A complete list of papers about adversarial examples

It appears that the List of All Adversarial Example Papers has been experiencing crashes over the past few days. In the absence of this valuable resource, staying up-to-date with the latest research papers in this field has become challenging. Consequently, I created a repository aimed at aggregating and maintaining the most current papers in this domain. While this repository may not encompass every paper, I did try. If you find any papers we have missed, just drop me an email. We have included the data from List of All Adversarial Example Papers till 2023-09-01. We also provide a list of papers about transfer-based attacks here.

2025-11-25

• Towards Benign Memory Forgetting for Selective Multimodal Large Language Model Unlearning

  Zhen Zeng, Leijiang Gu, Zhangling Duan, Feng Li, Zenglin Shi, Cees G. M. Snoek, Meng Wang

• Data Augmentation Techniques to Reverse-Engineer Neural Network Weights from Input-Output Queries

  Alexander Beiser, Flavio Martinelli, Wulfram Gerstner, Johanni Brea

• Quantifying the Privacy Implications of High-Fidelity Synthetic Network Traffic

  Van Tran, Shinan Liu, Tian Li, Nick Feamster

• PaTAS: A Parallel System for Trust Propagation in Neural Networks Using Subjective Logic

  Koffi Ismael Ouattara, Ioannis Krontiris, Theo Dimitrakos, Dennis Eisermann, Frank Kargl

• Cross-LLM Generalization of Behavioral Backdoor Detection in AI Agent Supply Chains

  Arun Chowdary Sanna

• Zero-Knowledge Proof Based Verifiable Inference of Models

  Yunxiao Wang

• On the Feasibility of Hijacking MLLMs' Decision Chain via One Perturbation

  Changyue Li, Jiaying Li, Youliang Yuan, Jiaming He, Zhicong Huang, Pinjia He

• Ranking-Enhanced Anomaly Detection Using Active Learning-Assisted Attention Adversarial Dual AutoEncoders

  Sidahmed Benabderrahmane, James Cheney, Talal Rahwan

• BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents

  Kaiyuan Zhang, Mark Tenenholtz, Kyle Polley, Jerry Ma, Denis Yarats, Ninghui Li

• Adversarial Confusion Attack: Disrupting Multimodal Large Language Models

  Jakub Hoscilowicz, Artur Janicki

• GFT-GCN: Privacy-Preserving 3D Face Mesh Recognition with Spectral Diffusion

  Hichem Felouat, Hanrui Wang, Isao Echizen

• V-Attack: Targeting Disentangled Value Features for Controllable Adversarial Attacks on LVLMs

  Sen Nie, Jie Zhang, Jianxin Yan, Shiguang Shan, Xilin Chen

• The Image as Its Own Reward: Reinforcement Learning with Adversarial Reward for Image Generation

  Weijia Mao, Hao Chen, Zhenheng Yang, Mike Zheng Shou

• TReFT: Taming Rectified Flow Models For One-Step Image Translation

  Shengqian Li, Ming Gao, Yi Liu, Zuzeng Lin, Feng Wang, Feng Dai

• GS-Checker: Tampering Localization for 3D Gaussian Splatting

  Haoliang Han, Ziyuan Luo, Jun Qi, Anderson Rocha, Renjie Wan

• Frequency Bias Matters: Diving into Robust and Generalized Deep Image Forgery Detection

  Chi Liu, Tianqing Zhu, Wanlei Zhou, Wei Zhao

• DLADiff: A Dual-Layer Defense Framework against Fine-Tuning and Zero-Shot Customization of Diffusion Models

  Jun Jia, Hongyi Miao, Yingjie Zhou, Linhan Cao, Yanwei Jiang, Wangqiu Zhou, Dandan Zhu, Hua Yang, Wei Sun, Xiongkuo Min, Guangtao Zhai

• Latent Diffusion Inversion Requires Understanding the Latent Space

  Mingxing Rao, Bowen Qu, Daniel Moyer

• Towards Trustworthy Wi-Fi Sensing: Systematic Evaluation of Deep Learning Model Robustness to Adversarial Attacks

  Shreevanth Krishnaa Gopalakrishnan, Stephen Hailes

2025-11-24

• FlowSteer: Guiding Few-Step Image Synthesis with Authentic Trajectories

  Lei Ke, Hubery Yin, Gongye Liu, Zhengyao Lv, Jingcai Guo, Chen Li, Wenhan Luo, Yujiu Yang, Jing Lyu

• Defending Large Language Models Against Jailbreak Exploits with Responsible AI Considerations

  Ryan Wong (1), Hosea David Yu Fei Ng (1), Dhananjai Sharma (1), Glenn Jun Jie Ng (1), Kavishvaran Srinivasan (1) ((1) National University of Singapore)

• Learning to Compress Graphs via Dual Agents for Consistent Topological Robustness Evaluation

  Qisen Chai, Yansong Wang, Junjie Huang, Tao Jia

• Adversarial Attack-Defense Co-Evolution for LLM Safety Alignment via Tree-Group Dual-Aware Search and Optimization

  Xurui Li, Kaisong Song, Rui Zhu, Pin-Yu Chen, Haixu Tang

• Adversarial Patch Attacks on Vision-Based Cargo Occupancy Estimation via Differentiable 3D Simulation

  Mohamed Rissal Hedna, Sesugh Samuel Nder

• Medusa: Cross-Modal Transferable Adversarial Attacks on Multimodal Medical Retrieval-Augmented Generation

  Yingjia Shang, Yi Liu, Huimin Wang, Furong Li, Wenfang Sun, Wu Chengyu, Yefeng Zheng

• Open-weight genome language model safeguards: Assessing robustness via adversarial fine-tuning

  James R. M. Black, Moritz S. Hanke, Aaron Maiwald, Tina Hernandez-Boussard, Oliver M. Crook, Jaspreet Pannu

• UniGame: Turning a Unified Multimodal Model Into Its Own Adversary

  Zhaolong Su, Wang Lu, Hao Chen, Sharon Li, Jindong Wang

• Understanding and Mitigating Over-refusal for Large Language Models via Safety Representation

  Junbo Zhang, Ran Chen, Qianli Zhou, Xinyang Deng, Wen Jiang

• Now You See It, Now You Don't - Instant Concept Erasure for Safe Text-to-Image and Video Generation

  Shristi Das Biswas, Arani Roy, Kaushik Roy

• BackdoorVLM: A Benchmark for Backdoor Attacks on Vision-Language Models

  Juncheng Li, Yige Li, Hanxun Huang, Yunhao Chen, Xin Wang, Yixu Wang, Xingjun Ma, Yu-Gang Jiang

• Leveraging Adversarial Learning for Pathological Fidelity in Virtual Staining

  José Teixeira, Pascal Klöckner, Diana Montezuma, Melis Erdal Cesur, João Fraga, Hugo M. Horlings, Jaime S. Cardoso, Sara P. Oliveira

• When Semantics Regulate: Rethinking Patch Shuffle and Internal Bias for Generated Image Detection with CLIP

  Beilin Chu, Weike You, Mengtao Li, Tingting Zheng, Kehan Zhao, Xuan Xu, Zhigao Lu, Jia Song, Moxuan Xu, Linna Zhou

• Three-Dimensional Anatomical Data Generation Based on Artificial Neural Networks

  Ann-Sophia Müller, Moonkwang Jeong, Meng Zhang, Jiyuan Tian, Arkadiusz Miernik, Stefanie Speidel, Tian Qiu

• Robust and Generalizable GNN Fine-Tuning via Uncertainty-aware Adapter Learning

  Bo Jiang, Weijun Zhao, Beibei Wang, Xiao Wang, Jin Tang

• FedPoisonTTP: A Threat Model and Poisoning Attack for Federated Test-Time Personalization

  Md Akil Raihan Iftee, Syed Md. Ahnaf Hasan, Amin Ahsan Ali, AKM Mahbubur Rahman, Sajib Mistry, Aneesh Krishna

• Subtract the Corruption: Training-Data-Free Corrective Machine Unlearning using Task Arithmetic

  Mostafa Mozafari, Farooq Ahmad Wani, Maria Sofia Bucarelli, Fabrizio Silvestri

• Towards Realistic Guarantees: A Probabilistic Certificate for SmoothLLM

  Adarsh Kumarappan, Ayushi Mehrotra

• Hi-SAFE: Hierarchical Secure Aggregation for Lightweight Federated Learning

  Hyeong-Gun Joo, Songnam Hong, Seunghwan Lee, Dong-Joon Shin

• Targeted Manipulation: Slope-Based Attacks on Financial Time-Series Data

  Dominik Luszczynski

• RoguePrompt: Dual-Layer Ciphering for Self-Reconstruction to Circumvent LLM Moderation

  Benyamin Tafreshian

• Can LLMs Threaten Human Survival? Benchmarking Potential Existential Threats from LLMs via Prefix Completion

  Yu Cui, Yifei Liu, Hang Fu, Sicheng Pan, Haibin Zhang, Cong Zuo, Licheng Wang

• AttackPilot: Autonomous Inference Attacks Against ML Services With LLM-Based Agents

  Yixin Wu, Rui Wen, Chi Cui, Michael Backes, Yang Zhang

• Synthetic Data: AI's New Weapon Against Android Malware

  Angelo Gaspar Diniz Nogueira, Kayua Oleques Paim, Hendrio Bragança, Rodrigo Brandão Mansilha, Diego Kreutz

• Prompt Fencing: A Cryptographic Approach to Establishing Security Boundaries in Large Language Model Prompts

  Steven Peh

• Leveraging Unlabeled Scans for NCCT Image Segmentation in Early Stroke Diagnosis: A Semi-Supervised GAN Approach

  Maria Thoma, Michalis A. Savelonas, Dimitris K. Iakovidis

• Automating Deception: Scalable Multi-Turn LLM Jailbreaks

  Adarsh Kumarappan, Ananya Mujoo

• An Invariant Latent Space Perspective on Language Model Inversion

  Wentao Ye, Jiaqi Hu, Haobo Wang, Xinpeng Ti, Zhiqing Xiao, Hao Chen, Liyao Li, Lei Feng, Sai Wu, Junbo Zhao

• DISCO: A Browser-Based Privacy-Preserving Framework for Distributed Collaborative Learning

  Julien T. T. Vignoud, Valérian Rousset, Hugo El Guedj, Ignacio Aleman, Walid Bennaceur, Batuhan Faik Derinbay, Eduard Ďurech, Damien Gengler, Lucas Giordano, Felix Grimberg, Franziska Lippoldt, Christina Kopidaki, Jiafan Liu, Lauris Lopata, Nathan Maire, Paul Mansat, Martin Milenkoski, Emmanuel Omont, Güneş Özgün, Mina Petrović, Francesco Posa, Morgan Ridel, Giorgio Savini, Marcel Torne, Lucas Trognon, Alyssa Unell, Olena Zavertiaieva, Sai Praneeth Karimireddy, Tahseen Rabbani, Mary-Anne Hartley, Martin Jaggi

• EAGER: Edge-Aligned LLM Defense for Robust, Efficient, and Accurate Cybersecurity Question Answering

  Onat Gungor, Roshan Sood, Jiasheng Zhou, Tajana Rosing

2025-11-23

• Natural Emergent Misalignment from Reward Hacking in Production RL

  Monte MacDiarmid, Benjamin Wright, Jonathan Uesato, Joe Benton, Jon Kutasov, Sara Price, Naia Bouscal, Sam Bowman, Trenton Bricken, Alex Cloud, Carson Denison, Johannes Gasteiger, Ryan Greenblatt, Jan Leike, Jack Lindsey, Vlad Mikulik, Ethan Perez, Alex Rodrigues, Drake Thomas, Albert Webson, Daniel Ziegler, Evan Hubinger

• Shadows in the Code: Exploring the Risks and Defenses of LLM-based Multi-Agent Software Development Systems

  Xiaoqing Wang, Keman Huang, Bin Liang, Hongyu Li, Xiaoyong Du

• Evaluating perturbation robustnessof generative systems that use COBOL code inputs

  Samuel Ackerman, Wesam Ibraheem, Orna Raz, Marcel Zalmanovici

• Gradient Masters at BLP-2025 Task 1: Advancing Low-Resource NLP for Bengali using Ensemble-Based Adversarial Training for Hate Speech Detection

  Syed Mohaiminul Hoque, Naimur Rahman, Md Sakhawat Hossain

• Vision Token Masking Alone Cannot Prevent PHI Leakage in Medical Document OCR: A Systematic Evaluation

  Richard J. Young

• When Generative Replay Meets Evolving Deepfakes: Domain-Aware Relative Weighting for Incremental Face Forgery Detection

  Hao Shen, Jikang Cheng, Renye Yan, Zhongyuan Wang, Wei Peng, Baojin Huang

• Robust Physical Adversarial Patches Using Dynamically Optimized Clusters

  Harrison Bagley, Will Meakin, Simon Lucey, Yee Wei Law, Tat-Jun Chin

• Generative Myopia: Why Diffusion Models Fail at Structure

  Milad Siami

• Ensuring Calibration Robustness in Split Conformal Prediction Under Adversarial Attacks

  Xunlei Qian, Yue Xing

• Differential privacy with dependent data

  Valentin Roth, Marco Avella-Medina

• TASO: Jailbreak LLMs via Alternative Template and Suffix Optimization

  Yanting Wang, Runpeng Geng, Jinghui Chen, Minhao Cheng, Jinyuan Jia

• Building Resilient Information Ecosystems: Large LLM-Generated Dataset of Persuasion Attacks

  Hsien-Te Kao, Aleksey Panasyuk, Peter Bautista, William Dupree, Gabriel Ganberg, Jeffrey M. Beaubien, Laura Cassani, Svitlana Volkova

• Hierarchical Dual-Strategy Unlearning for Biomedical and Healthcare Intelligence Using Imperfect and Privacy-Sensitive Medical Data

  Yi Zhang, Tianxiang Xu, Zijian Li, Chao Zhang, Kunyu Zhang, Zhan Gao, Meinuo Li, Xiaohan Zhang, Qichao Qi, Bing Chen

• Position: The Complexity of Perfect AI Alignment -- Formalizing the RLHF Trilemma

  Subramanyam Sahoo, Aman Chadha, Vinija Jain, Divya Chaudhary

2025-11-22

• Towards Effective, Stealthy, and Persistent Backdoor Attacks Targeting Graph Foundation Models

  Jiayi Luo, Qingyun Sun, Lingjuan Lyu, Ziwei Zhang, Haonan Yuan, Xingcheng Fu, Jianxin Li

• Privacy Auditing of Multi-domain Graph Pre-trained Model under Membership Inference Attacks

  Jiayi Luo, Qingyun Sun, Yuecen Wei, Haonan Yuan, Xingcheng Fu, Jianxin Li

• A Novel and Practical Universal Adversarial Perturbations against Deep Reinforcement Learning based Intrusion Detection Systems

  H. Zhang, L. Zhang, G. Epiphaniou, C. Maple

• Adversarial Pseudo-replay for Exemplar-free Class-incremental Learning

  Hiroto Honda

• Generative Adversarial Post-Training Mitigates Reward Hacking in Live Human-AI Music Interaction

  Yusong Wu, Stephen Brade, Teng Ma, Tia-Jane Fowler, Enning Yang, Berker Banar, Aaron Courville, Natasha Jaques, Cheng-Zhi Anna Huang

• Federated Anomaly Detection and Mitigation for EV Charging Forecasting Under Cyberattacks

  Oluleke Babayomi, Dong-Seong Kim

• Understanding Private Learning From Feature Perspective

  Meng Ding, Mingxi Lei, Shaopeng Fu, Shaowei Wang, Di Wang, Jinhui Xu

• Curvature-Aware Safety Restoration In LLMs Fine-Tuning

  Thong Bach, Thanh Nguyen-Tang, Dung Nguyen, Thao Minh Le, Truyen Tran

• Vulnerability-Aware Robust Multimodal Adversarial Training

  Junrui Zhang, Xinyu Zhao, Jie Peng, Chenjie Wang, Jianmin Ji, Tianlong Chen

• Beyond Jailbreak: Unveiling Risks in LLM Applications Arising from Blurred Capability Boundaries

  Yunyi Zhang, Shibo Cui, Baojun Liu, Jingkai Yu, Min Zhang, Fan Shi, Han Zheng

• ASTRA: Agentic Steerability and Risk Assessment Framework

  Itay Hazan, Yael Mathov, Guy Shtar, Ron Bitton, Itsik Mantin

• Exploiting the Experts: Unauthorized Compression in MoE-LLMs

  Pinaki Prasad Guha Neogi, Ahmad Mohammadshirazi, Dheeraj Kulshrestha, Rajiv Ramnath

2025-11-21

• Geometric-Disentangelment Unlearning

  Duo Zhou, Yuji Zhang, Tianxin Wei, Ruizhong Qiu, Ke Yang, Xiao Lin, Cheng Qian, Jingrui He, Hanghang Tong, Heng Ji, Huan Zhang

• Don't Learn, Ground: A Case for Natural Language Inference with Visual Grounding

  Daniil Ignatev, Ayman Santeer, Albert Gatt, Denis Paperno

• Vision Language Models are Confused Tourists

  Patrick Amadeus Irawan, Ikhlasul Akmal Hanif, Muhammad Dehan Al Kautsar, Genta Indra Winata, Fajri Koto, Alham Fikri Aji

• MultiPriv: Benchmarking Individual-Level Privacy Reasoning in Vision-Language Models

  Xiongtao Sun, Hui Li, Jiaming Zhang, Yujie Yang, Kaili Liu, Ruxin Feng, Wen Jun Tan, Wei Yang Bryan Lim

• One-Step Diffusion Transformer for Controllable Real-World Image Super-Resolution

  Yushun Fang, Yuxiang Chen, Shibo Yin, Qiang Hu, Jiangchao Yao, Ya Zhang, Xiaoyun Zhang, Yanfeng Wang

• ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP

  Linxiang Su, András Balogh

• Non-Parametric Probabilistic Robustness: A Conservative Metric with Optimized Perturbation Distributions

  Zheng Wang, Yi Zhang, Siddartha Khastgir, Carsten Maple, Xingyu Zhao

• MMT-ARD: Multimodal Multi-Teacher Adversarial Distillation for Robust Vision-Language Models

  Yuqi Li, Junhao Dong, Chuanguang Yang, Shiping Wen, Piotr Koniusz, Tingwen Huang, Yingli Tian, Yew-Soon Ong

• Steering in the Shadows: Causal Amplification for Activation Space Attacks in Large Language Models

  Zhiyuan Xu, Stanislav Abaimov, Joseph Gardiner, Sana Belguith

• Cognitive Inception: Agentic Reasoning against Visual Deceptions by Injecting Skepticism

  Yinjie Zhao, Heng Zhao, Bihan Wen, Joey Tianyi Zhou

• Evaluating Adversarial Vulnerabilities in Modern Large Language Models

  Tom Perel

• MURMUR: Using cross-user chatter to break collaborative language agents in groups

  Atharv Singh Patlan, Peiyao Sheng, S. Ashwin Hebbar, Prateek Mittal, Pramod Viswanath

