{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,21]],"date-time":"2026-04-21T18:13:04Z","timestamp":1776795184827,"version":"3.51.2"},"publisher-location":"New York, NY, USA","reference-count":121,"publisher":"ACM","content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,4,27]]},"DOI":"10.1145\/3805690.3805734","type":"proceedings-article","created":{"date-parts":[[2026,4,20]],"date-time":"2026-04-20T14:58:21Z","timestamp":1776697101000},"page":"67-77","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["CACTEE: Confidential Asset Certification using Trusted Execution Environments"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6922-5684","authenticated-orcid":false,"given":"Istemi Ekin","family":"Akkus","sequence":"first","affiliation":[{"name":"Nokia Bell Labs, Stuttgart, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3234-2841","authenticated-orcid":false,"given":"Ivica","family":"Rimac","sequence":"additional","affiliation":[{"name":"Nokia Bell Labs, Stuttgart, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2026,4,26]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW61312.2024.00028"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW61312.2024.00027"},{"key":"e_1_3_2_1_3_1","unstructured":"Amazon. [n. d.]. Attestation with AMD SEV-SNP - Amazon Elastic Compute Cloud. https:\/\/docs.aws.amazon.com\/AWSEC2\/latest\/UserGuide\/snp-attestation.html"},{"key":"e_1_3_2_1_4_1","unstructured":"AMD. 2020. AMD SEV-SNP: Strengthening VM Isolation with Integrity Protection and More. https:\/\/www.amd.com\/system\/files\/TechDocs\/SEV-SNP-strengthening-vm-isolation-with-integrity-protection-and-more.pdf"},{"key":"e_1_3_2_1_5_1","volume-title":"Services Engineering (ASE), and Machine Learning and AI (AIML).","author":"Engineering Apple Security","year":"2024","unstructured":"Apple Security Engineering and Architecture (SEAR), User Privacy, Core Operating Systems (Core OS), Services Engineering (ASE), and Machine Learning and AI (AIML). 2024. Private Cloud Compute: A new frontier for AI privacy in the cloud. https:\/\/security.apple.com\/blog\/private-cloud-compute\/"},{"key":"e_1_3_2_1_6_1","unstructured":"AquaV. [n. d.]. AquaV\/fallout-4-voices - Datasets at Hugging Face. https:\/\/huggingface.co\/datasets\/AquaV\/fallout-4-voices"},{"key":"e_1_3_2_1_7_1","unstructured":"AWS. [n. d.]. Data Collaboration Service - AWS Clean Rooms - AWS. https:\/\/aws.amazon.com\/clean-rooms\/"},{"key":"e_1_3_2_1_8_1","unstructured":"AWS. [n. d.]. Data Marketplace - AWS Data Exchange - AWS. https:\/\/aws.amazon.com\/data-exchange\/"},{"key":"e_1_3_2_1_9_1","unstructured":"Ben Wolford. [n. d.]. What is GDPR the EU's new data protection law? - GDPR.eu. https:\/\/gdpr.eu\/what-is-gdpr\/"},{"key":"e_1_3_2_1_10_1","unstructured":"bigcode. [n. d.]. bigcode\/the-stack-dedup - Datasets at Hugging Face. https:\/\/huggingface.co\/datasets\/bigcode\/the-stack-dedup"},{"key":"e_1_3_2_1_11_1","unstructured":"Bootstrap. [n. d.]. Bootstrap - The most popular HTML CSS and JS library in the world. https:\/\/getbootstrap.com\/"},{"key":"e_1_3_2_1_12_1","unstructured":"CACTEE authors. 2026. Nokia-Bell-Labs\/confidential-asset-certification-using-tees. https:\/\/github.com\/Nokia-Bell-Labs\/confidential-asset-certification-using-tees"},{"key":"e_1_3_2_1_13_1","unstructured":"California Office of the Attorney General. [n. d.]. California Consumer Privacy Act \/ State of California - Department of Justice - Office of the Attorney General. https:\/\/www.oag.ca.gov\/privacy\/ccpa"},{"key":"e_1_3_2_1_14_1","unstructured":"CarbonTracker. [n. d.]