aisecwatch.com
DashboardVulnerabilitiesNewsResearchArchiveStatsDatasetFor devs
Subscribe
aisecwatch.com

Real-time AI security monitoring. Tracking AI-related vulnerabilities, safety and security incidents, privacy risks, research developments, and policy changes.

Navigation

VulnerabilitiesNewsResearchDigest ArchiveNewsletter ArchiveSubscribeData SourcesStatisticsDatasetAPIIntegrationsWidgetRSS Feed

Maintained by

Truong (Jack) Luu

Information Systems Researcher

Research

Academic papers, new techniques, benchmarks, and theoretical findings in AI/LLM security.

to
Export CSV
1217 items

Post-Quantum Secure Lattice-Based Lightweight Authentication Scheme for Energy Internet-Based V2G Communication

inforesearchPeer-Reviewed
security
Aug 12, 2026

This research presents a new authentication protocol (a method for verifying identity between two parties) designed for Vehicle-to-Grid (V2G) communication, which allows electric vehicles to securely exchange energy with charging stations. The protocol uses lattice-based cryptography (a type of math-based encryption resistant to attacks from quantum computers, which are extremely powerful future computers) and was tested for security using both automated tools and manual analysis to ensure it works safely in real-world situations.

IEEE Xplore (Security & AI Journals)

Toward High Accuracy and Strong Security: Cancellable Templates for Multimodal Biometric Recognition Based on Feature Fusion

inforesearchPeer-Reviewed
research

DiEL: Disentangled Evolutionary Learning for Identity-Preserving Face Enhancement and Recognition

inforesearchPeer-Reviewed
research

Two Heads Are Better Than One: Models-to-Model Learning for Encrypted Traffic Analysis

inforesearchPeer-Reviewed
research

Text Adversarial Attacks With Dynamic Outputs

inforesearchPeer-Reviewed
security

Information Bottleneck-Driven Cross-Receiver RF Fingerprinting for Physical-Layer Security

inforesearchPeer-Reviewed
research

ESecDT: Communication-Efficient and Secure Decision Tree Training Framework

inforesearchPeer-Reviewed
research

MsaaDI: A Heterogeneity-Resilient Federated Learning Framework for IoT Device Identification With Multi-Scale Adaptive Aggregation

inforesearchPeer-Reviewed
research

Explainable multi-modal unsupervised learning for insider threat detection in enterprise environments

inforesearchPeer-Reviewed
research

Privacy in Federated Learning Models for Intrusion Detection Systems

inforesearchPeer-Reviewed
research

AttackLogGen: Benchmarking LLMs for Generating Attack Logs

inforesearchPeer-Reviewed
research

WebTrap: Adaptive detection and mitigation of algorithmic complexity attacks on web endpoints

inforesearchPeer-Reviewed
security

WeatherNext: AI model achieves breakthrough in forecasting cyclones

inforesearchPeer-Reviewed
research

Privacy-Preserving GAN for Synthetic Data against Membership Inference Attack

inforesearchPeer-Reviewed
research

Beyond Patterns: A Bayesian Intent Lattice for Metamorphic Malware Detection

inforesearchPeer-Reviewed
security

Knowing millions of students too well: High-entropy scores as deterministic quasi-identifiers for re-identification and data leakage in the Brazilian high school exam

inforesearchPeer-Reviewed
privacy

Empowering Communities: The CKICAS Framework for Adaptive, Low-Latency Decision-Making in Sustainable Development

inforesearchPeer-Reviewed
research

v2026.07

inforesearchIndustry
security

Enhancing threat detection, privacy, and robustness in IDS using explainable Fed-GAT with WGAN augmentation

inforesearchPeer-Reviewed
research

Cyber Kill Web: Graph analytics for security telemetry aligned with MITRE ATT&CKĀ® and reproducible evaluation

inforesearchPeer-Reviewed
security
Previous10 / 61Next
security
Aug 12, 2026

This research proposes a secure system for multimodal biometric recognition (using multiple biological measurements like palmprints and vein patterns together) that protects user privacy by creating cancellable templates (protected versions of biometric data that can't be reversed to recover the original). The system uses a neural network to combine features from different biometric sources and a novel random projection method to generate templates that are irreversible, revocable (can be replaced if compromised), and resistant to various attacks.

