Research

This research paper examines security threats in quantum networks, specifically attacks that exploit st-connectivity (the ability to route information between specific points in a network). The authors focus on identifying vulnerable nodes (connection points that can be compromised) and detecting malicious entanglement patterns (when quantum states are abnormally linked in ways that could indicate an attack). The work addresses how to protect quantum communication systems from these specialized attacks.

This research paper examines how GANs (generative adversarial networks, machine learning models that learn to generate realistic data) can identify Tor traffic (encrypted network connections that hide user identity) even when that traffic has been obfuscated (disguised to look like normal internet activity). The study addresses the challenge of working with imbalanced datasets (training data where one category vastly outnumbers others), which is common in real-world network security scenarios.

This research paper presents a framework that uses AI to automatically evaluate whether Internet of Things (IoT) devices meet ETSI (a European standards organization) security requirements, with a focus on making the AI's decision-making process understandable to humans. The system analyzes security clauses and compliance rules to assess consumer IoT devices, helping manufacturers and regulators understand why certain devices pass or fail security standards.

This is a systematic literature review (a comprehensive study that analyzes many existing research papers on a topic) published in January 2027 that examines the economic aspects of cloud security. The paper, written by Filiopoulou and colleagues, explores how security in cloud computing (data storage and processing on remote servers) affects costs and business decisions. The review synthesizes findings from multiple studies to understand the financial impact of protecting cloud systems.

This academic paper proposes a security framework for Healthcare 4.0 (the next generation of connected medical systems) that uses zero-trust architecture (a security model that never automatically trusts anyone or anything, even inside a network) combined with continuous authentication based on biometric pulse data (heartbeat patterns used to verify a person's identity). The research suggests that monitoring a patient's unique pulse signature throughout their interaction with medical systems could provide an additional layer of security to protect sensitive health information.

This academic paper presents Hook & Match, a card game designed to teach people how to identify phishing attacks (fraudulent messages that trick users into revealing sensitive information). The researchers developed and tested this game as an educational tool to help people recognize the red flags of phishing threats.

CyberCom, a cloud-based security company, uses a machine learning model (an AI system trained on data to recognize patterns) in its products to detect malware (malicious software). Security researchers found that this model fails to detect mutated malware (altered versions of malicious code), exposing a key weakness: AI tools that rely only on historical data can't effectively handle new or changed threats.

This academic paper examines how to protect user privacy when using gamification (game-like elements added to non-game applications) combined with LLMs (large language models, AI systems trained on vast amounts of text) for analyzing qualitative data. The research focuses on reducing hallucination (when an AI generates false or made-up information) while conducting privacy-sensitive analysis.

Researchers developed a method that uses LLMs (large language models, AI systems trained on vast text data) combined with multiple levels of code analysis to detect and understand malicious PowerShell scripts (code designed to harm Windows systems). The approach fuses different representations of the scripts and applies LLM reasoning to characterize threats in an interpretable way, meaning users can understand why the system flagged something as dangerous.

This paper explores a hypothetical future technology called a 'pedagogical twin,' which would be a digital version of a student designed to help with education. The authors use ethical frameworks (PAPA framework and virtue ethics) to think through potential risks and benefits before this technology is actually built, including concerns about young people's digital exposure and social media. The paper suggests that understanding these risks now can guide how such a system should be designed in the future.

Researchers used generative AI (artificial intelligence systems that create new content) to create visual scenarios of potential ethical problems caused by automation and robots, then had 90 workers from four countries rank how worried they were about each scenario. The study found that workers have three main concerns: risks to the environment and security from automation, fears about humans working too closely with robots, and worries about job changes and whether automation will be fair to everyone.

Real-time data sharing frameworks (RTDSFs, systems that move data quickly across organizations) are becoming important in industries like finance and healthcare, but researchers don't yet fully understand the security, trust, and governance (organizational control and oversight) challenges they create. This report proposes four key research areas: trust when decisions happen faster than they can be verified, governance when oversight lags behind automated actions, how to fairly distribute control among multiple organizations in real-time settings, and how organizations with different security capabilities can work together safely.

ABE-FL is a research system that combines CP-ABE (ciphertext-policy attribute-based encryption, a method where data is encrypted based on user attributes) with elliptic curves (mathematical structures used for strong cryptography) to enable federated learning (training AI models across multiple computers without sharing raw data in one place) securely. The system aims to make federated learning more efficient while maintaining high security standards. This is a published academic paper describing a proposed approach rather than a real-world product or incident.

ANT-VAT is a research method that combines knowledge-guided learning with virtual adversarial training (a technique that tests AI models by feeding them deliberately tricky inputs) to improve how well AI systems can detect software vulnerabilities. The approach aims to make vulnerability detection AI more robust, meaning it works reliably even when given unusual or modified code. This research was published in December 2026 in a peer-reviewed security journal.

This research paper presents Practical Federated Unlearning (PFU), a method for removing a specific client's data contribution from a machine learning model in federated learning (a system where multiple computers train a shared model without sending raw data to a central location). PFU improves on existing approaches by requiring only one round of communication and avoiding the need to store historical model updates or wait for all clients to participate. The method uses the Fisher Information Matrix (a mathematical tool that identifies which parts of the model are most affected by specific data) to find and adjust the most sensitive model parameters related to that client's data.

This paper addresses the challenge of designing beamforming (a technique for directing radio signals in specific directions) for covert integrated sensing and communication (ISAC, a system that combines radar and wireless communication functions) when an eavesdropper has incomplete information about the communication channel and noise levels. The researchers develop two optimization methods: a robust optimization approach for stable environments and a machine learning-based algorithm for rapidly changing conditions, both designed to maximize radar performance while keeping communications hidden from eavesdroppers.

Dynamic Searchable Symmetric Encryption (DSSE, a technique that lets you search encrypted data without decrypting it first) can leak information about search patterns, allowing attackers to guess what users are looking for. While existing systems use methods like Oblivious RAM to hide these patterns, they're slow and don't track when servers misbehave. This paper introduces Tramy, a new DSSE system that supports multiple users querying encrypted data together, hides search patterns, and can identify and verify when servers act maliciously by using novel techniques called Matrix-based Multi-Point Retrieval and Malice-Defend Bloom Filters.

UFOs is a toolkit designed to speed up secure multiparty computation (MPC, where multiple parties jointly compute results without revealing their individual data) when working with small data values like 4-bit numbers in larger arithmetic fields. The toolkit introduces optimized protocols for one-hot encoding (converting a value into a vector where only one position is marked as active), comparison operations, and digit decomposition (breaking numbers into their component digits), achieving significant speedups in tasks like sorting, with up to 3.4 times faster performance in some cases.

This academic paper describes a method for performing face recognition (identifying people from their faces) while keeping the facial data encrypted (scrambled so only authorized parties can read it) and optimized to run on GPUs (graphics processors that speed up calculations). The research focuses on making encrypted face recognition practical and efficient for real-world use.