{"id":"https://openalex.org/W4405544354","doi":"https://doi.org/10.1145/3707453","title":"<scp>TEESlice</scp> : Protecting Sensitive Neural Network Models in Trusted Execution Environments when Attackers Have Pre-Trained Models","display_name":"<scp>TEESlice</scp> : Protecting Sensitive Neural Network Models in Trusted Execution Environments when Attackers Have Pre-Trained Models","publication_year":2024,"publication_date":"2024-12-18","ids":{"openalex":"https://openalex.org/W4405544354","doi":"https://doi.org/10.1145/3707453"},"language":"en","primary_location":{"id":"doi:10.1145/3707453","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3707453","pdf_url":null,"source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5039182822","display_name":"Ding Li","orcid":"https://orcid.org/0000-0001-7558-9137"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ding Li","raw_affiliation_strings":["School of Computer Science, Peking University, Beijing, China","Key Laboratory of High-Confidence Software Technologies (MOE), School of Computer Science, Peking University, China"],"raw_orcid":"https://orcid.org/0000-0001-7558-9137","affiliations":[{"raw_affiliation_string":"School of Computer Science, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]},{"raw_affiliation_string":"Key Laboratory of High-Confidence Software Technologies (MOE), School of Computer Science, Peking University, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020717851","display_name":"Ziqi Zhang","orcid":"https://orcid.org/0000-0001-8493-0261"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ziqi Zhang","raw_affiliation_strings":["School of Computer Science, Peking University, Beijing, China","Key Laboratory of High-Confidence Software Technologies (MOE), School of Computer Science, Peking University, China"],"raw_orcid":"https://orcid.org/0000-0001-8493-0261","affiliations":[{"raw_affiliation_string":"School of Computer Science, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]},{"raw_affiliation_string":"Key Laboratory of High-Confidence Software Technologies (MOE), School of Computer Science, Peking University, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115601905","display_name":"Mengyu Yao","orcid":"https://orcid.org/0009-0005-8220-3470"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mengyu Yao","raw_affiliation_strings":["School of Computer Science, Peking University, Beijing, China","Key Laboratory of High-Confidence Software Technologies (MOE), School of Computer Science, Peking University, China"],"raw_orcid":"https://orcid.org/0009-0005-8220-3470","affiliations":[{"raw_affiliation_string":"School of Computer Science, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]},{"raw_affiliation_string":"Key Laboratory of High-Confidence Software Technologies (MOE), School of Computer Science, Peking University, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101766806","display_name":"Yifeng Cai","orcid":"https://orcid.org/0000-0002-0049-6670"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yifeng Cai","raw_affiliation_strings":["School of Computer Science, Peking University, Beijing, China","Key Laboratory of High-Confidence Software Technologies (MOE), School of Computer Science, Peking University, China"],"raw_orcid":"https://orcid.org/0000-0002-0049-6670","affiliations":[{"raw_affiliation_string":"School of Computer Science, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]},{"raw_affiliation_string":"Key Laboratory of High-Confidence Software Technologies (MOE), School of Computer Science, Peking University, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021450973","display_name":"Yao Guo","orcid":"https://orcid.org/0000-0001-5064-5286"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yao Guo","raw_affiliation_strings":["School of Computer Science, Peking University, Beijing, China","Key Laboratory of High-Confidence Software Technologies (MOE), School of Computer Science, Peking University, China"],"raw_orcid":"https://orcid.org/0000-0001-5064-5286","affiliations":[{"raw_affiliation_string":"School of Computer Science, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]},{"raw_affiliation_string":"Key Laboratory of High-Confidence Software Technologies (MOE), School of Computer Science, Peking University, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101636662","display_name":"Xiangqun Chen","orcid":"https://orcid.org/0000-0002-7366-5906"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiangqun Chen","raw_affiliation_strings":["School of Computer Science, Peking University, Beijing, China","Key Laboratory of High-Confidence Software Technologies (MOE), School of Computer Science, Peking University, China"],"raw_orcid":"https://orcid.org/0000-0002-7366-5906","affiliations":[{"raw_affiliation_string":"School of Computer Science, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]},{"raw_affiliation_string":"Key Laboratory of High-Confidence Software Technologies (MOE), School of Computer Science, Peking University, China","institution_ids":["https://openalex.org/I20231570"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I20231570"],"apc_list":null,"apc_paid":null,"fwci":3.8899,"has_fulltext":false,"cited_by_count":14,"citation_normalized_percentile":{"value":0.94415922,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"34","issue":"6","first_page":"1","last_page":"49"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9783999919891357,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8532900810241699},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6646406650543213},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5192639827728271},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.18314993381500244}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8532900810241699},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6646406650543213},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5192639827728271},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.18314993381500244}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3707453","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3707453","pdf_url":null,"source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2525199997","display_name":null,"funder_award_id":"2022ZD0119103","funder_id":"https://openalex.org/F4320329860","funder_display_name":"National