• Enhancing Adversarial Transferability through Block Stretch and Shrink

  Quan Liu, Feng Ye, Chenhao Lu, Shuming Zhen, Guanliang Huang, Lunzhe Chen, Xudong Ke

• AEGIS: Preserving privacy of 3D Facial Avatars with Adversarial Perturbations

  Dawid Wolkiewicz, Anastasiya Pechko, Przemysław Spurek, Piotr Syga

• GANGR: GAN-Assisted Scalable and Efficient Global Routing Parallelization

  Hadi Khodaei Jooshin, Inna Partin-Vaisband

2025-11-20

• Detecting Sleeper Agents in Large Language Models via Semantic Drift Analysis

  Shahin Zanbaghi, Ryan Rostampour, Farhan Abid, Salim Al Jarmakani

• Hiding in the AI Traffic: Abusing MCP for LLM-Powered Agentic Red Teaming

  Strahinja Janjuesvic, Anna Baron Garcia, Sohrob Kazerounian

• InfCode: Adversarial Iterative Refinement of Tests and Patches for Reliable Software Issue Resolution

  KeFan Li, Mengfei Wang, Hengzhi Zhang, Zhichao Li, Yuan Yuan, Mu Li, Xiang Gao, Hailong Sun, Chunming Hu, Weifeng Lv

• Physically Realistic Sequence-Level Adversarial Clothing for Robust Human-Detection Evasion

  Dingkun Zhou, Patrick P. K. Chan, Hengxu Wu, Shikang Zheng, Ruiqi Huang, Yuanjie Zhao

• When Alignment Fails: Multimodal Adversarial Attacks on Vision-Language-Action Models

  Yuping Yan, Yuhan Xie, Yinxin Zhang, Lingjuan Lyu, Yaochu Jin

• Q-MLLM: Vector Quantization for Robust Multimodal Large Language Model Security

  Wei Zhao, Zhe Li, Yige Li, Jun Sun

• "To Survive, I Must Defect": Jailbreaking LLMs via the Game-Theory Scenarios

  Zhen Sun, Zongmin Zhang, Deqi Liang, Han Sun, Yule Liu, Yun Shen, Xiangshan Gao, Yilong Yang, Shuai Liu, Yutao Yue, Xinlei He

• Large Language Model-Based Reward Design for Deep Reinforcement Learning-Driven Autonomous Cyber Defense

  Sayak Mukherjee, Samrat Chatterjee, Emilie Purvine, Ted Fujimoto, Tegan Emerson

• PSM: Prompt Sensitivity Minimization via LLM-Guided Black-Box Optimization

  Huseein Jawad, Nicolas Brunel

• Layer-wise Noise Guided Selective Wavelet Reconstruction for Robust Medical Image Segmentation

  Yuting Lu, Ziliang Wang, Weixin Xu, Wei Zhang, Yongqiang Zhao, Yang Yu, Xiaohong Zhang

• An Image Is Worth Ten Thousand Words: Verbose-Text Induction Attacks on VLMs

  Zhi Luo, Zenghui Yuan, Wenqi Wei, Daizong Liu, Pan Zhou

• Erase to Retain: Low Rank Adaptation Guided Selective Unlearning in Medical Segmentation Networks

  Nirjhor Datta, Md. Golam Rabiul Alam

• Loss Functions Robust to the Presence of Label Errors

  Nicholas Pellegrino, David Szczecina, Paul Fieguth

• Rate-optimal community detection near the KS threshold via node-robust algorithms

  Jingqiu Ding, Yiding Hua, Kasper Lindberg, David Steurer, Aleksandr Storozhenko

• Multi-Faceted Attack: Exposing Cross-Model Vulnerabilities in Defense-Equipped Vision-Language Models

  Yijun Yang, Lichao Wang, Jianping Zhang, Chi Harold Liu, Lanqing Hong, Qiang Xu

• The Shawshank Redemption of Embodied AI: Understanding and Benchmarking Indirect Environmental Jailbreaks

  Chunyang Li, Zifeng Kang, Junwei Zhang, Zhuo Ma, Anda Cheng, Xinghua Li, Jianfeng Ma

• AutoBackdoor: Automating Backdoor Attacks via LLM Agents

  Yige Li, Zhe Li, Wei Zhao, Nay Myat Min, Hanxun Huang, Xingjun Ma, Jun Sun

• SafeR-CLIP: Mitigating NSFW Content in Vision-Language Models While Preserving Pre-Trained Knowledge

  Adeel Yousaf, Joseph Fioresi, James Beetham, Amrit Singh Bedi, Mubarak Shah

• PEPPER: Perception-Guided Perturbation for Robust Backdoor Defense in Text-to-Image Diffusion Models

  Oscar Chew, Po-Yi Lu, Jayden Lin, Kuan-Hao Huang, Hsuan-Tien Lin

• Membership Inference Attacks Beyond Overfitting

  Mona Khalil, Alberto Blanco-Justicia, Najeeb Jebreel, Josep Domingo-Ferrer

2025-11-19

• As If We've Met Before: LLMs Exhibit Certainty in Recognizing Seen Files

  Haodong Li, Jingqi Zhang, Xiao Cheng, Peihua Mai, Haoyu Wang, Yang Pan

• Effective Code Membership Inference for Code Completion Models via Adversarial Prompts

  Yuan Jiang, Zehao Li, Shan Huang, Christoph Treude, Xiaohong Su, Tiantian Wang

• Taxonomy, Evaluation and Exploitation of IPI-Centric LLM Agent Defense Frameworks

  Zimo Ji, Xunguang Wang, Zongjie Li, Pingchuan Ma, Yudong Gao, Daoyuan Wu, Xincheng Yan, Tian Tian, Shuai Wang

• Adversarial Poetry as a Universal Single-Turn Jailbreak Mechanism in Large Language Models

  Piercosma Bisconti, Matteo Prandi, Federico Pierucci, Francesco Giarrusso, Marcantonio Bracale, Marcello Galisai, Vincenzo Suriani, Olga Sorokoletova, Federico Sartore, Daniele Nardi

• HV-Attack: Hierarchical Visual Attack for Multimodal Retrieval Augmented Generation

  Linyin Luo, Yujuan Ding, Yunshan Ma, Wenqi Fan, Hanjiang Lai

• What Your Features Reveal: Data-Efficient Black-Box Feature Inversion Attack for Split DNNs

  Zhihan Ren, Lijun He, Jiaxi Liang, Xinzhu Fu, Haixia Bi, Fan Li

• Transferable Dual-Domain Feature Importance Attack against AI-Generated Image Detector

  Weiheng Zhu, Gang Cao, Jing Liu, Lifang Yu, Shaowei Weng

• Robust Bayesian Optimisation with Unbounded Corruptions

  Abdelhamid Ezzerg, Ilija Bogunovic, Jeremias Knoblauch

• Critical Evaluation of Quantum Machine Learning for Adversarial Robustness

  Saeefa Rubaiyet Nowmi, Jesus Lopez, Md Mahmudul Alam Imon, Shahrooz Pouryouse, Mohammad Saidur Rahman

• Trustworthy GenAI over 6G: Integrated Applications and Security Frameworks

  Bui Duc Son, Trinh Van Chien, Dong In Kim

• Privacy-Preserving IoT in Connected Aircraft Cabin

  Nilesh Vyas, Benjamin Zhao, Aygün Baltaci, Gustavo de Carvalho Bertoli, Hassan Asghar, Markus Klügel, Gerrit Schramm, Martin Kubisch, Dali Kaafar

• Securing AI Agents Against Prompt Injection Attacks

  Badrinath Ramakrishnan, Akshaya Balaji

• TopoReformer: Mitigating Adversarial Attacks Using Topological Purification in OCR Models

  Bhagyesh Kumar, A S Aravinthakashan, Akshat Satyanarayan, Ishaan Gakhar, Ujjwal Verma

• Boundary-Aware Adversarial Filtering for Reliable Diagnosis under Extreme Class Imbalance

  Yanxuan Yu, Michael S. Hughes, Julien Lee, Jiacheng Zhou, Andrew F. Laine

2025-11-18

• When Words Change the Model: Sensitivity of LLMs for Constraint Programming Modelling

  Alessio Pellegrino, Jacopo Mauro

• From Narrow Unlearning to Emergent Misalignment: Causes, Consequences, and Containment in LLMs

  Erum Mushtaq, Anil Ramakrishna, Satyapriya Krishna, Sattvik Sahai, Prasoon Goyal, Kai-Wei Chang, Tao Zhang, Rahul Gupta

• GRPO Privacy Is at Risk: A Membership Inference Attack Against Reinforcement Learning With Verifiable Rewards

  Yule Liu, Heyi Zhang, Jinyi Zheng, Zhen Sun, Zifan Peng, Tianshuo Cong, Yilong Yang, Xinlei He, Zhuo Ma

• FAPE-IR: Frequency-Aware Planning and Execution Framework for All-in-One Image Restoration

  Jingren Liu, Shuning Xu, Qirui Yang, Yun Wang, Xiangyu Chen, Zhong Ji

• Certified Signed Graph Unlearning

  Junpeng Zhao, Lin Li, Kaixi Hu, Kaize Shi, Jingling Yuan

• Cheating Stereo Matching in Full-scale: Physical Adversarial Attack against Binocular Depth Estimation in Autonomous Driving

  Kangqiao Zhao, Shuo Huai, Xurui Song, Jun Luo

• Sigil: Server-Enforced Watermarking in U-Shaped Split Federated Learning via Gradient Injection

  Zhengchunmin Dai, Jiaxiong Tang, Peng Sun, Honglong Chen, Liantao Wu

• \textit{FLARE}: Adaptive Multi-Dimensional Reputation for Robust Client Reliability in Federated Learning

  Abolfazl Younesi, Leon Kiss, Zahra Najafabadi Samani, Juan Aznar Poveda, Thomas Fahringer

• Stealth Fine-Tuning: Efficiently Breaking Alignment in RVLMs Using Self-Generated CoT

  Le Yu, Zhengyue Zhao, Yawen Zheng, Yunhao Liu

• Unified Defense for Large Language Models against Jailbreak and Fine-Tuning Attacks in Education

  Xin Yi, Yue Li, Dongsheng Shi, Linlin Wang, Xiaoling Wang, Liang He

• Steganographic Backdoor Attacks in NLP: Ultra-Low Poisoning and Defense Evasion

  Eric Xue, Ruiyi Zhang, Zijun Zhang, Pengtao Xie

• Coffee: Controllable Diffusion Fine-tuning

  Ziyao Zeng, Jingcheng Ni, Ruyi Liu, Alex Wong

• MVI-Bench: A Comprehensive Benchmark for Evaluating Robustness to Misleading Visual Inputs in LVLMs

  Huiyi Chen, Jiawei Peng, Dehai Min, Changchang Sun, Kaijie Chen, Yan Yan, Xu Yang, Lu Cheng

• Certified but Fooled! Breaking Certified Defences with Ghost Certificates

  Quoc Viet Vo, Tashreque M. Haq, Paul Montague, Tamas Abraham, Ehsan Abbasnejad, Damith C. Ranasinghe

• Observational Auditing of Label Privacy

  Iden Kalemaj, Luca Melis, Maxime Boucher, Ilya Mironov, Saeed Mahloujifar

• N-GLARE: An Non-Generative Latent Representation-Efficient LLM Safety Evaluator

  Zheyu Lin, Jirui Yang, Hengqi Guo, Yubing Bao, Yao Guan

• Watch Out for the Lifespan: Evaluating Backdoor Attacks Against Federated Model Adaptation

  Bastien Vuillod, Pierre-Alain Moellic, Jean-Max Dutertre

• Wasserstein Distributionally Robust Nash Equilibrium Seeking with Heterogeneous Data: A Lagrangian Approach

  Zifan Wang, Georgios Pantazis, Sergio Grammatico, Michael M. Zavlanos, Karl H. Johansson

• Dynamic Black-box Backdoor Attacks on IoT Sensory Data

  Ajesh Koyatan Chathoth, Stephen Lee

• Privis: Towards Content-Aware Secure Volumetric Video Delivery

  Kaiyuan Hu, Hong Kang, Yili Jin, Junhua Liu, Chengming Hu, Haolun Wu, Xue Liu

• Beyond Fixed and Dynamic Prompts: Embedded Jailbreak Templates for Advancing LLM Security

  Hajun Kim, Hyunsik Na, Daeseon Choi

• SecureSign: Bridging Security and UX in Mobile Web3 through Emulated EIP-6963 Sandboxing

  Charles Cheng Ji, Brandon Kong

• How to Train Private Clinical Language Models: A Comparative Study of Privacy-Preserving Pipelines for ICD-9 Coding

  Mathieu Dufour, Andrew Duncan

• Attacking Autonomous Driving Agents with Adversarial Machine Learning: A Holistic Evaluation with the CARLA Leaderboard

  Henry Wong, Clement Fung, Weiran Lin, Karen Li, Stanley Chen, Lujo Bauer

• Intervention Efficiency and Perturbation Validation Framework: Capacity-Aware and Robust Clinical Model Selection under the Rashomon Effect

  Yuwen Zhang, Viet Tran, Paul Weng

2025-11-17

• Jailbreaking Large Vision Language Models in Intelligent Transportation Systems

  Badhan Chandra Das, Md Tasnim Jawad, Md Jueal Mia, M. Hadi Amini, Yanzhao Wu

• Find the Leak, Fix the Split: Cluster-Based Method to Prevent Leakage in Video-Derived Datasets

  Noam Glazner, Noam Tsfaty, Sharon Shalev, Avishai Weizman

• Accuracy is Not Enough: Poisoning Interpretability in Federated Learning via Color Skew

  Farhin Farhad Riya, Shahinul Hoque, Jinyuan Stella Sun, Olivera Kotevska

• The Battle of Metasurfaces: Understanding Security in Smart Radio Environments

  Paul Staat, Christof Paar, Swarun Kumar

• What Color Is It? A Text-Interference Multimodal Hallucination Benchmark

  Jinkun Zhao, Lei Huang, Haixin Ge, Wenjun Wu

2025-11-16

• Scaling Patterns in Adversarial Alignment: Evidence from Multi-LLM Jailbreak Experiments

  Samuel Nathanson, Rebecca Williams, Cynthia Matuszek

• Uncovering and Aligning Anomalous Attention Heads to Defend Against NLP Backdoor Attacks

  Haotian Jin, Yang Li, Haihui Fan, Lin Shen, Xiangfang Li, Bo Li

• Falsely Accused: How AI Detectors Misjudge Slightly Polished Arabic Articles

  Saleh Almohaimeed, Saad Almohaimeed, Mousa Jari, Khaled A. Alobaid, Fahad Alotaibi

2025-11-15

• ExplainableGuard: Interpretable Adversarial Defense for Large Language Models Using Chain-of-Thought Reasoning

  Shaowei Guan, Yu Zhai, Zhengyu Zhang, Yanze Wang, Hin Chi Kwok

• MPD-SGR: Robust Spiking Neural Networks with Membrane Potential Distribution-Driven Surrogate Gradient Regularization

  Runhao Jiang, Chengzhi Jiang, Rui Yan, Huajin Tang

• Model Inversion Attack Against Deep Hashing

  Dongdong Zhao, Qiben Xu, Ranxin Fang, Baogang Song

2025-11-14

• Synthetic Voices, Real Threats: Evaluating Large Text-to-Speech Models in Generating Harmful Audio

  Guangke Chen, Yuhui Wang, Shouling Ji, Xiapu Luo, Ting Wang

• GraphToxin: Reconstructing Full Unlearned Graphs from Graph Unlearning

  Ying Song, Balaji Palanisamy

• Exposing Weak Links in Multi-Agent Systems under Adversarial Prompting

  Nirmit Arora, Sathvik Joel, Ishan Kavathekar, Palak, Rohan Gandhi, Yash Pandya, Tanuja Ganu, Aditya Kanade, Akshay Nambi

• Data Poisoning Vulnerabilities Across Healthcare AI Architectures: A Security Threat Analysis

  Farhad Abtahi, Fernando Seoane, Iván Pau, Mario Vega-Barbas

• HealSplit: Towards Self-Healing through Adversarial Distillation in Split Federated Learning

  Yuhan Xie, Chen Lyu

• AUVIC: Adversarial Unlearning of Visual Concepts for Multi-modal Large Language Models

  Haokun Chen, Jianing Li, Yao Zhang, Jinhe Bi, Yan Xia, Jindong Gu, Volker Tresp

• Privacy Challenges and Solutions in Retrieval-Augmented Generation-Enhanced LLMs for Healthcare Chatbots: A Review of Applications, Risks, and Future Directions

  Shaowei Guan, Hin Chi Kwok, Ngai Fong Law, Gregor Stiglic, Vivian Hui

• Private Frequency Estimation Via Residue Number Systems

  Héber H. Arcolezi

• LANE: Lexical Adversarial Negative Examples for Word Sense Disambiguation

  Jader Martins Camboim de Sá, Jooyoung Lee, Cédric Pruski, Marcos Da Silveira

• Toward Generalized Detection of Synthetic Media: Limitations, Challenges, and the Path to Multimodal Solutions

  Redwan Hussain, Mizanur Rahman, Prithwiraj Bhattacharjee

• Questioning the Stability of Visual Question Answering

  Amir Rosenfeld, Neta Glazer, Ethan Fetaya

• One-to-N Backdoor Attack in 3D Point Cloud via Spherical Trigger

  Dongmei Shan, Wei Lian, Chongxia Wang

• Parameter-Efficient MoE LoRA for Few-Shot Multi-Style Editing

  Cong Cao, Yujie Xu, Xiaodong Xu

• SimuFreeMark: A Noise-Simulation-Free Robust Watermarking Against Image Editing

  Yichao Tang, Mingyang Li, Di Miao, Sheng Li, Zhenxing Qian, Xinpeng Zhang

• Unsupervised Robust Domain Adaptation: Paradigm, Theory and Algorithm

  Fuxiang Huang, Xiaowei Fu, Shiyu Ye, Lina Ma, Wen Li, Xinbo Gao, David Zhang, Lei Zhang

• Adaptive Symmetrization of the KL Divergence

  Omri Ben-Dov, Luiz F.O. Chamon

• Armadillo: Robust Single-Server Secure Aggregation for Federated Learning with Input Validation

  Yiping Ma, Yue Guo, Harish Karthikeyan, Antigoni Polychroniadou

• On the Information-Theoretic Fragility of Robust Watermarking under Diffusion Editing

  Yunyi Ni, Ziyu Yang, Ze Niu, Emily Davis, Finn Carter

• SEAL: Subspace-Anchored Watermarks for LLM Ownership

  Yanbo Dai, Zongjie Li, Zhenlan Ji, Shuai Wang

• Robustness of LLM-enabled vehicle trajectory prediction under data security threats

  Feilong Wang, Fuqiang Liu

• MoETTA: Test-Time Adaptation Under Mixed Distribution Shifts with MoE-LayerNorm

  Xiao Fan, Jingyan Jiang, Zhaoru Chen, Fanding Huang, Xiao Chen, Qinting Jiang, Bowen Zhang, Xing Tang, Zhi Wang

