This work proposes Continuous Agents for Injection Threats via Lifelong Yielding Nexus (CAITLYN), an agent-agnostic defense middleware that matches the detection performance of state-of-the-art defenses at lower token overhead than LLM-as-a-judge baselines.
Zi Liang, XiaoYu Xu, Yanyun Wang et al.· 1 citation
A privacy-preserving zk-SNARK-based audit framework that searches for probes designed in the spirit of adversarial examples to amplify logit drift between an approved model and a modified deployment and demonstrates that token-based probes consistently deliver the strongest mean sensitivity across models and GPU platfo...
C. Wilding, Mina Shaker, Fatemeh Ganji· 0 citations
FISGuard reduces the ProjRes attack AUC to near the random-guessing level of 0.5 in most settings, while maintaining downstream task performance close to that of the undefended model and introducing only limited computational overhead, thereby achieving a favorable privacy--utility trade-off.
ContextLeak is developed, a malicious tool attack that induces the agent to both select the tool and disclose its context as input arguments, and significantly outperforms existing malicious tool attacks when adapted to this setting.
Yu-Qi Jia, Rui-Qi Wang, Patrick Li et al.· 0 citations
Reach audiences
Advertise in front of researchers, engineers, and readers.
(k)-SwordStamp is designed: semantic watermarks with order-robust detection over sub-sentence units, reducing sensitivity to attacker-chosen structure at a small quality cost.
Abdulrahman Diaa, Jonathan Petit, Florian Kerschbaum· 0 citations
It is demonstrated that source-precision auditing alone does not rule out quantization-triggered behavior and that the final deployed configuration must be included in behavioral certification for trustworthy edge AI.
Jacopo Dardini, Claudio Stanzione, G. Colò et al.· 0 citations
CyberFactory is introduced, a unified open-source framework that connects data construction, trajectory synthesis, and model training across proof-of-concept (PoC) generation, vulnerability patching, and cybersecurity question answering (CyberQA).
Jian Yang, Haau-Sing Li, Shawn Guo et al.· 0 citations
Empirical evaluations reveal a fundamental brittleness in existing defenses: with a single trainable 7B planner, Trident reduces blue agent defensive performance by an average of 522% compared to static red agent baselines while autonomously discovering emergent behaviors such as decoy avoidance and adaptive state prio...
Ryozo Masukawa, Ian Bryant, Armita Kazeminajafabadi et al.· 1 citation
A detailed overview of the security risks associated with adversarial attacks is offered, including evasion attacks carried out at inference time, data poisoning that corrupts the training process, backdoor insertion that hides dormant triggers inside a model, and model inversion that leaks private information back out...
Harsh Verma· International Journal of Sci...· 1 citation
The goal of this study is to understand practitioners'decision making process and security considerations in selecting and integrating AI components through an exploratory semi-structured interview study, and distill the findings into actionable recommendations for AI adopters, model providers, and researchers.
Mahzabin Tamanna, Elizabeth Lin, Sparsha Gowda et al.· 0 citations
Genomic language models (GLMs) have emerged as powerful tools for learning representations of DNA sequences, enabling advances in variant prediction, regulatory element identification, and cross-task transfer learning. However, as these models are increasingly trained or fine-tuned on sensitive genomic cohorts, they ri...
Alexander Nemecek, Wenbiao Li, Xiaoqian Jiang et al.· 0 citations
Feature-Community-guided DICE (FCom-DICE), a perturbation strategy built on DICE that rewires a set of structurally influential edges and adjusts node features to reduce the distinctiveness exploited by GNN message passing is introduced.
Dalyapraz Manatova, P. Moriano, L. J. Camp· 0 citations