{"id":"https://openalex.org/W7164914111","doi":"https://doi.org/10.48550/arxiv.2606.16809","title":"DataGuard: Guaranteeing Private Training in Systolic-array Based Accelerators","display_name":"DataGuard: Guaranteeing Private Training in Systolic-array Based Accelerators","publication_year":2026,"publication_date":"2026-06-15","ids":{"openalex":"https://openalex.org/W7164914111","doi":"https://doi.org/10.48550/arxiv.2606.16809"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.16809","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.16809","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.16809","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5093713844","display_name":"Pawan Kumar Sanjaya","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sanjaya, Pawan Kumar","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044162748","display_name":"Christina Giannoula","orcid":"https://orcid.org/0000-0003-0162-4547"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Giannoula, Christina","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138711897","display_name":"Nikhil Shreekumar","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shreekumar, Nikhil","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072053383","display_name":"Ian Colbert","orcid":"https://orcid.org/0000-0002-1669-5519"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Colbert, Ian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137394019","display_name":"Alec Dewulf","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dewulf, Alec","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138753838","display_name":"Mehdi Saeedi","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Saeedi, Mehdi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023189375","display_name":"Ihab Amer","orcid":"https://orcid.org/0000-0002-2190-6499"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Amer, Ihab","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002629612","display_name":"Gabor Sines","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sines, Gabor","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5080873211","display_name":"Nandita Vijaykumar","orcid":"https://orcid.org/0000-0003-3315-9336"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Vijaykumar, Nandita","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.8948000073432922,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.8948000073432922,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11612","display_name":"Stochastic Gradient Optimization Techniques","score":0.020500000566244125,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.016100000590085983,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/differential-privacy","display_name":"Differential privacy","score":0.8572999835014343},{"id":"https://openalex.org/keywords/a-priori-and-a-posteriori","display_name":"A priori and a posteriori","score":0.5889000296592712},{"id":"https://openalex.org/keywords/computation","display_name":"Computation","score":0.5325000286102295},{"id":"https://openalex.org/keywords/training","display_name":"Training (meteorology)","score":0.49549999833106995},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.47850000858306885},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.4438000023365021},{"id":"https://openalex.org/keywords/raw-data","display_name":"Raw data","score":0.44209998846054077},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.38830000162124634},{"id":"https://openalex.org/keywords/formalism","display_name":"Formalism (music)","score":0.35429999232292175}],"concepts":[{"id":"https://openalex.org/C23130292","wikidata":"https://www.wikidata.org/wiki/Q5275358","display_name":"Differential privacy","level":2,"score":0.8572999835014343},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8113999962806702},{"id":"https://openalex.org/C75553542","wikidata":"https://www.wikidata.org/wiki/Q178161","display_name":"A priori and a posteriori","level":2,"score":0.5889000296592712},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.5325000286102295},{"id":"https://openalex.org/C2777211547","wikidata":"https://www.wikidata.org/wiki/Q17141490","display_name":"Training (meteorology)","level":2,"score":0.49549999833106995},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.47850000858306885},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.4438000023365021},{"id":"https://openalex.org/C132964779","wikidata":"https://www.wikidata.org/wiki/Q2110223","display_name":"Raw data","level":2,"score":0.44209998846054077},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.38830000162124634},{"id":"https://openalex.org/C73301696","wikidata":"https://www.wikidata.org/wiki/Q5469984","display_name":"Formalism (music)","level":3,"score":0.35429999232292175},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.35100001096725464},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.34850001335144043},{"id":"https://openalex.org/C99221444","wikidata":"https://www.wikidata.org/wiki/Q1532069","display_name":"Private information retrieval","level":2,"score":0.34450000524520874},{"id":"https://openalex.org/C47487241","wikidata":"https://www.wikidata.org/wiki/Q5227230","display_name":"Data access","level":2,"score":0.3228999972343445},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.31310001015663147},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.31290000677108765},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.30889999866485596},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.30630001425743103},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.28949999809265137},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.28679999709129333},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.2858999967575073},{"id":"https://openalex.org/C193519340","wikidata":"https://www.wikidata.org/wiki/Q891179","display_name":"Data loss","level":2,"score":0.27000001072883606},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2696000039577484},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2694000005722046},{"id":"https://openalex.org/C2779582901","wikidata":"https://www.wikidata.org/wiki/Q21013010","display_name":"Distributed learning","level":2,"score":0.26809999346733093},{"id":"https://openalex.org/C2776848632","wikidata":"https://www.wikidata.org/wiki/Q853463","display_name":"Clipping (morphology)","level":2,"score":0.26570001244544983},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2630999982357025},{"id":"https://openalex.org/C2780909371","wikidata":"https://www.wikidata.org/wiki/Q4801092","display_name":"Artificial noise","level":4,"score":0.26269999146461487},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.2540000081062317},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.25130000710487366}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.16809","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.16809","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.16809","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.16809","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Differential":[0],"privacy":[1,73,79,160],"(DP)":[2],"and":[3,58,193,203],"federated":[4],"learning":[5,20],"(FL)":[6],"have":[7],"emerged":[8],"as":[9],"important":[10],"privacy-preserving":[11],"approaches":[12],"when":[13],"using":[14],"sensitive":[15,27,88,120],"data":[16,28,136,165],"to":[17,61,71,77,106,119,156,176],"train":[18],"machine":[19],"(ML)":[21],"models.":[22],"FL":[23,94,101,171],"ensures":[24,44],"that":[25,45,98,131,133,137,147,158],"raw":[26],"does":[29,48],"not":[30,49,168],"leave":[31,139],"the":[32,37,41,46,62,66,85,112,134,140,143,159,164,174],"users'":[33],"devices":[34],"by":[35,56,84,163],"training":[36,76,172],"model":[38,47],"locally":[39],"on":[40],"device.":[42],"DP":[43,109,149],"leak":[50],"any":[51],"information":[52],"about":[53],"an":[54],"individual":[55],"clipping":[57],"adding":[59],"noise":[60],"gradients":[63],"before":[64],"updating":[65],"model.":[67],"It":[68],"provides":[69],"formalism":[70],"constrain":[72],"loss":[74],"during":[75,170],"a":[78,82,99,128,178],"budget":[80,161],"determined":[81],"priori":[83],"owner":[86,166],"of":[87,93,145,186,199,206],"data.":[89,121],"However,":[90],"real-life":[91],"deployments":[92],"algorithms":[95],"typically":[96],"assume":[97],"third-party":[100,113,179],"application":[102,114],"can":[103,138,152],"be":[104,154],"trusted":[105],"correctly":[107],"implement":[108],"algorithms.":[110],"Thus,":[111],"is":[115,142,167],"given":[116],"full":[117],"access":[118],"In":[122],"this":[123],"work,":[124],"we":[125],"propose":[126],"DataGuard,":[127],"hardware-based":[129],"mechanism":[130],"guarantees":[132],"only":[135,195],"device":[141],"result":[144],"computation":[146],"meets":[148],"requirements.":[150],"DataGuard":[151,183],"thus":[153],"used":[155],"ensure":[157],"defined":[162],"exceeded":[169],"without":[173],"need":[175],"trust":[177],"application.":[180],"We":[181],"evaluate":[182],"in":[184],"simulations":[185],"four":[187],"accelerators":[188],"for":[189],"various":[190],"ML":[191],"models":[192],"demonstrate":[194],"small":[196],"area":[197],"overheads":[198],"less":[200,207],"than":[201,208],"0.01\\%":[202],"performance":[204],"slowdowns":[205],"0.3\\%.":[209]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-06-17T00:00:00"}