Xiaolin Xu

SGX-FPGA: Trusted Execution Environment for CPU-FPGA Heterogeneous Architecture

2021

Trusted execution environments (TEEs), such as Intel SGX, have become a popular security primitive with minimum trusted computing base (TCB) and attack surface. However, the existing CPU-based TEEs do not support FPGAs, even though FPGA-based …

MirrorNet: A TEE-Friendly Framework for Secure On-Device DNN Inference

2023

Deep neural network (DNN) models have become prevalent in edge devices for real-time inference. However, they are vulnerable to model extraction attacks and require protection. Existing defense approaches either fail to fully safeguard model confidentiality …