Secure Deployment of TinyML Applications: Strategies and Practices

2025

Closed access Metadata (CSL-JSON)
DOI 10.1002/9781394294572.ch17
Data confidence 70 medium
How this score is calculated

It is built from checkable properties of the record itself: whether the article has a DOI, how many independent sources confirmed its data, whether the required fields are filled in, and how recent the latest confirmation is. Disagreement between sources and a missing identifier lower it. A value of 80 or above means the record was published without further checking; 60 to 79 means it is published at reduced confidence, with a manual check advisable. A record verified by an editor by hand is never pushed below 90 by a recalculation. This scores our data about the article, not the article itself.

Abstract

This chapter delves into the essential security practices for deploying Tiny Machine Learning (TinyML) applications on microcontrollers within Internet of Things (IoT) devices, focusing on minimizing vulnerabilities from inception to deployment. It begins by outlining common security threats specific to TinyML environments, such as model theft and data poisoning, with real-world case studies illustrating their impact. The chapter then discusses robust security architectures, emphasizing the need for lightweight, yet effective, cryptographic techniques tailored for constrained environments. A comprehensive analysis of current methodologies for secure bootstrapping, secure key storage, and firmware updates is presented, illustrating their significance in maintaining the integrity and confidentiality of TinyML applications. Practical implementation guidelines and code samples are provided to enable readers to apply these strategies in their own TinyML deployments. This discussion not only highlights practical implementations but also sets the stage for adopting emerging standards in secure TinyML deployment.