Research
Academic papers, new techniques, benchmarks, and theoretical findings in AI/LLM security.
Academic papers, new techniques, benchmarks, and theoretical findings in AI/LLM security.
2,033 items
FALCON-Net is a detector for AI-generated images that combines two modules: the Intrinsic Noise Pattern Isolation (INP) module, which isolates device-specific noise by analyzing high-frequency features in the frequency domain, and the Local Variation Pattern (LVP) module, which models relationships between local pixels to capture unnatural intensity variations. The source reports state-of-the-art detection performance and good generalization to unseen generative models, and the code is available at https://github.com/humiaomiaohaha/FALCON-Net.
Researchers show that screaming-channel side-channel leakage on mixed-signal devices appears at frequencies beyond the clock harmonics, not only at the harmonics where earlier work collected it. They combine multiple frequencies and demonstrate attacks at 15 and, for the first time, 30 meters in an RF-polluted environment. Frequency combination reduces the number of traces needed to reach a given attack performance by at least 2x and up to 3.76x.
The paper studies privacy risks in Wi-Fi-based wireless sensing, where signals that reveal movement status and sleep quality can be intercepted by unauthorized users. It proposes a multi-antenna signal processing strategy at the physical layer and models sensing as a communication task to define a sensing rate region. It characterizes two boundary points, P_OS and P_OPP, and a secure sensing rate R_PP, validated through numerical simulations.
PriLabel is a static auditor that checks whether Android apps omit disclosures from their Google Play privacy labels. It builds on Iterative Context Reconstruction (ICR), which rebuilds context from decompiled code to resolve semantic ambiguity, and maps transmitted data to Google's label taxonomy without source code or an ontology. Tested on 4,851 top-installed apps, it reported 91.5% precision and found 2,374 apps omitting at least one disclosure, 210 of which transmitted sensitive financial data such as credit card numbers without proper labeling.
This paper examines a smart jamming attack on the physical uplink shared channel (PUSCH) in 5G NR. The adversary sniffs the downlink control information (DCI) to learn the scheduled resources, then jams the PUSCH transmission precisely and covertly. The authors propose a suppression method that identifies the DCI-scheduled subset and reconstructs PUSCH resources, relying on spatial-domain differences between legitimate users and the attacker. Numerical results are reported to confirm its effectiveness.
The paper proposes the first task-adapted compressed sensing MRI (CS-MRI) method built on information-theoretic principles, which maximizes mutual information between undersampled k-space measurements and clinical tasks to enable probabilistic inference and uncertainty prediction. A single end-to-end trained model adapts to arbitrary sampling ratios and supports both joint task-and-reconstruction and reconstruction-suppressed settings for privacy protection. On large-scale MRI datasets, it reaches competitive Dice scores against a deterministic counterpart and better matches the ground-truth posterior distribution as measured by generalized energy distance (GED).
The source is a bibliographic record for a June 2026 article in the Journal of Information Security and Applications, Volume 99, by Jianzhong Wang, Lifei Wei, Jinjiao Zhang, Kai Zhang and Jianting Ning. The title indicates a study of efficient malicious-secure multi-party private set union that uses trusted execution environments. The provided text contains no abstract, method details, or findings.
Quadruplet Augmentation (QuadAug) is a method for Online Continual Learning, which learns from streaming data with unknown task boundaries. It targets two requirements, attribute invariance and structure invariance, to overcome the shortcut feature trap and limited plasticity of previous methods. The authors report significant improvements on four sequential datasets and three blurry datasets.
Researchers address node classification in a newly formed hypergraph, where labeled nodes are scarce and costly to obtain. They propose LHCCA (Local and High-order Consistency Coding and Adaptation), which transfers knowledge from a well-labeled source hypergraph by combining local and high-order consistency representations through attention, then aligns source and target features with adversarial domain adaptation and contrastive learning. Experiments on several real-world datasets are reported to show the model's effectiveness.
The paper, published in Computers & Security (Volume 167) in August 2026 by Zhaoxin Jin, Tianbo Lu, Hanrui Chen and Fangyi Yu, is titled "Enhancing website fingerprinting through combined data augmentation strategies." The source text provides only publication metadata, so the study's method and findings are not described here.
This paper proposes a hybrid detection method combining autoencoder and transformer models to catch the unresponsive ECN attack, a novel attack on low-latency network services. Compared with the current state-of-the-art on a large real-life network traffic dataset, it cuts detection error rate by more than 10%. At a false-alarm rate below 10−4, it reaches over 90% true-positive detection.
The authors introduce DFREC, a scheme that recovers both the source and target faces from a deepfake image to support identity tracing in forensic investigations. It uses an Identity Segmentation Module, a Source Identity Reconstruction Module and a Target Identity Reconstruction Module, the last of which relies on a Masked Autoencoder. Evaluated on FaceForensics++, CelebaMegaFS, FFHQ-E4S and Celeb-DFv2, DFREC outperforms state-of-the-art deepfake recovery algorithms and is described as the only scheme that recovers both pristine faces with high fidelity.
Researchers introduce a method for detecting abnormal LLM behavior by inspecting layer-specific hidden state activation patterns. They report detection accuracies above 95% across multiple models in most scenarios, with detector inference taking fractions of a second.
Fix: The source describes a suppression method that uses DCI-scheduled subset identification and PUSCH resource reconstruction, selectively excluding unwanted control channel elements and resource block groups while preserving the targeted transmissions. It is presented as the authors' proposed countermeasure against DCIS-SJ.
IEEE Xplore (Security & AI Journals)This ACM Transactions on Privacy and Security paper, published May 2026 in Volume 29, Issue 2 (pages 1-32), studies the Android permissions system. The source text provided contains only the citation and does not state the research method or findings.
Researchers present AICCE, a generative system that automates IPv6 protocol compliance checking by combining retrieval-augmented generation with dual-architecture reasoning. It runs an explainability mode with parallel LLM agents that debate decisions, and a script execution mode that converts specification clauses into Python rules for dataset-wide verification. Tested on IPv6 packet samples across 16 generative models, it reports accuracy and F1-scores of up to 99%.
Researchers from Shanghai Jiao Tong University and collaborators (Hongying Zhang and others) published ReSLC in the Journal of Information Security and Applications, Volume 100, in July 2026. The source text provided contains only publication metadata (date, journal, volume, authors) and no description of the method, findings or numbers.
The source text is a bibliographic citation for an article titled "SBOMs into Agentic AIBOMs: Schema Extensions, Agentic Orchestration and Reproducibility Evaluation," published in Digital Threats: Research and Practice, Volume 7, Issue 2, pages 1-35, June 2026. It contains no abstract, method, or findings, so the research question and results cannot be stated from this text.
The authors introduce Nearest Neighbor Projection Removal Adversarial Training, a framework that removes projections onto each adversarial sample's nearest inter-class neighbors in feature space to improve class separability. They report theoretically that their logits correction lowers the Lipschitz constant and Rademacher complexity, and experiments on CIFAR-10, CIFAR-100, SVHN and TinyImagenet show performance competitive with leading adversarial training methods.