. saintslab\/carbontracker. https:\/\/github.com\/saintslab\/carbontracker"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00179"},{"key":"e_1_3_2_1_16_1","volume-title":"Ivica Rimac, Klaus Satzke, Antti Koskela, Marco Canini, Wei Wang, and Ruichuan Chen.","author":"Chen Dong","year":"2025","unstructured":"Dong Chen, Alice Dethise, Istemi Ekin Akkus, Ivica Rimac, Klaus Satzke, Antti Koskela, Marco Canini, Wei Wang, and Ruichuan Chen. 2025. Protecting Confidentiality, Privacy and Integrity in Collaborative Learning. arXiv:2412.08534 [cs.DC] https:\/\/arxiv.org\/abs\/2412.08534"},{"key":"e_1_3_2_1_17_1","unstructured":"CISA. [n. d.]. Software Bill of Materials (SBOM) \/ CISA. https:\/\/www.cisa.gov\/sbom"},{"key":"e_1_3_2_1_18_1","unstructured":"COCO. [n. d.]. COCO datasets: 2017 validation set. https:\/\/cocodataset.org\/#download"},{"key":"e_1_3_2_1_19_1","unstructured":"Codearbon Authors. [n. d.]. mlco2\/codecarbon. https:\/\/github.com\/mlco2\/codecarbon"},{"key":"e_1_3_2_1_20_1","unstructured":"CodeCarbon authors. [n. d.]. Methodology - CodeCarbon 3.2.1 documentation. https:\/\/mlco2.github.io\/codecarbon\/methodology.html"},{"key":"e_1_3_2_1_21_1","unstructured":"Cybersecurity and Infrastructure Security Agency. 2021. Defending Against Software Supply Chain Attacks. https:\/\/www.cisa.gov\/sites\/default\/files\/publications\/defending_against_software_supply_chain_attacks_508_1.pdf"},{"key":"e_1_3_2_1_22_1","unstructured":"CycloneDX. -. Machine Learning Bill of Materials (ML-BOM) \/ CycloneDX. https:\/\/cyclonedx.org\/capabilities\/mlbom\/"},{"key":"e_1_3_2_1_23_1","unstructured":"CycloneDX. [n. d.]. CycloneDX Bill of Materials Standard \/ CycloneDX. https:\/\/cyclonedx.org"},{"key":"e_1_3_2_1_24_1","unstructured":"Databricks. [n. d.]. Databricks Marketplace \/ Databricks. https:\/\/www.databricks.com\/product\/marketplace"},{"key":"e_1_3_2_1_25_1","unstructured":"David Mor-Ofek. 2024. It's Time to Talk About AI\/ML BOM (Artificial Intelligence Bill of Materials) And Vulnerability Management. https:\/\/c2a-sec.com\/its-time-to-talk-about-ai-ml-bom-artificial-intelligence-bill-of-materials-and-vulnerability-management\/"},{"key":"e_1_3_2_1_26_1","unstructured":"Diana Kelley. 2024. Why MLBOMs Are Useful for Securing the AI\/ML Supply Chain. https:\/\/www.darkreading.com\/vulnerabilities-threats\/mlboms-are-useful-for-securing-ai-ml-supply-chain"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/3714393.3726492"},{"key":"e_1_3_2_1_28_1","unstructured":"Edgeless Systems. [n. d.]. Privatemode AI - The always encrypted AI service. https:\/\/www.privatemode.ai\/"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/CloudCom.2014.47"},{"key":"e_1_3_2_1_30_1","unstructured":"European Commission. 2024. Cyber Resilience Act \/ Shaping Europe's digital future. https:\/\/digital-strategy.ec.europa.eu\/en\/policies\/cyber-resilience-act"},{"key":"e_1_3_2_1_31_1","unstructured":"European Commission. 2025. Corporate sustainability reporting. https:\/\/finance.ec.europa.eu\/capital-markets-union-and-financial-markets\/company-reporting-and-auditing\/company-reporting\/corporate-sustainability-reporting_en"},{"key":"e_1_3_2_1_32_1","unstructured":"European Commission. [n. d.]. Corporate sustainability due diligence. https:\/\/commission.europa.eu\/business-economy-euro\/doing-business-eu\/sustainability-due-diligence-responsible-business\/corporate-sustainability-due-diligence_en"},{"key":"e_1_3_2_1_33_1","unstructured":"European Parliament and of the Council. 