{"id":"https://openalex.org/W3013583651","doi":"https://doi.org/10.23919/date48585.2020.9116560","title":"Offline Model Guard: Secure and Private ML on Mobile Devices","display_name":"Offline Model Guard: Secure and Private ML on Mobile Devices","publication_year":2020,"publication_date":"2020-03-01","ids":{"openalex":"https://openalex.org/W3013583651","doi":"https://doi.org/10.23919/date48585.2020.9116560","mag":"3013583651"},"language":"en","primary_location":{"id":"doi:10.23919/date48585.2020.9116560","is_oa":false,"landing_page_url":"https://doi.org/10.23919/date48585.2020.9116560","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 Design, Automation & Test in Europe Conference & Exhibition (DATE)","raw_type":"proceedings-article"},"type":"article","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2007.02351","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Sebastian P. Bayerl","orcid":null},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Sebastian P. Bayerl","raw_affiliation_strings":["Technische Hochschule Nürnberg,Germany"],"affiliations":[{"raw_affiliation_string":"Technische Hochschule Nürnberg,Germany","institution_ids":[]}]},{"author_position":"middle","author":{"id":null,"display_name":"Tommaso Frassetto","orcid":null},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technical University of Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Tommaso Frassetto","raw_affiliation_strings":["Technische Universität,Darmstadt,Germany"],"affiliations":[{"raw_affiliation_string":"Technische Universität,Darmstadt,Germany","institution_ids":["https://openalex.org/I31512782"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Patrick Jauernig","orcid":null},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technical University of Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Patrick Jauernig","raw_affiliation_strings":["Technische Universität,Darmstadt,Germany"],"affiliations":[{"raw_affiliation_string":"Technische Universität,Darmstadt,Germany","institution_ids":["https://openalex.org/I31512782"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Korbinian Riedhammer","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Korbinian Riedhammer","raw_affiliation_strings":["Technische Hochschule Nürnberg,Germany"],"affiliations":[{"raw_affiliation_string":"Technische Hochschule Nürnberg,Germany","institution_ids":[]}]},{"author_position":"middle","author":{"id":null,"display_name":"Ahmad-Reza Sadeghi","orcid":null},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technical University of Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Ahmad-Reza Sadeghi","raw_affiliation_strings":["Technische Universität,Darmstadt,Germany"],"affiliations":[{"raw_affiliation_string":"Technische Universität,Darmstadt,Germany","institution_ids":["https://openalex.org/I31512782"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Thomas Schneider","orcid":null},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technical University of Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Thomas Schneider","raw_affiliation_strings":["Technische Universität,Darmstadt,Germany"],"affiliations":[{"raw_affiliation_string":"Technische Universität,Darmstadt,Germany","institution_ids":["https://openalex.org/I31512782"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Emmanuel Stapf","orcid":null},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technical University of Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Emmanuel Stapf","raw_affiliation_strings":["Technische Universität,Darmstadt,Germany"],"affiliations":[{"raw_affiliation_string":"Technische Universität,Darmstadt,Germany","institution_ids":["https://openalex.org/I31512782"]}]},{"author_position":"last","author":{"id":null,"display_name":"Christian Weinert","orcid":null},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technical University of Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Christian Weinert","raw_affiliation_strings":["Technische Universität,Darmstadt,Germany"],"affiliations":[{"raw_affiliation_string":"Technische Universität,Darmstadt,Germany","institution_ids":["https://openalex.org/I31512782"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":8,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.7436,"has_fulltext":false,"cited_by_count":32,"citation_normalized_percentile":{"value":0.92022177,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"460","last_page":"465"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.5976999998092651},{"id":"https://openalex.org/keywords/secrecy","display_name":"Secrecy","score":0.5766000151634216},{"id":"https://openalex.org/keywords/guard","display_name":"Guard (computer science)","score":0.5670999884605408},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.4713999927043915},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.43309998512268066},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.41760000586509705},{"id":"https://openalex.org/keywords/trusted-platform-module","display_name":"Trusted Platform Module","score":0.3968999981880188},{"id":"https://openalex.org/keywords/microcontroller","display_name":"Microcontroller","score":0.3898000121116638},{"id":"https://openalex.org/keywords/service-provider","display_name":"Service provider","score":0.37130001187324524}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7879999876022339},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.5976999998092651},{"id":"https://openalex.org/C2776452267","wikidata":"https://www.wikidata.org/wiki/Q1503443","display_name":"Secrecy","level":2,"score":0.5766000151634216},{"id":"https://openalex.org/C141141315","wikidata":"https://www.wikidata.org/wiki/Q2379942","display_name":"Guard (computer science)","level":2,"score":0.5670999884605408},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.4713999927043915},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4343999922275543},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.43309998512268066},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.41760000586509705},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.4171000123023987},{"id":"https://openalex.org/C202775310","wikidata":"https://www.wikidata.org/wiki/Q1140366","display_name":"Trusted Platform Module","level":2,"score":0.3968999981880188},{"id":"https://openalex.org/C173018170","wikidata":"https://www.wikidata.org/wiki/Q165678","display_name":"Microcontroller","level":2,"score":0.3898000121116638},{"id":"https://openalex.org/C116537","wikidata":"https://www.wikidata.org/wiki/Q2169973","display_name":"Service