Repository logo
  • English
  • 中文
Log In
Have you forgotten your password?
  1. Home
  2. College of Electrical Engineering and Computer Science / 電機資訊學院
  3. Electrical Engineering / 電機工程學系
  4. SEAL: Secure and Efficient Adaptive Layering for On-Device Language Models with TEE
 
  • Details

SEAL: Secure and Efficient Adaptive Layering for On-Device Language Models with TEE

Journal
Proceedings - 2025 IEEE 11th International Conference on Edge Computing and Scalable Cloud, EdgeCom 2025
Start Page
138
End Page
143
ISBN (of the container)
979-833158779-6
Date Issued
2026-01-22
Author(s)
Chang, Wen-Tzu
Fang, Rui
Chen, Ming-Syan  
DOI
10.1109/edgecom66327.2025.00030
URI
https://www.scopus.com/record/display.uri?eid=2-s2.0-105033584304&origin=resultslist
https://scholars.lib.ntu.edu.tw/handle/123456789/739605
Abstract
The deployment of Small Language Models (SLMs) on edge devices presents a fundamental trade-off between performance and security: executing in the untrusted Rich Execution Environment (REE) risks model theft, while running entirely within a Trusted Execution Environment (TEE) incurs significant overhead. Existing approaches often sacrifice one for the other. To address this, we propose SEAL (Secure and Efficient Adaptive Layering), a framework that enables informed, quantitative trade-offs between security and efficiency for on-device inference. SEAL introduces two key components: Confidential Layer Analysis (CLA), which quantitatively assesses the confidentiality of each model layer, and the Layer Importance-Guided Adaptive Partition (LIAP) algorithm, which maps the most sensitive, low-overhead layers into the TEE based on device constraints, while retaining others in the REE to preserve performance. To evaluate security, we develop the Model Parameter Reconstruction Success Rate (MPRSR), a metric that measures behavioral, parametric, and functional similarity under model extraction attacks. Experiments using the INT4-quantized Qwen3-0.6B model on WikiQA demonstrate that SEAL reduces model theft risk by 65.8%—with only a 22% increase in latency and memory—by protecting a single critical layer. When securing the top five layers, SEAL reduces MPRSR to 7.9%, while reducing time and energy consumption by roughly 50% compared to full-TEE deployment. SEAL reframes security as an optimization problem, enabling practical and trustworthy secure inference for edge AI.
Event(s)
11th IEEE International Conference on Edge Computing and Scalable Cloud, EdgeCom 2025
Subjects
Edge Computing
Energy Efficiency
Model Stealing
On-Device AI
Security and Privacy
Small Language Models
Trusted Execution Environment (TEE)
Publisher
IEEE
Type
conference paper

臺大位居世界頂尖大學之列,為永久珍藏及向國際展現本校豐碩的研究成果及學術能量,圖書館整合機構典藏(NTUR)與學術庫(AH)不同功能平台,成為臺大學術典藏NTU scholars。期能整合研究能量、促進交流合作、保存學術產出、推廣研究成果。

To permanently archive and promote researcher profiles and scholarly works, Library integrates the services of “NTU Repository” with “Academic Hub” to form NTU Scholars.

總館學科館員 (Main Library)
醫學圖書館學科館員 (Medical Library)
社會科學院辜振甫紀念圖書館學科館員 (Social Sciences Library)

開放取用是從使用者角度提升資訊取用性的社會運動,應用在學術研究上是透過將研究著作公開供使用者自由取閱,以促進學術傳播及因應期刊訂購費用逐年攀升。同時可加速研究發展、提升研究影響力,NTU Scholars即為本校的開放取用典藏(OA Archive)平台。(點選深入了解OA)

  • 請確認所上傳的全文是原創的內容,若該文件包含部分內容的版權非匯入者所有,或由第三方贊助與合作完成,請確認該版權所有者及第三方同意提供此授權。
    Please represent that the submission is your original work, and that you have the right to grant the rights to upload.
  • 若欲上傳已出版的全文電子檔,可使用Open policy finder網站查詢,以確認出版單位之版權政策。
    Please use Open policy finder to find a summary of permissions that are normally given as part of each publisher's copyright transfer agreement.
  • 網站簡介 (Quickstart Guide)
  • 使用手冊 (Instruction Manual)
  • 線上預約服務 (Booking Service)
  • 方案一:臺灣大學計算機中心帳號登入
    (With C&INC Email Account)
  • 方案二:ORCID帳號登入 (With ORCID)
  • 方案一:定期更新ORCID者,以ID匯入 (Search for identifier (ORCID))
  • 方案二:自行建檔 (Default mode Submission)
  • 方案三:學科館員協助匯入 (Email worklist to subject librarians)

Built with DSpace-CRIS software - Extension maintained and optimized by 4Science