• Learning Fair Representations with Kolmogorov-Arnold Networks

  Amisha Priyadarshini, Sergio Gago-Masague

• Better LLM Reasoning via Dual-Play

  Zhengxin Zhang, Chengyu Huang, Aochong Oliver Li, Claire Cardie

• Enhancing Robustness of Offline Reinforcement Learning Under Data Corruption via Sharpness-Aware Minimization

  Le Xu, Jiayu Chen

2025-11-13

• Do Not Merge My Model! Safeguarding Open-Source LLMs Against Unauthorized Model Merging

  Qinfeng Li, Miao Pan, Jintao Chen, Fu Teng, Zhiqiang Shen, Ge Su, Hao Peng, Xuhong Zhang

• BadThink: Triggered Overthinking Attacks on Chain-of-Thought Reasoning in Large Language Models

  Shuaitong Liu, Renjue Li, Lijia Yu, Lijun Zhang, Zhiming Liu, Gaojie Jin

• PISanitizer: Preventing Prompt Injection to Long-Context LLMs via Prompt Sanitization

  Runpeng Geng, Yanting Wang, Chenlong Yin, Minhao Cheng, Ying Chen, Jinyuan Jia

• Optimal Welfare in Noncooperative Network Formation under Attack

  Natan Doubez, Pascal Lenzner, Marcus Wunderlich

• Speech-Audio Compositional Attacks on Multimodal LLMs and Their Mitigation with SALMONN-Guard

  Yudong Yang, Xuezhen Zhang, Zhifeng Han, Siyin Wang, Jimin Zhuang, Zengrui Jin, Jing Shao, Guangzhi Sun, Chao Zhang

• destroR: Attacking Transfer Models with Obfuscous Examples to Discard Perplexity

  Saadat Rafid Ahmed, Rubayet Shareen, Radoan Sharkar, Nazia Hossain, Mansur Mahi, Farig Yousuf Sadeque

• Attentive Feature Aggregation or: How Policies Learn to Stop Worrying about Robustness and Attend to Task-Relevant Visual Cues

  Nikolaos Tsagkas, Andreas Sochopoulos, Duolikun Danier, Sethu Vijayakumar, Alexandros Kouris, Oisin Mac Aodha, Chris Xiaoxuan Lu

• DeepDefense: Layer-Wise Gradient-Feature Alignment for Building Robust Neural Networks

  Ci Lin, Tet Yeap, Iluju Kiringa, Biwei Zhang

• CTRL-ALT-DECEIT: Sabotage Evaluations for Automated AI R&D

  Francis Rhys Ward, Teun van der Weij, Hanna Gábor, Sam Martin, Raja Mehta Moreno, Harel Lidar, Louis Makower, Thomas Jodrell, Lauren Robson

2025-11-12

• Consensus Sampling for Safer Generative AI

  Adam Tauman Kalai, Yael Tauman Kalai, Or Zamir

• Robust and Diverse Multi-Agent Learning via Rational Policy Gradient

  Niklas Lauffer, Ameesh Shah, Micah Carroll, Sanjit A. Seshia, Stuart Russell, Michael Dennis

• FAST-CAD: A Fairness-Aware Framework for Non-Contact Stroke Diagnosis

  Tianming Sha, Zechuan Chen, Zhan Cheng, Haotian Zhai, Xuwei Ding, Junnan Li, Haixiang Tang, Zaoting Sun, Yanchuan Tang, Yongzhe Yi, Yanjie Huang, Anhao Li, Yuan Gao, Keze Wang

• iSeal: Encrypted Fingerprinting for Reliable LLM Ownership Verification

  Zixun Xiong, Gaoyi Wu, Qingyang Yu, Mingyu Derek Ma, Lingfeng Yao, Miao Pan, Xiaojiang Du, Hao Wang

• From Structure to Detail: Hierarchical Distillation for Efficient Diffusion Model

  Hanbo Cheng, Peng Wang, Kaixiang Lei, Qi Li, Zhen Zou, Pengfei Hu, Jun Du

• Improving Sustainability of Adversarial Examples in Class-Incremental Learning

  Taifeng Liu, Xinjing Liu, Liangqiu Dong, Yang Liu, Yilong Yang, Zhuo Ma

• Cost-Minimized Label-Flipping Poisoning Attack to LLM Alignment

  Shigeki Kusaka, Keita Saito, Mikoto Kudo, Takumi Tanabe, Akifumi Wachi, Youhei Akimoto

• Differentially Private Rankings via Outranking Methods and Performance Data Aggregation

  Luis Del Vasto-Terrientes

• Unveiling Hidden Threats: Using Fractal Triggers to Boost Stealthiness of Distributed Backdoor Attacks in Federated Learning

  Jian Wang, Hong Shen, Chan-Tong Lam

• GuardFed: A Trustworthy Federated Learning Framework Against Dual-Facet Attacks

  Yanli Li, Yanan Zhou, Zhongliang Guo, Nan Yang, Yuning Zhang, Huaming Chen, Dong Yuan, Weiping Ding, Witold Pedrycz

• Potent but Stealthy: Rethink Profile Pollution against Sequential Recommendation via Bi-level Constrained Reinforcement Paradigm

  Jiajie Su, Zihan Nan, Yunshan Ma, Xiaobo Xia, Xiaohua Feng, Weiming Liu, Xiaolin Zheng, Chaochao Chen

• Spatio-Temporal Graph Unlearning

  Qiming Guo, Wenbo Sun, Wenlu Wang

• AdaptDel: Adaptable Deletion Rate Randomized Smoothing for Certified Robustness

  Zhuoqun Huang, Neil G. Marchant, Olga Ohrimenko, Benjamin I. P. Rubinstein

• Boosting Adversarial Transferability via Ensemble Non-Attention

  Yipeng Zou, Qin Liu, Jie Wu, Yu Peng, Guo Chen, Hui Zhou, Guanghui Ye

• Diversifying Counterattacks: Orthogonal Exploration for Robust CLIP Inference

  Chengze Jiang, Minjing Dong, Xinli Shi, Jie Gui

• DBINDS - Can Initial Noise from Diffusion Model Inversion Help Reveal AI-Generated Videos?

  Yanlin Wu, Xiaogang Yuan, Dezhi An

• Robust Backdoor Removal by Reconstructing Trigger-Activated Changes in Latent Representation

  Kazuki Iwahana, Yusuke Yamasaki, Akira Ito, Takayuki Miura, Toshiki Shibahara

• Fairness-Aware Few-Shot Learning for Audio-Visual Stress Detection

  Anushka Sanjay Shelke, Aditya Sneh, Arya Adyasha, Haroon R. Lone

• Sure! Here's a short and concise title for your paper: "Contamination in Generated Text Detection Benchmarks"

  Philipp Dingfelder, Christian Riess

• Abstract Gradient Training: A Unified Certification Framework for Data Poisoning, Unlearning, and Differential Privacy

  Philip Sosnin, Matthew Wicker, Josh Collyer, Calvin Tsay

• DeepTracer: Tracing Stolen Model via Deep Coupled Watermarks

  Yunfei Yang, Xiaojun Chen, Yuexin Xuan, Zhendong Zhao, Xin Zhao, He Li

• Adversarially and Distributionally Robust Virtual Energy Storage Systems via the Scenario Approach

  Georgios Pantazis, Nicola Mignoni, Raffaele Carli, Mariagrazia Dotoli, Sergio Grammatico

• Evaluating from Benign to Dynamic Adversarial: A Squid Game for Large Language Models

  Zijian Chen, Wenjun Zhang, Guangtao Zhai

• Transferable Hypergraph Attack via Injecting Nodes into Pivotal Hyperedges

  Meixia He, Peican Zhu, Le Cheng, Yangming Guo, Manman Yuan, Keke Tang

2025-11-11

• Convergence dynamics of Agent-to-Agent Interactions with Misaligned objectives

  Romain Cosentino, Sarath Shekkizhar, Adam Earle

• 3D Guard-Layer: An Integrated Agentic AI Safety System for Edge Artificial Intelligence

  Eren Kurshan, Yuan Xie, Paul Franzon

• Privacy Beyond Pixels: Latent Anonymization for Privacy-Preserving Video Understanding

  Joseph Fioresi, Ishan Rajendrakumar Dave, Mubarak Shah

• SIFT-Graph: Benchmarking Multimodal Defense Against Image Adversarial Attacks With Robust Feature Graph

  Jingjie He, Weijie Liang, Zihan Shan, Matthew Caesar

• Automated Hardware Trojan Insertion in Industrial-Scale Designs

  Yaroslav Popryho, Debjit Pal, Inna Partin-Vaisband

• Invisible Triggers, Visible Threats! Road-Style Adversarial Creation Attack for Visual 3D Detection in Autonomous Driving

  Jian Wang, Lijun He, Yixing Yong, Haixia Bi, Fan Li

• A methodological analysis of prompt perturbations and their effect on attack success rates

  Tiago Machado, Maysa Malfiza Garcia de Macedo, Rogerio Abreu de Paula, Marcelo Carpinette Grave, Aminat Adebiyi, Luan Soares de Souza, Enrico Santarelli, Claudio Pinhanez

• SALT: Steering Activations towards Leakage-free Thinking in Chain of Thought

  Shourya Batra, Pierce Tillman, Samarth Gaggar, Shashank Kesineni, Kevin Zhu, Sunishchal Dev, Ashwinee Panda, Vasu Sharma, Maheep Chaudhary

2025-11-10

• Spilling the Beans: Teaching LLMs to Self-Report Their Hidden Objectives

  Chloe Li, Mary Phuong, Daniel Tan

• A Theoretical Analysis of Detecting Large Model-Generated Time Series

  Junji Hou, Junzhou Zhao, Shuo Zhang, Pinghui Wang

• MENTOR: A Metacognition-Driven Self-Evolution Framework for Uncovering and Mitigating Implicit Risks in LLMs on Domain Tasks

  Liang Shan, Kaicheng Shen, Wen Wu, Zhenyu Ying, Chaochao Lu, Guangze Ye, Liang He

• Diagnosing and Breaking Amplitude Suppression in Seismic Phase Picking Through Adversarial Shape Learning

  Chun-Ming Huang, Li-Heng Chang, I-Hsin Chang, An-Sheng Lee, Hao Kuo-Chen

• Cross-Modal Unlearning via Influential Neuron Path Editing in Multimodal Large Language Models

  Kunhao Li, Wenhao Li, Di Wu, Lei Yang, Jun Bai, Ju Jia, Jason Xue

• Differentiated Directional Intervention A Framework for Evading LLM Safety Alignment

  Peng Zhang, peijie sun

• FoCLIP: A Feature-Space Misalignment Framework for CLIP-Based Image Manipulation and Detection

  Yulin Chen, Zeyuan Wang, Tianyuan Yu, Yingmei Wei, Liang Bai

• E2E-VGuard: Adversarial Prevention for Production LLM-based End-To-End Speech Synthesis

  Zhisheng Zhang, Derui Wang, Yifan Mi, Zhiyong Wu, Jie Gao, Yuxin Cao, Kai Ye, Minhui Xue, Jie Hao

• More Agents Helps but Adversarial Robustness Gap Persists

  Khashayar Alavi, Zhastay Yeltay, Lucie Flek, Akbar Karimi

• Enabling Off-Policy Imitation Learning with Deep Actor Critic Stabilization

  Sayambhu Sen, Shalabh Bhatnagar

• Verifying rich robustness properties for neural networks

  Mohammad Afzal, S. Akshay, Ashutosh Gupta

• LoReTTA: A Low Resource Framework To Poison Continuous Time Dynamic Graphs

  Himanshu Pal, Venkata Sai Pranav Bachina, Ankit Gangwal, Charu Sharma

• Language Generation with Infinite Contamination

  Anay Mehrotra, Grigoris Velegkas, Xifan Yu, Felix Zhou

• SAFENLIDB: A Privacy-Preserving Safety Alignment Framework for LLM-based Natural Language Database Interfaces

  Ruiheng Liu, XiaoBing Chen, Jinyu Zhang, Qiongwen Zhang, Yu Zhang, Bailong Yang

• EduGuardBench: A Holistic Benchmark for Evaluating the Pedagogical Fidelity and Adversarial Safety of LLMs as Simulated Teachers

  Yilin Jiang, Mingzi Zhang, Xuanyu Yin, Sheng Jin, Suyu Lu, Zuocan Ying, Zengyi Yu, Xiangjie Kong

• HLPD: Aligning LLMs to Human Language Preference for Machine-Revised Text Detection

  Fangqi Dai, Xingjian Jiang, Zizhuang Deng

• SCOPE: Intrinsic Semantic Space Control for Mitigating Copyright Infringement in LLMs

  Zhenliang Zhang, Xinyu Hu, Xiaojun Wan

• Graph Representation-based Model Poisoning on the Heterogeneous Internet of Agents

  Hanlin Cai, Houtianfu Wang, Haofan Dong, Kai Li, Ozgur B. Akan

• Certified L2-Norm Robustness of 3D Point Cloud Recognition in the Frequency Domain

  Liang Zhou, Qiming Wang, Tianze Chen

• 3D-ANC: Adaptive Neural Collapse for Robust 3D Point Cloud Recognition

  Yuanmin Huang, Wenxuan Li, Mi Zhang, Xiaohan Zhang, Xiaoyu You, Min Yang

• From Pretrain to Pain: Adversarial Vulnerability of Video Foundation Models Without Task Knowledge

  Hui Lu, Yi Yu, Song Xia, Yiming Yang, Deepu Rajan, Boon Poh Ng, Alex Kot, Xudong Jiang

• Improving Deepfake Detection with Reinforcement Learning-Based Adaptive Data Augmentation

  Yuxuan Zhou, Tao Yu, Wen Huang, Yuheng Zhang, Tao Dai, Shu-Tao Xia

• Breaking the Stealth-Potency Trade-off in Clean-Image Backdoors with Generative Trigger Optimization

  Binyan Xu, Fan Yang, Di Tang, Xilin Dai, Kehuan Zhang

• PlanT 2.0: Exposing Biases and Structural Flaws in Closed-Loop Driving

  Simon Gerstenecker, Andreas Geiger, Katrin Renz

• Non-Rival Data as Rival Products: An Encapsulation-Forging Approach for Data Synthesis

  Kaidong Wang, Jiale Li, Shao-Bo Lin, Yao Wang

• Beyond Uniform Deletion: A Data Value-Weighted Framework for Certified Machine Unlearning

  Lisong He, Yi Yang, Xiangyu Chang

• Breaking Privacy in Federated Clustering: Perfect Input Reconstruction via Temporal Correlations

  Guang Yang, Lixia Luo, Qiongxiu Li

• On Stealing Graph Neural Network Models

  Marcin Podhajski, Jan Dubiński, Franziska Boenisch, Adam Dziedzic, Agnieszka Pręgowska, Tomasz P. Michalak

• A Fully Polynomial-Time Algorithm for Robustly Learning Halfspaces over the Hypercube

  Gautam Chandrasekaran, Adam R. Klivans, Konstantinos Stavropoulos, Arsen Vasilyan

• Adversarial Node Placement in Decentralized Federated Learning: Maximum Spanning-Centrality Strategy and Performance Analysis

  Adam Piaseczny, Eric Ruzomberka, Rohit Parasnis, Christopher G. Brinton

• Uncovering Pretraining Code in LLMs: A Syntax-Aware Attribution Approach

  Yuanheng Li, Zhuoyang Chen, Xiaoyun Liu, Yuhao Wang, Mingwei Liu, Yang Shi, Kaifeng Huang, Shengjie Zhao

• Privacy on the Fly: A Predictive Adversarial Transformation Network for Mobile Sensor Data

  Tianle Song, Chenhao Lin, Yang Cao, Zhengyu Zhao, Jiahao Sun, Chong Zhang, Le Yang, Chao Shen

• JPRO: Automated Multimodal Jailbreaking via Multi-Agent Collaboration Framework

  Yuxuan Zhou, Yang Bai, Kuofeng Gao, Tao Dai, Shu-Tao Xia

2025-11-09

• Efficient LLM Safety Evaluation through Multi-Agent Debate

  Dachuan Lin, Guobin Shen, Zihao Yang, Tianrong Liu, Dongcheng Zhao, Yi Zeng

• Enhancing Adversarial Robustness of IoT Intrusion Detection via SHAP-Based Attribution Fingerprinting

  Dilli Prasad Sharma, Liang Xue, Xiaowei Sun, Xiaodong Lin, Pulei Xiong

• RAG-targeted Adversarial Attack on LLM-based Threat Detection and Mitigation Framework

  Seif Ikbarieh, Kshitiz Aryal, Maanak Gupta

• Analyzing and Mitigating Negation Artifacts using Data Augmentation for Improving ELECTRA-Small Model Accuracy

  Mojtaba Noghabaei

• Privacy-Preserving Federated Learning for Fair and Efficient Urban Traffic Optimization

  Rathin Chandra Shit, Sharmila Subudhi

• EchoMark: Perceptual Acoustic Environment Transfer with Watermark-Embedded Room Impulse Response

  Chenpei Huang, Lingfeng Yao, Kyu In Lee, Lan Emily Zhang, Xun Chen, Miao Pan

• TriShGAN: Enhancing Sparsity and Robustness in Multivariate Time Series Counterfactuals Explanation

  Hongnan Ma, Yiwei Shi, Guanxiong Sun, Mengyue Yang, Weiru Liu

• Robust Nearest Neighbour Retrieval Using Targeted Manifold Manipulation

  B. Ghosh, H. Harikumar, S. Rana

• Probably Approximately Global Robustness Certification

  Peter Blohm, Patrick Indri, Thomas Gärtner, Sagar Malhotra

• EASE: Practical and Efficient Safety Alignment for Small Language Models

  Haonan Shi, Guoli Wang, Tu Ouyang, An Wang

2025-11-08

• When AI Meets the Web: Prompt Injection Risks in Third-Party AI Chatbot Plugins

  Yigitcan Kaya, Anton Landerer, Stijn Pletinckx, Michelle Zimmermann, Christopher Kruegel, Giovanni Vigna

• CGCE: Classifier-Guided Concept Erasure in Generative Models

  Viet Nguyen, Vishal M. Patel

• Injecting Falsehoods: Adversarial Man-in-the-Middle Attacks Undermining Factual Recall in LLMs

  Alina Fastowski, Bardh Prenkaj, Yuxiao Li, Gjergji Kasneci

• Runtime Safety Monitoring of Deep Neural Networks for Perception: A Survey

  Albert Schotschneider, Svetlana Pavlitska, J. Marius Zöllner

• A Privacy-Preserving Federated Learning Method with Homomorphic Encryption in Omics Data

  Yusaku Negoya, Feifei Cui, Zilong Zhang, Miao Pan, Tomoaki Ohtsuki, Aohan Li

• MCP-RiskCue: Can LLM infer risk information from MCP server System Logs?

