PrivacySecurityTrustworthinesscs.CR
Trustworthy AI Inference Systems: An Industry Research View
Rosario Cammarota, Matthias Schunter, Anand Rajan, Fabian Boemer, Ágnes Kiss, Amos Treiber, Christian Weinert, Thomas Schneider, Emmanuel Stapf, Ahmad-Reza Sadeghi, Daniel Demmler, Joshua Stock, Huili Chen, Siam Umar Hussain, Sadegh Riazi, Farinaz Koushanfar, Saransh Gupta, Tajan Simunic Rosing, Kamalika Chaudhuri, Hamid Nejatollahi, Nikil Dutt, Mohsen Imani, Kim Laine, Anuj Dubey, Aydin Aysu, Fateme Sadat Hosseini, Chengmo Yang, Eric Wallace, Pamela Norton
August 10, 2020
arXiv.org
17 citations
Key Takeaways
-
AI systems must balance utility with protection: Trustworthy AI inference systems need to deliver useful, personalized predictions to customers while simultaneously implementing security mechanisms to protect both the AI models themselves and the customer data used to generate those predictions.
-
Data protection requires multiple layers of technology: The paper identifies Privacy-Enhancing Technologies (PETs) as essential tools, and highlights the particular promise of combining trusted execution environments with advanced cryptographic techniques to protect data while it's actively being used—addressing a critical vulnerability point in AI systems.
-
Intellectual property and privacy protection are interconnected challenges: The research emphasizes that protecting proprietary AI models and protecting customer personal data are related concerns that must be addressed together in the design of inference systems, rather than as separate issues.
-
Current AI inference systems face evolving security and privacy challenges: The paper surveys multiple "building blocks" needed for secure and private AI systems, suggesting that no single solution exists and that organizations must implement comprehensive, multi-faceted approaches to trustworthiness.
-
Solving trustworthy AI requires collaboration across sectors: The authors call for "global collective attention of industry, academia, and government researchers," indicating that responsible AI deployment cannot be achieved by any single organization or sector working alone.