Continuation of Nicholas Carlini's list, covering arXiv submissions since 2025-09-15.
TF-IDF + logistic regression trained on the original 13,697-entry list (held-out AUC 0.998); papers scoring ≥40% shown, grouped by arXiv ID month.
Total: 2937 papers.
Last update: 2026-09-21.

Most recent month

2026-09 (125 papers)

• [100%] Robustness Evaluation and Detection of Transferable Adversarial Attacks in ML-Based NIDS
  Huda Ali Alatawi
• [98%] Discovering Natural Transformation Vulnerabilities in Black-Box Vision Models
  Dongsu Song; DaeYun GO; Jay Hoon Jung
• [98%] Neither Adversarial Training Nor Purification: Emergent Adversarial Robustness from Oscillatory Predictive Learning
  Mohammed-Yassine Habibi; Klea Ziu; Martin Takáč; Makoto Yamada
• [98%] What Makes Adversarial Examples Transfer Across Deepfake Detectors?
  Rafael M. Mamede; Pedro C. Neto; Ana F. Sequeira
• [96%] MROP: Mask-Region Optimized Purification Against Backdoor Attack in Deep JSCC
  Seongkyu Yang; Hyeonho Noh; Hyun Jong Yang; Jonggyu Jang
• [96%] Johnny Still Receives Spam SMS: Assessing the Robustness of SMS Spam Detection
  Muhammad Salman; Muhammad Islam; Muhammad Ikram; Mohamed Ali Kaafar
• [96%] Adversarial Vulnerabilities of Neural Biomarker Identification Systems
  Polina Tapal; Bryce-Allen Bagley
• [96%] Adversarial Training for Tabular Credit Scoring: A Multi-Attack Robustness Evaluation in P2P Lending
  Gijs A. F. Niewzwaag; Marijn G. S. Veth; Manuele Massei; Marcos R. Machado
• [96%] Admissable: Training Reinforcement Learning Agents against Adversarial Missingness
  Paul Stahlhofen; Luca Hermes; Tim Kochs; Markus Vieth; Barbara Hammer
• [94%] Beyond Small Patches: Black-Box Detection and Purification of Diverse Backdoor Triggers
  Ahmed Abdelnaby; Mohamed Elmahallawy
• [94%] Preprocessing Failure and Adversarial Detection in Depthwise-Separable Edge Vision Systems
  Jannatul Masruk Mukta; Rifa Sanjida; Adrita Rahman Tory; Md. Saifur Rahman; Khondokar Fida Hasan
• [93%] InfraPatch: Cross-Task Targeted Grayscale Patch Attacks on Infrared-Adapted Vision-Language Models
  Chengyin Hu; Dingyi Lu; Jiaju Han; Xiang Chen; Weiwen Shi; Jiahuan Long; Yiwei Wei; Jiujiang Guo
• [93%] Kernel-Complexity Edge Sanitization for Training-Free Defense against Structural Graph Attacks
  Yaning Jia; Shenyang Deng; Yaoqing Yang; Chiyu Ma; Wenxuan Xu; Soroush Vosoughi
• [93%] Universal Defenses for Tool-Integrated LLM Agents Against Adversarial Attacks
  Xiaoyan Li; Yunli Wang
• [92%] A GAN-Based Framework for Robust DDoS Attack Detection
  Makram Chehayeb; Walid Fahs; Amina Rizk; Rida Khatoun; Omran Berjawi
• [92%] CASCADE Against Jailbreaks: Combination Across Stages with Controlled Attack-Defense Evaluation
  Jiale Luo; Eric Han
• [91%] A Black-Box Adversarial Attack on Human Pose Estimation and Keypoint-Based Action Recognition Models
  Kacper Mroczek; Michal Kepski
• [90%] InceptionRAG: Stealthy Poisoning Attack Against Retrieval-Augmented Generation
  Jiachang Zhang; Min Chen; Xiao Ren; Zhenyong Zhang; Yuanchao Shu; Yunjun Gao; Zhikun Zhang