  Jiayi Fu, Qiyao Sun

• Identity Card Presentation Attack Detection: A Systematic Review

  Esteban M. Ruiz, Juan E. Tapia, Reinel T. Soto, Christoph Busch

• Catching Contamination Before Generation: Spectral Kill Switches for Agents

  Valentin Noël

• CatBack: Universal Backdoor Attacks on Tabular Data via Categorical Encoding

  Behrad Tajalli, Stefanos Koffas, Stjepan Picek

• Enhancing Robustness of Graph Neural Networks through p-Laplacian

  Anuj Kumar Sirohi, Subhanu Halder, Kabir Kumar, Sandeep Kumar

• IndirectAD: Practical Data Poisoning Attacks against Recommender Systems for Item Promotion

  Zihao Wang, Tianhao Mao, XiaoFeng Wang, Di Tang, Xiaozhong Liu

2025-11-07

• DeepForgeSeal: Latent Space-Driven Semi-Fragile Watermarking for Deepfake Detection Using Multi-Agent Adversarial Reinforcement Learning

  Tharindu Fernando, Clinton Fookes, Sridha Sridharan

• Learning Fourier shapes to probe the geometric world of deep neural networks

  Jian Wang, Yixing Yong, Haixia Bi, Lijun He, Fan Li

• Pluralistic Behavior Suite: Stress-Testing Multi-Turn Adherence to Custom Behavioral Policies

  Prasoon Varshney, Makesh Narsimhan Sreedhar, Liwei Jiang, Traian Rebedea, Christopher Parisien

• Deep learning models are vulnerable, but adversarial examples are even more vulnerable

  Jun Li, Yanwei Xu, Keran Li, Xiaoli Zhang

• TAMAS: Benchmarking Adversarial Risks in Multi-Agent LLM Systems

  Ishan Kavathekar, Hemang Jain, Ameya Rathod, Ponnurangam Kumaraguru, Tanuja Ganu

• Sample Complexity of Distributionally Robust Off-Dynamics Reinforcement Learning with Online Interaction

  Yiting He, Zhishuai Liu, Weixin Wang, Pan Xu

• Steering Language Models with Weight Arithmetic

  Constanza Fierro, Fabien Roger

• ConVerse: Benchmarking Contextual Safety in Agent-to-Agent Conversations

  Amr Gomaa, Ahmed Salem, Sahar Abdelnabi

• Quantifying the Risk of Transferred Black Box Attacks

  Disesdi Susanna Cox, Niklas Bunzel

• Leak@$k$: Unlearning Does Not Make LLMs Forget Under Probabilistic Decoding

  Hadi Reisizadeh, Jiajun Ruan, Yiwei Chen, Soumyadeep Pal, Sijia Liu, Mingyi Hong

• Associative Poisoning to Generative Machine Learning

  Mathias Lundteigen Mohus, Jingyue Li, Zhirong Yang

• Embedding-Space Data Augmentation to Prevent Membership Inference Attacks in Clinical Time Series Forecasting

  Marius Fracarolli, Michael Staniek, Stefan Riezler

• Turning Adversaries into Allies: Reversing Typographic Attacks for Multimodal E-Commerce Product Retrieval

  Janet Jenq, Hongda Shen

• Adversarially Robust Multitask Adaptive Control

  Kasra Fallah, Leonardo F. Toso, James Anderson

• A Metamorphic Testing Perspective on Knowledge Distillation for Language Models of Code: Does the Student Deeply Mimic the Teacher?

  Md. Abdul Awal, Mrigank Rochan, Chanchal K. Roy

• TRICK: Time and Range Integrity ChecK using Low Earth Orbiting Satellite for Securing GNSS

  Arslan Mumtaz, Mridula Singh

• A Secured Intent-Based Networking (sIBN) with Data-Driven Time-Aware Intrusion Detection

  Urslla Uchechi Izuazu, Mounir Bensalem, Admela Jukan

• VMDT: Decoding the Trustworthiness of Video Foundation Models

  Yujin Potter, Zhun Wang, Nicholas Crispino, Kyle Montgomery, Alexander Xiong, Ethan Y. Chang, Francesco Pinto, Yuqi Chen, Rahul Gupta, Morteza Ziyadi, Christos Christodoulopoulos, Bo Li, Chenguang Wang, Dawn Song

• Distributionally Robust Self Paced Curriculum Reinforcement Learning

  Anirudh Satheesh, Keenan Powell, Vaneet Aggarwal

• Distributionally Robust Multimodal Machine Learning

  Peilin Yang, Yu Ma

2025-11-06

• AdversariaLLM: A Unified and Modular Toolbox for LLM Robustness Research

  Tim Beyer, Jonas Dornbusch, Jakob Steimle, Moritz Ladenburger, Leo Schwinn, Stephan Günnemann

• DeNoise: Learning Robust Graph Representations for Unsupervised Graph-Level Anomaly Detection

  Qingfeng Chen, Haojin Zeng, Jingyi Jie, Shichao Zhang, Debo Cheng

• On the Brittleness of CLIP Text Encoders

  Allie Tran, Luca Rossetto

• Differentially Private In-Context Learning with Nearest Neighbor Search

  Antti Koskela, Tejas Kulkarni, Laith Zumot

• RIDE: Difficulty Evolving Perturbation with Item Response Theory for Mathematical Reasoning

  Xinyuan Li, Murong Xu, Wenbiao Tao, Hanlun Zhu, Yike Zhao, Jipeng Zhang, Yunshi Lan

• Black-Box Guardrail Reverse-engineering Attack

  Hongwei Yao, Yun Xia, Shuo Shao, Haoran Shi, Tong Qiao, Cong Wang

• PrivacyCD: Hierarchical Unlearning for Protecting Student Privacy in Cognitive Diagnosis

  Mingliang Hou, Yinuo Wang, Teng Guo, Zitao Liu, Wenzhou Dou, Jiaqi Zheng, Renqiang Luo, Mi Tian, Weiqi Luo

• A Parallel Region-Adaptive Differential Privacy Framework for Image Pixelization

  Ming Liu

• Adversarially Robust and Interpretable Magecart Malware Detection

  Pedro Pereira, José Gouveia, João Vitorino, Eva Maia, Isabel Praça

• P-MIA: A Profiled-Based Membership Inference Attack on Cognitive Diagnosis Models

  Mingliang Hou, Yinuo Wang, Teng Guo, Zitao Liu, Wenzhou Dou, Jiaqi Zheng, Renqiang Luo, Mi Tian, Weiqi Luo

• Prompt-Based Safety Guidance Is Ineffective for Unlearned Text-to-Image Diffusion Models

  Jiwoo Shin, Byeonghu Na, Mina Kang, Wonhyeok Choi, Il-chul Moon

• Security Evaluation of Quantum Circuit Split Compilation under an Oracle-Guided Attack

  Hongyu Zhang, Yuntao Liu

• Fooling Algorithms in Non-Stationary Bandits using Belief Inertia

  Gal Mendelson, Eyal Tadmor

• Guarding the Meaning: Self-Supervised Training for Semantic Robustness in Guard Models

  Cristina Pinneri, Christos Louizos

2025-11-05

• Decoupling Augmentation Bias in Prompt Learning for Vision-Language Models

  Gahyeon Kim, Sohee Kim, Seokju Lee

• Whisper Leak: a side-channel attack on Large Language Models

  Geoff McDonald, Jonathan Bar Or

• From Insight to Exploit: Leveraging LLM Collaboration for Adaptive Adversarial Text Generation

  Najrin Sultana, Md Rafi Ur Rashid, Kang Gu, Shagufta Mehnaz

• Let the Bees Find the Weak Spots: A Path Planning Perspective on Multi-Turn Jailbreak Attacks against LLMs

  Yize Liu, Yunyun Hou, Aina Sui

• A Lightweight 3D-CNN for Event-Based Human Action Recognition with Privacy-Preserving Potential

  Mehdi Sefidgar Dilmaghani, Francis Fowley, Peter Corcoran

• Byzantine-Robust Federated Learning with Learnable Aggregation Weights

  Javad Parsa, Amir Hossein Daghestani, André M. H. Teixeira, Mikael Johansson

• Death by a Thousand Prompts: Open Model Vulnerability Analysis

  Amy Chang, Nicholas Conley, Harish Santhanalakshmi Ganesan, Adam Swanda

• Bayesian Advantage of Re-Identification Attack in the Shuffle Model

  Pengcheng Su, Haibo Cheng, Ping Wang

• Auditing M-LLMs for Privacy Risks: A Synthetic Benchmark and Evaluation Framework

  Junhao Li, Jiahao Chen, Zhou Feng, Chunyi Zhou

• Desert Waste Detection and Classification Using Data-Based and Model-Based Enhanced YOLOv12 DL Model

  Abdulmumin Sa'ad, Sulaimon Oyeniyi Adebayo, Abdul Jabbar Siddiqui

• Contamination Detection for VLMs using Multi-Modal Semantic Perturbation

  Jaden Park, Mu Cai, Feng Yao, Jingbo Shang, Soochahn Lee, Yong Jae Lee

• Jailbreaking in the Haystack

  Rishi Rajesh Shah, Chen Henry Wu, Shashwat Saxena, Ziqian Zhong, Alexander Robey, Aditi Raghunathan

• SWAP: Towards Copyright Auditing of Soft Prompts via Sequential Watermarking

  Wenyuan Yang, Yichen Sun, Changzheng Chen, Zhixuan Chu, Jiaheng Zhang, Yiming Li, Dacheng Tao

• Diffusion-Based Image Editing: An Unforeseen Adversary to Robust Invisible Watermarks

  Wenkai Fu, Finn Carter, Yue Wang, Emily Davis, Bo Zhang

2025-11-04

• When One Modality Sabotages the Others: A Diagnostic Lens on Multimodal Reasoning

  Chenyu Zhang, Minsol Kim, Shohreh Ghorbani, Jingyao Wu, Rosalind Picard, Patricia Maes, Paul Pu Liang

• Optimizing AI Agent Attacks With Synthetic Data

  Chloe Loughridge, Paul Colognese, Avery Griffin, Tyler Tracy, Jon Kutasov, Joe Benton

• AutoAdv: Automated Adversarial Prompting for Multi-Turn Jailbreaking of Large Language Models

  Aashray Reddy, Andrew Zagula, Nicholas Saban

• On The Dangers of Poisoned LLMs In Security Automation

  Patrick Karlsen, Even Eilertsen

• Trustworthy Quantum Machine Learning: A Roadmap for Reliability, Robustness, and Security in the NISQ Era

  Ferhat Ozgur Catak, Jungwon Seo, Umit Cali

• LiveSecBench: A Dynamic and Culturally-Relevant AI Safety Benchmark for LLMs in Chinese Context

  Yudong Li, Zhongliang Yang, Kejiang Chen, Wenxuan Wang, Tianxin Zhang, Sifang Wan, Kecheng Wang, Haitian Li, Xu Wang, Lefan Cheng, Youdan Yang, Baocheng Chen, Ziyu Liu, Yufei Sun, Liyan Wu, Wenya Wen, Xingchi Gu, Peiru Yang

• Monocular absolute depth estimation from endoscopy via domain-invariant feature learning and latent consistency

  Hao Li, Daiwei Lu, Jesse d'Almeida, Dilara Isik, Ehsan Khodapanah Aghdam, Nick DiSanto, Ayberk Acar, Susheela Sharma, Jie Ying Wu, Robert J. Webster III, Ipek Oguz

• Robust Face Liveness Detection for Biometric Authentication using Single Image

  Poulami Raha, Yeongnam Chae

• A Non-Adversarial Approach to Idempotent Generative Modelling

  Mohammed Al-Jaff, Giovanni Luca Marchetti, Michael C Welle, Jens Lundell, Mats G. Gustafsson, Gustav Eje Henter, Hossein Azizpour, Danica Kragic

• Nesterov-Accelerated Robust Federated Learning Over Byzantine Adversaries

  Lihan Xu, Yanjie Dong, Gang Wang, Runhao Zeng, Xiaoyi Fan, Xiping Hu

• Enhancing Federated Learning Privacy with QUBO

  Andras Ferenczi, Sutapa Samanta, Dagen Wang, Todd Hodges

• Fast, Private, and Protected: Safeguarding Data Privacy and Defending Against Model Poisoning Attacks in Federated Learning

  Nicolas Riccieri Gardin Assumpcao, Leandro Villas

• PrivGNN: High-Performance Secure Inference for Cryptographic Graph Neural Networks

  Fuyi Wang, Zekai Chen, Mingyuan Fan, Jianying Zhou, Lei Pan, Leo Yu Zhang

• An Automated Framework for Strategy Discovery, Retrieval, and Evolution in LLM Jailbreak Attacks

  Xu Liu, Yan Chen, Kan Ling, Yichi Zhu, Hengrun Zhang, Guisheng Fan, Huiqun Yu

• Verifying LLM Inference to Prevent Model Weight Exfiltration

  Roy Rinberg, Adam Karvonen, Alex Hoover, Daniel Reuter, Keri Warr

• Evaluating Control Protocols for Untrusted AI Agents

  Jon Kutasov, Chloe Loughridge, Yuqi Sun, Henry Sleight, Buck Shlegeris, Tyler Tracy, Joe Benton

• Adaptive and Robust Data Poisoning Detection and Sanitization in Wearable IoT Systems using Large Language Models

  W.K.M Mithsara, Ning Yang, Ahmed Imteaj, Hussein Zangoti, Abdur R. Shahid

• Online Learning to Rank under Corruption: A Robust Cascading Bandits Approach

  Fatemeh Ghaffari, Siddarth Sitaraman, Xutong Liu, Xuchuang Wang, Mohammad Hajiesmaili

• PrivyWave: Privacy-Aware Wireless Sensing of Heartbeat

  Yixuan Gao, Tanvir Ahmed, Zekun Chang, Thijs Roumen, Rajalakshmi Nandakumar

• Adaptive Sample-Level Framework Motivated by Distributionally Robust Optimization with Variance-Based Radius Assignment for Enhanced Neural Network Generalization Under Distribution Shift

  Aheer Sravon, Devdyuti Mazumder, Md. Ibrahim

• Bayesian Evaluation of Large Language Model Behavior

  Rachel Longjohn, Shang Wu, Saatvik Kher, Catarina Belém, Padhraic Smyth

2025-11-03

• Black-Box Membership Inference Attack for LVLMs via Prior Knowledge-Calibrated Memory Probing

  Jinhua Yin, Peiru Yang, Chen Yang, Huili Wang, Zhiyang Hu, Shangguang Wang, Yongfeng Huang, Tao Qi

• RobustFSM: Submodular Maximization in Federated Setting with Malicious Clients

  Duc A. Tran, Dung Truong, Duy Le

• CryptoMoE: Privacy-Preserving and Scalable Mixture of Experts Inference via Balanced Expert Routing

  Yifan Zhou, Tianshi Xu, Jue Hong, Ye Wu, Meng Li

• Prompt Injection as an Emerging Threat: Evaluating the Resilience of Large Language Models

  Daniyal Ganiuly, Assel Smaiyl

2025-11-02

• EraseFlow: Learning Concept Erasure Policies via GFlowNet-Driven Alignment

  Abhiram Kusumba, Maitreya Patel, Kyle Min, Changhoon Kim, Chitta Baral, Yezhou Yang

2025-11-01

• Do Methods to Jailbreak and Defend LLMs Generalize Across Languages?

  Berk Atil, Rebecca J. Passonneau, Fred Morstatter

• DRIP: Defending Prompt Injection via Token-wise Representation Editing and Residual Instruction Fusion

  Ruofan Liu, Yun Lin, Zhiyong Huang, Jin Song Dong

2025-10-31

• Visual Backdoor Attacks on MLLM Embodied Decision Making via Contrastive Trigger Learning

  Qiusi Zhan, Hyeonjeong Ha, Rui Yang, Sirui Xu, Hanyang Chen, Liang-Yan Gui, Yu-Xiong Wang, Huan Zhang, Heng Ji, Daniel Kang

• Consistency Training Helps Stop Sycophancy and Jailbreaks

  Alex Irpan, Alexander Matt Turner, Mark Kurzeja, David K. Elson, Rohin Shah

• ZEBRA: Towards Zero-Shot Cross-Subject Generalization for Universal Brain Visual Decoding

  Haonan Wang, Jingyu Lu, Hongrui Li, Xiaomeng Li

• Adaptive Defense against Harmful Fine-Tuning for Large Language Models via Bayesian Data Scheduler

  Zixuan Hu, Li Shen, Zhenyi Wang, Yongxian Wei, Dacheng Tao

• Sparse Model Inversion: Efficient Inversion of Vision Transformers for Data-Free Applications

  Zixuan Hu, Yongxian Wei, Li Shen, Zhenyi Wang, Lei Li, Chun Yuan, Dacheng Tao

• Contrastive Knowledge Transfer and Robust Optimization for Secure Alignment of Large Language Models

  Jiasen Zheng, Huajun Zhang, Xu Yan, Ran Hao, Chong Peng

• SilhouetteTell: Practical Video Identification Leveraging Blurred Recordings of Video Subtitles

  Guanchong Huang, Song Fang

• Trans-defense: Transformer-based Denoiser for Adversarial Defense with Spatial-Frequency Domain Representation

  Alik Pramanick, Mayank Bansal, Utkarsh Srivastava, Suklav Ghosh, Arijit Sur

• C-LEAD: Contrastive Learning for Enhanced Adversarial Defense

  Suklav Ghosh, Sonal Kumar, Arijit Sur

• Rethinking Robust Adversarial Concept Erasure in Diffusion Models

  Qinghong Yin, Yu Tian, Yue Zhang

• A Hybrid Deep Learning and Forensic Approach for Robust Deepfake Detection

  Sales Aribe Jr

• ANCHOR: Integrating Adversarial Training with Hard-mined Supervised Contrastive Learning for Robust Representation Learning

  Samarup Bhattacharya, Anubhab Bhattacharya, Abir Chakraborty

• Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels

  Chenghao Du, Quanfeng Huang, Tingxuan Tang, Zihao Wang, Yue Xiao

• Prevalence of Security and Privacy Risk-Inducing Usage of AI-based Conversational Agents

  Kathrin Grosse, Nico Ebert

• What About the Scene with the Hitler Reference? HAUNT: A Framework to Probe LLMs' Self-consistency Via Adversarial Nudge

  Arka Dutta, Sujan Dutta, Rijul Magu, Soumyajit Datta, Munmun De Choudhury, Ashiqur R. KhudaBukhsh

• Self-HarmLLM: Can Large Language Model Harm Itself?