provider","level":3,"score":0.37130001187324524},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.3652999997138977},{"id":"https://openalex.org/C144543869","wikidata":"https://www.wikidata.org/wiki/Q2738570","display_name":"Mobile computing","level":2,"score":0.35359999537467957},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.3472000062465668},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.3458999991416931},{"id":"https://openalex.org/C147346212","wikidata":"https://www.wikidata.org/wiki/Q5492632","display_name":"Trusted computing base","level":4,"score":0.34470000863075256},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.34130001068115234},{"id":"https://openalex.org/C178005623","wikidata":"https://www.wikidata.org/wiki/Q308859","display_name":"Anonymity","level":2,"score":0.32199999690055847},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3140999972820282},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.3100000023841858},{"id":"https://openalex.org/C2776831232","wikidata":"https://www.wikidata.org/wiki/Q966812","display_name":"Trusted Computing","level":2,"score":0.3084999918937683},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.29980000853538513},{"id":"https://openalex.org/C99221444","wikidata":"https://www.wikidata.org/wiki/Q1532069","display_name":"Private information retrieval","level":2,"score":0.28349998593330383},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.2757999897003174},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.2727000117301941},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2669999897480011},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.26570001244544983}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.23919/date48585.2020.9116560","is_oa":false,"landing_page_url":"https://doi.org/10.23919/date48585.2020.9116560","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 Design, Automation & Test in Europe Conference & Exhibition (DATE)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2007.02351","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2007.02351","pdf_url":"https://arxiv.org/pdf/2007.02351","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:kobv.de-opus4-th-nuernberg:1987","is_oa":false,"landing_page_url":"https://opus4.kobv.de/opus4-ohm/frontdoor/index/index/docId/1987","pdf_url":null,"source":{"id":"https://openalex.org/S4306401730","display_name":"OHMdok (Technische Hochschule N\u00fcrnberg)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210100612","host_organization_name":"Georg Simon Ohm University of Applied Sciences Nuremberg","host_organization_lineage":["https://openalex.org/I4210100612"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"doc-type:conferenceObject"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2007.02351","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2007.02351","pdf_url":"https://arxiv.org/pdf/2007.02351","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W1605557845","https://openalex.org/W1934458198","https://openalex.org/W2028662467","https://openalex.org/W2128159601","https://openalex.org/W2130051287","https://openalex.org/W2150620897","https://openalex.org/W2535690855","https://openalex.org/W2701059868","https://openalex.org/W2742953865","https://openalex.org/W2765200655","https://openalex.org/W2806521799","https://openalex.org/W2899688953","https://openalex.org/W2904364493","https://openalex.org/W2914223029","https://openalex.org/W2935349488","https://openalex.org/W2941310685","https://openalex.org/W2952608669","https://openalex.org/W2962760690","https://openalex.org/W2963106566","https://openalex.org/W2987932087","https://openalex.org/W4232836212","https://openalex.org/W4250776762","https://openalex.org/W6634416663","https://openalex.org/W6712237015","https://openalex.org/W6714171909","https://openalex.org/W6717974185","https://openalex.org/W6718865826","https://openalex.org/W6748082217","https://openalex.org/W6748544737","https://openalex.org/W6749255846","https://openalex.org/W6750665317","https://openalex.org/W6751922297","https://openalex.org/W6753172360","https://openalex.org/W6753474897","https://openalex.org/W6756115552","https://openalex.org/W6760122430","https://openalex.org/W6766787143"],"related_works":[],"abstract_inverted_index":{"Performing":[0],"machine":[1,74],"learning":[2,75],"tasks":[3],"in":[4,83,134],"mobile":[5,79],"applications":[6],"yields":[7],"a":[8,59,88],"challenging":[9],"conflict":[10],"of":[11,28,103,107,112],"interest:":[12],"highly":[13],"sensitive":[14],"client":[15,104],"information":[16],"(e.g.,":[17,31],"speech":[18],"data)":[19],"should":[20],"remain":[21],"private":[22],"while":[23],"also":[24],"the":[25,77],"intellectual":[26],"property":[27],"service":[29],"providers":[30],"model":[32],"parameters)":[33],"must":[34],"be":[35],"protected.":[36],"Cryptographic":[37],"techniques":[38],"offer":[39],"secure":[40],"solutions":[41],"for":[42,92,132],"this,":[43],"but":[44],"have":[45],"an":[46,119],"unacceptable":[47],"overhead":[48],"and":[49,110],"moreover":[50],"require":[51],"frequent":[52],"network":[53],"interaction.In":[54],"this":[55],"work,":[56],"we":[57,65],"design":[58],"practically":[60],"efficient":[61],"hardware-based":[62],"solution.":[63],"Specifically,":[64],"build":[66],"OFFLINE":[67],"MODEL":[68],"GUARD":[69],"(OMG)":[70],"to":[71],"enable":[72],"privacy-preserving":[73,126],"on":[76,118],"predominant":[78],"computing":[80],"platform":[81],"ARM\u2014even":[82],"offline":[84],"scenarios.":[85],"By":[86],"leveraging":[87],"trusted":[89],"execution":[90],"environment":[91],"strict":[93],"hardware-enforced":[94],"isolation":[95],"from":[96],"other":[97],"system":[98],"components,":[99],"OMG":[100],"guarantees":[101],"privacy":[102],"data,":[105],"secrecy":[106],"provided":[108],"models,":[109],"integrity":[111],"processing":[113],"algorithms.":[114],"Our":[115],"prototype":[116],"implementation":[117],"ARM":[120],"HiKey":[121],"960":[122],"development":[123],"board":[124],"performs":[125],"keyword":[127],"recognition":[128],"using":[129],"TensorFlow":[130],"Lite":[131],"Microcontrollers":[133],"real":[135],"time.":[136]},"counts_by_year":[{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":7},{"year":2020,"cited_by_count":6}],"updated_date":"2026-03-29T08:15:47.926485","created_date":"2020-04-03T00:00:00"}