A Survey of Secure Computation Using Trusted Execution Environments
Not on the map. Why?
Abstract (arXiv)
As an essential technology underpinning trusted computing, the trusted execution environment (TEE) allows one to launch computation tasks on both on- and off-premises data while assuring confidentiality and integrity. This article provides a systematic review and comparison of TEE-based secure computation protocols. We first propose a taxonomy that classifies secure computation protocols into three major categories, namely secure outsourced computation, secure distributed computation and secure multi-party computation. To enable a fair comparison of these protocols, we also present comprehensive assessment criteria with respect to four aspects: setting, methodology, security and performance. Based on these criteria, we review, discuss and compare the state-of-the-art TEE-based secure computation protocols for both general-purpose computation functions and special-purpose ones, such as privacy-preserving machine learning and encrypted database queries. To the best of our knowledge, this article is the first survey to review TEE-based secure computation protocols and the comprehensive comparison can serve as a guideline for selecting suitable protocols for deployment in practice. Finally, we also discuss several future research directions and challenges.
Key facts. Cited by 8 papers in the map (data through 7 Oct 2026). Builds on 31 of its 165 references that are in the map. First posted on arXiv 23 Feb 2023.
Builds on
31 of 165 references.
References · 31
- 2018Slalom: Fast, Verifiable and Private Execution of Neural Networks in Trusted Hardwarecited by 101
- 2021PPFL: Privacy-preserving Federated Learning with Trusted Execution Environmentscited by 93
- 2020FALCON: Honest-Majority Maliciously Secure Framework for Private Deep Learningcited by 74
- 2019CrypTFlow: Secure TensorFlow Inferencecited by 61
- 2020DarkneTZ: Towards Model Privacy at the Edge using Trusted Execution Environmentscited by 57
- 2018Chiron: Privacy-preserving Machine Learning as a Servicecited by 38
- 2018MLCapsule: Guarded Offline Deployment of Machine Learning as a Servicecited by 29
- 2019Privacy-Preserving Inference in Machine Learning Services Using Trusted Execution Environmentscited by 17
- 2021Citadel: Protecting Data Privacy and Model Confidentiality for Collaborative Learning with SGXcited by 14
- 2022DarKnight: An Accelerated Framework for Privacy and Integrity Preserving Deep Learning Using Trusted Hardwarecited by 13
- 2021secureTF: A Secure TensorFlow Frameworkcited by 12
- 20213LegRace: Privacy-Preserving DNN Training over TEEs and GPUscited by 9
19 more
- 2019TensorSCONE: A Secure TensorFlow Framework using Intel SGXcited by 8
- 2020A Survey of Coded Distributed Computingcited by 8
- 2019Conclave: secure multi-party computation on big data (extended TR)cited by 7
- 2019A Hybrid Approach to Secure Function Evaluation Using SGXcited by 6
- 2016SMCQL: Secure Querying for Federated Databasescited by 5
- 2018An Algorithmic Framework For Differentially Private Data Analysis on Trusted Processorscited by 5
- 2018Confidential Inference via Ternary Model Partitioningcited by 5
- 2018Shrinkwrap: Differentially-Private Query Processing in Private Data Federationscited by 5
- 2021Confidential Machine Learning Computation in Untrusted Environments: A Systems Security Perspectivecited by 4
- 2017HardIDX: Practical and Secure Index with SGXcited by 2
- 2017StealthDB: a Scalable Encrypted Database with Full SQL Query Supportcited by 2
- 2020Oblivious Sampling Algorithms for Private Data Analysiscited by 2
- 2020PCT-TEE: Trajectory-based Private Contact Tracing System with Trusted Execution Environmentcited by 2
- 2021Plinius: Secure and Persistent Machine Learning Model Trainingcited by 2
- 2016The Circle Game: Scalable Private Membership Test Using Trusted Hardwarecited by 1
- 2016The bumpy road towards iPhone 5c NAND mirroringcited by 1
- 2017LightBox: Full-stack Protected Stateful Middlebox at Lightning Speedcited by 1
- 2020Efficient Oblivious Database Joinscited by 1
- 2021On Optimizing the Trade-off between Privacy and Utility in Data Provenancecited by 1
Built on by
Citing papers per year: 2024: 2; 2025: 4; 2026: 2.
8 papers.
- 2025Is Your LLM Overcharging You? Tokenization, Transparency, and Incentivescited by 13
- 2025Spore in the Wild: A Case Study of Spore.fun as an Open-Environment Evolution Experiment with Sovereign AI Agents on TEE-Secured Blockchainscited by 5
- 2024Tempo: Confidentiality Preservation in Cloud-Based Neural Network Trainingcited by 2
- 2024Privacy-Preserving and Trustworthy Deep Learning for Medical Imagingcited by 0
- 2025Provably Secure Retrieval-Augmented Generationcited by 0
- 2025PrivSpike: Employing Homomorphic Encryption for Private Inference of Deep Spiking Neural Networkscited by 0
- 2026Selective Token-Level Cryptographic Redaction for Privacy-Preserving Clinical Deployment of Large Language Modelscited by 0
- 2026RT-SHCUA: Real-Time Self-Hosted Computer-Use Agent for UAV Controlcited by 0
- 2026RT-SHCUA: Real-Time Self-Hosted Computer-Use Agent for UAV Control20 Jul 2026
- 2026Selective Token-Level Cryptographic Redaction for Privacy-Preserving Clinical Deployment of Large Language Models2 Jun 2026
- 2025PrivSpike: Employing Homomorphic Encryption for Private Inference of Deep Spiking Neural Networks5 Oct 2025
- 2025Provably Secure Retrieval-Augmented Generation1 Aug 2025
- 2025Is Your LLM Overcharging You? Tokenization, Transparency, and Incentives27 May 2025
- 2025Spore in the Wild: A Case Study of Spore.fun as an Open-Environment Evolution Experiment with Sovereign AI Agents on TEE-Secured Blockchains24 May 2025
- 2024Privacy-Preserving and Trustworthy Deep Learning for Medical Imaging29 Jun 2024
- 2024Tempo: Confidentiality Preservation in Cloud-Based Neural Network Training21 Jan 2024