  Heehwan Kim, Sungjune Park, Daeseon Choi

2025-10-30

• Chain-of-Thought Hijacking

  Jianli Zhao, Tingchen Fu, Rylan Schaeffer, Mrinank Sharma, Fazl Barez

• The Oversight Game: Learning to Cooperatively Balance an AI Agent's Safety and Autonomy

  William Overman, Mohsen Bayati

• SIRAJ: Diverse and Efficient Red-Teaming for LLM Agents via Distilled Structured Reasoning

  Kaiwen Zhou, Ahmed Elgohary, A S M Iftekhar, Amin Saied

• Do Students Debias Like Teachers? On the Distillability of Bias Mitigation Methods

  Jiali Cheng, Chirag Agarwal, Hadi Amiri

• Security Risk of Misalignment between Text and Image in Multi-modal Model

  Xiaosen Wang, Zhijin Ge, Shaokang Wang

• SSCL-BW: Sample-Specific Clean-Label Backdoor Watermarking for Dataset Ownership Verification

  Yingjia Wang, Ting Qiao, Xing Liu, Chongzuo Li, Sixing Wu, Jianbin Li

• Robust Graph Condensation via Classification Complexity Mitigation

  Jiayi Luo, Qingyun Sun, Beining Yang, Haonan Yuan, Xingcheng Fu, Yanbiao Ma, Jianxin Li, Philip S. Yu

• Model Inversion with Layer-Specific Modeling and Alignment for Data-Free Continual Learning

  Ruilin Tong, Haodong Lu, Yuhang Liu, Dong Gong

• Agent Skills Enable a New Class of Realistic and Trivially Simple Prompt Injections

  David Schmotz, Sahar Abdelnabi, Maksym Andriushchenko

• On Measuring Localization of Shortcuts in Deep Networks

  Nikita Tsoy, Nikola Konstantinov

• ALMGuard: Safety Shortcuts and Where to Find Them as Guardrails for Audio-Language Models

  Weifei Jin, Yuxin Cao, Junjie Su, Minhui Xue, Jie Hao, Ke Xu, Jin Song Dong, Derui Wang

• PEEL: A Poisoning-Exposing Encoding Theoretical Framework for Local Differential Privacy

  Lisha Shuai, Jiuling Dong, Nan Zhang, Shaofeng Tan, Haokun Zhang, Zilong Song, Gaoya Dong, Xiaolong Yang

• A DRL-Empowered Multi-Level Jamming Approach for Secure Semantic Communication

  Weixuan Chen, Qianqian Yang

• Accurate Target Privacy Preserving Federated Learning Balancing Fairness and Utility

  Kangkang Sun, Jun Wu, Minyi Guo, Jianhua Li, Jianwei Huang

• Broken-Token: Filtering Obfuscated Prompts by Counting Characters-Per-Token

  Shaked Zychlinski, Yuval Kainan

• Fine-Grained Iterative Adversarial Attacks with Limited Computation Budget

  Zhichao Hou, Weizhi Gao, Xiaorui Liu

• Unvalidated Trust: Cross-Stage Vulnerabilities in Large Language Model Architectures

  Dominik Schwarz

• Semantically-Aware LLM Agent to Enhance Privacy in Conversational AI Services

  Jayden Serenari, Stephen Lee

• PF-DAformer: Proximal Femur Segmentation via Domain Adaptive Transformer for Dual-Center QCT

  Rochak Dhakal, Chen Zhao, Zixin Shi, Joyce H. Keyak, Tadashi S. Kaneko, Kuan-Jui Su, Hui Shen, Hong-Wen Deng, Weihua Zhou

• Reasoning Up the Instruction Ladder for Controllable Language Models

  Zishuo Zheng, Vidhisha Balachandran, Chan Young Park, Faeze Brahman, Sachin Kumar

2025-10-29

• Agentic Moderation: Multi-Agent Design for Safer Vision-Language Models

  Juan Ren, Mark Dras, Usman Naseem

• Lipschitz-aware Linearity Grafting for Certified Robustness

  Yongjin Han, Suhyun Kim

• ZK-SenseLM: Verifiable Large-Model Wireless Sensing with Selective Abstention and Zero-Knowledge Attestation

  Hasan Akgul, Mari Eplik, Javier Rojas, Aina Binti Abdullah, Pieter van der Merwe

• DeepShield: Fortifying Deepfake Video Detection with Local and Global Forgery Analysis

  Yinqi Cai, Jichang Li, Zhaolun Li, Weikai Chen, Rushi Lan, Xi Xie, Xiaonan Luo, Guanbin Li

• A Unified Bilevel Model for Adversarial Learning and A Case Study

  Yutong Zheng, Qingna Li

• On the Stability of Neural Networks in Deep Learning

  Blaise Delattre

• Spectral Perturbation Bounds for Low-Rank Approximation with Applications to Privacy

  Phuc Tran, Nisheeth K. Vishnoi, Van H. Vu

• Model Inversion Attacks Meet Cryptographic Fuzzy Extractors

  Mallika Prabhakar, Louise Xu, Prateek Saxena

• NetEcho: From Real-World Streaming Side-Channels to Full LLM Conversation Recovery

  Zheng Zhang, Guanlong Wu, Sen Deng, Shuai Wang, Yinqian Zhang

• SciTrust 2.0: A Comprehensive Framework for Evaluating Trustworthiness of Large Language Models in Scientific Applications

  Emily Herron, Junqi Yin, Feiyi Wang

• FakeZero: Real-Time, Privacy-Preserving Misinformation Detection for Facebook and X

  Soufiane Essahli, Oussama Sarsar, Imane Fouad, Anas Motii, Ahmed Bentajer

• Robust GNN Watermarking via Implicit Perception of Topological Invariants

  Jipeng Li, Yannning Shen

• Adversarial Pre-Padding: Generating Evasive Network Traffic Against Transformer-Based Classifiers

  Quanliang Jing, Xinxin Fan, Yanyan Liu, Jingping Bi

• VISAT: Benchmarking Adversarial and Distribution Shift Robustness in Traffic Sign Recognition with Visual Attributes

  Simon Yu, Peilin Yu, Hongbo Zheng, Huajie Shao, Han Zhao, Lui Sha

• Layer of Truth: Probing Belief Shifts under Continual Pre-Training Poisoning

  Svetlana Churina, Niranjan Chebrolu, Kokil Jaidka

• SmoothGuard: Defending Multimodal Large Language Models with Noise Perturbation and Clustering Aggregation

  Guangzhi Su, Shuchang Huang, Yutong Ke, Zhuohang Liu, Long Qian, Kaizhu Huang

2025-10-28

• OS-Sentinel: Towards Safety-Enhanced Mobile GUI Agents via Hybrid Validation in Realistic Workflows

  Qiushi Sun, Mukai Li, Zhoumianze Liu, Zhihui Xie, Fangzhi Xu, Zhangyue Yin, Kanzhi Cheng, Zehao Li, Zichen Ding, Qi Liu, Zhiyong Wu, Zhuosheng Zhang, Ben Kao, Lingpeng Kong

• Causal-Aware Generative Adversarial Networks with Reinforcement Learning

  Tu Anh Hoang Nguyen, Dang Nguyen, Tri-Nhan Vo, Thuc Duy Le, Sunil Gupta

• The Cost of Robustness: Tighter Bounds on Parameter Complexity for Robust Memorization in ReLU Nets

  Yujun Kim, Chaewon Moon, Chulhee Yun

• SPARTA: Evaluating Reasoning Segmentation Robustness through Black-Box Adversarial Paraphrasing in Text Autoencoder Latent Space

  Viktoriia Zinkovich, Anton Antonov, Andrei Spiridonov, Denis Shepelev, Andrey Moskalenko, Daria Pugacheva, Elena Tutubalina, Andrey Kuznetsov, Vlad Shakhuro

• Relative Scaling Laws for LLMs

  William Held, David Hall, Percy Liang, Diyi Yang

• SPICE: Self-Play In Corpus Environments Improves Reasoning

  Bo Liu, Chuanyang Jin, Seungone Kim, Weizhe Yuan, Wenting Zhao, Ilia Kulikov, Xian Li, Sainbayar Sukhbaatar, Jack Lanchantin, Jason Weston

• AdvBlur: Adversarial Blur for Robust Diabetic Retinopathy Classification and Cross-Domain Generalization

  Heethanjan Kanagalingam, Thenukan Pathmanathan, Mokeeshan Vathanakumar, Tharmakulasingam Mukunthan

• AutoPrompt: Automated Red-Teaming of Text-to-Image Models via LLM-Driven Adversarial Prompts

  Yufan Liu, Wanqian Zhang, Huashan Chen, Lin Wang, Xiaojun Jia, Zheng Lin, Weiping Wang

• Enhancing CLIP Robustness via Cross-Modality Alignment

  Xingyu Zhu, Beier Zhu, Shuo Wang, Kesen Zhao, Hanwang Zhang

• Vanish into Thin Air: Cross-prompt Universal Adversarial Attacks for SAM2

  Ziqi Zhou, Yifan Hu, Yufei Song, Zijing Li, Shengshan Hu, Leo Yu Zhang, Dezhong Yao, Long Zheng, Hai Jin

• A Dual-Branch CNN for Robust Detection of AI-Generated Facial Forgeries

  Xin Zhang, Yuqi Song, Fei Zuo

• A Pragmatic Way to Measure Chain-of-Thought Monitorability

  Scott Emmons, Roland S. Zimmermann, David K. Elson, Rohin Shah

• Mitigating Negative Transfer via Reducing Environmental Disagreement

  Hui Sun, Zheng Xie, Hao-Yuan He, Ming Li

• SPEAR++: Scaling Gradient Inversion via Sparsely-Used Dictionary Learning

  Alexander Bakarsky, Dimitar I. Dimitrov, Maximilian Baader, Martin Vechev

• PRIVET: Privacy Metric Based on Extreme Value Theory

  Antoine Szatkownik, Aurélien Decelle, Beatriz Seoane, Nicolas Bereux, Léo Planche, Guillaume Charpiat, Burak Yelmen, Flora Jay, Cyril Furtlehner

• A Comprehensive Evaluation Framework for Synthetic Trip Data Generation in Public Transport

  Yuanyuan Wu, Zhenlin Qin, Zhenliang Ma

• A Novel XAI-Enhanced Quantum Adversarial Networks for Velocity Dispersion Modeling in MaNGA Galaxies

  Sathwik Narkedimilli, N V Saran Kumar, Aswath Babu H, Manjunath K Vanahalli, Manish M, Vinija Jain, Aman Chadha

• Self-Concordant Perturbations for Linear Bandits

  Lucas Lévy, Jean-Lou Valeau, Arya Akhavan, Patrick Rebeschini

• What Can Be Recovered Under Sparse Adversarial Corruption? Assumption-Free Theory for Linear Measurements

  Vishal Halder, Alexandre Reiffers-Masson, Abdeldjalil Aïssa-El-Bey, Gugan Thoppe

• Attack on a PUF-based Secure Binary Neural Network

  Bijeet Basak, Nupur Patil, Kurian Polachan, Srinivas Vivek

• Cybersecurity AI Benchmark (CAIBench): A Meta-Benchmark for Evaluating Cybersecurity AI Agents

  María Sanz-Gómez, Víctor Mayoral-Vilches, Francesco Balassone, Luis Javier Navarrete-Lozano, Cristóbal R. J. Veas Chavez, Maite del Mundo de Torres

• Your Microphone Array Retains Your Identity: A Robust Voice Liveness Detection System for Smart Speakers

  Yan Meng, Jiachun Li, Matthew Pillari, Arjun Deopujari, Liam Brennan, Hafsah Shamsie, Haojin Zhu, Yuan Tian

• Hammering the Diagnosis: Rowhammer-Induced Stealthy Trojan Attacks on ViT-Based Medical Imaging

  Banafsheh Saber Latibari, Najmeh Nazari, Hossein Sayadi, Houman Homayoun, Abhijit Mahalanobis

• FaRAccel: FPGA-Accelerated Defense Architecture for Efficient Bit-Flip Attack Resilience in Transformer Models

  Najmeh Nazari, Banafsheh Saber Latibari, Elahe Hosseini, Fatemeh Movafagh, Chongzhou Fang, Hosein Mohammadi Makrani, Kevin Immanuel Gubbi, Abhijit Mahalanobis, Setareh Rafatirad, Hossein Sayadi, Houman Homayoun

• Learning to Attack: Uncovering Privacy Risks in Sequential Data Releases

  Ziyao Cui, Minxing Zhang, Jian Pei

• scMRDR: A scalable and flexible framework for unpaired single-cell multi-omics data integration

  Jianle Sun, Chaoqi Liang, Ran Wei, Peng Zheng, Lei Bai, Wanli Ouyang, Hongliang Yan, Peng Ye

• Secure Retrieval-Augmented Generation against Poisoning Attacks

  Zirui Cheng, Jikai Sun, Anjun Gao, Yueyang Quan, Zhuqing Liu, Xiaohua Hu, Minghong Fang

2025-10-27

• Multi-Environment POMDPs: Discrete Model Uncertainty Under Partial Observability

  Eline M. Bovy, Caleb Probine, Marnix Suilen, Ufuk Topcu, Nils Jansen

• Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges

  Shrestha Datta, Shahriar Kabir Nahin, Anshuman Chhabra, Prasant Mohapatra

• MCPGuard : Automatically Detecting Vulnerabilities in MCP Servers

  Bin Wang, Zexin Liu, Hao Yu, Ao Yang, Yenan Huang, Jing Guo, Huangsheng Cheng, Hui Li, Huiyu Wu

• QueryIPI: Query-agnostic Indirect Prompt Injection on Coding Agents

  Yuchong Xie, Zesen Liu, Mingyu Luo, Zhixiang Zhang, Kaikai Zhang, Zongjie Li, Ping Chen, Shuai Wang, Dongdong She

• Explainable Detection of AI-Generated Images with Artifact Localization Using Faster-Than-Lies and Vision-Language Models for Edge Devices

  Aryan Mathur, Asaduddin Ahmed, Pushti Amit Vasoya, Simeon Kandan Sonar, Yasir Z, Madesh Kuppusamy

• Differential Privacy: Gradient Leakage Attacks in Federated Learning Environments

  Miguel Fernandez-de-Retana, Unai Zulaika, Rubén Sánchez-Corcuera, Aitor Almeida

• Cross-Lingual Summarization as a Black-Box Watermark Removal Attack

  Gokul Ganesan

• Differential Privacy as a Perk: Federated Learning over Multiple-Access Fading Channels with a Multi-Antenna Base Station

  Hao Liang, Haifeng Wen, Kaishun Wu, Hong Xing

• CompressionAttack: Exploiting Prompt Compression as a New Attack Surface in LLM-Powered Agents

  Zesen Liu, Zhixiang Zhang, Yuchong Xie, Dongdong She

• Retracing the Past: LLMs Emit Training Data When They Get Lost

  Myeongseob Ko, Nikhil Reddy Billa, Adam Nguyen, Charles Fleming, Ming Jin, Ruoxi Jia

2025-10-25

• T2I-RiskyPrompt: A Benchmark for Safety Evaluation, Attack, and Defense on Text-to-Image Model

  Chenyu Zhang, Tairen Zhang, Lanjun Wang, Ruidong Chen, Wenhui Li, Anan Liu

2025-10-24

• NeuroGenPoisoning: Neuron-Guided Attacks on Retrieval-Augmented Generation of LLM via Genetic Optimization of External Knowledge

  Hanyu Zhu, Lance Fiondella, Jiawei Yuan, Kai Zeng, Long Jiao

• When Models Outthink Their Safety: Mitigating Self-Jailbreak in Large Reasoning Models with Chain-of-Guardrails

  Yingzhi Mao, Chunkang Zhang, Junxiang Wang, Xinyan Guan, Boxi Cao, Yaojie Lu, Hongyu Lin, Xianpei Han, Le Sun

• Reducing the Probability of Undesirable Outputs in Language Models Using Probabilistic Inference

  Stephen Zhao, Aidan Li, Rob Brekelmans, Roger Grosse

• SafetyPairs: Isolating Safety Critical Image Features with Counterfactual Image Generation

  Alec Helbling, Shruti Palaskar, Kundan Krishna, Polo Chau, Leon Gatys, Joseph Yitan Cheng

• DictPFL: Efficient and Private Federated Learning on Encrypted Gradients

  Jiaqi Xue, Mayank Kumar, Yuzhang Shang, Shangqian Gao, Rui Ning, Mengxin Zheng, Xiaoqian Jiang, Qian Lou

• How Hard is it to Confuse a World Model?

  Waris Radji, Odalric-Ambrym Maillard

• PINN Balls: Scaling Second-Order Methods for PINNs with Domain Decomposition and Adaptive Sampling

  Andrea Bonfanti, Ismael Medina, Roman List, Björn Staeves, Roberto Santana, Marco Ellero

• Probe-based Fine-tuning for Reducing Toxicity

  Jan Wehner, Mario Fritz

• FrameShield: Adversarially Robust Video Anomaly Detection

  Mojtaba Nafez, Mobina Poulaei, Nikan Vasei, Bardia Soltani Moakhar, Mohammad Sabokrou, MohammadHossein Rohban

• Soft Instruction De-escalation Defense

  Nils Philipp Walter, Chawin Sitawarin, Jamie Hayes, David Stutz, Ilia Shumailov

• Doubly-Regressing Approach for Subgroup Fairness

  Kyungseon Lee, Kunwoong Kim, Jihu Lee, Dongyoon Yang, Yongdai Kim

• QAE-BAC: Achieving Quantifiable Anonymity and Efficiency in Blockchain-Based Access Control with Attribute

  Jie Zhang, Xiaohong Li, Mengke Zhang, Ruitao Feng, Shanshan Xu, Zhe Hou, Guangdong Bai

• Adjacent Words, Divergent Intents: Jailbreaking Large Language Models via Task Concurrency

  Yukun Jiang, Mingjie Li, Michael Backes, Yang Zhang

• The Trojan Example: Jailbreaking LLMs through Template Filling and Unsafety Reasoning

  Mingrui Liu, Sixiao Zhang, Cheng Long, Kwok Yan Lam

• Enhanced MLLM Black-Box Jailbreaking Attacks and Defenses

  Xingwei Zhong, Kar Wai Fok, Vrizlynn L.L. Thing

• Spatio-Temporal Attention Network for Epileptic Seizure Prediction

  Zan Li, Kyongmin Yeo, Wesley Gifford, Lara Marcuse, Madeline Fields, Bülent Yener

2025-10-23

• SAID: Empowering Large Language Models with Self-Activating Internal Defense

  Yulong Chen, Yadong Liu, Jiawen Zhang, Mu Li, Chao Huang, Jie Wen

• Enhancing Security in Deep Reinforcement Learning: A Comprehensive Survey on Adversarial Attacks and Defenses

  Wu Yichao, Wang Yirui, Ding Panpan, Wang Hailong, Zhu Bingqian, Liu Chun

• GhostEI-Bench: Do Mobile Agents Resilience to Environmental Injection in Dynamic On-Device Environments?

