{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T22:38:39Z","timestamp":1782859119119,"version":"3.54.5"},"publisher-location":"Cham","reference-count":26,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031495847","type":"print"},{"value":"9783031495854","type":"electronic"}],"license":[{"start":{"date-parts":[[2023,12,29]],"date-time":"2023-12-29T00:00:00Z","timestamp":1703808000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,12,29]],"date-time":"2023-12-29T00:00:00Z","timestamp":1703808000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024]]},"DOI":"10.1007\/978-3-031-49585-4_9","type":"book-chapter","created":{"date-parts":[[2023,12,28]],"date-time":"2023-12-28T16:02:21Z","timestamp":1703779341000},"page":"177-192","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Practical Deep Neural Network Protection for\u00a0Unmodified Applications in\u00a0Intel Software Guard Extension Environments"],"prefix":"10.1007","author":[{"given":"Dee Meng","family":"Kang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Haadee","family":"Faahym","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Souhail","family":"Meftah","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sye Loong","family":"Keoh","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mi Mi Aung","family":"Khin","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2023,12,29]]},"reference":[{"key":"9_CR1","doi-asserted-by":"crossref","unstructured":"Chen, G., Chen, S., Xiao, Y., Zhang, Y., Lin, Z., Lai, T.: SGXPectre: stealing Intel secrets from SGX enclaves via speculative execution. In: Proceedings of the IEEE European Symposium on Security and Privacy, pp. 142\u2013157 (2019)","DOI":"10.1109\/EuroSP.2019.00020"},{"key":"9_CR2","doi-asserted-by":"crossref","unstructured":"Choi, H., Bajic, I.: Deep feature compression for collaborative object detection. In: Proceedings of the Twenty-Fifth IEEE International Conference on Image Processing, pp. 3743\u20133747 (2018)","DOI":"10.1109\/ICIP.2018.8451100"},{"key":"9_CR3","doi-asserted-by":"crossref","unstructured":"Costan, V., Lebedev, L., Devadas, S.: Secure processors. Part II: Intel SGX security analysis and MIT Sanctum architecture, Foundations and Trends in Electronic Design Automation 11(3), 249\u2013361 (2017)","DOI":"10.1561\/1000000052"},{"key":"9_CR4","unstructured":"Deis Labs, Mystikos, GitHub (https:\/\/github.com\/deislabs\/mystikos) (2023)"},{"issue":"6","key":"9_CR5","volume":"54","author":"S Fei","year":"2021","unstructured":"Fei, S., Yan, Z., Ding, W., Xie, H.: Security vulnerabilities of SGX and countermeasures: a survey. ACM Comput. Surv. 54(6), 126 (2021)","journal-title":"ACM Comput. Surv."},{"key":"9_CR6","unstructured":"Gramine Project Contributors, PyTorch PPML Framework, GitHub (https:\/\/github.com\/gramineproject\/graphene\/blob\/master\/Documentation\/tutorials\/pytorch\/index.rst) 2022"},{"key":"9_CR7","unstructured":"Gramine Project Contributors, Gramine Documentation (https:\/\/gramine.readthedocs.io\/en\/latest) (2023)"},{"key":"9_CR8","unstructured":"Intel, Understanding Intel Software Guard Extensions (Intel SGX), Santa Clara, California (https:\/\/intel.com\/content\/www\/us\/en\/developer\/articles\/technical\/intel-sgx-and-side-channels.html) (2023)"},{"key":"9_CR9","doi-asserted-by":"crossref","unstructured":"Itahara, S., Nishio, T., Yamamoto, K.: Packet-loss-tolerant split inference for delay-sensitive deep learning in lossy wireless networks. In: Proceedings of the IEEE Global Communications Conference (2021)","DOI":"10.1109\/GLOBECOM46510.2021.9685179"},{"issue":"10","key":"9_CR10","first-page":"1626","volume":"70","author":"D Jahier Pagliari","year":"2021","unstructured":"Jahier Pagliari, D., Chiaro, R., Macii, E., Poncino, M.: CRIME: input-dependent collaborative inference for recurrent neural networks. IEEE Trans. Comput. 70(10), 1626\u20131639 (2021)","journal-title":"IEEE Trans. Comput."