aisecwatch.com
DashboardVulnerabilitiesNewsResearchArchiveStatsDatasetFor devs
Subscribe
aisecwatch.com

Real-time AI security monitoring. Tracking AI-related vulnerabilities, safety and security incidents, privacy risks, research developments, and policy changes.

Navigation

VulnerabilitiesNewsResearchDigest ArchiveNewsletter ArchiveSubscribeData SourcesStatisticsDatasetAPIIntegrationsWidgetRSS Feed

Maintained by

Truong (Jack) Luu

Information Systems Researcher

Research

Academic papers, new techniques, benchmarks, and theoretical findings in AI/LLM security.

to
Export CSV
690 items

PacketPatch: Practical generation and deployment of adversarial packets for byte-feature-based encrypted traffic classification

inforesearchPeer-Reviewed
securityresearch
May 27, 2026

Researchers have developed PacketPatch, a method for creating adversarial packets (malicious network data designed to fool AI systems) that can deceive byte-feature-based encrypted traffic classification systems (AI models that identify what type of network traffic is flowing through encrypted connections by analyzing raw data patterns). The work demonstrates how attackers could potentially manipulate encrypted network communications to evade detection by these AI-powered security systems.

Elsevier Security Journals

Adaptive partial disconnection and graph neural networks against malware propagation

inforesearchPeer-Reviewed
security

Context-aware and adaptive multi-factor authentication model

inforesearchPeer-Reviewed
security

Fundamental Limit of Discrete Distribution Estimation Under Utility-Optimized Local Differential Privacy

inforesearchPeer-Reviewed
research

Federated Contrastive Diffusion Prototypes for Robust Private Learning

inforesearchPeer-Reviewed
research

Secure Optimization With Asynchronous Structured Skyline Predicates Under Vertical Data Federation

inforesearchPeer-Reviewed
research

Reliable Multi-Modal Object Re-Identification via Modality-Aware Graph Reasoning

inforesearchPeer-Reviewed
research

EA-APO: A Universal Proactive Defense Against Facial Manipulation

inforesearchPeer-Reviewed
security

Deformable 3-D Point Cloud Perturbations Using Cage-Based Deformation for Semantic Consistency

inforesearchPeer-Reviewed
research

Cryptanalysis of the DIZY Stream Cipher With Provable Security

inforesearchPeer-Reviewed
security

<em>Infer-Shield</em>: Defending against membership inference attacks in heterogeneous federated learning via adaptive distillation

inforesearchPeer-Reviewed
security

Fragmentation of CVSS scores in the NVD: A quantitative analysis of inconsistency across vulnerability scoring standards

inforesearchPeer-Reviewed
security

PUFZIN: Secure and scalable blockchain-IoT with PUFs and zero-knowledge proofs

inforesearchPeer-Reviewed
security

An integrated cyber offence–defence framework for unmanned ground vehicles

inforesearchPeer-Reviewed
security

VaultFS: Data Integrity via Write-Once Software Support at the File System Level

inforesearchPeer-Reviewed
security

DWT-AMSA: Robust image steganography via frequency-domain adaptive masking and progressive adversarial training

inforesearchPeer-Reviewed
research

Adaptive Trust-Aware SOC Human–AI Teaming for resilient operations

inforesearchPeer-Reviewed
research

Empirical Validation of a Data Security Risks Model for Implementing Mobile Cloud Computing in Higher Education

inforesearchPeer-Reviewed
security

FairRoP: Robust Client Selection Scheme for Fairness-Aware Federated Learning

inforesearchPeer-Reviewed
research

Receding-Horizon Radar Time Resource Scheduling for Jamming-Resilient Target Search and Tracking

inforesearchPeer-Reviewed
research
Previous4 / 35Next
May 26, 2026

This academic paper explores using graph neural networks (machine learning models that analyze connected data structures) and adaptive partial disconnection (selectively cutting off connections in a network) as methods to stop malware from spreading through systems. The research, published in July 2026, presents these techniques as defensive strategies for protecting networks against malware propagation.

