{"id":"https://openalex.org/W4401386507","doi":"https://doi.org/10.1145/3583740.3626617","title":"SODA: Protecting Proprietary Information in On-Device Machine Learning Models","display_name":"SODA: Protecting Proprietary Information in On-Device Machine Learning Models","publication_year":2023,"publication_date":"2023-12-06","ids":{"openalex":"https://openalex.org/W4401386507","doi":"https://doi.org/10.1145/3583740.3626617"},"language":"en","primary_location":{"id":"doi:10.1145/3583740.3626617","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3583740.3626617","pdf_url":null,"source":null,"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Eighth ACM/IEEE Symposium on Edge Computing","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5017670107","display_name":"Akanksha Atrey","orcid":"https://orcid.org/0000-0003-1318-7225"},"institutions":[{"id":"https://openalex.org/I24603500","display_name":"University of Massachusetts Amherst","ror":"https://ror.org/0072zz521","country_code":"US","type":"education","lineage":["https://openalex.org/I24603500"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Akanksha Atrey","raw_affiliation_strings":["University of Massachusetts Amherst, Amherst, Massachusetts, USA"],"raw_orcid":"https://orcid.org/0000-0003-1318-7225","affiliations":[{"raw_affiliation_string":"University of Massachusetts Amherst, Amherst, Massachusetts, USA","institution_ids":["https://openalex.org/I24603500"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056964468","display_name":"Ritwik Sinha","orcid":"https://orcid.org/0000-0002-0344-1368"},"institutions":[{"id":"https://openalex.org/I1306409833","display_name":"Adobe Systems (United States)","ror":"https://ror.org/059tvcg64","country_code":"US","type":"company","lineage":["https://openalex.org/I1306409833"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ritwik Sinha","raw_affiliation_strings":["Adobe Research, San Jose, California, USA"],"raw_orcid":"https://orcid.org/0000-0002-0344-1368","affiliations":[{"raw_affiliation_string":"Adobe Research, San Jose, California, USA","institution_ids":["https://openalex.org/I1306409833"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003506066","display_name":"Saayan Mitra","orcid":"https://orcid.org/0000-0002-4048-2142"},"institutions":[{"id":"https://openalex.org/I1306409833","display_name":"Adobe Systems (United States)","ror":"https://ror.org/059tvcg64","country_code":"US","type":"company","lineage":["https://openalex.org/I1306409833"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Saayan Mitra","raw_affiliation_strings":["Adobe Research, San Jose, California, USA"],"raw_orcid":"https://orcid.org/0000-0002-4048-2142","affiliations":[{"raw_affiliation_string":"Adobe Research, San Jose, California, USA","institution_ids":["https://openalex.org/I1306409833"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5032939724","display_name":"Prashant Shenoy","orcid":"https://orcid.org/0000-0002-5435-1901"},"institutions":[{"id":"https://openalex.org/I24603500","display_name":"University of Massachusetts Amherst","ror":"https://ror.org/0072zz521","country_code":"US","type":"education","lineage":["https://openalex.org/I24603500"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Prashant Shenoy","raw_affiliation_strings":["University of Massachusetts Amherst, Amherst, Massachusetts, USA"],"raw_orcid":"https://orcid.org/0000-0002-5435-1901","affiliations":[{"raw_affiliation_string":"University of Massachusetts Amherst, Amherst, Massachusetts, USA","institution_ids":["https://openalex.org/I24603500"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.2172,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.53263624,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"121","last_page":"132"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9937999844551086,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6772751808166504},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.46658995747566223},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.3279595673084259}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6772751808166504},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.46658995747566223},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.3279595673084259}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3583740.3626617","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3583740.3626617","pdf_url":null,"source":null,"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Eighth