2024. Regulation (EU) 2024\/1689. https:\/\/eur-lex.europa.eu\/eli\/reg\/2024\/1689\/oj\/eng"},{"key":"e_1_3_2_1_34_1","unstructured":"Ewelina Gregolinska Rehana Khanam Fr\u00e9d\u00e9ric Lefort Prashanth Parthasarathy. 2022. Capturing the true value of Industry 4.0. https:\/\/www.mckinsey.com\/capabilities\/operations\/our-insights\/capturing-the-true-value-of-industry-four-point-zero"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.21105\/joss.06670"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/CCGrid49817.2020.00-45"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/3590140.3629124"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3162397"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/2435349.2435353"},{"key":"e_1_3_2_1_40_1","unstructured":"Google. [n. d.]. Confidential VM attestation \/ Google Cloud. https:\/\/cloud.google.com\/confidential-computing\/confidential-vm\/docs\/attestation"},{"key":"e_1_3_2_1_41_1","unstructured":"Gramine. [n. d.]. GitHub - gramineproject\/gramine:A library OS for Linux multi-process applications with Intel SGX support. https:\/\/github.com\/gramineproject\/gramine"},{"key":"e_1_3_2_1_42_1","unstructured":"HHS. [n. d.]. Summary of the HIPAA Privacy Rule \/ HHS.gov. https:\/\/www.hhs.gov\/hipaa\/for-professionals\/privacy\/laws-regulations\/index.html"},{"key":"e_1_3_2_1_43_1","volume-title":"Petra Karin Iffert, and Aishwarya Jha","author":"Hickman Tim","year":"2025","unstructured":"Tim Hickman, Thomas Burmeister, Erasmus Hoffmann, Petra Karin Iffert, and Aishwarya Jha. 2025. Energy efficiency requirements under the EU AI Act. https:\/\/www.whitecase.com\/insight-alert\/energy-efficiency-requirements-under-eu-ai-act"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/3719027.3765128"},{"key":"e_1_3_2_1_45_1","unstructured":"Hugging Face. [n. d.]. Hugging Face - The AI community building the future. https:\/\/huggingface.co\/"},{"key":"e_1_3_2_1_46_1","unstructured":"HuggingFaceTB. [n. d.]. HuggingFaceTB\/SmolLM-135M - Hugging Face. https:\/\/huggingface.co\/HuggingFaceTB\/SmolLM-135M"},{"key":"e_1_3_2_1_47_1","unstructured":"Idavidrein. [n. d.]. Idavidrein\/gpqa - Datasets at Hugging Face. https:\/\/huggingface.co\/datasets\/Idavidrein\/gpqa"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"crossref","unstructured":"Said Ider and Maryline Laurent. 2025. GeoFINDR: Practical Approach to Verify Cloud Instances Geolocation in Multicloud. arXiv:2504.18685 [cs.NI] https:\/\/arxiv.org\/abs\/2504.18685","DOI":"10.2139\/ssrn.5334060"},{"key":"e_1_3_2_1_49_1","unstructured":"ILSRVC. [n. d.]. ILSRVC\/imagenet-1k validation set. https:\/\/image-net.org\/download.php"},{"key":"e_1_3_2_1_50_1","unstructured":"in-toto. [n. d.]. in-toto: A framework to secure the integrity of supply chains. https:\/\/in-toto.io\/"},{"key":"e_1_3_2_1_51_1","unstructured":"Intel. [n. d.]. Attestation Service for Intel Software Guard Extensions (Intel SGX): API Documentation. https:\/\/www.intel.com\/content\/dam\/develop\/public\/us\/en\/documents\/sgx-attestation-api-spec.pdf"},{"key":"e_1_3_2_1_52_1","unstructured":"Intel. 2024. Microsoft Deploys Confidential Computing To Protect $25B per Year in Customer Payments. https:\/\/www.intel.com\/content\/dam\/www\/central-libraries\/us\/en\/documents\/2024-02\/microsoft-azure-confidential-computing-solution-brief.pdf"},{"key":"e_1_3_2_1_53_1","unstructured":"Intel. [n. d.]