jinxhy/awesome-moai-security — explained in plain English
Analysis updated 2026-05-18
Find an organized entry point into mobile on-device AI security research
Locate papers on a specific attack type, such as model stealing or backdoor attacks
Understand how researchers categorize on-device AI defenses like model obfuscation and watermarking
Identify open research problems to pursue in mobile AI security
| jinxhy/awesome-moai-security | 0-bingwu-0/live-interpreter | 010zx00x1/faresnipe | |
|---|---|---|---|
| Stars | 2 | 2 | 2 |
| Language | — | Python | Python |
| Setup difficulty | easy | moderate | easy |
| Complexity | 1/5 | 2/5 | 2/5 |
| Audience | researcher | general | general |
Figures from each repo's GitHub metadata at analysis time.
This repository is a curated reading list rather than a piece of software. It collects academic research papers about the security of mobile on-device AI, meaning AI models that run directly on a phone instead of on a remote server, using frameworks like LiteRT, Core ML, ExecuTorch, and ONNX. The list is a companion resource to a research survey paper written by the repository's authors, covering the attacks that threaten these on-device AI systems and the defenses researchers have proposed against them. The README organizes the field into a clear taxonomy. On the attack side, it groups papers into categories such as adversarial attacks that fool a model into wrong predictions, backdoor attacks that plant hidden malicious behavior into a model, attacks that steal a copy of the model itself, and attacks that drain a device's battery or slow it down. On the defense side, it covers techniques for hiding a model's internal details from attackers, verifying that only an authorized model can run, using secure hardware regions called trusted execution environments, and watermarking a model to prove ownership if it is stolen. For newcomers to this specific research area, the README includes a suggested reading order, starting with background studies on how common on-device AI already is in real apps, then moving into the core security risk of models being extracted or copied, followed by the specific attack surfaces, and finally the corresponding defenses. A table summarizes which security concerns fall under which broad category of protection, and the repository also lists open research problems and emerging directions for future work in this area. This is intended for security researchers, graduate students, and engineers who want a structured entry point into an academic field, not a tool you install or run. Its main value is as an organized bibliography with links to the original papers and, where available, their published code.
A curated academic reading list covering research on attacks against and defenses for AI models that run directly on mobile phones.
License not stated in the available metadata.
Setup difficulty is rated easy, with roughly 5min to a first successful run.
Mainly researcher.
This repo across BitVibe Labs
double-check against the repo, no cap.