Abstract:With the widespread adoption of edge computing technologies and the increasing prevalence of deep learning models in these environments, the security risks and privacy threats to models and data have grown more acute. Attackers can exploit various techniques to illegally obtain models or misuse data, leading to serious issues such as intellectual property infringement and privacy breaches. Existing model access control technologies primarily rely on traditional encryption and authentication methods; however, these approaches exhibit significant limitations in terms of flexibility and adaptability in dynamic environments. Although there have been advancements in model watermarking techniques for marking model ownership, they remain limited in their ability to proactively protect intellectual property and prevent unauthorized access. To address these challenges, we propose a novel model access control method tailored for edge computing environments. This method leverages image style as a licensing mechanism, embedding style recognition into the model's operational framework to enable intrinsic access control. Consequently, models deployed on edge platforms are designed to correctly infer only on license data with specific style, rendering them ineffective on any other data. By restricting the input data to the edge model, this approach not only prevents attackers from gaining unauthorized access to the model but also enhances the privacy of data on terminal devices. We conducted extensive experiments on benchmark datasets, including MNIST, CIFAR-10, and FACESCRUB, and the results demonstrate that our method effectively prevents unauthorized access to the model while maintaining accuracy. Additionally, the model shows strong resistance against attacks such as forged licenses and fine-tuning. These results underscore the method's usability, security, and robustness.

GuaranTEE: Towards Attestable and Private ML with CCA

Model Protection: Real-Time Privacy-Preserving Inference Service for Model Privacy at the Edge

CoreGuard: Safeguarding Foundational Capabilities of LLMs Against Model Stealing in Edge Deployment

Guarding Machine Learning Hardware Against Physical Side-channel Attacks

SMLE: Safe Machine Learning via Embedded Overapproximation

Theoretical Guarantees for Model Auditing with Finite Adversaries

SecureML: A System for Scalable Privacy-Preserving Machine Learning

Rethinking Certification for Trustworthy Machine Learning-Based Applications

Offline Model Guard: Secure and Private ML on Mobile Devices

A Novel Access Control and Privacy-Enhancing Approach for Models in Edge Computing

Privacy-Preserving Machine Learning Based Data Analytics on Edge Devices

Preventing Neural Network Model Exfiltration in Machine Learning Hardware Accelerators

Holding Secrets Accountable: Auditing Privacy-Preserving Machine Learning

SODA: Protecting Proprietary Information in On-Device Machine Learning Models

Uncheatable Machine Learning Inference

Laminator: Verifiable ML Property Cards using Hardware-assisted Attestations

Locking Machine Learning Models into Hardware

CERTIFAI: Counterfactual Explanations for Robustness, Transparency, Interpretability, and Fairness of Artificial Intelligence models

A Secure and Privacy-Preserving Machine Learning Model Sharing Scheme for Edge-Enabled IoT

VeriML: Enabling Integrity Assurances and Fair Payments for Machine Learning as a Service