. Affected Processors: Transient Execution Attacks & Related Security... https:\/\/www.intel.com\/content\/www\/us\/en\/developer\/topic-technology\/software-security-guidance\/processors-affected-consolidated-product-cpu-model.html"},{"key":"e_1_3_2_1_54_1","unstructured":"Intel. [n. d.]. Attestation Services for Intel Software Guard Extensions. https:\/\/www.intel.com\/content\/www\/us\/en\/developer\/tools\/software-guard-extensions\/attestation-services.html"},{"key":"e_1_3_2_1_55_1","unstructured":"Intel. [n. d.]. Intel Software Guard Extensions (Intel SGX). https:\/\/www.intel.com\/content\/www\/us\/en\/products\/docs\/accelerator-engines\/software-guard-extensions.html"},{"key":"e_1_3_2_1_56_1","unstructured":"Intel. [n. d.]. Intel\u00ae Trust Authority. https:\/\/www.intel.com\/content\/www\/us\/en\/security\/trust-authority.html"},{"key":"e_1_3_2_1_57_1","unstructured":"Intel. [n. d.]. Intel\u00ae Trust Domain Extensions (Intel TDX). https:\/\/www.intel.com\/content\/www\/us\/en\/developer\/articles\/technical\/intel-trust-domain-extensions.html"},{"key":"e_1_3_2_1_58_1","unstructured":"International Energy Agency. 2025. Energy and AI. https:\/\/www.iea.org\/reports\/energy-and-ai"},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2016.01.001"},{"key":"e_1_3_2_1_60_1","unstructured":"Jen Easterly Tom Fanning. 2023. The Attack on Colonial Pipeline: What We've Learned & What We've Done Over the Past Two Years. https:\/\/www.cisa.gov\/news-events\/news\/attack-colonial-pipeline-what-weve-learned-what-weve-done-over-past-two-years"},{"key":"e_1_3_2_1_61_1","unstructured":"Jeremy Powell. 2022. AMD SEV-SNP Attestation: Establishing Trust in Guests. https:\/\/www.amd.com\/content\/dam\/amd\/en\/documents\/developer\/lss-snp-attestation.pdf"},{"key":"e_1_3_2_1_62_1","unstructured":"Joseph Redmon. [n. d.]. YOLO: Real-Time Object Detection. https:\/\/pjreddie.com\/darknet\/yolo\/"},{"key":"e_1_3_2_1_63_1","unstructured":"Kaggle. [n. d.]. Kaggle: Your Machine Learning and Data Science Community. https:\/\/www.kaggle.com\/"},{"key":"e_1_3_2_1_64_1","unstructured":"Mahmut Kandemir. 2025. Why AI uses so much energy \u2014 and what we can do about it. https:\/\/iee.psu.edu\/news\/blog\/why-ai-uses-so-much-energy-and-what-we-can-do-about-it"},{"key":"e_1_3_2_1_65_1","unstructured":"Kevin Wang. 2025. TEE Attestation Guide for dstack Applications. https:\/\/github.com\/Dstack-TEE\/dstack\/blob\/master\/attestation.md#tee-attestation-guide-for-dstack-applications"},{"key":"e_1_3_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.23919\/APNOMS67058.2025.11181389"},{"key":"e_1_3_2_1_67_1","unstructured":"Lucian Constantin. 2020. SolarWinds attack explained: And why it was so hard to detect. https:\/\/www.csoonline.com\/article\/570191\/solarwinds-supply-chain-attack-explained-why-organizations-were-not-prepared.html"},{"key":"e_1_3_2_1_68_1","unstructured":"ManaTEE Project authors. [n. d.]. ManaTEE Project. https:\/\/github.com\/manatee-project\/manatee"},{"key":"e_1_3_2_1_69_1","unstructured":"Matt Schwartz. 2025. Consumer Reports and EPIC Laud Massachusetts Senate for Unanimously Passing Strong Privacy Bill. https:\/\/advocacy.consumerreports.org\/press_release\/consumer-reports-and-epic-laud-massachusetts-senate-for-unanimously-passing-strong-privacy-bill\/"},{"key":"e_1_3_2_1_70_1","unstructured":"MaxMind. [n. d.]. Industry leading IP Geolocation and Online Fraud Prevention \/ MaxMind. https:\/\/www.maxmind.com\/en\/home"},{"key":"e_1_3_2_1_71_1","doi-asserted-by":"publisher","DOI":"10.1145\/3689944.3696351"},{"key":"e_1_3_2_1_72_1","unstructured":"Microsoft. [n. d.]