Elsevier Security Journals
May 26, 2026

This is a research paper proposing a new multi-factor authentication (MFA, a security method requiring multiple forms of proof to verify a user's identity) system that adapts based on context. The paper, published in July 2026, suggests that authentication security can be improved by adjusting verification requirements based on factors like user location, device, and behavior patterns rather than using the same rigid security checks for everyone.

Elsevier Security Journals
privacy
May 25, 2026

This research paper studies how to estimate discrete distributions (collections of data categories and their frequencies) while protecting sensitive information using utility-optimized local differential privacy (ULDP, a privacy protection method that keeps data private locally while allowing more accurate results for non-sensitive information). The authors mathematically prove the fundamental limits of this privacy-utility trade-off and propose new optimal mechanisms called utility-optimized block design schemes to achieve the best possible accuracy under these privacy constraints.

IEEE Xplore (Security & AI Journals)
security
May 25, 2026

Federated Learning (FL, a technique where multiple computers train an AI model together without sharing raw data) faces security challenges from adversarial attacks (attempts to trick the model with carefully crafted inputs) and data heterogeneity (when each computer has different types of data). The paper introduces Fed-CDP (Federated Contrastive Diffusion Prototypes), a new approach that uses a server to actively synthesize improved features from client data rather than just collecting them, which helps make the shared model more robust against attacks and reduces model drift (when local models diverge from each other).

IEEE Xplore (Security & AI Journals)
security
May 25, 2026

This paper presents a method for performing skyline optimization (a technique that filters data to find the most important records based on multiple criteria) on encrypted data that is split across multiple locations in a vertical data federation (a system where different organizations each hold different columns of the same dataset). The researchers developed an asynchronous structured skyline predicate that improves both efficiency and security while protecting sensitive data from unauthorized access.

IEEE Xplore (Security & AI Journals)
May 25, 2026

This paper presents MGRNet, a graph reasoning model (a method that uses network structures to understand relationships between data points) designed to improve multi-modal object re-identification (ReID, the task of matching the same object across different image types like visible and infrared photos). The approach handles low-quality local features by constructing modality-aware graphs (structures that represent relationships between image patches while accounting for different image types) and selectively swapping graph nodes to combine local and global information, ultimately creating more reliable object representations.

IEEE Xplore (Security & AI Journals)
research
May 25, 2026

Facial manipulation techniques like face-swapping and face attribute editing (changing features in images) threaten privacy and identity security, but existing defense methods work poorly against both types of attacks in a unified way. Researchers developed EA-APO (Epoch-Adaptive Adversarial Perturbation Optimization), a defense framework that adds specially designed invisible noise patterns to face images to disrupt both face-swapping and attribute-editing AI models, even ones the defense hasn't seen before. The method was tested across multiple commercial facial manipulation tools and remained effective even after common image processing and social media compression.

IEEE Xplore (Security & AI Journals)
security
May 25, 2026

Researchers developed a new method to attack deep neural networks that analyze 3D point clouds (collections of data points representing 3D objects) by using cage-based deformation, which smoothly warps the entire shape rather than moving individual points. The method generates adversarial attacks (malicious inputs designed to fool AI systems) that look natural to humans while successfully tricking classifiers, and these attacks remain effective even against defense methods.

IEEE Xplore (Security & AI Journals)
May 25, 2026

Researchers found security weaknesses in DIZY, an ultra-lightweight stream cipher (an encryption method designed for devices with limited computing power) designed to protect resource-constrained devices like RFID tags. The attacks show that DIZY-80 and DIZY-128 provide weaker security (65/86-bit levels) than claimed (80/112-bit levels) by exploiting how the cipher initializes. The researchers proposed an improved version called DIZYa that resists these attacks while maintaining the original design's advantages.

Fix: An improved variant of DIZY, called DIZYa, is proposed. The analysis on DIZYa shows that the improved variant can provide better security resistance against all known attacks including the attacks on DIZY, while maintaining the commendable characteristics of DIZY.

