{"id":"https://openalex.org/W7163529103","doi":"https://doi.org/10.23919/date69613.2026.11539273","title":"TrustSeed: Lightweight Attestation Protocol for Ensuring LLM Integrity","display_name":"TrustSeed: Lightweight Attestation Protocol for Ensuring LLM Integrity","publication_year":2026,"publication_date":"2026-04-20","ids":{"openalex":"https://openalex.org/W7163529103","doi":"https://doi.org/10.23919/date69613.2026.11539273"},"language":null,"primary_location":{"id":"doi:10.23919/date69613.2026.11539273","is_oa":false,"landing_page_url":"https://doi.org/10.23919/date69613.2026.11539273","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 Design, Automation &amp;amp; Test in Europe Conference (DATE)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5119343188","display_name":"Mohamed Alsharkawy","orcid":null},"institutions":[{"id":"https://openalex.org/I102335020","display_name":"Karlsruhe Institute of Technology","ror":"https://ror.org/04t3en479","country_code":"DE","type":"education","lineage":["https://openalex.org/I102335020","https://openalex.org/I1305996414"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Mohamed Alsharkawy","raw_affiliation_strings":["Karlsruhe Institute of Technology (KIT),Chair for Embedded Systems (CES),Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Karlsruhe Institute of Technology (KIT),Chair for Embedded Systems (CES),Germany","institution_ids":["https://openalex.org/I102335020"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133014021","display_name":"Mohamed Aboelenien Ahmed","orcid":null},"institutions":[{"id":"https://openalex.org/I102335020","display_name":"Karlsruhe Institute of Technology","ror":"https://ror.org/04t3en479","country_code":"DE","type":"education","lineage":["https://openalex.org/I102335020","https://openalex.org/I1305996414"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Mohamed Aboelenien Ahmed","raw_affiliation_strings":["Karlsruhe Institute of Technology (KIT),Chair for Embedded Systems (CES),Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Karlsruhe Institute of Technology (KIT),Chair for Embedded Systems (CES),Germany","institution_ids":["https://openalex.org/I102335020"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040426334","display_name":"Hassan Nassar","orcid":"https://orcid.org/0000-0003-1566-8997"},"institutions":[{"id":"https://openalex.org/I102335020","display_name":"Karlsruhe Institute of Technology","ror":"https://ror.org/04t3en479","country_code":"DE","type":"education","lineage":["https://openalex.org/I102335020","https://openalex.org/I1305996414"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Hassan Nassar","raw_affiliation_strings":["Karlsruhe Institute of Technology (KIT),Chair for Embedded Systems (CES),Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Karlsruhe Institute of Technology (KIT),Chair for Embedded Systems (CES),Germany","institution_ids":["https://openalex.org/I102335020"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009980176","display_name":"Jeferson Gonzalez","orcid":null},"institutions":[{"id":"https://openalex.org/I145372079","display_name":"Instituto Tecnol\u00f3gico de Costa Rica","ror":"https://ror.org/04zhrfn38","country_code":"CR","type":"education","lineage":["https://openalex.org/I145372079"]}],"countries":["CR"],"is_corresponding":false,"raw_author_name":"Jeferson Gonzalez","raw_affiliation_strings":["Costa Rica Institute of Technology (TEC),Costa Rica"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Costa Rica Institute of Technology (TEC),Costa Rica","institution_ids":["https://openalex.org/I145372079"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035265423","display_name":"Heba Khdr","orcid":"https://orcid.org/0000-0003-0245-2062"},"institutions":[{"id":"https://openalex.org/I102335020","display_name":"Karlsruhe Institute of Technology","ror":"https://ror.org/04t3en479","country_code":"DE","type":"education","lineage":["https://openalex.org/I102335020","https://openalex.org/I1305996414"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Heba Khdr","raw_affiliation_strings":["Karlsruhe Institute of Technology (KIT),Chair for Embedded Systems (CES),Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Karlsruhe Institute of Technology (KIT),Chair for Embedded Systems (CES),Germany","institution_ids":["https://openalex.org/I102335020"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033257158","display_name":"Osama Abboud","orcid":"https://orcid.org/0009-0003-0311-1267"},"institutions":[{"id":"https://openalex.org/I4210166625","display_name":"Huawei German Research Center","ror":"https://ror.org/00z59w514","country_code":"DE","type":"facility","lineage":["https://openalex.org/I2250955327","https://openalex.org/I4210129353","https://openalex.org/I4210166625"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Osama Abboud","raw_affiliation_strings":["Huawei Munich Research Center"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Huawei Munich Research Center","institution_ids":["https://openalex.org/I4210166625"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120558302","display_name":"Xun Xiao","orcid":null},"institutions":[{"id":"https://openalex.org/I4210166625","display_name":"Huawei German Research Center","ror":"https://ror.org/00z59w514","country_code":"DE","type":"facility","lineage":["https://openalex.org/I2250955327","https://openalex.org/I4210129353","https://openalex.org/I4210166625"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Xun Xiao","raw_affiliation_strings":["Huawei Munich Research Center"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Huawei Munich Research Center","institution_ids":["https://openalex.org/I4210166625"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5137915962","display_name":"J\u00f6rg Henkel","orcid":null},"institutions":[{"id":"https://openalex.org/I102335020","display_name":"Karlsruhe Institute