. About Azure confidential VMs \/ Microsoft Learn. https:\/\/learn.microsoft.com\/en-us\/azure\/confidential-computing\/confidential-vm-overview"},{"key":"e_1_3_2_1_73_1","unstructured":"Microsoft. [n. d.]. Azure Confidential Clean Rooms Preview. https:\/\/learn.microsoft.com\/en-us\/azure\/confidential-computing\/confidential-clean-rooms"},{"key":"e_1_3_2_1_74_1","unstructured":"Microsoft. [n. d.]. GitHub - Azure\/confidential-computing-cvm-guest-attestation: Confidential VM Platform Guest attestation sample apps. https:\/\/github.com\/Azure\/confidential-computing-cvm-guest-attestation"},{"key":"e_1_3_2_1_75_1","unstructured":"Microsoft. [n. d.]. What is guest attestation for confidential VMs? \/ Microsoft Learn. https:\/\/learn.microsoft.com\/en-us\/azure\/confidential-computing\/guest-attestation-confidential-vms"},{"key":"e_1_3_2_1_76_1","unstructured":"mithril-security. [n. d.]. AICert. https:\/\/aicert.mithrilsecurity.io\/en\/latest\/"},{"key":"e_1_3_2_1_77_1","unstructured":"Mithun Nagabhairava Daniel Pender Joe Wagner. 2023. How AI ML and Industry 4.0 affect plant automation. https:\/\/www.plantengineering.com\/articles\/how-ai-ml-and-industry-4-0-affect-plant-automation\/"},{"key":"e_1_3_2_1_78_1","doi-asserted-by":"publisher","DOI":"10.1145\/3458864.3466628"},{"key":"e_1_3_2_1_79_1","doi-asserted-by":"publisher","DOI":"10.1145\/3670007"},{"key":"e_1_3_2_1_80_1","unstructured":"New York State Attorney General. 2019. The SHIELD Act. https:\/\/ag.ny.gov\/resources\/organizations\/data-breach-reporting\/shield-act"},{"key":"e_1_3_2_1_81_1","unstructured":"NVIDIA. [n. d.]. Confidential Compute on NVIDIA Hopper H100. https:\/\/images.nvidia.com\/aem-dam\/en-zz\/Solutions\/data-center\/HCC-Whitepaper-v1.0.pdf"},{"key":"e_1_3_2_1_82_1","unstructured":"NVIDIA. 2026. nvidia\/cuda - Docker Image. https:\/\/hub.docker.com\/r\/nvidia\/cuda"},{"key":"e_1_3_2_1_83_1","unstructured":"James O'Donnell and Casey Crownhart. 2025. We did the math on AI's energy footprint. Here's the story you haven't heard. https:\/\/www.technologyreview.com\/2025\/05\/20\/1116327\/ai-energy-usage-climate-footprint-big-tech\/"},{"key":"e_1_3_2_1_84_1","unstructured":"Open-Orca. [n. d.]. Open-Orca\/OpenOrca - Datasets at Hugging Face. https:\/\/huggingface.co\/datasets\/Open-Orca\/OpenOrca"},{"key":"e_1_3_2_1_85_1","unstructured":"Open Regulatory Compliance Working Group. [n. d.]. https:\/\/cra.orcwg.org\/faq\/official\/manufacturers\/due-diligence\/. https:\/\/cra.orcwg.org\/faq\/official\/manufacturers\/due-diligence\/"},{"key":"e_1_3_2_1_86_1","unstructured":"open-thoughts. [n. d.]. open-thoughts\/OpenThoughts-114k - Datasets at Hugging Face. https:\/\/huggingface.co\/datasets\/open-thoughts\/OpenThoughts-114k"},{"key":"e_1_3_2_1_87_1","volume-title":"Do Le Quoc, and Christof Fetzer","author":"Ozga Wojciech","year":"2021","unstructured":"Wojciech Ozga, Do Le Quoc, and Christof Fetzer. 2021. Perun: Confidential Multi-stakeholder Machine Learning Framework with Hardware Acceleration Support. In Data and Applications Security and Privacy XXXV, Ken Barker and Kambiz Ghazinour (Eds.). Springer International Publishing, Cham, 189\u2013208."},{"key":"e_1_3_2_1_88_1","unstructured":"Can Ozkan Xinhai Zou and Dave Singelee. 2025. Supply Chain Insecurity: The Lack of Integrity Protection in SBOM Solutions. arXiv:2412.05138 [cs.CR] https:\/\/arxiv.org\/abs\/2412.05138"},{"key":"e_1_3_2_1_89_1","doi-asserted-by":"publisher","DOI":"10.1145\/3620666.3651329"},{"key":"e_1_3_2_1_90_1","unstructured":"David Patterson Joseph Gonzalez Quoc Le Chen Liang Lluis-Miquel Munguia Daniel Rothchild David So Maud Texier and Jeff Dean. 2021. Carbon Emissions and Large Neural Network Training. arXiv:2104.10350 [cs.LG] https:\/\/arxiv.org\/abs\/2104.10350"},{"key":"e_1_3_2_1_91_1","unstructured":"Phala. 