},{"issue":"1","key":"9_CR11","doi-asserted-by":"publisher","first-page":"615","DOI":"10.1145\/3093337.3037698","volume":"45","author":"Y Kang","year":"2017","unstructured":"Kang, Y., et al.: Neurosurgeon: collaborative intelligence between the cloud and mobile edge. ACM SIGARCH Comput. Architect. News 45(1), 615\u2013629 (2017)","journal-title":"ACM SIGARCH Comput. Architect. News"},{"key":"9_CR12","unstructured":"Large-Scale Data and Systems Group, Spectre attack against SGX enclave, GitHub (https:\/\/github.com\/lsds\/spectre-attack-sgx) (2018)"},{"key":"9_CR13","doi-asserted-by":"crossref","unstructured":"Moghimi, A., Irazoqui, G., Eisenbarth, T.: CacheZoom: how SGX amplifies the power of cache attacks. In: Proceedings of the International Conference on Cryptographic Hardware and Embedded Systems, pp. 69\u201390 (2017)","DOI":"10.1007\/978-3-319-66787-4_4"},{"key":"9_CR14","unstructured":"Narra, K., Lin, Z., Wang, Y., Balasubramaniam, K., Annavaram, M.: Privacy-preserving inference in machine learning services using trusted execution environments. arXiv: 1912.03485 (2019)"},{"key":"9_CR15","unstructured":"Pessl, P., Gruss, D., Maurice, C., Schwarz, M., Mangard, S.: DRAMA: exploiting DRAM addressing for cross-CPU attacks. In: Proceedings of the Twenty-Fifth USENIX Security Symposium, pp. 565\u2013581 (2016)"},{"key":"9_CR16","unstructured":"PyTorch Team, AlexNet (https:\/\/pytorch.org\/hub\/pytorch_vision_alexnet) (2023)"},{"key":"9_CR17","unstructured":"PyTorch Team, ResNet (https:\/\/pytorch.org\/hub\/pytorch_vision_resnet) (2023)"},{"key":"9_CR18","unstructured":"PyTorch Team, Source code for torchvision.models.mobilenetv3 (https:\/\/pytorch.org\/vision\/stable\/_modules\/torchvision\/models\/mobilenetv3.html) (2023)"},{"key":"9_CR19","unstructured":"PyTorch Team, Squeezeent (https:\/\/pytorch.org\/hub\/pytorch_vision_squeezenet) (2023)"},{"key":"9_CR20","unstructured":"PyTorch Team, VGG-Nets (https:\/\/pytorch.org\/hub\/pytorch_vision_vgg) (2023)"},{"key":"9_CR21","unstructured":"Sanders, J.: Spectre and Meltdown explained: a comprehensive guide for professionals, TechRepublic, May 15 (2019)"},{"key":"9_CR22","doi-asserted-by":"crossref","unstructured":"Schwarz, M., Weiser, M., Gruss, D., Maurice, C., Mangard, S.: Malware guard extension: abusing intel SGX to conceal cache attacks, Cybersecurity, vol. 3, article no. 2 (2020)","DOI":"10.1186\/s42400-019-0042-y"},{"key":"9_CR23","unstructured":"Seaborn, M., Dullien, T.: Exploiting the DRAM rowhammer bug to gain kernel privileges, presented at Black Hat USA (2016)"},{"key":"9_CR24","unstructured":"Tramer, F., Boneh, D.: Slalom: fast, verifiable and private execution of neural networks in trusted hardware. arXiv:1806.03287v2 (2019)"},{"key":"9_CR25","unstructured":"Yarom, Y., Falkner, K.: Flush+Reload: a high resolution, low noise, L3 cache side-channel attack. In: Proceedings of the Twenty-Third USENIX Security Symposium, pp. 719\u2013732 (2014)"},{"key":"9_CR26","doi-asserted-by":"crossref","unstructured":"Zhao, C., Saifuding, D., Tian, H., Zhang, Y., Xing, C.: On the performance of Intel SGX. In: Proceedings of the Thirteenth Web Information Systems and Applications Conference, pp. 184\u2013187 (2016)","DOI":"10.1109\/WISA.2016.45"}],"container-title":["IFIP Advances in Information and Communication Technology","Critical Infrastructure Protection XVII"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-49585-4_9","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,12,28]],"date-time":"2023-12-28T16:04:59Z","timestamp":1703779499000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-49585-4_9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,12,29]]},"ISBN":["9783031495847","9783031495854"],"references-count":26,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-49585-4_9","relation":{},"ISSN":["1868-4238","1868-422X"],"issn-type":[{"value":"1868-4238","type":"print"},{"value":"1868-422X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,12,29]]},"assertion":[{"value":"29 December 2023","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICCIP","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Critical Infrastructure Protection","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Arlington, VA","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"USA","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2023","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"13 March 2023","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"14 March 2023","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"17","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"iccip2023","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}