Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Privado: Practical and Secure DNN Inference with Enclaves   Cloud providers are extending support for trusted hardware primitives such as
Intel SGX. Simultaneously, the field of deep learning is seeing enormous
innovation as well as an increase in adoption. In this paper, we ask a timely
question: "Can third-party cloud services use Intel SGX enclaves to provide
practical, yet secure DNN Inference-as-a-service?" We first demonstrate that
DNN models executing inside enclaves are vulnerable to access pattern based
attacks. We show that by simply observing access patterns, an attacker can
classify encrypted inputs with 97% and 71% attack accuracy for MNIST and
CIFAR10 datasets on models trained to achieve 99% and 79% original accuracy
respectively. This motivates the need for PRIVADO, a system we have designed
for secure, easy-to-use, and performance efficient inference-as-a-service.
PRIVADO is input-oblivious: it transforms any deep learning framework that is
written in C/C++ to be free of input-dependent access patterns thus eliminating
the leakage. PRIVADO is fully-automated and has a low TCB: with zero developer
effort, given an ONNX description of a model, it generates compact and
enclave-compatible code which can be deployed on an SGX cloud platform. PRIVADO
incurs low performance overhead: we use PRIVADO with Torch framework and show
its overhead to be 17.18% on average on 11 different contemporary neural
networks.

3
The categories of this paper are: physics
21
The categories of this paper are: adap-org
35
The categories of this paper are: mtrl-th
27
The categories of this paper are: comp-gas
12
The categories of this paper are: nucl-th
18
The categories of this paper are: econ
33
The categories of this paper are: plasm-ph
19
The categories of this paper are: eess
24
The categories of this paper are: dg-ga
11
The categories of this paper are: hep-lat
28
The categories of this paper are: alg-geom
30
The categories of this paper are: q-alg
5
The categories of this paper are: gr-qc
37
The categories of this paper are: supr-con
23
The categories of this paper are: solv-int
32
The categories of this paper are: atom-ph