IEEE Xplore (Security & AI Journals)
research
May 25, 2026

This research paper describes a defense technique called Infer-Shield that protects AI models trained across multiple organizations (federated learning, where different parties train a shared model without sharing raw data) from membership inference attacks (attempts to determine if specific individuals' data was used in training). The paper proposes using adaptive distillation (a technique where a smaller model learns from a larger one to reduce information leakage) as a way to make these distributed AI systems more secure.

Elsevier Security Journals
May 24, 2026

This research paper analyzes inconsistencies in CVSS scores (numerical ratings that measure how serious software vulnerabilities are) within the NVD (National Vulnerability Database, a public repository of known security flaws). The study found that the same vulnerability often receives different CVSS scores depending on which scoring standard or organization assigns the rating, revealing a fragmentation problem in how vulnerability severity is measured and reported.

Elsevier Security Journals
May 23, 2026

PUFZIN is a blockchain-IoT (Internet of Things, the network of connected devices) security system that combines PUFs (physical unclonable functions, unique hardware-based identifiers that are hard to forge) with zero-knowledge proofs (a cryptographic method where one party proves knowledge of something without revealing the actual information) to create a secure and scalable network. The research, published in July 2026, addresses how to protect IoT devices and blockchain systems from unauthorized access and tampering.

Elsevier Security Journals
May 23, 2026

This academic paper presents a framework for protecting unmanned ground vehicles (UGVs, which are robots that operate on land without human drivers) against cyber attacks by combining offensive and defensive security strategies. The research, published in Computers & Security, addresses how to both defend UGVs from threats and identify vulnerabilities through coordinated security approaches.

Elsevier Security Journals
May 23, 2026

VaultFS is a file system (the software layer that manages how files are stored and organized on a computer) that ensures data integrity (accuracy and trustworthiness of stored information) by implementing write-once storage at the file system level, meaning files can only be written once and cannot be modified afterward. This approach protects against accidental or malicious changes to critical data by making it impossible to overwrite or alter files after they are created.

ACM Digital Library (TOPS, DTRAP, CSUR)
May 22, 2026

This research paper presents DWT-AMSA, a new method for image steganography (hiding secret data inside images so others cannot detect it) that uses frequency-domain adaptive masking (adjusting which parts of an image's mathematical representation are modified based on the image content) and progressive adversarial training (a machine learning technique where two competing AI systems improve each other iteratively to make the hidden data harder to detect). The method aims to make hidden information more robust and harder for attackers to discover or remove.

Elsevier Security Journals
safety
May 22, 2026

This research paper examines how Security Operations Centers (SOCs, teams that monitor and respond to security threats) can work effectively with AI systems by using adaptive trust mechanisms. The study focuses on building resilient operations, meaning systems that can continue functioning even when problems occur, through better collaboration between human security experts and AI tools that can process large amounts of data quickly.

Elsevier Security Journals
May 22, 2026

This research paper validates a model for identifying and managing data security risks when higher education institutions use mobile cloud computing (storing and accessing data through mobile devices and internet-based servers rather than local computers). The study empirically tests this security risk model to help universities better understand and protect sensitive data in mobile cloud environments.

Elsevier Security Journals
security
May 22, 2026

Federated learning (a system where multiple computers train an AI model together while keeping their data private) can be unfair to some participants and vulnerable to attacks where bad actors tamper with the process. FairRoP is a new method that uses adaptive client selection (choosing which computers to include based on their trustworthiness) and a bandit algorithm (a technique for balancing exploration and exploitation in decision-making) to improve both fairness and robustness against attacks. The approach combines three components: fairness awareness, attack detection, and q-Balance to handle the different challenges involved.

IEEE Xplore (Security & AI Journals)
May 22, 2026

This article addresses how radar systems (devices that detect objects using electromagnetic waves) can better allocate their time between searching for targets and tracking known ones when facing jamming (intentional interference meant to disrupt detection). The researchers propose a dynamic scheduling strategy using receding-horizon optimization (a method that repeatedly solves shorter planning problems instead of one big long-term problem) combined with mathematical techniques to keep radar performance strong even under jamming attacks.

IEEE Xplore (Security & AI Journals)