• [90%] Contagion on the Trading Floor: How Adversarial Signals Spread in Multi-Agent Trading Systems
  Qi Rong Sua; Junhao Dong; Nguyen Duc Thai; Yuqing Wen; Cheston Tan; Yew-Soon Ong
• [89%] Certifying Lower Bounds for Risk-Sensitive Reinforcement Learning under Adversarial State Perturbations
  Tong Li; Saunak Kumar Panda; Yisha Xiang
• [88%] Does Reasoning Mitigate Backdoor Attacks? A Neuro-Symbolic Perspective
  Marco Antonio Corallo; Andrea Agiollo; Mauro Conti; Alberto Giaretta
• [88%] CrACK: Adversarial Attacks on Cross-Model Consistency in Collaborative Vision Foundation Models
  Feifei Liu; Jintao Cheng; Chi Man Vong; Xiaoyu Tang
• [88%] Pick Your Poison: Learning to Select Poison Sets for Stronger LLM Backdoor Attacks
  Aashiq Muhamed; Mona T. Diab; Virginia Smith; Andrew Ilyas; Matthew Jagielski
• [85%] Forbid Your Attention: Fooling Multimodal Large Language Models by Selectively Removing Intrinsic Focus in Spectral Domain
  Daizong Liu; Junhao Dong; Zhiyuan Ma; Xiaoye Qu; Xiang Fang; Runwei Guan; Keke Tang; Jianfeng Dong; Yew-Soon Ong
• [85%] Robust Policy Optimization via Adversarial Importance Sampling
  Amine Andam; Jamal Bentahar; Mustapha Hedabou
• [84%] PhantomCall: Evading ML Malware Detectors via Function Call Graph Perturbation
  Md Ajwad Akil; Adrian Shuai Li; Imtiaz Karim; Arun Iyengar; Ashish Kundu; Elisa Bertino
• [84%] Poisoning Attacks on the PGM-index
  Atsuki Sato; Martin Aumüller; Yusuke Matsui
• [84%] AlcaTRAz – Anchored Tree-Rule Defense Against Jailbreaks
  Jakub Reš; Petr Kaška; Martin Perešíni; Martin Ukrop; Kamil Malinka
• [84%] Towards a Resilience-Theoretic Foundation for Adversarial Robustness in Industrial Control System Anomaly Detection
  Branka Stojanović; Andreas Flatscher; Michael Somma
• [83%] Empirical Evaluation of Data Poisoning Attacks in Supervised Learning
  Toshif Khan; Muhammad Abusaqer
• [82%] Breadth Beats Depth: Improving GCG-Based Jailbreak Optimization with Breadth-Oriented Suffix Search
  Shiliang Xiao; Jingsong Wei; Yuzhi Liang; Yufan Zheng; Xia Li; Qiliang Lin
• [82%] FreqDoor: A Hidden Trojan in the Frequency Domain for Backdoor Attacks on Vision-Language Models
  Yasir Arafat Prodhan; Sadad Hasan; Mohammed Imamul Hassan Bhuiyan
• [81%] Investigating Adversarial Robustness of Heterogeneous Cooperative Perception
  Chenyi Wang; Yutong Liu; Qingzhao Zhang; Ming F. Li
• [81%] SoK: Trading Agents or Market Crashers? Dissecting Robustness and Security Failures in Academic Financial LLM Trading Schemes
  Mengxiao Wang; Nitesh Saxena
• [79%] A Unified and Constrained View of Regularization-Based Robust Reinforcement Learning
  Amine Andam; Jamal Bentahar; Mustapha Hedabou
• [78%] VerTox: Verifiable Reward-Guided Corpus Poisoning Against Neural Ranking Models
  Zhiqi Huang; Vivek Datla; Zhichao Xu; Puxuan Yu; Vivek Srikumar; Alfy Samuel
• [78%] SEAL: Reinforcing Global Safety in Mixture-of-Experts through Shared Expert ALignment
  Qingyu Meng; Yiwei Zha; Jiahuan Pei; Koen Hindriks; Herbert Bos; Min Chen
