Research

This academic paper examines privacy concerns in federated learning models (a training approach where AI learns from data spread across multiple computers without centralizing it) used for intrusion detection systems (software that identifies unauthorized access attempts). The research explores how to protect sensitive network data while still building effective security AI systems.

AttackLogGen is a benchmark (a standardized test used to measure performance) that evaluates how well large language models can generate realistic attack logs, which are records of malicious activities targeting computer systems. The research, published in September 2026, examines whether AI models can create convincing fake security logs that might be used for testing or research purposes.

WebTrap is a system that detects and stops algorithmic complexity attacks, which are attempts to make web servers slow down by sending specially crafted requests that force the server to do excessive computation. The system uses adaptive techniques, meaning it adjusts its defenses based on what it observes, to identify and block these attacks on web endpoints (the specific URLs or functions that accept user requests).

WeatherNext is an AI model that predicts tropical cyclones (hurricanes or typhoons) with unprecedented accuracy, providing forecasters an extra day of warning compared to previous models. The breakthrough comes from using a single AI system that combines global weather pattern prediction with fine-scale cyclone intensity analysis, trained on both atmospheric data and expert observations. The researchers have now open-sourced the model to help weather agencies and communities prepare for these destructive storms.

This academic paper discusses a privacy-preserving GAN (generative adversarial network, a type of AI that creates synthetic data by having two neural networks compete with each other) designed to protect against membership inference attacks (attempts to figure out if specific individuals' data was used to train an AI model). The research presents a technical approach to generating synthetic data that maintains usefulness while making it harder for attackers to determine whose real data was included in model training.

This research paper proposes a new detection method using a Bayesian Intent Lattice to identify metamorphic malware (malware that changes its code structure to avoid detection while keeping the same harmful behavior). The approach aims to improve security by recognizing malware based on its underlying intent rather than just looking for known patterns.

Researchers found that high-entropy scores (statistical measurements of randomness or uniqueness in data) from Brazilian high school exam results can act as quasi-identifiers (partial pieces of information that can identify individuals when combined with other data), allowing attackers to re-identify students and leak their personal data even when direct identifiers like names are removed. The study shows that seemingly anonymous datasets can still expose millions of students' information through these numerical patterns.

This is a GitHub release tag (v2026.07) for a software project, created on July 31, 2026, with a specific commit identifier (2306eca). The content provided contains only version metadata and does not describe any AI/LLM issue, vulnerability, or technical problem.

This research paper proposes a new method for detecting cyber threats using explainable Fed-GAT with WGAN augmentation, combining federated learning (a technique where multiple computers train an AI model together without sharing raw data), graph attention networks (neural networks that focus on the most important connections in data), and generative AI to improve threat detection in IDS (intrusion detection systems, which monitor networks for suspicious activity). The approach aims to enhance threat detection accuracy, protect privacy, and make the AI's decisions more understandable to humans.

This research paper introduces Cyber Kill Web, a tool that uses graph analytics (a method of analyzing connections and relationships in data) to examine security telemetry (information about security events and system activity) and align it with MITRE ATT&CK (a framework that categorizes cyber attack techniques). The work focuses on providing reproducible evaluation (testing that can be repeated with the same results) of security data analysis methods.

This is a survey paper that reviews different compression algorithms (techniques for making AI language models smaller and faster) used in language models. The paper examines various approaches to reducing model size without significantly losing performance. It was published in October 2026 as an academic overview of the field.

AI is enabling workers to take on tasks traditionally done by other job roles, a pattern called task crossover (work historically associated with one occupation appearing in how people in another occupation use AI). Analysis of over 800,000 ChatGPT messages from U.S. users shows that 43.5% of occupation-specific messages involve tasks outside the user's own job, with some roles like customer service workers doing outside-occupation tasks 77% of the time, suggesting AI is reshaping which tasks different jobs include before job titles officially change.

This research paper analyzes adversarial attacks, which are methods where attackers deliberately craft malicious inputs to fool AI systems, specifically targeting spam filters (software that identifies unwanted emails). The study examines how these attacks work and their implications for email security systems that rely on machine learning (AI trained on examples to recognize patterns).

SemAder is a technique that can fool LLM-based binary code analysis tools (AI systems trained to understand compiled machine code) by manipulating both the code's structure and its underlying meaning. The research, published in ACM Transactions on Privacy and Security, demonstrates that attackers can evade detection by simultaneously changing how the code is organized and what it actually does, making it harder for AI-powered security analysis to identify malicious behavior.

This research paper describes a watermarking technique that allows AI model creators to verify they own their models, where the watermark stays hidden during normal use but becomes visible when the model is updated. This approach helps protect against model theft and unauthorized copying by giving developers a way to prove ownership if their model appears elsewhere.

Researchers discovered that large language models (AI systems trained on vast amounts of text data) can be used to generate attacks against industrial control systems (computers that manage critical infrastructure like power grids and factories). The study shows that LLMs can synthesize, or create, realistic attack strategies when prompted to do so, raising concerns about the security of systems that keep essential services running.

This academic paper from ACM Transactions on Privacy and Security presents a policy-based conjunctive scheme, a method for managing the deletion of data that is owned or controlled by multiple parties. The research addresses the challenge of 'digital forgetting' (the ability to completely remove data from systems), which becomes complicated when more than one person has rights or claims to that data. The paper proposes a framework using policies (rules that determine who can do what) to coordinate data deletion across co-owned datasets.

This academic paper examines privacy risks in vertical federated learning (a technique where multiple organizations train AI models together while keeping their own data separate), specifically focusing on agnostic inference attacks that can expose sensitive information. The researchers analyze how attackers might infer private data even when the system doesn't require them to know the data's exact structure or type beforehand.

Java libraries sometimes work differently than their developers intended, creating a security problem called 'expectation inconsistency' where programmers misuse the libraries and accidentally introduce vulnerabilities. Researchers created a tool called EIFinder that scanned nearly 30,000 popular Java libraries and found nearly 8,000 APIs (pre-built functions) with this problem, including 972 zero-day RCE (remote code execution, where attackers can run commands on a system) vulnerabilities affecting libraries from major companies like Google, Apache, and IBM.