Skip to content

Category

cybersecurity

1,407 papers

Automated Extraction of Records of Processing Activities (RoPA) Using Hybrid RAG and Locally Deployed Large Language Models

RoPA Manager, a system for automated RoPA information extraction using hybrid retrieval that combines lexical ranking over tsvector, dense-vector search, Reciprocal Rank Fusion (RRF), and locally deployed LLMs, is proposed.

To Duy Hinh, Anh Le Quoc Nguyen, Tri Van Phan et al. · 0 citations
#artificial intelligence Preprint Open access Sep 2026

Joint Interference Detection and Identification via Adversarial Multi-task Learning

Precise interference detection and identification are crucial for enhancing the survivability of communication systems in non-cooperative wireless environments. While deep learning (DL) has advanced this field, existing single-task learning (STL) approaches neglect inherent task correlations. Furthermore, emerging mult...

H. Xu, L. Hu, B. He et al. · 0 citations
#machine learning Preprint Sep 2026

ForgetMimic: Motion Unlearning for Reinforcement Learning Humanoid Control

Experimental results demonstrate that ForgetMimic effectively eliminates memory of designated motions while maintaining the normal operation of all other motions, and identifies and resolves two key training mechanisms in robot control that lead to unlearning failure.

Xu-Kun Luan, Zhong-Xiang Lei, Chen Gong et al. · 0 citations
#machine learning Preprint Aug 2026

Enhancing Multiclass Malware Classification in Resource-Constrained Environments

A robust, lightweight machine learning model featuring LightGBM classifier with SMOTE oversampling and SOM-US undersampling techniques for data balancing, as well as well-engineered feature selection through Genetic Algorithm is proposed, demonstrating a significant enhancement in terms of accuracy from the current sta...

Abdul Khalek Alve, A. Rahman, Saadman Zaman et al. · 0 citations
#machine learning Preprint Aug 2026

ChronosAttack: Adversarial Tool Scheduling Attacks on LLM Agents

This work introduces ChronosAttack, a delay-only scheduling attack that changes when authentic tool responses arrive without modifying, adding, removing, or accelerating them, to show that tool-response timing can itself form an attack surface in asynchronous LLM agents.

Arash Vashagh · 0 citations
#machine learning Preprint Sep 2026

Reliable Federated TinyML Deployment for IoT Security

This work investigates combining Federated Learning with TinyML-based model compression for intrusion detection in IoT environments and preliminary results show that training stability plays a critical role in federated TinyML systems.

Younsoo Park, Seokhyoen Bae, Shasi Kumar Ramachandran Prabhu et al. · 1 citation
#artificial intelligence Preprint Sep 2026

The Like Trap: Multi-Stage Poisoning against Agents in Similarity-based Recommendation Systems

With recent advancements in large language models (LLMs) and LLM-based agents, these agents are becoming increasingly autonomous and gaining broader access to act on users'behalf on the internet. However, the vulnerability of automated agents deployed on social media platforms (e.g., for managing a user's personal acco...

Yue Xing, Peng-Fei He, Zi-Tao Li · 0 citations
#machine learning Preprint Sep 2026

SR-Fraud: An Outcome-Supervised Reflective LLM Agent Framework for Non-Stationary Payment Fraud Detection

Real-time payment fraud detection is a non-stationary streaming prediction problem: adversaries adapt before supervised labels mature, and localized burst attacks can cause losses before retraining. Production systems typically rely on tabular classifiers and rules, which can struggle to capture these emerging sequenti...

Xu-Wei Tan, Yao Ma, Xue-Ru Zhang · 0 citations
#cybersecurity Preprint Sep 2026

How It's Made: Uncovering Detection Engineering Processes for Network Intrusion Detection Rules

Three phases and a common pattern in rule engineering are identified, offering SOC managers insights to improve their processes and expectations of engineer expertise, and challenges in generalizing rules beyond available tests are observed.

Koen T. W. Teuwen, Emmanuele Zambon, Luca Allodi · 0 citations
#machine learning Preprint Open access Sep 2026

The Challenge of Identifying the Origin of Black-Box Large Language Models

The tremendous commercial potential of large language models (LLMs) has heightened concerns over their unauthorized use. To address this, we focus on the task of identifying the origin of black-box LLMs. We further propose PlugAE, an effective and efficient identification method that proactively leverages LLM-specific...

Ziqing Yang, Yixin Wu, Yun Shen et al. · 0 citations

Optimizing Canaries for Privacy Auditing with Metagradient Descent

This work develops a method for optimizing the auditor's canary set to improve privacy auditing, leveraging recent work on metagradient optimization and demonstrates that in certain instances, using such optimized canaries can improve empirical lower bounds for differentially private image classification models by seve...

Matteo Boglioni, Terrance Liu, Andrew Ilyas et al. · 7 citations · ⚡1
#machine learning Preprint Sep 2026

HYDRA: Proactive Android Malware Drift Adaptation via Hierarchical Graph Contrastive Learning

HYDRA (Hybrid Drift Adaptation), a proactive adaptation framework that learns drift-invariant representations from hierarchically structured data, unifies feature learning and domain alignment, eliminating the need for complex adversarial objectives.

Han Chen, Han-Chen Wang, Hong-Mei Chen et al. · 0 citations

From tech blogs

See all →
Microsoft Research Blog Nov 3, 2026

Learn the rules: The hacker mindset

Research Manager Mike Walker reflects on a career spanning hacker culture, cybersecurity, and AI, sharing lessons about trust, teamwork, leadership, and why solving difficult problems requires curiosity, judgment, agility—and an understanding of the rules. The post Learn the rules: The hacker mindset appeared first on Microsoft Research.

GPT-Lab Oct 30, 2026

Black October? The Week AI Changed the Cybersecurity Conversation

Critical flaws, compromised release channels and agentic AI threats landed within days of each other in mid-October 2026. Why “Black October” may say more about how well we now find weaknesses than about the attacks themselves. The post Black October? The Week AI Changed the Cybersecurity Conversation appeared first on GPT-Lab.

Google DeepMind Blog Jul 17, 2026

Introducing Gemini 3.5 Flash Cyber

Google introduces Gemini 3.5 Flash Cyber, a lightweight cybersecurity model to find and patch vulnerabilities.

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.