1 INTRODUCTION  
1.1 Background  
1.2 Related Surveys  
1.3 Motivation  
1.4 Contribution  

2 PRIVACY GUARANTEES AND THREATS IN THE CURRENT CLOUD ECOSYSTEM  
2.1 Security Objectives  
2.2 Cryptographic Standards  
2.3 Communication Protocols  
2.4 Trusted Computing  
2.5 Current Privacy Guarantees  
2.6 Threat Model in the Cloud  

3 THREATS IN THE ML ECOSYSTEM  
3.1 Machine Learning Overview  
3.2 Privacy Attacks  
3.3 Security / Robustness Attacks  
3.4 Threat Model for an ML Service  
3.5 Threat Model Considering the Lifecycle of an ML Model  

4 TAXONOMY CONSIDERING OWNERSHIP AND USAGE RIGHTS  
4.1 Single Data Single Model (SDSM)  
4.2 Single Data Multiple Model  
4.3 Multiple Data Single Model  
4.4 Multiple Data Multiple Model  

5 TAXONOMY CONSIDERING DEFENSE TECHNIQUES  

6 CONCLUDING REMARKS