Academic papers, new techniques, benchmarks, and theoretical findings in AI/LLM security.
Researchers have developed PacketPatch, a method for creating adversarial packets (malicious network data designed to fool AI systems) that can deceive byte-feature-based encrypted traffic classification systems (AI models that identify what type of network traffic is flowing through encrypted connections by analyzing raw data patterns). The work demonstrates how attackers could potentially manipulate encrypted network communications to evade detection by these AI-powered security systems.
This academic paper explores using graph neural networks (machine learning models that analyze connected data structures) and adaptive partial disconnection (selectively cutting off connections in a network) as methods to stop malware from spreading through systems. The research, published in July 2026, presents these techniques as defensive strategies for protecting networks against malware propagation.
This is a research paper proposing a new multi-factor authentication (MFA, a security method requiring multiple forms of proof to verify a user's identity) system that adapts based on context. The paper, published in July 2026, suggests that authentication security can be improved by adjusting verification requirements based on factors like user location, device, and behavior patterns rather than using the same rigid security checks for everyone.
This research paper studies how to estimate discrete distributions (collections of data categories and their frequencies) while protecting sensitive information using utility-optimized local differential privacy (ULDP, a privacy protection method that keeps data private locally while allowing more accurate results for non-sensitive information). The authors mathematically prove the fundamental limits of this privacy-utility trade-off and propose new optimal mechanisms called utility-optimized block design schemes to achieve the best possible accuracy under these privacy constraints.
Federated Learning (FL, a technique where multiple computers train an AI model together without sharing raw data) faces security challenges from adversarial attacks (attempts to trick the model with carefully crafted inputs) and data heterogeneity (when each computer has different types of data). The paper introduces Fed-CDP (Federated Contrastive Diffusion Prototypes), a new approach that uses a server to actively synthesize improved features from client data rather than just collecting them, which helps make the shared model more robust against attacks and reduces model drift (when local models diverge from each other).
This paper presents a method for performing skyline optimization (a technique that filters data to find the most important records based on multiple criteria) on encrypted data that is split across multiple locations in a vertical data federation (a system where different organizations each hold different columns of the same dataset). The researchers developed an asynchronous structured skyline predicate that improves both efficiency and security while protecting sensitive data from unauthorized access.
This paper presents MGRNet, a graph reasoning model (a method that uses network structures to understand relationships between data points) designed to improve multi-modal object re-identification (ReID, the task of matching the same object across different image types like visible and infrared photos). The approach handles low-quality local features by constructing modality-aware graphs (structures that represent relationships between image patches while accounting for different image types) and selectively swapping graph nodes to combine local and global information, ultimately creating more reliable object representations.
Facial manipulation techniques like face-swapping and face attribute editing (changing features in images) threaten privacy and identity security, but existing defense methods work poorly against both types of attacks in a unified way. Researchers developed EA-APO (Epoch-Adaptive Adversarial Perturbation Optimization), a defense framework that adds specially designed invisible noise patterns to face images to disrupt both face-swapping and attribute-editing AI models, even ones the defense hasn't seen before. The method was tested across multiple commercial facial manipulation tools and remained effective even after common image processing and social media compression.
Researchers developed a new method to attack deep neural networks that analyze 3D point clouds (collections of data points representing 3D objects) by using cage-based deformation, which smoothly warps the entire shape rather than moving individual points. The method generates adversarial attacks (malicious inputs designed to fool AI systems) that look natural to humans while successfully tricking classifiers, and these attacks remain effective even against defense methods.
Researchers found security weaknesses in DIZY, an ultra-lightweight stream cipher (an encryption method designed for devices with limited computing power) designed to protect resource-constrained devices like RFID tags. The attacks show that DIZY-80 and DIZY-128 provide weaker security (65/86-bit levels) than claimed (80/112-bit levels) by exploiting how the cipher initializes. The researchers proposed an improved version called DIZYa that resists these attacks while maintaining the original design's advantages.
