Home
Resource
HybridTEE: secure and privacy-preserving mobile DNN execution using hybrid trusted execution environment
PDF
PDF format is widely accepted and good for printing.
Plug-in required
PDF-1(1.00 MB)
Citation & Export
View Usage Statistics
Staff View

Citation & Export
Hide

Simple citation

Gangal, Akshay. HybridTEE: secure and privacy-preserving mobile DNN execution using hybrid trusted execution environment. Retrieved from https://doi.org/doi:10.7282/t3-e7j4-c004

Export

Click here for information about Citation Management Tools at Rutgers.

Statistics
Hide

Description

TitleHybridTEE: secure and privacy-preserving mobile DNN execution using hybrid trusted execution environment
NameGangal, Akshay (author); Wei, Sheng (chair); Zonouz, Saman (internal member); Chen, Yingying (internal member); Rutgers University; School of Graduate Studies
Date Created2020
Other Date2020-10 (degree)
SubjectDeep neural networks, Electrical and Computer Engineering
Extent1 online resource (viii, 36 pages) : illustrations
DescriptionDeep neural networks (DNNs) have been increasingly adopted in many mobile applications involving security/privacy sensitive data and inference models. Therefore, there is an urgent demand for security and privacy protection of DNN execution on mobile devices. Catering to this demand, hardware-based trusted execution environments (TEEs), such as ARM TrustZone, have recently been considered for secure mobile DNN execution. However, none of the existing attempts of running DNN in TrustZone have been successful due to the stringent resource and performance limitations posed by the mobile TEE. We develop HybridTEE, a novel hardware-based security framework to securely execute DNN in the resource-constrained local TEE (i.e., ARM TrustZone), by offloading a part of the DNN model to a resource-rich remote TEE (i.e., Intel SGX). The key design of HybridTEE is two-fold. First, it strategically divides the DNN model into privacy-aware local (TrustZone) and remote (SGX) partitions by employing two privacy-oriented metrics based on object recognition and Scale Invariant Feature Transform (SIFT). Second, it builds a trustworthy communication channel bridging TrustZone and SGX to enable secure offloading of the DNN model between the two TEEs. Our evaluations based on a prototype implementation of HybridTEE and 4 popular DNN models indicate enhanced security and a 1.75x - 3.5x speedup compared to mobile-only DNN execution without TEE.
NoteM.S.
NoteIncludes bibliographical references
Genretheses, ETD graduate
Persistent URLhttps://doi.org/doi:10.7282/t3-e7j4-c004
LanguageEnglish
CollectionSchool of Graduate Studies Electronic Theses and Dissertations
Organization NameRutgers, The State University of New Jersey
RightsThe author owns the copyright to this work.
Version 8.5.5
Rutgers University Libraries - Copyright ©2024