Graph in the Vault: Protecting Edge GNN Inference with Trusted Execution Environment

Document Type

Conference Proceeding

Publication Date

1-1-2025

Abstract

Wide deployment of machine learning models on edge devices has rendered the model intellectual property (IP) and data privacy vulnerable. We propose GNNVault, the first secure Graph Neural Network (GNN) deployment strategy based on Trusted Execution Environment (TEE). GNNVault follows the design of 'partition-before-training' and includes a private GNN rectifier to complement with a public backbone model. This way, both critical GNN model parameters and the private graph used during inference are protected within secure TEE compartments. Real-world implementations with Intel SGX demonstrate that GNNVault safeguards GNN inference against state-of-the-art link stealing attacks with a negligible accuracy degradation (< 2%).

Publication Source (Journal or Book title)

Proceedings Design Automation Conference

This document is currently not available here.

Share

COinS