references.bib

@article{agrawal2024metron,
  title={Metron: Holistic Performance Evaluation Framework for LLM Inference Systems},
  author={Agrawal, Amey and Agarwal, Anmol and Kedia, Nitin and Mohan, Jayashree and Kundu, Souvik and Kwatra, Nipun and Ramjee, Ramachandran and Tumanov, Alexey},
  journal={arXiv preprint arXiv:2407.07000},
  year={2024}
}

@misc{sharegpt,
  author = {anon8231489123},
  title = {ShareGPT Vicuna unfiltered},
  howpublished = {\url{https://huggingface.co/datasets/anon8231489123/ShareGPT_Vicuna_unfiltered}},
  note = {Accessed: 2024-09-04}
}

@inproceedings{kwon2023efficient,
  title={Efficient Memory Management for Large Language Model Serving with PagedAttention},
  author={Woosuk Kwon and Zhuohan Li and Siyuan Zhuang and Ying Sheng and Lianmin Zheng and Cody Hao Yu and Joseph E. Gonzalez and Hao Zhang and Ion Stoica},
  booktitle={Proceedings of the ACM SIGOPS 29th Symposium on Operating Systems Principles},
  year={2023}
}

@misc{TDX,
author = {Intel},
title = {Intel trust domain extensions},
howpublished = {\url{https://www.intel.com/content/www/us/en/developer/tools/trust-domain-extensions/overview.html}},
note = {Accessed: 2024-09-12}
}

@misc{SEV-SNP,
author = {AMD},
title = {AMD Secure Encrypted Virtualization-Secure Nested Paging},
howpublished = {\url{https://www.amd.com/en/developer/sev.html}},
note = {Accessed: 2024-09-12}
}

@inproceedings{mohan2024securing,
  title={Securing AI Inference in the Cloud: Is CPU-GPU Confidential Computing Ready?},
  author={Mohan, Apoorve and Ye, Mengmei and Franke, Hubertus and Srivatsa, Mudhakar and Liu, Zhuoran and Gonzalez, Nelson Mimura},
  booktitle={2024 IEEE 17th International Conference on Cloud Computing (CLOUD)},
  pages={164--175},
  year={2024},
  organization={IEEE}
}

@inproceedings{sabt2015trusted,
  title={Trusted execution environment: What it is, and what it is not},
  author={Sabt, Mohamed and Achemlal, Mohammed and Bouabdallah, Abdelmadjid},
  booktitle={2015 IEEE Trustcom/BigDataSE/Ispa},
  volume={1},
  pages={57--64},
  year={2015},
  organization={IEEE}
}

@inproceedings{matetic2018delegatee,
  title={$\{$DelegaTEE$\}$: Brokered delegation using trusted execution environments},
  author={Matetic, Sinisa and Schneider, Moritz and Miller, Andrew and Juels, Ari and Capkun, Srdjan},
  booktitle={27th USENIX Security Symposium (USENIX Security 18)},
  pages={1387--1403},
  year={2018}
}

@inproceedings{ayoade2018decentralized,
  title={Decentralized IoT data management using blockchain and trusted execution environment},
  author={Ayoade, Gbadebo and Karande, Vishal and Khan, Latifur and Hamlen, Kevin},
  booktitle={2018 IEEE international conference on information reuse and integration (IRI)},
  pages={15--22},
  year={2018},
  organization={IEEE}
}

@article{dhanuskodi2023creating,
  title={Creating the First Confidential GPUs: The team at NVIDIA brings confidentiality and integrity to user code and data for accelerated computing.},
  author={Dhanuskodi, Gobikrishna and Guha, Sudeshna and Krishnan, Vidhya and Manjunatha, Aruna and O'Connor, Michael and Nertney, Rob and Rogers, Phil},
  journal={Queue},
  volume={21},
  number={4},
  pages={68--93},
  year={2023},
  publisher={ACM New York, NY, USA}
}

@inproceedings{yudha2022lite,
  title={LITE: a low-cost practical inter-operable GPU TEE},
  author={Yudha, Ardhi Wiratama Baskara and Meyer, Jake and Yuan, Shougang and Zhou, Huiyang and Solihin, Yan},
  booktitle={Proceedings of the 36th ACM International Conference on Supercomputing},
  pages={1--13},
  year={2022}
}

@article{wang2024confidential,
  title={Confidential Computing on Heterogeneous Systems: Survey and Implications},
  author={Wang, Qifan and Oswald, David},
  journal={arXiv preprint arXiv:2408.11601},
  year={2024}
}

@article{sev2020strengthening,
  title={Strengthening VM isolation with integrity protection and more},
  author={Sev-Snp, AMD},
  journal={White Paper, January},
  volume={53},
  pages={1450--1465},
  year={2020}
}

@misc{nvidiacc,
author = {nVIDIA},
title = {NVIDIA Confidential Computing},
howpublished = {\url{https://www.nvidia.com/en-us/data-center/solutions/confidential-computing/}},
note = {Accessed: 2024-10-24}
}

@misc{iog,
author = {IOG Foundation},
title = {IOG Foundation: The Decentralization of Cloud Computing},
howpublished = {\url{https://iog.net/}},
note = {Accessed: 2024-10-24}
}

@misc{ionet,
author = {io.net},
title = {io.net},
howpublished = {\url{https://io.net/}},
note = {Accessed: 2024-10-24}
}

@misc{engagestack,
author = {Engage Stack},
title = {Engage Stack – The Enterprise GPU Cloud},
howpublished = {\url{https://engagestack.io/}},
note = {Accessed: 2024-10-24}
}