{"id":"https://openalex.org/W4416549219","doi":"https://doi.org/10.1145/3719027.3765029","title":"GPU Travelling: Efficient Confidential Collaborative Training with TEE-Enabled GPUs","display_name":"GPU Travelling: Efficient Confidential Collaborative Training with TEE-Enabled GPUs","publication_year":2025,"publication_date":"2025-11-19","ids":{"openalex":"https://openalex.org/W4416549219","doi":"https://doi.org/10.1145/3719027.3765029"},"language":null,"primary_location":{"id":"doi:10.1145/3719027.3765029","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3719027.3765029","pdf_url":null,"source":null,"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3719027.3765029","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5060431855","display_name":"Shixuan Zhao","orcid":"https://orcid.org/0000-0003-2992-3434"},"institutions":[{"id":"https://openalex.org/I52357470","display_name":"The Ohio State University","ror":"https://ror.org/00rs6vg23","country_code":"US","type":"education","lineage":["https://openalex.org/I52357470"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shixuan Zhao","raw_affiliation_strings":["The Ohio State University, Columbus, OH, USA"],"raw_orcid":"https://orcid.org/0000-0003-2992-3434","affiliations":[{"raw_affiliation_string":"The Ohio State University, Columbus, OH, USA","institution_ids":["https://openalex.org/I52357470"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057478629","display_name":"Zhongshu Gu","orcid":"https://orcid.org/0000-0001-9624-2669"},"institutions":[{"id":"https://openalex.org/I1341412227","display_name":"IBM (United States)","ror":"https://ror.org/05hh8d621","country_code":"US","type":"company","lineage":["https://openalex.org/I1341412227"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhongshu Gu","raw_affiliation_strings":["IBM Research, Yorktown Heights, NY, USA"],"raw_orcid":"https://orcid.org/0000-0001-9624-2669","affiliations":[{"raw_affiliation_string":"IBM Research, Yorktown Heights, NY, USA","institution_ids":["https://openalex.org/I1341412227"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049447247","display_name":"Salman Ahmed","orcid":"https://orcid.org/0000-0003-0290-5367"},"institutions":[{"id":"https://openalex.org/I1341412227","display_name":"IBM (United States)","ror":"https://ror.org/05hh8d621","country_code":"US","type":"company","lineage":["https://openalex.org/I1341412227"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Salman Ahmed","raw_affiliation_strings":["IBM Research, Yorktown Heights, NY, USA"],"raw_orcid":"https://orcid.org/0000-0003-0290-5367","affiliations":[{"raw_affiliation_string":"IBM Research, Yorktown Heights, NY, USA","institution_ids":["https://openalex.org/I1341412227"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019332399","display_name":"Enriquillo Valdez","orcid":"https://orcid.org/0009-0004-4674-3384"},"institutions":[{"id":"https://openalex.org/I1341412227","display_name":"IBM (United States)","ror":"https://ror.org/05hh8d621","country_code":"US","type":"company","lineage":["https://openalex.org/I1341412227"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Enriquillo Valdez","raw_affiliation_strings":["IBM Research, Yorktown Heights, NY, USA"],"raw_orcid":"https://orcid.org/0009-0004-4674-3384","affiliations":[{"raw_affiliation_string":"IBM Research, Yorktown Heights, NY, USA","institution_ids":["https://openalex.org/I1341412227"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071982602","display_name":"Hani Jamjoom","orcid":"https://orcid.org/0000-0001-6143-1064"},"institutions":[{"id":"https://openalex.org/I1341412227","display_name":"IBM (United States)","ror":"https://ror.org/05hh8d621","country_code":"US","type":"company","lineage":["https://openalex.org/I1341412227"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hani Jamjoom","raw_affiliation_strings":["IBM Research, Yorktown Heights, NY, USA"],"raw_orcid":"https://orcid.org/0000-0001-6143-1064","affiliations":[{"raw_affiliation_string":"IBM Research, Yorktown Heights, NY, USA","institution_ids":["https://openalex.org/I1341412227"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5026864098","display_name":"Zhiqiang Lin","orcid":"https://orcid.org/0000-0001-6527-5994"},"institutions":[{"id":"https://openalex.org/I52357470","display_name":"The Ohio State University","ror":"https://ror.org/00rs6vg23","country_code":"US","type":"education","lineage":["https://openalex.org/I52357470"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhiqiang Lin","raw_affiliation_strings":["The Ohio State University, Columbus, OH, USA"],"raw_orcid":"https://orcid.org/0000-0001-6527-5994","affiliations":[{"raw_affiliation_string":"The Ohio State University, Columbus, OH, USA","institution_ids":["https://openalex.org/I52357470"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"2653","last_page":"2667"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.6880999803543091,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.6880999803543091,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.06830000132322311,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.029100000858306885,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.8518000245094299},{"id":"https://openalex.org/keywords/training","display_name":"Training (meteorology)","score":0.5730999708175659},{"id":"https://openalex.org/keywords/face","display_name":"Face (sociological