ACM/IEEE Symposium on Edge Computing","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1198325749","display_name":null,"funder_award_id":"W911NF-17-2-0196.","funder_id":"https://openalex.org/F4320338295","funder_display_name":"Army Research Laboratory"},{"id":"https://openalex.org/G1235962308","display_name":"Collaborative Research: CNS Core: Medium: IoCT:  System Mechanisms for Enabling an Internet of Collaborative Things","funder_award_id":"2211302","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G1287944833","display_name":"CNS Core: Small: Optimizing Distributed Machine Learning for Transient Resources using Loose Synchronization","funder_award_id":"1908536","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G1368418627","display_name":"Collaborative Research: NGSDI: CarbonFirst: A Sustainable and Reliable Carbon-Centric Cloud-Edge Software Infrastructure","funder_award_id":"2105494","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5688242767","display_name":"CCRI: New: A Community Testbed for Designing Carbon-Efficient Cloud Applications","funder_award_id":"2213636","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6057006769","display_name":"CNS Core: Medium:Model-driven Resource Management for Avoiding Performance Pitfalls in Edge Computing","funder_award_id":"2211888","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320338295","display_name":"Army Research Laboratory","ror":"https://ror.org/011hc8f90"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":9,"referenced_works":["https://openalex.org/W2032395777","https://openalex.org/W2535690855","https://openalex.org/W2603766943","https://openalex.org/W2897830718","https://openalex.org/W2962835266","https://openalex.org/W2963303354","https://openalex.org/W2963465081","https://openalex.org/W3011434423","https://openalex.org/W4315746341"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052","https://openalex.org/W2382290278","https://openalex.org/W4395014643"],"abstract_inverted_index":{"The":[0],"growth":[1],"of":[2,10,107],"low-end":[3],"hardware":[4],"has":[5,41],"led":[6],"to":[7,43,52,94,121,133],"a":[8,33,63],"proliferation":[9],"machine":[11,34],"learning-based":[12],"services":[13,97],"in":[14,167],"edge":[15,73,148],"applications.":[16],"These":[17],"applications":[18],"gather":[19],"contextual":[20],"information":[21,78,106],"about":[22,79],"users":[23],"and":[24,58,98,125,145,179],"provide":[25,95],"some":[26],"services,":[27],"such":[28,45,119,135],"as":[29],"personalized":[30],"offers,":[31],"through":[32],"learning":[35],"(ML)":[36],"model.":[37],"A":[38],"growing":[39],"practice":[40],"been":[42],"deploy":[44],"ML":[46,68,89],"models":[47,69,90,120],"on":[48,62,70,147,175],"the":[49,71,80,108,131],"user's":[50,72],"device":[51,74],"reduce":[53],"latency,":[54,178],"maintain":[55],"user":[56],"privacy,":[57],"minimize":[59],"continuous":[60],"reliance":[61],"centralized":[64],"source.":[65],"However,":[66],"deploying":[67,144],"can":[75,103,116,160],"leak":[76,104],"proprietary":[77,105],"service":[81,109,176],"provider.":[82,110],"In":[83],"this":[84],"work,":[85],"we":[86,137],"investigate":[87],"on-device":[88],"that":[91,113,158],"are":[92],"used":[93],"mobile":[96],"demonstrate":[99,157],"how":[100],"simple":[101],"attacks":[102],"We":[111],"show":[112],"different":[114],"adversaries":[115],"easily":[117],"exploit":[118],"maximize":[122],"their":[123],"profit":[124],"accomplish":[126],"content":[127],"theft.":[128],"Motivated":[129],"by":[130],"need":[132],"thwart":[134],"attacks,":[136],"present":[138],"an":[139],"end-to-end":[140],"framework,":[141],"SODA,":[142],"for":[143],"serving":[146],"devices":[149],"while":[150],"defending":[151],"against":[152],"adversarial":[153,162],"usage.":[154],"Our":[155],"results":[156],"SODA":[159],"detect":[161],"usage":[163],"with":[164,172],"89%":[165],"accuracy":[166],"less":[168],"than":[169],"50":[170],"queries":[171],"minimal":[173],"impact":[174],"performance,":[177],"storage.":[180]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-10T00:00:00"}
