Palladium: Guarding Neural Network Training With Confidential Computing

Palladium is a system that protects private training data and model parameters when training deep neural networks (DNNs, AI systems with many layers that learn patterns from data) on remote cloud servers with GPUs. The system uses TEEs (trusted execution environments, secure areas of a processor that are isolated from the rest of the system) combined with a "Cloak" strategy to hide sensitive information while still allowing most computations to run on untrusted accelerators, achieving both privacy protection and reasonable performance.