Fix: The proposed mitigation involves a 'novel cancellable random projection method, which generates protected templates through SoftMax-based random projection (SoRP) combined with other hashing algorithms, effectively avoiding the reversibility problem of random projection under certain conditions.' The framework is designed to satisfy security requirements including 'irreversibility, revocability, unlinkability, and resistance to various attacks.'

IEEE Xplore (Security & AI Journals)
Aug 12, 2026

DiEL is a method for improving face images while keeping the person's identity recognizable, especially in difficult conditions like extreme angles, blurriness, or poor lighting. The approach uses evolutionary learning (a technique that evolves solutions over time) to separate identity information from pose information (head angle), then reconstructs faces using a pose dictionary (a library of standard face angles learned from many images) to maintain consistency. The method outperforms existing approaches by an average of 4.66% on six benchmark datasets, with particularly strong improvements on challenging cross-pose tests.

IEEE Xplore (Security & AI Journals)
Aug 12, 2026

This research addresses a problem in encrypted traffic analysis (ETA, the process of identifying what data is being sent over the internet by examining encrypted network traffic patterns), where existing machine learning methods require lots of manually labeled training data. The authors propose Models-to-Model Learning (M2ML), a new approach that learns from existing ETA models instead of requiring labeled data, using a large language model to align different models' feature spaces (the variables they measure) and resolve disagreements between them based on credibility.

IEEE Xplore (Security & AI Journals)
research
Aug 12, 2026

This research describes a new attack method called TDOA (Textual Dynamic Outputs Attack) that can trick large language models by exploiting a weakness in how they handle variable outputs. Unlike older attack methods that assume a fixed set of possible answers, real-world LLMs often generate answers that go beyond predefined categories or produce different numbers of labels depending on the input, creating what researchers call 'dynamic outputs.' TDOA works by using a clustering approach (grouping similar outputs together) to convert these unpredictable outputs into a simpler form that existing attack techniques can target, achieving up to 80.8% success rates with very few queries.

IEEE Xplore (Security & AI Journals)
Aug 12, 2026

This research paper presents a new method for radio frequency fingerprinting (RFF, a technique that identifies wireless devices by analyzing unique hardware distortions in their signals) that works better when signals are received by different types of receivers. The proposed approach uses an information bottleneck (IB, a principle that keeps only the most important information while removing unnecessary details) to learn compact representations of device fingerprints without needing labeled data about which receiver collected the signal, outperforming existing methods on real-world datasets.

IEEE Xplore (Security & AI Journals)
security
Aug 12, 2026

ESecDT is a framework that allows multiple parties to train decision trees (machine learning models used to make predictions by sorting data into categories) together while keeping their individual data private. It combines two cryptographic techniques called Function Secret Sharing (FSS, a method where a secret is split into parts that only work together) and Replicated Secret Sharing (RSS, another way to distribute secrets across parties) to reduce the amount of data that must be sent between parties during training while maintaining strong privacy protections.

IEEE Xplore (Security & AI Journals)
Aug 12, 2026

This research paper presents MsaaDI, a federated learning (FL, a technique where AI models are trained across many devices without sending raw data to a central server) framework designed to identify IoT devices (internet-connected hardware like cameras and sensors) more accurately. The framework addresses two main problems that make federated learning difficult: Non-IID distributions (when different devices have data in different formats or proportions) and class imbalance (when some types of devices are underrepresented in training data), using a Multi-Scale Adaptive Aggregation mechanism on the server side and improved local training strategies on client devices to achieve up to 94% accuracy in testing.

IEEE Xplore (Security & AI Journals)
security
Aug 11, 2026

This is a research publication describing a method for detecting insider threats, which are security risks from employees or authorized users, using explainable multi-modal unsupervised learning (AI that learns patterns from multiple types of data without labeled examples and can show why it made decisions). The paper, published in November 2026, proposes an approach to identify suspicious behavior in enterprise environments by analyzing different data sources together.

Elsevier Security Journals
privacy
Aug 10, 2026

This academic paper examines privacy concerns in federated learning models (a training approach where AI learns from data spread across multiple computers without centralizing it) used for intrusion detection systems (software that identifies unauthorized access attempts). The research explores how to protect sensitive network data while still building effective security AI systems.

