021626654","display_name":"Nicholas Eliopoulos","orcid":"https://orcid.org/0000-0003-1692-8586"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nicholas Eliopoulos","raw_affiliation_strings":["Purdue University, West Lafayette, IN, United States"],"raw_orcid":"https://orcid.org/0000-0003-1692-8586","affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, United States","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061042612","display_name":"Purvish Jajal","orcid":"https://orcid.org/0000-0002-1199-6363"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Purvish Jajal","raw_affiliation_strings":["Purdue University, West Lafayette, IN, United States"],"raw_orcid":"https://orcid.org/0000-0002-1199-6363","affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, United States","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5107078758","display_name":"Sudarshan Nambiar","orcid":null},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sudarshan Nambiar","raw_affiliation_strings":["Purdue University, West Lafayette, IN, United States"],"raw_orcid":"https://orcid.org/0009-0006-2514-4205","affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, United States","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110811743","display_name":"Evan Miller","orcid":null},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Evan Miller","raw_affiliation_strings":["Purdue University, West Lafayette, IN, United States"],"raw_orcid":"https://orcid.org/0009-0001-0673-4887","affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, United States","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Xun Zhang","orcid":"https://orcid.org/0009-0003-4560-1993"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xun Zhang","raw_affiliation_strings":["Purdue University, West Lafayette, IN, United States"],"raw_orcid":"https://orcid.org/0009-0003-4560-1993","affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, United States","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015662045","display_name":"Dave Tian","orcid":"https://orcid.org/0000-0002-7506-9593"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dave (Jing) Tian","raw_affiliation_strings":["Purdue University, West Lafayette, IN, United States"],"raw_orcid":"https://orcid.org/0000-0002-7506-9593","affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, United States","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060246506","display_name":"Shuo-Han Chen","orcid":"https://orcid.org/0000-0002-1619-4335"},"institutions":[{"id":"https://openalex.org/I148366613","display_name":"National Yang Ming Chiao Tung University","ror":"https://ror.org/00se2k293","country_code":"TW","type":"education","lineage":["https://openalex.org/I148366613"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Shuo-Han Chen","raw_affiliation_strings":["National Yang Ming Chiao Tung University, Hsinchu, Taiwan"],"raw_orcid":"https://orcid.org/0000-0002-1619-4335","affiliations":[{"raw_affiliation_string":"National Yang Ming Chiao Tung University, Hsinchu, Taiwan","institution_ids":["https://openalex.org/I148366613"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012817702","display_name":"Chiy-Ferng Perng","orcid":null},"institutions":[{"id":"https://openalex.org/I4210122179","display_name":"Wistron (Taiwan)","ror":"https://ror.org/02knfsk89","country_code":"TW","type":"company","lineage":["https://openalex.org/I4210122179"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Chiy-Ferng Perng","raw_affiliation_strings":["Wistron, Taipei, Taiwan"],"raw_orcid":"https://orcid.org/0009-0003-0618-8315","affiliations":[{"raw_affiliation_string":"Wistron, Taipei, Taiwan","institution_ids":["https://openalex.org/I4210122179"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5016258301","display_name":"Yung-Hsiang Lu","orcid":null},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yung-Hsiang Lu","raw_affiliation_strings":["Purdue University, West Lafayette, IN, United States"],"raw_orcid":"https://orcid.org/0000-0002-5491-7661","affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, United States","institution_ids":["https://openalex.org/I219193219"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10502","display_name":"Advanced Memory and Neural Computing","score":0.9836000204086304,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10502","display_name":"Advanced Memory and Neural Computing","score":0.9836000204086304,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9815000295639038,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9624000191688538,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8038941621780396},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.6103967428207397},{"id":"https://openalex.org/keywords/enhanced-data-rates-for-gsm-evolution","display_name":"Enhanced Data Rates for GSM Evolution","score":0.5750786662101746},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5731607675552368},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5267719030380249},{"id":"https://openalex.org/keywords/direct-anonymous-attestation","display_name":"Direct Anonymous Attestation","score":0.5127357244491577},{"id":"https://openalex.org/keywords/trusted-network-connect","display_name":"Trusted Network Connect","score":0.47305241227149963},{"id":"https://openalex.org/keywords/trusted-computing","display_name":"Trusted Computing","score":0.4559392035007477},{"id":"https://openalex.org/keywords/edge-computing","display_name":"Edge computing","score":0.45524969696998596},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.4393872022628784},{"id":"https://openalex.org/keywords/edge-device","display_name":"Edge