Across two backbones and five benchmarks, EDIC improves both safety and utility over the strongest prior defense, lifting harmful-rejection by up to 7.7\% and Arena-Hard-Auto utility by 12.5\% on Qwen3-4B.
Ze-Sheng Shi, Xue Li, Chen-Rui Dai et al.· Proceedings of the 2026 Conf...· 1 citation
Language-model watermarks can help identify model-generated text, encode provenance information, and detect post-generation edits. A broad class of logit-based watermarks increases the logits of a designated token set at each decoding step. Because a base model's native probability mass on this set varies across contex...
This work presents a practical 141M-parameter encoder-based detector trained on 1.12 million examples from 77 public datasets, relabeled under a detailed definition of broad contextual detection for 12 structured PII categories, delivering leading detection performance at substantially lower cost.
In contemporary cloud-based services, protecting users' sensitive data and ensuring the confidentiality of the server's model are critical. Fully homomorphic encryption (FHE) enables inference directly on encrypted inputs, but its practicality is hindered by expensive bootstrapping and inefficient approximations of non...
Sayan Biswas, Philippe Chartier, Akash Dhasade et al.· 0 citations
Reach audiences
Advertise in front of researchers, engineers, and readers.
Existing research on robust Graph Neural Networks (GNNs) focuses predominantly on undirected graphs, overlooking the trustworthiness inherent in the link directions of directed graphs. In this work, we analyze the limitations of current approaches from both the attack and defense perspectives and redefine the robustnes...
Zhichao Hou, Xitong Zhang, Wei Wang et al.· 0 citations
R\`enyi differential privacy, based on R\`enyi divergence, has become a notion of choice for privacy guarantees. However, outside the Gaussian setting, R\`enyi divergence can be difficult to compute. In particular, R\`enyi differential privacy guarantees that exploit task-specific information, as in R\`enyi Pufferfish...
Implementing Security Technical Implementation Guide (STIG) controls remains a demanding operating-system administration task. Each natural-language security requirement must be translated into a precise and persistent configuration change. These changes span Secure Shell (SSH) configuration, authentication policy, aud...
Manohar Vellala, Soumya Banerjee, Sandip Roy et al.· 0 citations
Split language models keep input text on a client but send intermediate representations to a server. Attacks can reconstruct text from these messages. Comparing privacy evaluations is difficult when attackers see different messages, know different model weights or use different datasets and recovery measures. We presen...
Scaling laws and hyperparameter tuning remain central challenges in training large-scale models, particularly under differential privacy (DP), where optimization is further complicated by noise injection and per-sample gradient clipping. While Maximal Update Parametrization ($\mu$P) allows for zero-shot hyperparameter...
Tian-Ze Wang, Zhi-Qi Bu, Lin-Jun Zhang· 0 citations
Natural language messages often contain quasi-identifiers that are weak in isolation but can jointly reveal an individual's private attributes. We call such a jointly revealing set of cues a quasi-evidence group. Existing privacy benchmarks focus on explicit identifiers, attribute inference, or task-driven disclosures,...
Yu-Fan Zhu, Yang-Fan Jiang, Yang Fei et al.· 0 citations
This work formalizes this function association problem and evaluates the extent to which embedding models can bidirectionally associate between these two representations, and develops a new model that outperforms other models on all function association baselines and generalizes to a constant-algorithm association task...
Eric Wolos, Michael Dean Doyle· arXiv.org· 0 citations
Gaussian Mixture Models (GMMs) are widely used statistical models for representing multi-modal data distributions, with numerous applications in data mining, pattern recognition, data simulation, and machine learning. However, recent research has shown that releasing GMM parameters poses significant privacy risks, pote...
Hang Liu, Anna Scaglione, Sean Peisert· 0 citations
Research Manager Mike Walker reflects on a career spanning hacker culture, cybersecurity, and AI, sharing lessons about trust, teamwork, leadership, and why solving difficult problems requires curiosity, judgment, agility—and an understanding of the rules. The post Learn the rules: The hacker mindset appeared first on Microsoft Research.
Critical flaws, compromised release channels and agentic AI threats landed within days of each other in mid-October 2026. Why “Black October” may say more about how well we now find weaknesses than about the attacks themselves. The post Black October? The Week AI Changed the Cybersecurity Conversation appeared first on GPT-Lab.