Science and Technology Major Project"}],"funders":[{"id":"https://openalex.org/F4320329860","display_name":"National Science and Technology Major Project","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":87,"referenced_works":["https://openalex.org/W398859631","https://openalex.org/W1520270249","https://openalex.org/W1583837637","https://openalex.org/W1857789879","https://openalex.org/W1861492603","https://openalex.org/W2027595342","https://openalex.org/W2036329595","https://openalex.org/W2108598243","https://openalex.org/W2194775991","https://openalex.org/W2402141613","https://openalex.org/W2535045601","https://openalex.org/W2535690855","https://openalex.org/W2592232824","https://openalex.org/W2603766943","https://openalex.org/W2606047137","https://openalex.org/W2612997195","https://openalex.org/W2616901112","https://openalex.org/W2734941459","https://openalex.org/W2766823323","https://openalex.org/W2795286232","https://openalex.org/W2809523935","https://openalex.org/W2884943453","https://openalex.org/W2890914193","https://openalex.org/W2897026562","https://openalex.org/W2930926105","https://openalex.org/W2954241526","https://openalex.org/W2963303354","https://openalex.org/W2963311060","https://openalex.org/W2963378725","https://openalex.org/W2963412210","https://openalex.org/W2963456518","https://openalex.org/W2969695741","https://openalex.org/W2973414778","https://openalex.org/W2979832172","https://openalex.org/W3001001866","https://openalex.org/W3001127848","https://openalex.org/W3011434423","https://openalex.org/W3015806656","https://openalex.org/W3016075089","https://openalex.org/W3023153742","https://openalex.org/W3034999214","https://openalex.org/W3041133507","https://openalex.org/W3042794281","https://openalex.org/W3090119274","https://openalex.org/W3096738375","https://openalex.org/W3096785379","https://openalex.org/W3097924569","https://openalex.org/W3097981673","https://openalex.org/W3102836279","https://openalex.org/W3103245149","https://openalex.org/W3105175523","https://openalex.org/W3138815606","https://openalex.org/W3153001680","https://openalex.org/W3171847855","https://openalex.org/W3173524712","https://openalex.org/W3175329822","https://openalex.org/W3176786489","https://openalex.org/W3180257170","https://openalex.org/W3205334056","https://openalex.org/W3209210773","https://openalex.org/W3213793813","https://openalex.org/W3213975728","https://openalex.org/W3214437258","https://openalex.org/W4200518090","https://openalex.org/W4200633448","https://openalex.org/W4205228770","https://openalex.org/W4221155126","https://openalex.org/W4224088737","https://openalex.org/W4225654613","https://openalex.org/W4239167255","https://openalex.org/W4285230500","https://openalex.org/W4285490414","https://openalex.org/W4288057728","https://openalex.org/W4288057780","https://openalex.org/W4293783501","https://openalex.org/W4324144553","https://openalex.org/W4362544951","https://openalex.org/W4378501298","https://openalex.org/W4384345716","https://openalex.org/W4386831200","https://openalex.org/W4388787561","https://openalex.org/W4388858273","https://openalex.org/W4389076349","https://openalex.org/W4389166734","https://openalex.org/W4392903998","https://openalex.org/W4402264420","https://openalex.org/W4405183504"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Trusted":[0],"Execution":[1],"Environments":[2],"(TEEs)":[3],"are":[4],"used":[5],"to":[6,14,23,65,107,155,164,180],"safeguard":[7],"on-device":[8],"models.":[9,167],"However,":[10],"directly":[11],"employing":[12],"TEEs":[13,60],"secure":[15],"the":[16,24,73,92,95,130,162,172,176,185,191],"entire":[17],"DNN":[18,50],"model":[19,141,179],"is":[20],"challenging":[21],"due":[22],"limited":[25],"computational":[26,145],"speed.":[27],"Utilizing":[28],"GPU":[29],"can":[30,80,138,170],"accelerate":[31],"DNN\u2019s":[32],"computation":[33],"speed":[34],"but":[35],"widely":[36],"available":[37,84],"commercial":[38],"GPUs":[39],"usually":[40],"lack":[41],"security":[42,93,110],"protection.":[43],"To":[44],"this":[45],"end,":[46],"scholars":[47],"introduce":[48,114],"TEE-Shielded":[49],"Partition":[51],"(TSDP),":[52],"a":[53,76,100,115,144,149],"method":[54],"that":[55,135],"protects":[56],"privacy-sensitive":[57,124],"weights":[58,64,125],"within":[59],"and":[61,87,103,183],"offloads":[62],"insensitive":[63],"GPUs.":[66],"Nevertheless,":[67],"current":[68],"methods":[69,97],"do":[70],"not":[71],"consider":[72],"presence":[74],"of":[75,94,129,151,175,188],"knowledgeable":[77,101],"adversary":[78,102],"who":[79],"access":[81],"abundant":[82],"publicly":[83],"pre-trained":[85],"models":[86],"datasets.":[88],"This":[89],"article":[90],"investigates":[91],"existing":[96],"against":[98],"such":[99],"reveals":[104],"their":[105,109],"inability":[106],"fulfill":[108],"promises.":[111],"Consequently,":[112],"we":[113,159],"novel":[116],"partition":[117],"before":[118],"training":[119],"strategy,":[120],"which":[121],"effectively":[122],"separates":[123],"from":[126],"other":[127],"components":[128],"model.":[131],"Our":[132,168],"evaluation":[133],"demonstrates":[134],"our":[136],"approach":[137,169],"offer":[139],"full":[140],"protection":[142,189],"with":[143],"cost":[146],"reduced":[147],"by":[148],"factor":[150],"10.":[152],"In":[153],"addition":[154],"traditional":[156],"CNN":[157],"models,":[158],"also":[160],"demonstrate":[161],"scalability":[163],"large":[165,177],"language":[166,178],"compress":[171],"private":[173],"functionalities":[174],"lightweight":[181],"slices":[182],"achieve":[184],"same":[186],"level":[187],"as":[190],"shielding-whole-model":[192],"baseline.":[193]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":8}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2024-12-19T00:00:00"}