2025. Understanding TDX Attestation Reports: A Developer's Guide. https:\/\/phala.com\/posts\/understanding-tdx-attestation-reports-a-developers-guide"},{"key":"e_1_3_2_1_92_1","unstructured":"PowerAPI. [n. d.]. powerapi-ng\/powerapi. https:\/\/github.com\/powerapi-ng\/powerapi"},{"key":"e_1_3_2_1_93_1","unstructured":"PraaS authors. 2024. Nokia-Bell-Labs\/proof-as-a-service. https:\/\/github.com\/Nokia-Bell-Labs\/proof-as-a-service"},{"key":"e_1_3_2_1_94_1","unstructured":"Joseph Redmon and Ali Farhadi. 2018. YOLOv3: An Incremental Improvement. arXiv:1804.02767 [cs.CV] https:\/\/arxiv.org\/abs\/1804.02767"},{"key":"e_1_3_2_1_95_1","unstructured":"Reproducible Builds Contributors. [n. d.]. Reproducible Builds - a set of software development practices that create an independently-verifiable path from source to binary code. https:\/\/reproducible-builds.org\/"},{"key":"e_1_3_2_1_96_1","unstructured":"RIPE. [n. d.]. REST API Reference \/ RIPE ATLAS Documentation. https:\/\/atlas.ripe.net\/docs\/apis\/rest-api-reference\/"},{"key":"e_1_3_2_1_97_1","unstructured":"RIPE. [n. d.]. RIPE Atlas - Dashboard. https:\/\/atlas.ripe.net\/"},{"key":"e_1_3_2_1_98_1","unstructured":"ros-realtime. [n. d.]. Build RT_PREEMPT kernel for Raspberry Pi. https:\/\/github.com\/ros-realtime\/linux-real-time-kernel-builder"},{"key":"e_1_3_2_1_99_1","unstructured":"sentence-transformers. [n. d.]. sentence-transformers\/all-MiniLM-L6-v2 - Hugging Face. https:\/\/huggingface.co\/sentence-transformers\/all-MiniLM-L6-v2"},{"key":"e_1_3_2_1_100_1","unstructured":"sgugger. [n. d.]. sgugger\/glue-mrpc - Hugging Face. https:\/\/huggingface.co\/sgugger\/glue-mrpc"},{"key":"e_1_3_2_1_101_1","unstructured":"Sigstore. [n. d.]. Trust & Security - Sigstore. https:\/\/www.sigstore.dev\/"},{"key":"e_1_3_2_1_102_1","unstructured":"SLSA. [n. d.]. SLSA - Supply-chain Levels for Software Artifacts. https:\/\/slsa.dev\/"},{"key":"e_1_3_2_1_103_1","volume-title":"Workstream: Hardware Attested Build Environments. https:\/\/github.com\/slsa-framework\/slsa\/issues\/975","author":"SLSA","year":"2023","unstructured":"SLSA collaborators. 2023. Workstream: Hardware Attested Build Environments. https:\/\/github.com\/slsa-framework\/slsa\/issues\/975"},{"key":"e_1_3_2_1_104_1","unstructured":"Snowflake. [n. d.]. Snowflake Data Marketplace \/ Snowflake Data Cloud. https:\/\/www.snowflake.com\/en\/data-cloud\/marketplace\/"},{"key":"e_1_3_2_1_105_1","unstructured":"SPDX. [n. d.]. The System Package Data Exchange (SPDX). https:\/\/spdx.dev"},{"key":"e_1_3_2_1_106_1","volume-title":"Atlas: A Framework for ML Lifecycle Provenance & Transparency. In 2025 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW).","author":"Spoczynski Marcin","year":"2025","unstructured":"Marcin Spoczynski, Marcela S. Melara, and Sebastian Szyller. 2025. Atlas: A Framework for ML Lifecycle Provenance & Transparency. In 2025 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW)."},{"key":"e_1_3_2_1_107_1","unstructured":"Chris Stokel-Walker. 2023. The Generative AI Race Has a Dirty Secret. https:\/\/www.wired.com\/story\/the-generative-ai-search-race-has-a-dirty-secret\/"},{"key":"e_1_3_2_1_108_1","unstructured":"tee-duet authors. 