  Chiyu Chen, Xinhao Song, Yunkai Chai, Yang Yao, Haodong Zhao, Lijun Li, Jie Li, Yan Teng, Gongshen Liu, Yingchun Wang

• Transferable Black-Box One-Shot Forging of Watermarks via Image Preference Models

  Tomáš Souček, Sylvestre-Alvise Rebuffi, Pierre Fernandez, Nikola Jovanović, Hady Elsahar, Valeriu Lacatusu, Tuan Tran, Alexandre Mourachko

• Steering Evaluation-Aware Language Models To Act Like They Are Deployed

  Tim Tian Hua, Andrew Qin, Samuel Marks, Neel Nanda

• AdaDoS: Adaptive DoS Attack via Deep Adversarial Reinforcement Learning in SDN

  Wei Shao, Yuhao Wang, Rongguang He, Muhammad Ejaz Ahmed, Seyit Camtepe

• RAGRank: Using PageRank to Counter Poisoning in CTI LLM Pipelines

  Austin Jia, Avaneesh Ramesh, Zain Shamsi, Daniel Zhang, Alex Liu

• Dialogue Is Not Enough to Make a Communicative BabyLM (But Neither Is Developmentally Inspired Reinforcement Learning)

  Francesca Padovani, Bastian Bunzeck, Manar Ali, Omar Momen, Arianna Bisazza, Hendrik Buschmeier, Sina Zarrieß

• BadGraph: A Backdoor Attack Against Latent Diffusion Model for Text-Guided Graph Generation

  Liang Ye, Shengqin Chen, Jiazhu Dai

• Causal Debiasing for Visual Commonsense Reasoning

  Jiayi Zou, Gengyun Jia, Bing-Kun Bao

• Dino-Diffusion Modular Designs Bridge the Cross-Domain Gap in Autonomous Parking

  Zixuan Wu, Hengyuan Zhang, Ting-Hsuan Chen, Yuliang Guo, David Paz, Xinyu Huang, Liu Ren

• MEIcoder: Decoding Visual Stimuli from Neural Activity by Leveraging Most Exciting Inputs

  Jan Sobotka, Luca Baroni, Ján Antolík

• H-SPLID: HSIC-based Saliency Preserving Latent Information Decomposition

  Lukas Miklautz, Chengzhi Shi, Andrii Shkabrii, Theodoros Thirimachos Davarakis, Prudence Lam, Claudia Plant, Jennifer Dy, Stratis Ioannidis

• Adversary-Aware Private Inference over Wireless Channels

  Mohamed Seif, Malcolm Egan, Andrea J. Goldsmith, H. Vincent Poor

• Beyond Text: Multimodal Jailbreaking of Vision-Language and Audio Models through Perceptually Simple Transformations

  Divyanshu Kumar, Shreyas Jena, Nitin Aravind Birur, Tanay Baswa, Sahil Agarwal, Prashanth Harshangi

• HHEML: Hybrid Homomorphic Encryption for Privacy-Preserving Machine Learning on Edge

  Yu Hin Chan, Hao Yang, Shiyu Shen, Xingyu Fan, Shengzhe Lyu, Patrick S. Y. Hung, Ray C. C. Cheung

• NeuPerm: Disrupting Malware Hidden in Neural Network Parameters by Leveraging Permutation Symmetry

  Daniel Gilkarov, Ran Dubin

• An Experimental Study of Trojan Vulnerabilities in UAV Autonomous Landing

  Reza Ahmari, Ahmad Mohammadi, Vahid Hemmati, Mohammed Mynuddin, Mahmoud Nabil Mahmoud, Parham Kebria, Abdollah Homaifar, Mehrdad Saif

• Fair Representation Learning with Controllable High Confidence Guarantees via Adversarial Inference

  Yuhong Luo, Austin Hoag, Xintong Wang, Philip S. Thomas, Przemyslaw A. Grabowicz

• Kernel Learning with Adversarial Features: Numerical Efficiency and Adaptive Regularization

  Antônio H. Ribeiro, David Vävinggren, Dave Zachariah, Thomas B. Schön, Francis Bach

• Can Current Detectors Catch Face-to-Voice Deepfake Attacks?

  Nguyen Linh Bao Nguyen, Alsharif Abuadbba, Kristen Moore, Tingming Wu

• A new measure for dynamic leakage based on quantitative information flow

  Luigi D. C. Soares, Mário S. Alvim, Natasha Fernandes

• A Reinforcement Learning Framework for Robust and Secure LLM Watermarking

  Li An, Yujian Liu, Yepeng Liu, Yuheng Bu, Yang Zhang, Shiyu Chang

• Adversarially-Aware Architecture Design for Robust Medical AI Systems

  Alyssa Gerhart, Balaji Iyangar

2025-10-22

• LAPRAD: LLM-Assisted PRotocol Attack Discovery

  R.Can Aygun, Yehuda Afek, Anat Bremler-Barr, Leonard Kleinrock

• Collaborative penetration testing suite for emerging generative AI algorithms

  Petar Radanliev

• A New Type of Adversarial Examples

  Xingyang Nie, Guojie Xiao, Su Pan, Biao Wang, Huilin Ge, Tao Fang

• Monitoring LLM-based Multi-Agent Systems Against Corruptions via Node Evaluation

  Chengcan Wu, Zhixin Zhang, Mingqian Xu, Zeming Wei, Meng Sun

• Style Attack Disguise: When Fonts Become a Camouflage for Adversarial Intent

  Yangshijie Zhang, Xinda Wang, Jialin Liu, Wenqiang Wang, Zhicong Ma, Xingxing Jia

• Machine Text Detectors are Membership Inference Attacks

  Ryuto Koike, Liam Dugan, Masahiro Kaneko, Chris Callison-Burch, Naoaki Okazaki

• Hubble: a Model Suite to Advance the Study of LLM Memorization

  Johnny Tian-Zheng Wei, Ameya Godbole, Mohammad Aflah Khan, Ryan Wang, Xiaoyuan Zhu, James Flemings, Nitya Kashyap, Krishna P. Gummadi, Willie Neiswanger, Robin Jia

• OpenGuardrails: An Open-Source Context-Aware AI Guardrails Platform

  Thomas Wang, Haowen Li

• LLM Unlearning with LLM Beliefs

  Kemou Li, Qizhou Wang, Yue Wang, Fengpeng Li, Jun Liu, Bo Han, Jiantao Zhou

• Blackbox Model Provenance via Palimpsestic Membership Inference

  Rohith Kuditipudi, Jing Huang, Sally Zhu, Diyi Yang, Christopher Potts, Percy Liang

• AegisRF: Adversarial Perturbations Guided with Sensitivity for Protecting Intellectual Property of Neural Radiance Fields

  Woo Jae Kim, Kyu Beom Han, Yoonki Cho, Youngju Na, Junsik Jung, Sooel Son, Sung-eui Yoon

• Can You Trust What You See? Alpha Channel No-Box Attacks on Video Object Detection

  Ariana Yi, Ce Zhou, Liyang Xiao, Qiben Yan

• Subliminal Corruption: Mechanisms, Thresholds, and Interpretability

  Reya Vir, Sarvesh Bhatnagar

• ConvXformer: Differentially Private Hybrid ConvNeXt-Transformer for Inertial Navigation

  Omer Tariq, Muhammad Bilal, Muneeb Ul Hassan, Dongsoo Han, Jon Crowcroft

• Revisiting the Relation Between Robustness and Universality

  M. Klabunde, L. Caspari, F. Lemmerich

• The Tail Tells All: Estimating Model-Level Membership Inference Vulnerability Without Reference Models

  Euodia Dodd, Nataša Krčo, Igor Shilov, Yves-Alexandre de Montjoye

• HAMLOCK: HArdware-Model LOgically Combined attacK

  Sanskar Amgain, Daniel Lobo, Atri Chatterjee, Swarup Bhunia, Fnu Suya

• Exploring the Effect of DNN Depth on Adversarial Attacks in Network Intrusion Detection Systems

  Mohamed ElShehaby, Ashraf Matrawy

• Defending Against Prompt Injection with DataFilter

  Yizhu Wang, Sizhe Chen, Raghad Alkhudair, Basel Alomair, David Wagner

• AegisMCP: Online Graph Intrusion Detection for Tool-Augmented LLMs on Edge Devices

  Zhonghao Zhan, Amir Al Sadi, Krinos Li, Hamed Haddadi

• Privacy-Preserving Spiking Neural Networks: A Deep Dive into Encryption Parameter Optimisation

  Mahitha Pulivathi

• CircuitGuard: Mitigating LLM Memorization in RTL Code Generation Against IP Leakage

  Nowfel Mashnoor, Mohammad Akyash, Hadi Kamali, Kimia Azar

• LLMs can hide text in other text of the same length.ipynb

  Antonio Norelli, Michael Bronstein

• Ask What Your Country Can Do For You: Towards a Public Red Teaming Model

  Wm. Matthew Kennedy, Cigdem Patlak, Jayraj Dave, Blake Chambers, Aayush Dhanotiya, Darshini Ramiah, Reva Schwartz, Jack Hagen, Akash Kundu, Mouni Pendharkar, Liam Baisley, Theodora Skeadas, Rumman Chowdhury

• Mitigating Privacy-Utility Trade-off in Decentralized Federated Learning via $f$-Differential Privacy

  Xiang Li, Buxin Su, Chendi Wang, Qi Long, Weijie J. Su

• Towards Strong Certified Defense with Universal Asymmetric Randomization

  Hanbin Hong, Ashish Kundu, Ali Payani, Binghui Wang, Yuan Hong

• SecureInfer: Heterogeneous TEE-GPU Architecture for Privacy-Critical Tensors for Large Language Model Deployment

  Tushar Nayan, Ziqi Zhang, Ruimin Sun

• FPT-Noise: Dynamic Scene-Aware Counterattack for Test-Time Adversarial Defense in Vision-Language Models

  Jia Deng, Jin Li, Zhenhua Zhao, Shaowei Wang

2025-10-21

• Rectifying Shortcut Behaviors in Preference-based Reward Learning

  Wenqian Ye, Guangtao Zheng, Aidong Zhang

• DuoLens: A Framework for Robust Detection of Machine-Generated Multilingual Text and Code

  Shriyansh Agrawal, Aidan Lau, Sanyam Shah, Ahan M R, Kevin Zhu, Sunishchal Dev, Vasu Sharma

• FeatureFool: Zero-Query Fooling of Video Models via Feature Map

  Duoxun Tang, Xi Xiao, Guangwu Hu, Kangkang Sun, Xiao Yang, Dongyang Chen, Qing Li, Yongjie Yin, Jiyao Wang

• Towards Universal Solvers: Using PGD Attack in Active Learning to Increase Generalizability of Neural Operators as Knowledge Distillation from Numerical PDE Solvers

  Yifei Sun

• POLAR: Policy-based Layerwise Reinforcement Learning Method for Stealthy Backdoor Attacks in Federated Learning

  Kuai Yu, Xiaoyu Wu, Peishen Yan, Qingqian Yang, Linshan Jiang, Hao Wang, Yang Hua, Tao Song, Haibing Guan

• The Black Tuesday Attack: how to crash the stock market with adversarial examples to financial forecasting models

  Thomas Hofweber, Jefrey Bergl, Ian Reyes, Amir Sadovnik

• Can Reasoning Models Obfuscate Reasoning? Stress-Testing Chain-of-Thought Monitorability

  Artur Zolkowski, Wen Xing, David Lindner, Florian Tramèr, Erik Jenner

• Extracting alignment data in open models

  Federico Barbero, Xiangming Gu, Christopher A. Choquette-Choo, Chawin Sitawarin, Matthew Jagielski, Itay Yona, Petar Veličković, Ilia Shumailov, Jamie Hayes

2025-10-20

• PLAGUE: Plug-and-play framework for Lifelong Adaptive Generation of Multi-turn Exploits

  Neeladri Bhuiya, Madhav Aggarwal, Diptanshu Purwar

• CourtGuard: A Local, Multiagent Prompt Injection Classifier

  Isaac Wu, Michael Maslowski

• GUIDE: Enhancing Gradient Inversion Attacks in Federated Learning with Denoising Models

  Vincenzo Carletti, Pasquale Foggia, Carlo Mazzocca, Giuseppe Parrella, Mario Vento

• Structured Debate Improves Corporate Credit Reasoning in Financial AI

  Yoonjin Lee, Munhee Kim, Hanbi Choi, Juhyeon Park, Seungho Lyoo, Woojin Park

2025-10-19

• SafeSearch: Do Not Trade Safety for Utility in LLM Search Agents

  Qiusi Zhan, Angeline Budiman-Chan, Abdelrahman Zayed, Xingzhi Guo, Daniel Kang, Joo-Kyung Kim

• Res-Bench: Benchmarking the Robustness of Multimodal Large Language Models to Dynamic Resolution Input

  Chenxu Li, Zhicai Wang, Yuan Sheng, Xingyu Zhu, Yanbin Hao, Xiang Wang

2025-10-18

• Fit for Purpose? Deepfake Detection in the Real World

  Guangyu Lin, Li Lin, Christina P. Walker, Daniel S. Schiff, Shu Hu

2025-10-17

• DRO-InstructZero: Distributionally Robust Prompt Optimization for Large Language Models

  Yangyang Li

• DSSmoothing: Toward Certified Dataset Ownership Verification for Pre-trained Language Models via Dual-Space Smoothing

  Ting Qiao, Xing Liu, Wenke Huang, Jianbin Li, Zhaoxin Fan, Yiming Li

• Learning to Detect Unknown Jailbreak Attacks in Large Vision-Language Models

  Shuang Liang, Zhihao Xu, Jialing Tao, Hui Xue, Xiting Wang

• SoK: Taxonomy and Evaluation of Prompt Security in Large Language Models

  Hanbin Hong, Shuya Feng, Nima Naderloui, Shenao Yan, Jingyu Zhang, Biying Liu, Ali Arastehfard, Heqing Huang, Yuan Hong

• DeceptionBench: A Comprehensive Benchmark for AI Deception Behaviors in Real-world Scenarios

  Yao Huang, Yitong Sun, Yichi Zhang, Ruochen Zhang, Yinpeng Dong, Xingxing Wei

• Language Models are Injective and Hence Invertible

  Giorgos Nikolaou, Tommaso Mencattini, Donato Crisostomi, Andrea Santilli, Yannis Panagakis, Emanuele Rodola'

• Unmasking Facial DeepFakes: A Robust Multiview Detection Framework for Natural Images

  Sami Belguesmia, Mohand Saïd Allili, Assia Hamadene

• Stress-Aware Learning under KL Drift via Trust-Decayed Mirror Descent

  Gabriel Nixon Raj

• Backdoor or Manipulation? Graph Mixture of Experts Can Defend Against Various Graph Adversarial Attacks

  Yuyuan Feng, Bin Ma, Enyan Dai

• Adversary-Free Counterfactual Prediction via Information-Regularized Representations

  Shiqin Tang, Rong Feng, Shuxin Zhuang, Hongzong Li, Youzhi Zhang

• Constrained Adversarial Perturbation

  Virendra Nishad, Bhaskar Mukhoty, Hilal AlQuabeh, Sandeep K. Shukla, Sayak Ray Chowdhury

• Blackwell's Approachability for Sequential Conformal Inference

  Guillaume Principato, Gilles Stoltz

• HarmRLVR: Weaponizing Verifiable Rewards for Harmful LLM Alignment

  Yuexiao Liu, Lijun Li, Xingjun Wang, Jing Shao

• Towards Proactive Defense Against Cyber Cognitive Attacks

  Bonnie Rushing, Mac-Rufus Umeokolo, Shouhuai Xu

• Bridging Symmetry and Robustness: On the Role of Equivariance in Enhancing Adversarial Robustness

  Longwei Wang, Ifrat Ikhtear Uddin, KC Santosh, Chaowei Zhang, Xiao Qin, Yang Zhou

2025-10-16

• Echoes of Human Malice in Agents: Benchmarking LLMs for Multi-Turn Online Harassment Attacks

  Trilok Padhi, Pinxian Lu, Abdulkadir Erol, Tanmay Sutar, Gauri Sharma, Mina Sonmez, Munmun De Choudhury, Ugur Kursuncu

• A Guardrail for Safety Preservation: When Safety-Sensitive Subspace Meets Harmful-Resistant Null-Space

  Bingjie Zhang, Yibo Yang, Renzhe, Dandan Guo, Jindong Gu, Philip Torr, Bernard Ghanem

• Terrarium: Revisiting the Blackboard for Multi-Agent Safety, Privacy, and Security Studies

  Mason Nakamura, Abhinav Kumar, Saaduddin Mahmud, Sahar Abdelnabi, Shlomo Zilberstein, Eugene Bagdasarian

• Policy Regularized Distributionally Robust Markov Decision Processes with Linear Function Approximation

  Jingwen Gu, Yiting He, Zhishuai Liu, Pan Xu

• TED++: Submanifold-Aware Backdoor Detection via Layerwise Tubular-Neighbourhood Screening

  Nam Le, Leo Yu Zhang, Kewen Liao, Shirui Pan, Wei Luo

• BinCtx: Multi-Modal Representation Learning for Robust Android App Behavior Detection

  Zichen Liu, Shao Yang, Xusheng Xiao

• Are My Optimized Prompts Compromised? Exploring Vulnerabilities of LLM-based Optimizers

  Andrew Zhao, Reshmi Ghosh, Vitor Carvalho, Emily Lawton, Keegan Hines, Gao Huang, Jack W. Stokes

• Stealthy Dual-Trigger Backdoors: Attacking Prompt Tuning in LM-Empowered Graph Foundation Models

  Xiaoyu Xue, Yuni Lai, Chenxi Huang, Yulin Zhu, Gaolei Li, Xiaoge Zhang, Kai Zhou

• Galaxy Morphology Classification with Counterfactual Explanation

  Zhuo Cao, Lena Krieger, Hanno Scharr, Ira Assent

• On the Ability of LLMs to Handle Character-Level Perturbations: How Well and How?