ACM Digital Library (TOPS, DTRAP, CSUR)
security
Aug 10, 2026

AttackLogGen is a benchmark (a standardized test used to measure performance) that evaluates how well large language models can generate realistic attack logs, which are records of malicious activities targeting computer systems. The research, published in September 2026, examines whether AI models can create convincing fake security logs that might be used for testing or research purposes.

ACM Digital Library (TOPS, DTRAP, CSUR)
Aug 6, 2026

WebTrap is a system that detects and stops algorithmic complexity attacks, which are attempts to make web servers slow down by sending specially crafted requests that force the server to do excessive computation. The system uses adaptive techniques, meaning it adjusts its defenses based on what it observes, to identify and block these attacks on web endpoints (the specific URLs or functions that accept user requests).

Elsevier Security Journals
industry
Aug 6, 2026

WeatherNext is an AI model that predicts tropical cyclones (hurricanes or typhoons) with unprecedented accuracy, providing forecasters an extra day of warning compared to previous models. The breakthrough comes from using a single AI system that combines global weather pattern prediction with fine-scale cyclone intensity analysis, trained on both atmospheric data and expert observations. The researchers have now open-sourced the model to help weather agencies and communities prepare for these destructive storms.

DeepMind Safety Research
privacy
Aug 5, 2026

This academic paper discusses a privacy-preserving GAN (generative adversarial network, a type of AI that creates synthetic data by having two neural networks compete with each other) designed to protect against membership inference attacks (attempts to figure out if specific individuals' data was used to train an AI model). The research presents a technical approach to generating synthetic data that maintains usefulness while making it harder for attackers to determine whose real data was included in model training.

ACM Digital Library (TOPS, DTRAP, CSUR)
research
Aug 1, 2026

This research paper proposes a new detection method using a Bayesian Intent Lattice to identify metamorphic malware (malware that changes its code structure to avoid detection while keeping the same harmful behavior). The approach aims to improve security by recognizing malware based on its underlying intent rather than just looking for known patterns.

Elsevier Security Journals
research
Jul 31, 2026

Researchers found that high-entropy scores (statistical measurements of randomness or uniqueness in data) from Brazilian high school exam results can act as quasi-identifiers (partial pieces of information that can identify individuals when combined with other data), allowing attackers to re-identify students and leak their personal data even when direct identifiers like names are removed. The study shows that seemingly anonymous datasets can still expose millions of students' information through these numerical patterns.

Elsevier Security Journals
Jul 31, 2026

This paper presents CKICAS (Community Kinetic Intelligent Complex Adaptive System), a framework designed to help communities make decisions faster while maintaining quality by reducing the time between identifying a problem and responding to it. The framework was tested during COVID-19 across five different crisis situations and showed it could compress decision cycles from months down to hours. The paper proposes a technical architecture that could combine low-tech and AI-enhanced approaches to help communities address sustainable development challenges more inclusively.

AIS eLibrary (Journal of AIS, CAIS, etc.)
Jul 31, 2026

This is a GitHub release tag (v2026.07) for a software project, created on July 31, 2026, with a specific commit identifier (2306eca). The content provided contains only version metadata and does not describe any AI/LLM issue, vulnerability, or technical problem.

MITRE ATLAS Releases
security
Jul 31, 2026

This research paper proposes a new method for detecting cyber threats using explainable Fed-GAT with WGAN augmentation, combining federated learning (a technique where multiple computers train an AI model together without sharing raw data), graph attention networks (neural networks that focus on the most important connections in data), and generative AI to improve threat detection in IDS (intrusion detection systems, which monitor networks for suspicious activity). The approach aims to enhance threat detection accuracy, protect privacy, and make the AI's decisions more understandable to humans.

Elsevier Security Journals
Jul 30, 2026

This research paper introduces Cyber Kill Web, a tool that uses graph analytics (a method of analyzing connections and relationships in data) to examine security telemetry (information about security events and system activity) and align it with MITRE ATT&CK (a framework that categorizes cyber attack techniques). The work focuses on providing reproducible evaluation (testing that can be repeated with the same results) of security data analysis methods.

Elsevier Security Journals