• [78%] Certifying Adversarial Robustness of Quantum Classifiers under Known-Readout Query Access
  Ji Guan; Mingyu Huang
• [78%] End-to-End Hard-Label Cryptanalytic Model Extraction Using Efficient Sign Recovery
  Akira Ito; Takayuki Miura; Yosuke Todo
• [77%] CodePoisonRAG: Knowledge Poisoning Attacks on Retrieval-Augmented Code Generation
  Varun Gadey; Ziad Marey; Alexandra Dmitrienko
• [76%] Fine-grained Distributed Backdoor Attacks in Federated Learning
  Jian Wang; Hong Shen; Wei Ke; Xue Hua Liu
• [76%] Robust Workflow Generation via Adversarial Learning for Audio Deepfake Detection
  Xiang Li; Pin-Yu Chen; Wenqi Wei
• [74%] Repeat-After-Me: Black-Box Adaptive Visual Prompt Injection
  Sizhe Chen; Yu-Lin Tsai; Ivan Evtimov; Kamalika Chaudhuri; Raluca Ada Popa; David Wagner; Arman Zharmagambetov
• [74%] Stealthy in Semantics, Antagonistic in Space: Attacking Visible-Infrared Object Detectors via Object-Level Misalignment
  Yueqi Zhu; Qi Ming; Guo Cheng; Yongkang Zhang; Feiran Liu; Juan Fang; Jiahuan Zhou; Jiangmeng Li; Yuhan Zhang
• [73%] SoK: Privacy Attacks on Machine Learning via Explainable AI
  Abdullah Caglar Oksuz; Anisa Halimi; Erman Ayday
• [73%] Red-Teaming Auto Mode: Improving Blocking Classifiers Against Malign Coding Agents
  Alex Remedios; Simon Storf; Fabien Roger; John Hughes
• [72%] Windows Malware Detector as a Compound AI System: Trade-Offs in Accuracy, Efficiency, and Adversarial Robustness
  Andrea Ponte; Luca Demetrio; Luca Oneto; Battista Biggio; Fabio Roli
• [70%] TRIS: A Tri-Layer Retrieval Integrity Sieve Against Knowledge Poisoning
  Muhaimin Bin Munir; Akib Jawad Ononto; Nazia Shehnaz Joynab; Bhavani Thuraisingham; Latifur Khan
• [70%] SoK: Rethinking Jailbreaking in the Era of Agentic AI: Attacks, Defenses, and Practical Consideration
  Md Jueal Mia; Yanzhao Wu; Selcuk Uluagac; M. Hadi Amini
• [70%] ViTeGate: Visual-Textual Triggered Knowledge Poisoning for Vision-Language Retrieval-Augmented Generation
  Xue Tan; Xuandi Zeng; Yu Shao; Zhongli Fang; Mingyu Luo; Xiaoyan Sun; Ping Chen; Jun Dai
• [69%] MUGEN: Generating Unlearnable Graph Examples for Multiple Learning Tasks
  Ziyan Liu; Chengshuai Zhao; Huan Liu
• [69%] Detecting and Localizing Segment-Level Poisoning in Multi-Source LLM-Agent Inputs
  Xue Tan; Changhui Wang; Sanrui Yang; Hao Luan; Zhuyang Yu; Jin Wei; Ping Chen; Xiaoyan Sun; Jun Dai
• [67%] AKRASIA: Stealthy Backdoor Attack on Reasoning-based Code LLMs
  Chua Jin Chou; Sarang Nambiar; Murali Srinivasan; Ezekiel Soremekun
• [67%] MarkSec: Capability-Aware Evaluation of Adversarial Attacks Against LLM Watermarks
  Kairong Li; Zhikun Zhang; Xiao Ren; Yunjun Gao
• [65%] Bait-and-Recover: Poisoning Internal Refusal Signals to Defend LLMs against White-Box Editing Jailbreaks
  Tian Gao; Zhipeng Xie; Yuhao Wu; Junhua Liu; Xin Fang
• [65%] A TTP by TTP Approach: Precise Malware Detection via Malicious TTP Recognition
  Yashovardhan Sharma
• [64%] Do Input-Level Defenses Transfer to Observation-Level Attacks on VideoLLMs?