of Technology","ror":"https://ror.org/04t3en479","country_code":"DE","type":"education","lineage":["https://openalex.org/I102335020","https://openalex.org/I1305996414"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"J\u00f6rg Henkel","raw_affiliation_strings":["Karlsruhe Institute of Technology (KIT),Chair for Embedded Systems (CES),Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Karlsruhe Institute of Technology (KIT),Chair for Embedded Systems (CES),Germany","institution_ids":["https://openalex.org/I102335020"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.62610384,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.3817000091075897,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.3817000091075897,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.14300000667572021,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.10689999908208847,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.5320000052452087},{"id":"https://openalex.org/keywords/data-integrity","display_name":"Data integrity","score":0.3774999976158142},{"id":"https://openalex.org/keywords/cryptographic-protocol","display_name":"Cryptographic protocol","score":0.2840000092983246},{"id":"https://openalex.org/keywords/reliability","display_name":"Reliability (semiconductor)","score":0.27880001068115234},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.27070000767707825}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5699999928474426},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.5320000052452087},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4072999954223633},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.3774999976158142},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.2906999886035919},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.2840000092983246},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.27880001068115234},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2754000127315521},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.27070000767707825},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.2671000063419342},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.262800008058548},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.25110000371932983}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.23919/date69613.2026.11539273","is_oa":false,"landing_page_url":"https://doi.org/10.23919/date69613.2026.11539273","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 Design, Automation &amp;amp; Test in Europe Conference (DATE)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":25,"referenced_works":["https://openalex.org/W2085992264","https://openalex.org/W2099613071","https://openalex.org/W2104221518","https://openalex.org/W2157116240","https://openalex.org/W2251939518","https://openalex.org/W2794732147","https://openalex.org/W2942091739","https://openalex.org/W2966689772","https://openalex.org/W2981860227","https://openalex.org/W3008727730","https://openalex.org/W3034457371","https://openalex.org/W3162298623","https://openalex.org/W3175121854","https://openalex.org/W3185370865","https://openalex.org/W3207050365","https://openalex.org/W3210158641","https://openalex.org/W3214052054","https://openalex.org/W4200501761","https://openalex.org/W4238767809","https://openalex.org/W4386569070","https://openalex.org/W4399396311","https://openalex.org/W4402350363","https://openalex.org/W4404847903","https://openalex.org/W4411713679","https://openalex.org/W4413308201"],"related_works":[],"abstract_inverted_index":{"Over":[0],"the":[1,41,44,57,62,65,106,118],"last":[2,107,142],"couple":[3],"of":[4,43,64,148],"years,":[5],"large":[6,58,84],"language":[7,85],"models":[8],"have":[9],"increasingly":[10],"been":[11],"integrated":[12],"into":[13],"many":[14],"computing":[15],"applications.":[16],"For":[17],"privacy":[18],"preservation,":[19],"they":[20],"are":[21,30,145],"now":[22],"deployed":[23],"on":[24,117,168],"edge":[25,169],"devices.":[26],"However,":[27],"these":[28],"deployments":[29],"vulnerable":[31],"to":[32,51,56,82,96,180,185],"bit":[33],"flip":[34],"attacks":[35,38],"and":[36,61,104,110,129,141,157,171,178],"backdoor":[37],"that":[39,77,138],"compromise":[40],"integrity":[42,90],"model.":[45],"Traditional":[46],"remote":[47],"attestation":[48,75,133,183],"techniques":[49],"fail":[50],"detect":[52],"such":[53],"manipulations":[54],"due":[55],"model":[59,97],"size":[60],"stealthiness":[63],"attacks.In":[66],"this":[67],"paper,":[68],"we":[69],"present":[70],"TrustSeed,":[71],"a":[72,79,100,114],"lightweight":[73],"functional":[74],"protocol":[76],"uses":[78],"single":[80],"inference":[81],"ensure":[83],"models\u2019":[86],"integrity.":[87,149],"TrustSeed":[88,152],"verifies":[89],"by":[91],"applying":[92],"deterministic,":[93],"seed-based":[94],"modifications":[95],"weights":[98],"within":[99],"Trusted":[101],"Execution":[102],"Environment":[103],"comparing":[105],"intermediate":[108,143],"activations":[109,144],"output":[111,139],"distribution":[112,140],"against":[113,153],"golden":[115],"reference":[116],"verifier.":[119],"This":[120],"approach":[121],"prevents":[122],"precomputed":[123],"or":[124],"forged":[125],"responses,":[126],"ensuring":[127],"freshness":[128],"unpredictability":[130],"in":[131],"each":[132],"round.":[134],"Our":[135],"analysis":[136],"shows":[137],"effective":[146],"indicators":[147],"We":[150],"test":[151],"bit-flip,":[154],"data":[155],"poisoning,":[156],"weight":[158],"poisoning":[159],"attacks,":[160],"reliably":[161],"detecting":[162],"even":[163],"single-bit":[164],"alterations.":[165],"Extensive":[166],"evaluations":[167],"platforms":[170],"an":[172],"HPC":[173],"system":[174],"demonstrate":[175],"minimal":[176],"overhead":[177],"up":[179],"127\u00d7":[181],"faster":[182],"compared":[184],"state-of-the-art":[186],"full-model":[187],"hashing.":[188]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-06-05T00:00:00"}