  Anyun Zhuo, Xuefei Ning, Ningyuan Li, Yu Wang, Pinyan Lu

• A Multi-domain Image Translative Diffusion StyleGAN for Iris Presentation Attack Detection

  Shivangi Yadav, Arun Ross

• Structured Universal Adversarial Attacks on Object Detection for Video Sequences

  Sven Jacob, Weijia Shao, Gjergji Kasneci

• Acquisition of interpretable domain information during brain MR image harmonization for content-based image retrieval

  Keima Abe, Hayato Muraki, Shuhei Tomoshige, Kenichi Oishi, Hitoshi Iyatomi

• SteeringTTA: Guiding Diffusion Trajectories for Robust Test-Time-Adaptation

  Jihyun Yu, Yoojin Oh, Wonho Bae, Mingyu Kim, Junhyug Noh

• Backdoor Unlearning by Linear Task Decomposition

  Amel Abdelraheem, Alessandro Favero, Gerome Bovet, Pascal Frossard

• When Flatness Does (Not) Guarantee Adversarial Robustness

  Nils Philipp Walter, Linara Adilova, Jilles Vreeken, Michael Kamp

• Towards geological inference with process-based and deep generative modeling, part 1: training on fluvial deposits

  Guillaume Rongier, Luk Peeters

• Redundancy-Aware Test-Time Graph Out-of-Distribution Detection

  Yue Hou, He Zhu, Ruomei Liu, Yingke Su, Junran Wu, Ke Xu

• An Information Asymmetry Game for Trigger-based DNN Model Watermarking

  Chaoyue Huang, Gejian Zhao, Hanzhou Wu, Zhihua Xia, Asad Malik

• RHINO: Guided Reasoning for Mapping Network Logs to Adversarial Tactics and Techniques with Large Language Models

  Fanchao Meng, Jiaping Gui, Yunbo Li, Yue Wu

• Certifying optimal MEV strategies with Lean

  Massimo Bartoletti, Riccardo Marchesin, Roberto Zunino

• Lexo: Eliminating Stealthy Supply-Chain Attacks via LLM-Assisted Program Regeneration

  Evangelos Lamprou, Julian Dai, Grigoris Ntousakis, Martin C. Rinard, Nikos Vasilakis

• A Hard-Label Black-Box Evasion Attack against ML-based Malicious Traffic Detection Systems

  Zixuan Liu, Yi Zhao, Zhuotao Liu, Qi Li, Chuanpu Fu, Guangmeng Zhou, Ke Xu

• DeLeaker: Dynamic Inference-Time Reweighting For Semantic Leakage Mitigation in Text-to-Image Models

  Mor Ventura, Michael Toker, Or Patashnik, Yonatan Belinkov, Roi Reichart

• Active Honeypot Guardrail System: Probing and Confirming Multi-Turn LLM Jailbreaks

  ChenYu Wu, Yi Wang, Yang Liao

• Sequential Comics for Jailbreaking Multimodal Large Language Models via Structured Visual Storytelling

  Deyue Zhang, Dongdong Yang, Junjie Mu, Quancheng Zou, Zonghao Ying, Wenzhuo Xu, Zhao Liu, Xuan Wang, Xiangzheng Zhang

• Targeted Attacks and Defenses for Distributed Federated Learning in Vehicular Networks

  Utku Demir, Tugba Erpek, Yalin E. Sagduyu, Sastry Kompella, Mengran Xue

• MAGPIE: A benchmark for Multi-AGent contextual PrIvacy Evaluation

  Gurusha Juneja, Jayanth Naga Sai Pasupulati, Alon Albalak, Wenyue Hua, William Yang Wang

• PoTS: Proof-of-Training-Steps for Backdoor Detection in Large Language Models

  Issam Seddik, Sami Souihi, Mohamed Tamaazousti, Sara Tucci Piergiovanni

• SMOTE and Mirrors: Exposing Privacy Leakage from Synthetic Minority Oversampling

  Georgi Ganev, Reza Nazari, Rees Davison, Amir Dizche, Xinmin Wu, Ralph Abbey, Jorge Silva, Emiliano De Cristofaro

• Beyond Function-Level Search: Repository-Aware Dual-Encoder Code Retrieval with Adversarial Verification

  Aofan Liu, Shiyuan Song, Haoxuan Li, Cehao Yang, Yiyan Qi

2025-10-15

• SAJA: A State-Action Joint Attack Framework on Multi-Agent Deep Reinforcement Learning

  Weiqi Guo, Guanjun Liu, Ziyuan Zhou

• TRUSTVIS: A Multi-Dimensional Trustworthiness Evaluation Framework for Large Language Models

  Ruoyu Sun, Da Song, Jiayang Song, Yuheng Huang, Lei Ma

• Injection, Attack and Erasure: Revocable Backdoor Attacks via Machine Unlearning

  Baogang Song, Dongdong Zhao, Jianwen Xiang, Qiben Xu, Zizhuo Yu

• Personal Attribute Leakage in Federated Speech Models

  Hamdan Al-Ali, Ali Reza Ghavamipour, Tommaso Caselli, Fatih Turkmen, Zeerak Talat, Hanan Aldarmaki

• Adversarial Fine-tuning in Offline-to-Online Reinforcement Learning for Robust Robot Control

  Shingo Ayabe, Hiroshi Kera, Kazuhiko Kawamoto

• Generalist++: A Meta-learning Framework for Mitigating Trade-off in Adversarial Training

  Yisen Wang, Yichuan Mo, Hongjun Wang, Junyi Li, Zhouchen Lin

• In-Browser LLM-Guided Fuzzing for Real-Time Prompt Injection Testing in Agentic AI Browsers

  Avihay Cohen

• Provably Invincible Adversarial Attacks on Reinforcement Learning Systems: A Rate-Distortion Information-Theoretic Approach

  Ziqing Lu, Lifeng Lai, Weiyu Xu

• SHIELD: Classifier-Guided Prompting for Robust and Safer LVLMs

  Juan Ren, Mark Dras, Usman Naseem

• Taming the Fragility of KV Cache Eviction in LLM Inference

  Yuan Feng, Haoyu Guo, JunLin Lv, S. Kevin Zhou, Xike Xie

• GAPS: A Clinically Grounded, Automated Benchmark for Evaluating AI Clinicians

  Xiuyuan Chen, Tao Sun, Dexin Su, Ailing Yu, Junwei Liu, Zhe Chen, Gangzeng Jin, Xin Wang, Jingnan Liu, Hansong Xiao, Hualei Zhou, Dongjie Tao, Chunxiao Guo, Minghui Yang, Yuan Xia, Jing Zhao, Qianrui Fan, Yanyun Wang, Shuai Zhen, Kezhong Chen, Jun Wang, Zewen Sun, Heng Zhao, Tian Guan, Shaodong Wang, Geyun Chang, Jiaming Deng, Hongchengcheng Chen, Kexin Feng, Ruzhen Li, Jiayi Geng, Changtai Zhao, Jun Wang, Guihu Lin, Peihao Li, Liqi Liu, Peng Wei, Jian Wang, Jinjie Gu, Ping Wang, Fan Yang

• LIBERO-Plus: In-depth Robustness Analysis of Vision-Language-Action Models

  Senyu Fei, Siyin Wang, Junhao Shi, Zihao Dai, Jikun Cai, Pengfang Qian, Li Ji, Xinzhe He, Shiduo Zhang, Zhaoye Fei, Jinlan Fu, Jingjing Gong, Xipeng Qiu

• Model-agnostic Adversarial Attack and Defense for Vision-Language-Action Models

  Haochuan Xu, Yun Sing Koh, Shuhuai Huang, Zirun Zhou, Di Wang, Jun Sakuma, Jingfeng Zhang

• Towards Adversarial Robustness and Uncertainty Quantification in DINOv2-based Few-Shot Anomaly Detection

  Akib Mohammed Khan, Bartosz Krawczyk

• Risk-adaptive Activation Steering for Safe Multimodal Large Language Models

  Jonghyun Park, Minhyuk Seo, Jonghyun Choi

• Selective Adversarial Attacks on LLM Benchmarks

  Ivan Dubrovsky, Anastasia Orlova, Illarion Iov, Nina Gubina, Irena Gureeva, Alexey Zaytsev

• Robust Minimax Boosting with Performance Guarantees

  Santiago Mazuelas, Veronica Alvarez

• From base cases to backdoors: An Empirical Study of Unnatural Crypto-API Misuse

  Victor Olaiya, Adwait Nadkarni

• Privacy-Aware Framework of Robust Malware Detection in Indoor Robots: Hybrid Quantum Computing and Deep Neural Networks

  Tan Le, Van Le, Sachin Shetty

• Toward Efficient Inference Attacks: Shadow Model Sharing via Mixture-of-Experts

  Li Bai, Qingqing Ye, Xinwei Zhang, Sen Zhang, Zi Liang, Jianliang Xu, Haibo Hu

• Who Speaks for the Trigger? Dynamic Expert Routing in Backdoored Mixture-of-Experts Transformers

  Xin Zhao, Xiaojun Chen, Bingshan Liu, Haoyu Gao, Zhendong Zhao, Yilong Chen

• Cyber-Resilient System Identification for Power Grid through Bayesian Integration

  Shimiao Li, Guannan Qu, Bryan Hooi, Vyas Sekar, Soummya Kar, Larry Pileggi

• Every Language Model Has a Forgery-Resistant Signature

  Matthew Finlayson, Xiang Ren, Swabha Swayamdipta

• Robust or Suggestible? Exploring Non-Clinical Induction in LLM Drug-Safety Decisions

  Siying Liu, Shisheng Zhang, Indu Bala

• NAPPure: Adversarial Purification for Robust Image Classification under Non-Additive Perturbations

  Junjie Nan, Jianing Li, Wei Chen, Mingkun Zhang, Xueqi Cheng

• Signature in Code Backdoor Detection, how far are we?

  Quoc Hung Le, Thanh Le-Cong, Bach Le, Bowen Xu

• PIShield: Detecting Prompt Injection Attacks via Intrinsic LLM Features

  Wei Zou, Yupei Liu, Yanting Wang, Ying Chen, Neil Gong, Jinyuan Jia

2025-10-14

• Towards Robust Artificial Intelligence: Self-Supervised Learning Approach for Out-of-Distribution Detection

  Wissam Salhab, Darine Ameyed, Hamid Mcheick, Fehmi Jaafar

• SafeMT: Multi-turn Safety for Multimodal Language Models

  Han Zhu, Juntao Dai, Jiaming Ji, Haoran Li, Chengkun Cai, Pengcheng Wen, Chi-Min Chan, Boyuan Chen, Yaodong Yang, Sirui Han, Yike Guo

• PromptLocate: Localizing Prompt Injection Attacks

  Yuqi Jia, Yupei Liu, Zedian Shao, Jinyuan Jia, Neil Gong

• Shallow Robustness, Deep Vulnerabilities: Multi-Turn Evaluation of Medical LLMs

  Blazej Manczak, Eric Lin, Francisco Eiras, James O' Neill, Vaikkunth Mugunthan

• LLM-REVal: Can We Trust LLM Reviewers Yet?

  Rui Li, Jia-Chen Gu, Po-Nien Kung, Heming Xia, Junfeng liu, Xiangwen Kong, Zhifang Sui, Nanyun Peng

• When Personalization Tricks Detectors: The Feature-Inversion Trap in Machine-Generated Text Detection

  Lang Gao, Xuhui Li, Chenxi Wang, Mingzhe Li, Wei Liu, Zirui Song, Jinghui Zhang, Rui Yan, Preslav Nakov, Xiuying Chen

• StyleDecipher: Robust and Explainable Detection of LLM-Generated Texts with Stylistic Analysis

  Siyuan Li, Aodu Wulianghai, Xi Lin, Guangyan Li, Xiang Chen, Jun Wu, Jianhua Li

• Vision Language Models Map Logos to Text via Semantic Entanglement in the Visual Projector

  Sifan Li, Hongkai Chen, Yujun Cai, Qingwen Ye, Liyang Chen, Junsong Yuan, Yiwei Wang

• Content Anonymization for Privacy in Long-form Audio

  Cristina Aggazzotti, Ashi Garg, Zexin Cai, Nicholas Andrews

• ImageSentinel: Protecting Visual Datasets from Unauthorized Retrieval-Augmented Image Generation

  Ziyuan Luo, Yangyi Zhao, Ka Chun Cheung, Simon See, Renjie Wan

• MS-GAGA: Metric-Selective Guided Adversarial Generation Attack

  Dion J. X. Ho, Gabriel Lee Jun Rong, Niharika Shrivastava, Harshavardhan Abichandani, Pai Chet Ng, Xiaoxiao Miao

• Fairness-Constrained Optimization Attack in Federated Learning

  Harsh Kasyap, Minghong Fang, Zhuqing Liu, Carsten Maple, Somanath Tripathy

• Unveiling the Vulnerability of Graph-LLMs: An Interpretable Multi-Dimensional Adversarial Attack on TAGs

  Bowen Fan, Zhilin Guo, Xunkai Li, Yihan Zhou, Bing Zhou, Zhenjun Li, Rong-Hua Li, Guoren Wang

• Keep Calm and Avoid Harmful Content: Concept Alignment and Latent Manipulation Towards Safer Answers

  Ruben Belo, Claudia Soares, Marta Guimaraes

• KoALA: KL-L0 Adversarial Detector via Label Agreement

  Siqi Li, Yasser Shoukry

• Sample-Efficient Omniprediction for Proper Losses

  Isaac Gibbs, Ryan J. Tibshirani

• DeepTrust: Multi-Step Classification through Dissimilar Adversarial Representations for Robust Android Malware Detection

  Daniel Pulido-Cortázar, Daniel Gibert, Felip Manyà

• Leaking Queries On Secure Stream Processing Systems

  Hung Pham, Viet Vo, Tien Tuan Anh Dinh, Duc Tran, Shuhao Zhang

• IP-Augmented Multi-Modal Malicious URL Detection Via Token-Contrastive Representation Enhancement and Multi-Granularity Fusion

  Ye Tian, Yanqiu Yu, Liangliang Song, Zhiquan Liu, Yanbin Wang, Jianguo Sun

• Targeted Pooled Latent-Space Steganalysis Applied to Generative Steganography, with a Fix

  Etienne Levecque, Aurélien Noirault, Tomáš Pevný, Jan Butora, Patrick Bas, Rémi Cogranne

• Who's Asking? Evaluating LLM Robustness to Inquiry Personas in Factual Question Answering

  Nil-Jana Akpinar, Chia-Jung Lee, Vanessa Murdock, Pietro Perona

• A Multilingual, Large-Scale Study of the Interplay between LLM Safeguards, Personalisation, and Disinformation

  João A. Leite, Arnav Arora, Silvia Gargova, João Luz, Gustavo Sampaio, Ian Roberts, Carolina Scarton, Kalina Bontcheva

• Pruning Cannot Hurt Robustness: Certified Trade-offs in Reinforcement Learning

  James Pedley, Benjamin Etheridge, Stephen J. Roberts, Francesco Quinzan

• An Investigation of Memorization Risk in Healthcare Foundation Models

  Sana Tonekaboni, Lena Stempfle, Adibvafa Fallahpour, Walter Gerych, Marzyeh Ghassemi

• Reference-Specific Unlearning Metrics Can Hide the Truth: A Reality Check

  Sungjun Cho, Dasol Hwang, Frederic Sala, Sangheum Hwang, Kyunghyun Cho, Sungmin Cha

• Simulation-Based Pretraining and Domain Adaptation for Astronomical Time Series with Minimal Labeled Data

  Rithwik Gupta, Daniel Muthukrishna, Jeroen Audenaert

• Local Differential Privacy for Federated Learning with Fixed Memory Usage and Per-Client Privacy

  Rouzbeh Behnia, Jeremiah Birrell, Arman Riasi, Reza Ebrahimi, Kaushik Dutta, Thang Hoang

• Guarding the Guardrails: A Taxonomy-Driven Approach to Jailbreak Detection

  Olga E. Sorokoletova, Francesco Giarrusso, Vincenzo Suriani, Daniele Nardi

• RAID: Refusal-Aware and Integrated Decoding for Jailbreaking LLMs

  Tuan T. Nguyen, John Le, Thai T. Vu, Willy Susilo, Heath Cooper

2025-10-13

• GAR: Generative Adversarial Reinforcement Learning for Formal Theorem Proving

  Ruida Wang, Jiarui Yao, Rui Pan, Shizhe Diao, Tong Zhang

• PHANTOM RECALL: When Familiar Puzzles Fool Smart Models

  Souradeep Mukhopadhyay, Rishabh Baral, Nimeesh Mahajan, Samhitha Harish, Aswin RRV, Mihir Parmar, Mutsumi Nakamura, Chitta Baral

• BlackIce: A Containerized Red Teaming Toolkit for AI Security Testing

  Caelin Kaplan, Alexander Warnecke, Neil Archibald

• Countermind: A Multi-Layered Security Architecture for Large Language Models

  Dominik Schwarz

• LLM Knowledge is Brittle: Truthfulness Representations Rely on Superficial Resemblance

  Patrick Haller, Mark Ibrahim, Polina Kirichenko, Levent Sagun, Samuel J. Bell

• Don't Walk the Line: Boundary Guidance for Filtered Generation

  Sarah Ball, Andreas Haupt

• Deep Research Brings Deeper Harm

  Shuo Chen, Zonggen Li, Zhen Han, Bailan He, Tong Liu, Haokun Chen, Georg Groh, Philip Torr, Volker Tresp, Jindong Gu

• Robust Adversarial Reinforcement Learning in Stochastic Games via Sequence Modeling

  Xiaohang Tang, Zhuowen Cheng, Satyabrat Kumar

• High-Probability Bounds For Heterogeneous Local Differential Privacy

  Maryam Aliakbarpour, Alireza Fallah, Swaha Roy, Ria Stevens

• A Comprehensive Survey of Website Fingerprinting Attacks and Defenses in Tor: Advances and Open Challenges

  Yuwen Cui, Guangjing Wang, Khanh Vu, Kai Wei, Kehan Shen, Zhengyuan Jiang, Xiao Han, Ning Wang, Zhuo Lu, Yao Liu

• Robust ML-based Detection of Conventional, LLM-Generated, and Adversarial Phishing Emails Using Advanced Text Preprocessing

  Deeksha Hareesha Kulal, Chidozie Princewill Arannonu, Afsah Anwar, Nidhi Rastogi, Quamar Niyaz

• LLMAtKGE: Large Language Models as Explainable Attackers against Knowledge Graph Embeddings

  Ting Li, Yang Yang, Yipeng Yu, Liang Yao, Guoqing Chao, Ruifeng Xu

• TabVLA: Targeted Backdoor Attacks on Vision-Language-Action Models

  Zonghuan Xu, Xiang Zheng, Xingjun Ma, Yu-Gang Jiang

• Catch-Only-One: Non-Transferable Examples for Model-Specific Authorization

  Zihan Wang, Zhiyong Ma, Zhongkui Ma, Shuofeng Liu, Akide Liu, Derui Wang, Minhui Xue, Guangdong Bai

• DITTO: A Spoofing Attack Framework on Watermarked LLMs via Knowledge Distillation

  Hyeseon Ahn, Shinwoo Park, Yo-Sub Han

• PhysHSI: Towards a Real-World Generalizable and Natural Humanoid-Scene Interaction System

  Huayi Wang, Wentao Zhang, Runyi Yu, Tao Huang, Junli Ren, Feiyu Jia, Zirui Wang, Xiaojie Niu, Xiao Chen, Jiahe Chen, Qifeng Chen, Jingbo Wang, Jiangmiao Pang

• RAG-Pull: Imperceptible Attacks on RAG Systems for Code Generation

  Vasilije Stambolic, Aritra Dhar, Lukas Cavigelli

• Attacks by Content: Automated Fact-checking is an AI Security Issue

  Michael Schlichtkrull

• Large Language Models Are Effective Code Watermarkers

  Rui Xu, Jiawei Chen, Zhaoxia Yin, Cong Kong, Xinpeng Zhang

• Multi-View Graph Feature Propagation for Privacy Preservation and Feature Sparsity

  Etzion Harari, Moshe Unger

• Early Detection and Reduction of Memorisation for Domain Adaptation and Instruction Tuning

  Dean L. Slack, Noura Al Moubayed

• Living Off the LLM: How LLMs Will Change Adversary Tactics

  Sean Oesch, Jack Hutchins, Luke Koch, Kevin Kurian

• PACEbench: A Framework for Evaluating Practical AI Cyber-Exploitation Capabilities

  Zicheng Liu, Lige Huang, Jie Zhang, Dongrui Liu, Yuan Tian, Jing Shao

• Adversarial Attacks Leverage Interference Between Features in Superposition

  Edward Stevinson, Lucas Prieto, Melih Barsbey, Tolga Birdal

• Information-Preserving Reformulation of Reasoning Traces for Antidistillation

  Jiayu Ding, Lei Cui, Li Dong, Nanning Zheng, Furu Wei

• LLMAtKGE: Large Language Models as Explainable Attackers against Knowledge Graph Embeddings