  Bangshuo Zhu; Wei Song; Yuxin Cao; Yuezhong Wu; Zhiquan Liu; Yuekang Li; Jingling Xue
• [64%] ASGARD: Action-Space Guard for UAV Resilience via Reinforcement Learning
  Mohsen Salehi; Karthik Pattabiraman
• [63%] Illusion of Depth: Revealing Hidden Stereo Vision Vulnerabilities in Depth Estimation
  Sri Hrushikesh Varma Bhupathiraju; Tetsu Ishizue; Nicholas U. Costagliola; Ozora Sako; Kentaro Yoshioka; Takeshi Sugawara; Sara Rampazzi
• [62%] SAFEGuard: Detect Optimization-Based Jailbreak Attacks Through Harmful Semantic Analysis and Fluency Measurement
  Quoc Viet Vo; Trung Le; Damith C. Ranasinghe; Ehsan Abbasnejad
• [61%] Towards One-for-All Robustness Across a Continuum of Threat Levels
  Zhichao Hou; Xiaorui Liu
• [61%] Robust Dynamic Expansion for Continual Learning under Backdoor Attacks via Purification and Selective Recovery
  Keyu Lin; Fei Ye; Qihe Liu; Shijie Zhou; Jiguo Yu
• [61%] Adversarial Testing of Automated Program Repair Agents for Security Vulnerabilities
  Fares Trad; Simin Chen; Hung Viet Pham; Gias Uddin; Baishakhi Ray
• [61%] Competition, Collusion, and Corruption: The Spectrum of MEV Attacks on DAG-Based BFT Consensus Protocols
  Iliya Mirzaei; Heer Patel; Chenyuan Wu; Mohammad Javad Amiri
• [61%] Micro-Collaborative Poisoning: A Distributed Attack on RAG Systems
  Pedro Pereira; Eva Maia; Isabel Praça
• [60%] Does Deeper Reasoning Compromise Alignment? Revealing and Mitigating of Alignment Collapse in Large Reasoning Models
  Yu-Hang Wu; Yu-Jie Xiong; Henghua Zhang; Bairui Zhang; Jia-Chen Zhang; Shaohua Li
• [60%] Arbitrary Cipher Attacks Against Large Language Models Do Not Require Fine-Tuning
  Thomas Rivasseau
• [60%] On Identifying Adversarial Intent Injection in AI-Native 6G Networks
  Nilesh Chakraborty; Petar Djukic; Burak Kantarci
• [60%] Benchmarking Factual Robustness of LLMs via Multi-conversation Persuasion
  Zhuoang Cai
• [59%] Beyond Patch Removal: Persistent Adversarial Effects in Vision-Language-Action Policies
  Enhao Wu; Fusen Guo; Yuxin Cao; Ziyang Lyu; Lin Li; Wei Song
• [58%] Fusing Spectral Signatures and Activation Clustering for Backdoor Detection in Healthcare Imaging Models: Method, Implementation, and Evaluation
  Suresh Tamang
• [58%] ALIBI: Adversarial Legitimacy Injection in Binary Input against LLM Malware Analyzers
  Hyeongjun Choi; Wonyoung Jung; Haehoon Seo; Sungyup Nam
• [57%] MechAudit-40: White-Box Auditing across 40 LLM Attack Mechanisms
  Zhen Guo; Shanghao Shi; Shamim Yazdani; Ning Zhang; Reza Tourani
• [57%] Decoy Direction Optimization: A Post-Hoc Defense Against LLM Abliteration
  Aashiq Muhamed; Mona T. Diab; Virginia Smith
• [56%] CoRL: Co-Evolutionary Reinforcement Learning for Adaptive Indirect Prompt-Injection Attacks and Defenses
  Boyang Zhang; Qingxin Xiao; Lingwei Dang; Qingyao Wu
• [56%] Sparsity-Adaptive Sharpness-Aware Minimization
  Shiryu Ueno; Yoshikazu Hayashi; Kunihito Kato
• [56%] Reflections on Trusting Trust, Revisited: Contaminating Self-Modifying AI Coding Agents with Poisoned Benchmarks
  Franziska Roesner; Tadayoshi Kohno
• [55%] Leveraging Imperfect Restoration for Data Availability Attack
  Yi Huang; Jeremy Styborski; Mingzhi Lyu; Fan Wang; Adams Kong
• [55%] Multimodal Resource-Exhaustion Attacks on Vision-Language Models via Joint Pixel-Prompt Optimization
  Zhaoxiong Ni; Yatie Xiao; Chi-Man Pun; Fei Peng; Qingxiao Guan; Keke Tang
• [55%] Robust Industrial Cyber Physical Classification Using Neuromorphic Temporal Embeddings and Hybrid SNN XGBoost Under Machine Unlearning Attacks
  Ammar Kamoona; Sajad Koushkbaghi; Mahdi Jalili; Peter McTaggart; Xinghuo Yu