Fix: An improved variant of DIZY, called DIZYa, is proposed. The analysis on DIZYa shows that the improved variant can provide better security resistance against all known attacks including the attacks on DIZY, while maintaining the commendable characteristics of DIZY.
IEEE Xplore (Security & AI Journals)This research paper describes a defense technique called Infer-Shield that protects AI models trained across multiple organizations (federated learning, where different parties train a shared model without sharing raw data) from membership inference attacks (attempts to determine if specific individuals' data was used in training). The paper proposes using adaptive distillation (a technique where a smaller model learns from a larger one to reduce information leakage) as a way to make these distributed AI systems more secure.
This research paper analyzes inconsistencies in CVSS scores (numerical ratings that measure how serious software vulnerabilities are) within the NVD (National Vulnerability Database, a public repository of known security flaws). The study found that the same vulnerability often receives different CVSS scores depending on which scoring standard or organization assigns the rating, revealing a fragmentation problem in how vulnerability severity is measured and reported.
PUFZIN is a blockchain-IoT (Internet of Things, the network of connected devices) security system that combines PUFs (physical unclonable functions, unique hardware-based identifiers that are hard to forge) with zero-knowledge proofs (a cryptographic method where one party proves knowledge of something without revealing the actual information) to create a secure and scalable network. The research, published in July 2026, addresses how to protect IoT devices and blockchain systems from unauthorized access and tampering.
This academic paper presents a framework for protecting unmanned ground vehicles (UGVs, which are robots that operate on land without human drivers) against cyber attacks by combining offensive and defensive security strategies. The research, published in Computers & Security, addresses how to both defend UGVs from threats and identify vulnerabilities through coordinated security approaches.
VaultFS is a file system (the software layer that manages how files are stored and organized on a computer) that ensures data integrity (accuracy and trustworthiness of stored information) by implementing write-once storage at the file system level, meaning files can only be written once and cannot be modified afterward. This approach protects against accidental or malicious changes to critical data by making it impossible to overwrite or alter files after they are created.
This research paper presents DWT-AMSA, a new method for image steganography (hiding secret data inside images so others cannot detect it) that uses frequency-domain adaptive masking (adjusting which parts of an image's mathematical representation are modified based on the image content) and progressive adversarial training (a machine learning technique where two competing AI systems improve each other iteratively to make the hidden data harder to detect). The method aims to make hidden information more robust and harder for attackers to discover or remove.
This research paper examines how Security Operations Centers (SOCs, teams that monitor and respond to security threats) can work effectively with AI systems by using adaptive trust mechanisms. The study focuses on building resilient operations, meaning systems that can continue functioning even when problems occur, through better collaboration between human security experts and AI tools that can process large amounts of data quickly.
This research paper validates a model for identifying and managing data security risks when higher education institutions use mobile cloud computing (storing and accessing data through mobile devices and internet-based servers rather than local computers). The study empirically tests this security risk model to help universities better understand and protect sensitive data in mobile cloud environments.
Federated learning (a system where multiple computers train an AI model together while keeping their data private) can be unfair to some participants and vulnerable to attacks where bad actors tamper with the process. FairRoP is a new method that uses adaptive client selection (choosing which computers to include based on their trustworthiness) and a bandit algorithm (a technique for balancing exploration and exploitation in decision-making) to improve both fairness and robustness against attacks. The approach combines three components: fairness awareness, attack detection, and q-Balance to handle the different challenges involved.
This article addresses how radar systems (devices that detect objects using electromagnetic waves) can better allocate their time between searching for targets and tracking known ones when facing jamming (intentional interference meant to disrupt detection). The researchers propose a dynamic scheduling strategy using receding-horizon optimization (a method that repeatedly solves shorter planning problems instead of one big long-term problem) combined with mathematical techniques to keep radar performance strong even under jamming attacks.