2024. Nokia-Bell-Labs\/tee-duet. https:\/\/github.com\/Nokia-Bell-Labs\/tee-duet"},{"key":"e_1_3_2_1_109_1","unstructured":"Tero Mononen. 2024. Crisis averted: A recap of the OpenSSH and XZ\/liblzma incident. https:\/\/www.ssh.com\/blog\/a-recap-of-the-openssh-and-xz-liblzma-incident"},{"key":"e_1_3_2_1_110_1","unstructured":"Tinfoil. [n. d.]. Tinfoil - Private AI. https:\/\/tinfoil.sh\/"},{"key":"e_1_3_2_1_111_1","unstructured":"tlsping. [n. d.]. tlsping \u2014 a tool for measuring TLS handshake latency. https:\/\/github.com\/airnandez\/tlsping"},{"key":"e_1_3_2_1_112_1","volume-title":"28th USENIX Security Symposium (USENIX Security 19)","author":"Torres-Arias Santiago","year":"2019","unstructured":"Santiago Torres-Arias, Hammad Afzali, Trishank Karthik Kuppusamy, Reza Curtmola, and Justin Cappos. 2019. in-toto: Providing farm-to-table guarantees for bits and bytes. In 28th USENIX Security Symposium (USENIX Security 19). USENIX Association, Santa Clara, CA, 1393\u20131410. https:\/\/www.usenix.org\/conference\/usenixsecurity19\/presentation\/torres-arias"},{"key":"e_1_3_2_1_113_1","volume-title":"2017 USENIX Annual Technical Conference (USENIX ATC 17)","author":"Tsai Chia-Che","year":"2017","unstructured":"Chia-Che Tsai, Donald E Porter, and Mona Vij. 2017. {Graphene-SGX}: A Practical Library {OS} for Unmodified Applications on {SGX}. In 2017 USENIX Annual Technical Conference (USENIX ATC 17). 645\u2013658."},{"key":"e_1_3_2_1_114_1","unstructured":"T\u00dcV Austria. [n. d.]. T\u00dcV Austria. https:\/\/en.tuv.at\/"},{"key":"e_1_3_2_1_115_1","unstructured":"T\u00dcV S\u00dcD. [n. d.]. T\u00dcV S\u00dcD Global Home - Add Value Inspire Trust. https:\/\/www.tuvsud.com\/en"},{"key":"e_1_3_2_1_116_1","unstructured":"United Nations. 2025. Artificial intelligence: How much energy does AI use? https:\/\/unric.org\/en\/artificial-intelligence-how-much-energy-does-ai-use\/"},{"key":"e_1_3_2_1_117_1","unstructured":"White House. 2021. Improving the Nation's Cybersecurity. https:\/\/www.federalregister.gov\/documents\/2021\/05\/17\/2021-10460\/improving-the-nations-cybersecurity"},{"key":"e_1_3_2_1_118_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW61312.2024.00026"},{"key":"e_1_3_2_1_119_1","unstructured":"Haidong Xia Ken Lu Ruoyu Ying Xiaocheng Dong and Yanhui Zhao. [n. d.]. Runtime Integrity Measurement and Attestation in a Trust Domain. https:\/\/www.intel.com\/content\/www\/us\/en\/developer\/articles\/community\/runtime-integrity-measure-and-attest-trust-domain.html"},{"key":"e_1_3_2_1_120_1","doi-asserted-by":"publisher","DOI":"10.1145\/3472883.3486998"},{"key":"e_1_3_2_1_121_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN49398.2020.9209651"}],"event":{"name":"SysTEX '26: 9th Workshop on System Software for Trusted Execution","location":"McEwan Hall\/The University of Edinburgh Edinburgh Scotland UK","acronym":"SysTEX '26","sponsor":["SIGOPS ACM Special Interest Group on Operating Systems"]},"container-title":["Proceedings of the 9th Workshop on System Software for Trusted Execution"],"original-title":[],"deposited":{"date-parts":[[2026,4,21]],"date-time":"2026-04-21T17:07:48Z","timestamp":1776791268000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3805690.3805734"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,4,26]]},"references-count":121,"alternative-id":["10.1145\/3805690.3805734","10.1145\/3805690"],"URL":"https:\/\/doi.org\/10.1145\/3805690.3805734","relation":{},"subject":[],"published":{"date-parts":[[2026,4,26]]},"assertion":[{"value":"2026-04-26","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}