• [55%] AGENTQ: Quantization-Conditioned Backdoor Attacks on LLM Agents
  Xiaoqun Liu; Qiben Yan
• [54%] Jailbreaking Text-to-Image Models Through Cracks: Navigating Heterogeneous Safety Filters via Multi-Agent Debate
  Kaiyan Wen; Shijie Zhang; Lu Yu; Guangdong Bai
• [53%] Privacy, Robustness, and Fairness Trade-offs in Federated Intrusion Detection: Geometric Indistinguishability at the Aggregation Interface
  Adrita Rahman Tory; ABM Shawkat Ali; Md Abu Layek; Khondokar Fida Hasan
• [52%] Context Inference Attacks Without Jailbreaks
  Prince Jha; Samuele Poppi; Nils Lukas
• [52%] Cryptanalytic Extraction of Neural Networks Without Known Architecture Assumption
  Yantian Shen; Yi Chen; Anyu Wang; Hongbo Yu; Xiaoyun Wang
• [52%] PIDS-Bench: Evaluating Prompt-Injection Detectors Under Over-Defense, Obfuscation, and Distribution Shift
  Yusuf Khalid Shire; Sang-Chul Kim
• [51%] When Optimization Becomes Manipulation: Defending Generative Search against Malicious Generative Engine Optimization
  Haozhang Li; Yangguang Shao; Xinjie Lin; Zhong Guan; Mi Zhou; Junzheng Shi
• [51%] A Robust Watermark-based Fingerprint Framework for GNNs Ownership Verification
  Han Zhang; Yan Wang; Guanfeng Liu; Pengfei Ding; Huaxiong Wang; Kwok-Yan Lam
• [50%] Privacy Leakage in Federated Learning: Gradient-Based Client Identity Inference and Defenses for Inertial Sensing in Vehicular Edge Networks
  Ali Akarma; Toqeer Ali Syed; Muhammad Khan; Qurat-ul-ain Mastoi; Adeel Ahmad
• [50%] Extracting Forgotten Prompts from Targeted Unlearned Models
  Au Ashley Hoi-Ting; Meghdad Kurmanji; William F. Shen; Nicholas D. Lane; Ligang He
• [50%] Lightweight Detection of Electromagnetic Signal Injection Attacks on Image Sensors
  Youqian Zhang; Chunxi Yang; Eugene Yujun Fu; Sze Yiu Chau; Haibo Hu; Xiapu Luo
• [50%] ACEA: An Adversarial Co-Evolution Arena for Head-to-Head Red-Team and Blue-Team LLM Testing
  Yi Ting Shen; Kentaroh Toyoda; Alex Leung
• [49%] Chypothermia: Clock Freezing for Static Side-channel Attacks
  Fatemeh Khojasteh Dana; Mehmet Ali Cetin; Xinrui Wang; Andrew Butler; Yuval Yarom; Shahin Tajik
• [48%] Certifying Concept Unlearning in Text-to-Image Diffusion Models
  Mansi; Luca Marzari; Francesco Leofante
• [48%] "Your Robot Was Trained on a Lie": Collision Mesh Poisoning Attacks on Robotic Manipulation
  Gengyang Xu; Dongwei Xiao; Yiteng Peng; Yanbo Dai; Ruochen Zhou; Shing-Chi Cheung; Xiaoyu Ji; Wenyuan Xu; Shuai Wang
• [48%] HE-Guardrail: A Homomorphic Guardrail Against Jailbreak Attacks for Encrypted Large Language Model Inference
  Byeongseo Min; Yongwoo Lee; Young-Sik Kim; Yongjune Kim
• [47%] SISER: Speaker-Invariant Speech Emotion Recognition with Entropy-Based Adversarial Training
  Eunseo Choi; Hyunku Kang; Chanwoo Kim
• [46%] Inferring Hidden User Models from the Behavior of Personalized LLM Agents
  Haoyang Li; Yaxin Xiao; Qingqing Ye; Huadi Zheng; Haibo Hu
• [46%] Rethinking Indirect Prompt Injection as a Test-Time Search Problem
  Duong M. Nguyen; Joon Sik Kim; Blazej Manczak; Vaikkunth Mugunthan
• [46%] Automatic Red Teaming for Implicit Vulnerabilities of Text-to-Image Models
  Chang Ma; Junlin Han; Shuo Chen; Runjia Li; Philip Torr; Jindong Gu
• [46%] When Malicious Instructions Persist: Persistent Memory Poisoning Attack on Harness-Based Agents
  Shuhuai Huang; Jingfeng Zhang; Hong Jia
• [46%] CIG-MIA: Context-Induced Information Gain Membership Inference Attacks against Retrieval-Augmented Generation
  Tan Xue; Huo Chang; Wang Changhui; Yang Sanrui; Li Heng; Chen Ping; Luo Xiapu
• [46%] RAPID: A Real-Time Defense Against Unauthorized Model Distillation for Text-to-Image Services
