SoK: Towards Security and Safety of Edge AI

Tatjana Wingarz,Anne Lauscher,Janick Edinger,Dominik Kaaser,Stefan Schulte,Mathias Fischer

2024-10-07

Abstract:Advanced AI applications have become increasingly available to a broad audience, e.g., as centrally managed large language models (LLMs). Such centralization is both a risk and a performance bottleneck - Edge AI promises to be a solution to these problems. However, its decentralized approach raises additional challenges regarding security and safety. In this paper, we argue that both of these aspects are critical for Edge AI, and even more so, their integration. Concretely, we survey security and safety threats, summarize existing countermeasures, and collect open challenges as a call for more research in this area.

Cryptography and Security,Artificial Intelligence

What problem does this paper attempt to address?

The problems that this paper attempts to solve mainly focus on the security and safety challenges of Edge AI. Specifically, the paper focuses on the following aspects:

1. **Risks and performance bottlenecks of centralized AI**:
- Although centralized large - language models (LLMs) are powerful, they have the problems of single - point failure and performance bottlenecks.
- Data privacy issues: Users' data sovereignty is threatened, and sensitive information may be misused.

2. **New challenges brought by the distributed characteristics of Edge AI**:
- Edge AI alleviates the problem of centralization by distributing computing tasks to edge devices (such as smart phones, Internet of Things devices), but its distributed characteristics bring new security and safety challenges.
- In a distributed environment, the control power is weakened, the attack surface is expanded, and each node may become a potential attack target.

3. **Integration of security and safety**:
- The paper emphasizes the importance of security and safety in Edge AI and points out that the integration of the two is the key.
- Security involves protecting the system from unauthorized access, tampering, and malicious exploitation.
- Safety is not limited to technical reliability, but also includes social - level impacts, such as preventing the misuse of AI systems from having a negative impact on society.

4. **Deficiencies in existing research**:
- Most of the existing literature focuses on general Edge AI challenges or separate security/safety issues, and lacks in - depth discussion of the intersection of the two.
- Some studies are limited to specific sub - fields (such as the digital marketing environment) and fail to fully cover the application scenarios of Edge AI.

### Main contributions of the paper

In order to fill the above research gaps, the paper has made the following key contributions:

- **Comprehensive survey**: It analyzes in detail the security and safety threats of Edge AI and their corresponding protection measures.
- **Proposing a model**: It constructs a detailed Edge AI model, providing a basis for understanding related challenges.
- **Identifying research gaps**: It summarizes a series of open research questions and calls on the academic community to further explore solutions.

### Conclusion

This paper aims to provide a comprehensive perspective by comprehensively analyzing the security and safety challenges of Edge AI and promote more research on these issues. In this way, the paper hopes to promote the safer and more reliable deployment and application of Edge AI systems.