The key idea is ShadowNet securely outsources the computationally heavy linear layers of the CNN to the untrusted accelerators while performing everything else inside a TEE.
Shadownet is integrated with TensorFlow Lite and supports a wide range CNN architectures!
[3/3]
ShadowNet enables secure real-time inferencing on CNNs while still supporting access to untrusted hardware accelerators for performance efficiency!
[2/3]
Search "amazon" on Google and click the first ad of Amazon, I got attacked. I tried it on Chrome of macbook and another device runs Ubuntu, and Safari of macbook, too. Interestingly, If I change my profile, it won't work, means it's profile targeted attack!@AmazonHelp @Google