  Zihan Wang; Boheng Li; Rui Zhang; Wenshu Fan; Qingchuan Zhao; Tianwei Zhang; Hongwei Li; Guowen Xu
• [46%] Co-Evolving Zero-Day Jamming: Adaptive Attack Synthesis and Graph Attention-Based Online Detection
  Ghilas Aissou; Rémi A. Chou; Taejoon Kim
• [45%] From Detection to Refusal: Safer LLMs via Circuit-Guided Weight Scaling
  Kuan-Lin Chu; Chung-En Sun; Tsui-Wei Weng
• [45%] DART: Distributional Adversarial Recurrent Training for Algorithm Learning
  Hieu Tran Bao; Phung Thanh Dang; Pham Quang Nhat Minh; Hoang Thanh Tung
• [45%] Local Robustness Quantification for Naive Bayes Classifiers and Generative Forests: a General Approach
  Adrián Detavernier; Jasper De Bock
• [44%] SpecGuard: Inference-Time Backdoor Detection For Free
  Rui Wen; Ahmed Salem; Andrew Paverd; Mark Russinovich; Zheng Li
• [44%] The Misery of Mechanistic Interpretability: A Formal Perspective
  Tobias Ladner; Matthias Althoff
• [43%] SRD-GUARD: A Defense Framework of LLMs via Semantic Rewriting and Joint Multi-Model Scoring for Latent Intent Exposure
  Qi Wang; Chengcheng Wan; Jiangtao Wang
• [43%] Kolmogorov–Arnold stability for discontinuous functions
  Sviatoslav V. Dzhenzher
• [43%] PDoS: A Profitable Denial-of-Service Attack against Proof-of-Work Blockchain Liveness
  Junjie Hu; Tianzhu Han; Na Ruan
• [43%] SENTINEL: A Multi-Pathway Architecture for Detecting Living-Off-the-Land APT Attacks on Windows Command Lines
  Ahad Bin Islam Shoeb; Kamrul Hasan; Jamal Uddin Tanvin; Liang Hong; Imtiaz Ahmed; Md Arif Billah; Al Amin
• [42%] Optimizing Byzantine Node Placement in Decentralized Federated Learning
  Edoardo Gabrielli; Gabriele Tolomei
• [42%] Trust-But-Verify: Poisoning-Resilient Locally Private Graph Learning Protocols
  Longzhu He; Li Sun; Hao Peng; Ruijie Wang; Raymond Chi-Wing Wong; Sen Su
• [42%] Robust Decentralized Personalized Federated Learning via Prediction-Constrained Neighborhood Collaboration
  Xiao Ma; Hong Shen; Hui Tian; Wenqi Lyu; Wei Ke
• [42%] A Three-Axis Stress Test of LLM vs Classical ML for Network Intrusion Detection under Distribution Shift and Adversarial Evasion
  Muhammad Ebad Atif; Muhammad Haider Ali
• [42%] When the World Lies: Backdoor Attacks on Latent World Models for Downstream Control
  Roberto Riaño; Gorka Abad; Stjepan Picek; Aitor Urbieta
• [41%] DIVA: Exploiting Cross-Step Conditional Propagation for Visual Jailbreaks in Discrete Diffusion Vision-Language Models
  Guorui Song; Runqing Tang; Jingye Zhang; Luyuan Zhang; Feice Huang; Cong Ray; Guocun Wang; Dake Zhong; Choo Sin Wai; Bingquan Dai; Chuming Wang; Tongxu Lin; Wanyu Guo; Haoqian Wang
• [41%] Rethinking Software-Defined Networking Link Discovery with Dynamic Randomization
  Mingming Chen; Teryl Taylor; Frederico Araujo; Benjamin E. Ujcich; Thomas La Porta; Trent Jaeger
• [41%] The MAL Simulator: Cyber Operations Simulation based on Attack & Defense Graphs
  Jakob Nyberg; Sandor Berglund; Andrei Buhaiu; Joakim Loxdal; Pontus Johnson; Mathias Ekstedt
• [41%] Market Signal Injection: Adversarial Context Manipulation of LLM Pricing Agents
  Dohun Lee; Hyunwoo Park
• [41%] TERMon: Detecting Persistent Behavioral Threats in Edge AI via Hardware-Native Ternary Runtime Monitor
  Arish Sateesan; Edlira Dushku
• [40%] NERVE Attacks: Breaking AI-Powered Brain-Computer Interfaces
  Zahra Tarkhani; Georgios Akkogiounoglou; Lorena Qendro; Isabel Tscherniak; Anil Madhavapeddy
• [40%] Signing the Transaction but Not the Decision: Whisper Attacks and a Binding Defense for AP2
  Yedidel Louck; Amit Dvir; Ariel Stulman

→ See the full list