concept)","score":0.4796000123023987},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.41429999470710754},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4124999940395355},{"id":"https://openalex.org/keywords/data-transmission","display_name":"Data transmission","score":0.38989999890327454},{"id":"https://openalex.org/keywords/facial-recognition-system","display_name":"Facial recognition system","score":0.3750999867916107}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8533999919891357},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.8518000245094299},{"id":"https://openalex.org/C2777211547","wikidata":"https://www.wikidata.org/wiki/Q17141490","display_name":"Training (meteorology)","level":2,"score":0.5730999708175659},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.4796000123023987},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.41429999470710754},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4124999940395355},{"id":"https://openalex.org/C557945733","wikidata":"https://www.wikidata.org/wiki/Q389772","display_name":"Data transmission","level":2,"score":0.38989999890327454},{"id":"https://openalex.org/C31510193","wikidata":"https://www.wikidata.org/wiki/Q1192553","display_name":"Facial recognition system","level":3,"score":0.3750999867916107},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.35010001063346863},{"id":"https://openalex.org/C761482","wikidata":"https://www.wikidata.org/wiki/Q118093","display_name":"Transmission (telecommunications)","level":2,"score":0.3402999937534332},{"id":"https://openalex.org/C2778915421","wikidata":"https://www.wikidata.org/wiki/Q3643177","display_name":"Performance improvement","level":2,"score":0.3073999881744385},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.2854999899864197},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.28299999237060547},{"id":"https://openalex.org/C68339613","wikidata":"https://www.wikidata.org/wiki/Q1549489","display_name":"Speedup","level":2,"score":0.275299996137619},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.27469998598098755},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.26440000534057617},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2615000009536743}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3719027.3765029","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3719027.3765029","pdf_url":null,"source":null,"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3719027.3765029","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3719027.3765029","pdf_url":null,"source":null,"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W1873763122","https://openalex.org/W2135162105","https://openalex.org/W2572504188","https://openalex.org/W2970606380","https://openalex.org/W3014969608","https://openalex.org/W3016632787","https://openalex.org/W3178445113","https://openalex.org/W4285504009","https://openalex.org/W4288057693","https://openalex.org/W4385572063","https://openalex.org/W4389544221","https://openalex.org/W4390046745","https://openalex.org/W4391164389","https://openalex.org/W4392806465","https://openalex.org/W4398785778","https://openalex.org/W4401861994","https://openalex.org/W4401943774","https://openalex.org/W4408051337","https://openalex.org/W4408889234"],"related_works":[],"abstract_inverted_index":{"Confidential":[0],"collaborative":[1],"machine":[2],"learning":[3],"(ML)":[4],"enables":[5],"multiple":[6],"mutually":[7],"distrusted":[8],"data":[9,36,104,125],"holders":[10],"to":[11,26,51,101,106,131],"jointly":[12],"train":[13],"an":[14],"ML":[15],"model":[16,38],"while":[17,127,162],"preserving":[18],"the":[19,52,96,102,108,112,122,158],"confidentiality":[20,129],"of":[21,56],"their":[22],"private":[23],"datasets":[24,59],"due":[25,50],"regulatory":[27],"or":[28],"competitive":[29],"reasons.":[30],"However,":[31],"existing":[32],"works":[33],"need":[34,123],"frequent":[35],"and":[37,58,116,142,145,156,160],"exchanges":[39],"during":[40],"training":[41,62,154],"via":[42],"slower":[43],"conventional":[44,183],"links.":[45],"They":[46],"face":[47],"increasing":[48],"challenges":[49],"exponentially":[53],"growing":[54],"sizes":[55],"models":[57,67],"in":[60,70],"modern":[61],"workloads":[63],"like":[64],"large":[65],"language":[66],"(LLMs),":[68],"resulting":[69],"prohibitively":[71],"high":[72],"communication":[73],"costs.":[74],"In":[75],"this":[76],"paper,":[77],"we":[78],"propose":[79],"a":[80,132,137,151,177],"novel":[81],"mechanism":[82],"called":[83],"GPU":[84,97],"Travelling":[85],"that":[86],"leverages":[87],"recently":[88],"emerged":[89],"confidential":[90],"GPUs.":[91],"With":[92],"our":[93],"rigorous":[94],"design,":[95],"can":[98],"securely":[99],"travel":[100],"specific":[103],"holder":[105],"load":[107],"dataset":[109,180],"directly":[110],"into":[111],"GPU's":[113],"protected":[114],"memory":[115],"then":[117],"return":[118],"for":[119,124],"training,":[120],"eliminating":[121],"transmission":[126],"ensuring":[128],"up":[130],"data-centre":[133],"level.":[134],"We":[135],"developed":[136],"prototype":[138],"using":[139],"Intel":[140],"TDX":[141],"NVIDIA":[143],"H100":[144],"evaluated":[146],"its":[147],"performance":[148,159],"on":[149],"llm.c,":[150],"CUDA-based":[152],"LLM":[153],"project,":[155],"demonstrated":[157],"feasibility":[161],"maintaining":[163],"strong":[164],"security":[165],"guarantees.":[166],"The":[167],"results":[168],"showed":[169],"at":[170],"least":[171],"4x":[172],"speed":[173],"improvement":[174],"when":[175],"transmitting":[176],"512":[178],"MiB":[179],"chunk":[181],"versus":[182],"transmission.":[184]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-11-23T00:00:00"}