device","score":0.4295635223388672},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.39943069219589233},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.37285077571868896},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.21486884355545044}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8038941621780396},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.6103967428207397},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.5750786662101746},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5731607675552368},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5267719030380249},{"id":"https://openalex.org/C169796023","wikidata":"https://www.wikidata.org/wiki/Q3708936","display_name":"Direct Anonymous Attestation","level":3,"score":0.5127357244491577},{"id":"https://openalex.org/C206149592","wikidata":"https://www.wikidata.org/wiki/Q3999882","display_name":"Trusted Network Connect","level":3,"score":0.47305241227149963},{"id":"https://openalex.org/C2776831232","wikidata":"https://www.wikidata.org/wiki/Q966812","display_name":"Trusted Computing","level":2,"score":0.4559392035007477},{"id":"https://openalex.org/C2778456923","wikidata":"https://www.wikidata.org/wiki/Q5337692","display_name":"Edge computing","level":3,"score":0.45524969696998596},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.4393872022628784},{"id":"https://openalex.org/C138236772","wikidata":"https://www.wikidata.org/wiki/Q25098575","display_name":"Edge device","level":3,"score":0.4295635223388672},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.39943069219589233},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.37285077571868896},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.21486884355545044},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3665314.3670821","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3665314.3670821","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 29th ACM/IEEE International Symposium on Low Power Electronics and Design","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3665314.3670821","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3665314.3670821","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 29th ACM/IEEE International Symposium on Low Power Electronics and Design","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.4300000071525574}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W2047674856","https://openalex.org/W2084182545","https://openalex.org/W2535690855","https://openalex.org/W2752929869","https://openalex.org/W2930926105","https://openalex.org/W3013583651","https://openalex.org/W3014592693","https://openalex.org/W3047691788","https://openalex.org/W3081096564","https://openalex.org/W3097981673","https://openalex.org/W4214951654","https://openalex.org/W4221154610","https://openalex.org/W4226079995","https://openalex.org/W4253576094","https://openalex.org/W4301329292","https://openalex.org/W4353004773","https://openalex.org/W4366544910"],"related_works":["https://openalex.org/W2355956995","https://openalex.org/W2381474365","https://openalex.org/W2372678089","https://openalex.org/W2086874776","https://openalex.org/W104943326","https://openalex.org/W2350048275","https://openalex.org/W2389819096","https://openalex.org/W2508973909","https://openalex.org/W2001281341","https://openalex.org/W2383968738"],"abstract_inverted_index":{"Privacy":[0],"concerns":[1],"arise":[2],"from":[3,51,77],"malicious":[4],"attacks":[5],"on":[6,16,53,85,140,155,161,175],"Deep":[7],"Neural":[8],"Network":[9],"(DNN)":[10],"applications":[11],"during":[12],"sensitive":[13,30,102],"data":[14,31],"inference":[15,50],"edge":[17,54],"devices.":[18,55],"Membership":[19],"Inference":[20],"Attack":[21],"(MIA)":[22],"is":[23,32,83,179],"developed":[24],"by":[25,165,182],"adversaries":[26,52],"to":[27,34,46,65,99,113],"determine":[28],"whether":[29],"used":[33],"train":[35],"the":[36,66,90,115,125,130,150,162,176],"DNN":[37,48,135],"applications.":[38],"Prior":[39],"work":[40,72,82],"uses":[41],"Trusted":[42],"Execution":[43],"Environments":[44],"(TEEs)":[45],"hide":[47],"model":[49,110],"Unfortunately,":[56],"existing":[57],"methods":[58],"have":[59],"two":[60],"major":[61],"problems.":[62],"First,":[63],"due":[64],"restricted":[67],"memory":[68],"of":[69,118,132,152,172],"TEEs,":[70],"prior":[71,81],"cannot":[73],"secure":[74],"large-size":[75],"DNNs":[76,119],"gradient-based":[78,153],"MIAs.":[79,87],"Second,":[80],"ineffective":[84],"output-based":[86,121,173],"To":[88],"mitigate":[89],"problems,":[91],"we":[92],"present":[93],"a":[94,109],"depth-wise":[95],"layer":[96],"partitioning":[97],"method":[98,147],"run":[100],"large":[101],"layers":[103],"inside":[104,137],"TEEs.":[105,138],"We":[106,127],"further":[107],"propose":[108],"quantization":[111],"strategy":[112],"improve":[114],"defense":[116],"capability":[117],"against":[120],"MIAs":[122,154,174],"and":[123,158,168,185],"accelerate":[124],"computation.":[126],"also":[128,180],"automate":[129],"process":[131],"securing":[133],"PyTorch-based":[134],"models":[136,178],"Experiments":[139],"Raspberry":[141],"Pi":[142],"3B+":[143],"show":[144],"that":[145],"our":[146],"can":[148],"reduce":[149],"accuracy":[151,171],"AlexNet,":[156],"VGG-16,":[157],"ResNet-20":[159],"evaluated":[160],"CIFAR-100":[163],"dataset":[164],"28.8%,":[166],"11%,":[167],"35.3%.":[169],"The":[170],"three":[177],"reduced":[181],"18.5%,":[183],"13.4%,":[184],"29.6%,":[186],"respectively.":[187]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}