  Ting Li, Yang Yang, Yipeng Yu, Liang Yao, Guoqing Chao, Ruifeng Xu

• Bag of Tricks for Subverting Reasoning-based Safety Guardrails

  Shuo Chen, Zhen Han, Haokun Chen, Bailan He, Shengyun Si, Jingpei Wu, Philip Torr, Volker Tresp, Jindong Gu

• ROFI: A Deep Learning-Based Ophthalmic Sign-Preserving and Reversible Patient Face Anonymizer

  Yuan Tian, Min Zhou, Yitong Chen, Fang Li, Lingzi Qi, Shuo Wang, Xieyang Xu, Yu Yu, Shiqiong Xu, Chaoyu Lei, Yankai Jiang, Rongzhao Zhang, Jia Tan, Li Wu, Hong Chen, Xiaowei Liu, Wei Lu, Lin Li, Huifang Zhou, Xuefei Song, Guangtao Zhai, Xianqun Fan

• CoDefend: Cross-Modal Collaborative Defense via Diffusion Purification and Prompt Optimization

  Fengling Zhu, Boshi Liu, Jingyu Hua, Sheng Zhong

• Exploring and Leveraging Class Vectors for Classifier Editing

  Jaeik Kim, Jaeyoung Do

• The Easy Path to Robustness: Coreset Selection using Sample Hardness

  Pranav Ramesh, Arjun Roy, Deepak Ravikumar, Kaushik Roy, Gopalakrishnan Srinivasan

• Quantifying Information Disclosure During Gradient Descent Using Gradient Uniqueness

  Mahmoud Abdelghafar, Maryam Aliakbarpour, Chris Jermaine

• Neutral Agent-based Adversarial Policy Learning against Deep Reinforcement Learning in Multi-party Open Systems

  Qizhou Peng, Yang Zheng, Yu Wen, Yanna Wu, Yingying Du

• Adversarial Robustness in One-Stage Learning-to-Defer

  Yannis Montreuil, Letian Yu, Axel Carlier, Lai Xing Ng, Wei Tsang Ooi

• CoSPED: Consistent Soft Prompt Targeted Data Extraction and Defense

  Yang Zhuochen, Fok Kar Wai, Thing Vrizlynn

• TraceAegis: Securing LLM-Based Agents via Hierarchical and Behavioral Anomaly Detection

  Jiahao Liu, Bonan Ruan, Xianglin Yang, Zhiwei Lin, Yan Liu, Yang Wang, Tao Wei, Zhenkai Liang

• Collaborative Shadows: Distributed Backdoor Attacks in LLM-Based Multi-Agent Systems

  Pengyu Zhu, Lijun Li, Yaxing Lyu, Li Sun, Sen Su, Jing Shao

• Joint Discriminative-Generative Modeling via Dual Adversarial Training

  Xuwang Yin, Claire Zhang, Julie Steele, Nir Shavit, Tony T. Wang

• Exploring and Leveraging Class Vectors for Classifier Editing

  Jaeik Kim, Jaeyoung Do

• Bag of Tricks for Subverting Reasoning-based Safety Guardrails

  Shuo Chen, Zhen Han, Haokun Chen, Bailan He, Shengyun Si, Jingpei Wu, Philip Torr, Volker Tresp, Jindong Gu

• Generative AI for Biosciences: Emerging Threats and Roadmap to Biosecurity

  Zaixi Zhang, Souradip Chakraborty, Amrit Singh Bedi, Emilin Mathew, Varsha Saravanan, Le Cong, Alvaro Velasquez, Sheng Lin-Gibson, Megan Blewett, Dan Hendrycs, Alex John London, Ellen Zhong, Ben Raphael, Adji Bousso Dieng, Jian Ma, Eric Xing, Russ Altman, George Church, Mengdi Wang

2025-10-12

• The Irrational Machine: Neurosis and the Limits of Algorithmic Safety

  Daniel Howard

• SASER: Stego attacks on open-source LLMs

  Ming Tan, Wei Li, Hu Tao, Hailong Ma, Aodi Liu, Qian Chen, Zilong Wang

• f-INE: A Hypothesis Testing Framework for Estimating Influence under Training Randomness

  Subhodip Panda, Dhruv Tarsadiya, Shashwat Sourav, Prathosh A.P, Sai Praneeth Karimireddy

• From Detection to Mitigation: Addressing Bias in Deep Learning Models for Chest X-Ray Diagnosis

  Clemence Mottez, Louisa Fay, Maya Varma, Sophie Ostmeier, Curtis Langlotz

• Merlin's Whisper: Enabling Efficient Reasoning in LLMs via Black-box Adversarial Prompting

  Heming Xia, Cunxiao Du, Rui Li, Chak Tou Leong, Yongqi Li, Wenjie Li

• DUAL-Bench: Measuring Over-Refusal and Robustness in Vision-Language Models

  Kaixuan Ren, Preslav Nakov, Usman Naseem

• ImpMIA: Leveraging Implicit Bias for Membership Inference Attack under Realistic Scenarios

  Yuval Golbari, Navve Wasserman, Gal Vardi, Michal Irani

• Multi-scale Frequency-Aware Adversarial Network for Parkinson's Disease Assessment Using Wearable Sensors

  Weiming Zhao, Xulong Wang, Jun Qi, Yun Yang, Po Yang

2025-10-11

• RIPRAG: Hack a Black-box Retrieval-Augmented Generation Question-Answering System with Reinforcement Learning

  Meng Xi, Sihan Lv, Yechen Jin, Guanjie Cheng, Naibo Wang, Ying Li, Jianwei Yin

• The Achilles' Heel of LLMs: How Altering a Handful of Neurons Can Cripple Language Abilities

  Zixuan Qin, Kunlin Lyu, Qingchen Yu, Yifan Sun, Zhaoxin Fan

• Pharmacist: Safety Alignment Data Curation for Large Language Models against Harmful Fine-tuning

  Guozhi Liu, Qi Mu, Tiansheng Huang, Xinhua Wang, Li Shen, Weiwei Lin, Zhang Li

• MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation

  Wentian Zhu, Zhen Xiang, Wei Niu, Le Guan

• ArtPerception: ASCII Art-based Jailbreak on LLMs with Recognition Pre-test

  Guan-Yan Yang, Tzu-Yu Cheng, Ya-Wen Teng, Farn Wanga, Kuo-Hui Yeh

• Path Drift in Large Reasoning Models:How First-Person Commitments Override Safety

  Yuyi Huang, Runzhe Zhan, Lidia S.Chao, Ailin Tao, Derek F.Wong

• A-IPO: Adaptive Intent-driven Preference Optimization

  Wenqing Wang, Muhammad Asif Ali, Ali Shoker, Ruohan Yang, Junyang Chen, Ying Sha, Huan Wang

• Backdoor Collapse: Eliminating Unknown Threats via Known Backdoor Aggregation in Language Models

  Liang Lin, Miao Yu, Moayad Aloqaily, Zhenhong Zhou, Kun Wang, Linsey Pang, Prakhar Mehrotra, Qingsong Wen

• SecureWebArena: A Holistic Security Evaluation Benchmark for LVLM-based Web Agents

  Zonghao Ying, Yangguang Shao, Jianle Gan, Gan Xu, Junjie Shen, Wenxin Zhang, Quanchen Zou, Junzheng Shi, Zhenfei Yin, Mingchuan Zhang, Aishan Liu, Xianglong Liu

• Tight Robustness Certificates and Wasserstein Distributional Attacks for Deep Neural Networks

  Bach C. Le, Tung V. Dao, Binh T. Nguyen, Hong T.M. Chu

• Adversarial Attacks on Downstream Weather Forecasting Models: Application to Tropical Cyclone Trajectory Prediction

  Yue Deng, Francisco Santos, Pang-Ning Tan, Lifeng Luo

• An information theorist's tour of differential privacy

  Anand D. Sarwate, Flavio P. Calmon, Oliver Kosut, Lalitha Sankar

• Scheming Ability in LLM-to-LLM Strategic Interactions

  Thao Pham

• ADMIT: Few-shot Knowledge Poisoning Attacks on RAG-based Fact Checking

  Yutao Wu, Xiao Liu, Yinghui Li, Yifeng Gao, Yifan Ding, Jiale Ding, Xiang Zheng, Xingjun Ma

2025-10-10

• Near-Optimal Second-Order Guarantees for Model-Based Adversarial Imitation Learning

  Shangzhe Li, Dongruo Zhou, Weitong Zhang

• RO-Bench: Large-scale robustness evaluation of MLLMs with text-driven counterfactual videos

  Zixi Yang, Jiapeng Li, Muxi Diao, Yinuo Jing, Kongming Liang

• On Epistemic Uncertainty of Visual Tokens for Object Hallucinations in Large Vision-Language Models

  Hoigi Seo, Dong Un Kang, Hyunjin Cho, Joohoon Lee, Se Young Chun

• Robust Driving Control for Autonomous Vehicles: An Intelligent General-sum Constrained Adversarial Reinforcement Learning Approach

  Junchao Fan, Xiaolin Chang

• MemLoss: Enhancing Adversarial Training with Recycling Adversarial Examples

  Soroush Mahdi, Maryam Amirmazlaghani, Saeed Saravani, Zahra Dehghanian

• On the Fairness of Privacy Protection: Measuring and Mitigating the Disparity of Group Privacy Risks for Differentially Private Machine Learning

  Zhi Yang, Changwu Huang, Ke Tang, Xin Yao

• On the Implicit Adversariality of Catastrophic Forgetting in Deep Continual Learning

  Ze Peng, Jian Zhang, Jintao Guo, Lei Qi, Yang Gao, Yinghuan Shi

• Adaptive Attacks on Trusted Monitors Subvert AI Control Protocols

  Mikhail Terekhov, Alexander Panfilov, Daniil Dzenhaliou, Caglar Gulcehre, Maksym Andriushchenko, Ameya Prabhu, Jonas Geiping

• SeCon-RAG: A Two-Stage Semantic Filtering and Conflict-Free Framework for Trustworthy RAG

  Xiaonan Si, Meilin Zhu, Simeng Qin, Lijia Yu, Lijun Zhang, Shuaitong Liu, Xinfeng Li, Ranjie Duan, Yang Liu, Xiaojun Jia

• Group-Adaptive Adversarial Learning for Robust Fake News Detection Against Malicious Comments

  Zhao Tong, Chunlin Gong, Yimeng Gu, Haichao Shi, Qiang Liu, Shu Wu, Xiao-Yu Zhang

• All Code, No Thought: Current Language Models Struggle to Reason in Ciphered Language

  Shiyuan Guo, Henry Sleight, Fabien Roger

• Text Prompt Injection of Vision Language Models

  Ruizhe Zhu

• CoBia: Constructed Conversations Can Trigger Otherwise Concealed Societal Biases in LLMs

  Nafiseh Nikeghbal, Amir Hossein Kargaran, Jana Diesner

• Exploration of Incremental Synthetic Non-Morphed Images for Single Morphing Attack Detection

  David Benavente-Rios, Juan Ruiz Rodriguez, Gustavo Gatica

• Robustness and Regularization in Hierarchical Re-Basin

  Benedikt Franke, Florian Heinrich, Markus Lange, Arne Raulf

• SeCon-RAG: A Two-Stage Semantic Filtering and Conflict-Free Framework for Trustworthy RAG

  Xiaonan Si, Meilin Zhu, Simeng Qin, Lijia Yu, Lijun Zhang, Shuaitong Liu, Xinfeng Li, Ranjie Duan, Yang Liu, Xiaojun Jia

• Uncolorable Examples: Preventing Unauthorized AI Colorization via Perception-Aware Chroma-Restrictive Perturbation

  Yuki Nii, Futa Waseda, Ching-Chun Chang, Isao Echizen

• All Code, No Thought: Current Language Models Struggle to Reason in Ciphered Language

  Shiyuan Guo, Henry Sleight, Fabien Roger

• On the Fairness of Privacy Protection: Measuring and Mitigating the Disparity of Group Privacy Risks for Differentially Private Machine Learning

  Zhi Yang, Changwu Huang, Ke Tang, Xin Yao

• SAJD: Self-Adaptive Jamming Attack Detection in AI/ML Integrated 5G O-RAN Networks

  Md Habibur Rahman, Md Sharif Hossen, Nathan H. Stephenson, Vijay K. Shah, Aloizio Da Silva

2025-10-09

• Profit Mirage: Revisiting Information Leakage in LLM-based Financial Agents

  Xiangyu Li, Yawen Zeng, Xiaofen Xing, Jin Xu, Xiangmin Xu

• VoiceAgentBench: Are Voice Assistants ready for agentic tasks?

  Dhruv Jain, Harshit Shukla, Gautam Rajeev, Ashish Kulkarni, Chandra Khatri, Shubham Agarwal

• Chain-of-Trigger: An Agentic Backdoor that Paradoxically Enhances Agentic Robustness

  Jiyang Qiu, Xinbei Ma, Yunqing Xu, Zhuosheng Zhang, Hai Zhao

• Rethinking Reasoning: A Survey on Reasoning-based Backdoors in LLMs

  Man Hu, Xinyi Wu, Zuofeng Suo, Jinbo Feng, Linghui Meng, Yanhao Jia, Anh Tuan Luu, Shuai Zhao

• Effective and Stealthy One-Shot Jailbreaks on Deployed Mobile Vision-Language Agents

  Renhua Ding, Xiao Yang, Zhengwei Fang, Jun Luo, Kun He, Jun Zhu

• MetaDefense: Defending Finetuning-based Jailbreak Attack Before and During Generation

  Weisen Jiang, Sinno Jialin Pan

• Fewer Weights, More Problems: A Practical Attack on LLM Pruning

  Kazuki Egashira, Robin Staab, Thibaud Gloaguen, Mark Vero, Martin Vechev

• Backdoor Vectors: a Task Arithmetic View on Backdoor Attacks and Defenses

  Stanisław Pawlak, Jan Dubiński, Daniel Marczak, Bartłomiej Twardowski

• Interpreting LLM-as-a-Judge Policies via Verifiable Global Explanations

  Jasmina Gajcin, Erik Miehling, Rahul Nair, Elizabeth Daly, Radu Marinescu, Seshu Tirupathi

• LLMs Learn to Deceive Unintentionally: Emergent Misalignment in Dishonesty from Misaligned Samples to Biased Human-AI Interactions

  XuHao Hu, Peng Wang, Xiaoya Lu, Dongrui Liu, Xuanjing Huang, Jing Shao

• Provably Robust Adaptation for Language-Empowered Foundation Models

  Yuni Lai, Xiaoyu Xue, Linghui Shen, Yulun Wu, Gaolei Li, Song Guo, Kai Zhou, Bin Xiao

• SAFER-AiD: Saccade-Assisted Foveal-peripheral vision Enhanced Reconstruction for Adversarial Defense

  Jiayang Liu, Daniel Tso, Yiming Bu, Qinru Qiu

• Deceptive Exploration in Multi-armed Bandits

  I. Arda Vurankaya, Mustafa O. Karabag, Wesley A. Suttle, Jesse Milzman, David Fridovich-Keil, Ufuk Topcu

• CommandSans: Securing AI Agents with Surgical Precision Prompt Sanitization

  Debeshee Das, Luca Beurer-Kellner, Marc Fischer, Maximilian Baader

• Pattern Enhanced Multi-Turn Jailbreaking: Exploiting Structural Vulnerabilities in Large Language Models

  Ragib Amin Nihal, Rui Wen, Kazuhiro Nakadai, Jun Sakuma

• CREST-Search: Comprehensive Red-teaming for Evaluating Safety Threats in Large Language Models Powered by Web Search

  Haoran Ou, Kangjie Chen, Xingshuo Han, Gelei Deng, Jie Zhang, Han Qiu, Tianwei Zhang

• VisualDAN: Exposing Vulnerabilities in VLMs with Visual-Driven DAN Commands

  Aofan Liu, Lulu Tang

2025-10-08

• The Framework That Survives Bad Models: Human-AI Collaboration For Clinical Trials

  Yao Chen, David Ohlssen, Aimee Readie, Gregory Ligozio, Ruvie Martin, Thibaud Coroller

• Are LLMs Reliable Rankers? Rank Manipulation via Two-Stage Token Optimization

  Tiancheng Xing, Jerry Li, Yixuan Du, Xiyang Hu

• DecompGAIL: Learning Realistic Traffic Behaviors with Decomposed Multi-Agent Generative Adversarial Imitation Learning

  Ke Guo, Haochen Liu, Xiaojun Wu, Chen Lv

• A Multi-Agent Framework for Stateful Inference-Time Search

  Arshika Lalan, Rajat Ghosh, Aditya Kolsur, Debojyoti Dutta

• Cocoon: A System Architecture for Differentially Private Training with Correlated Noises

  Donghwan Kim, Xin Gu, Jinho Baek, Timothy Lo, Younghoon Min, Kwangsik Shin, Jongryool Kim, Jongse Park, Kiwan Maeng

• Do Internal Layers of LLMs Reveal Patterns for Jailbreak Detection?

  Sri Durga Sai Sowmya Kadali, Evangelos E. Papalexakis

• AWM: Accurate Weight-Matrix Fingerprint for Large Language Models

  Boyi Zeng, Lin Chen, Ziwei He, Xinbing Wang, Zhouhan Lin

• Quantifying Data Contamination in Psychometric Evaluations of LLMs

  Jongwook Han, Woojung Song, Jonggeun Lee, Yohan Jo

• Red-Bandit: Test-Time Adaptation for LLM Red-Teaming via Bandit-Guided LoRA Experts

  Christos Ziakas, Nicholas Loo, Nishita Jain, Alessandra Russo

• XLSR-Kanformer: A KAN-Intergrated model for Synthetic Speech Detection

  Phuong Tuan Dat, Tran Huy Dat

• Differentially Private Synthetic Text Generation for Retrieval-Augmented Generation (RAG)

  Junki Mori, Kazuya Kakizaki, Taiki Miyagawa, Jun Sakuma

• Exposing Citation Vulnerabilities in Generative Engines

  Riku Mochizuki, Shusuke Komatsu, Souta Noguchi, Kazuto Ataka

• RedTWIZ: Diverse LLM Red Teaming via Adaptive Attack Planning

  Artur Horal, Daniel Pina, Henrique Paz, Iago Paulo, João Soares, Rafael Ferreira, Diogo Tavares, Diogo Glória-Silva, João Magalhães, David Semedo

• StyleKeeper: Prevent Content Leakage using Negative Visual Query Guidance

  Jaeseok Jeong, Junho Kim, Gayoung Lee, Yunjey Choi, Youngjung Uh

• Label-frugal satellite image change detection with generative virtual exemplar learning

  Hichem Sahbi

• OBJVanish: Physically Realizable Text-to-3D Adv. Generation of LiDAR-Invisible Objects

  Bing Li, Wuqi Wang, Yanan Zhang, Jingzheng Li, Haigen Min, Wei Feng, Xingyu Zhao, Jie Zhang, Qing Guo

• SpecGuard: Spectral Projection-based Advanced Invisible Watermarking

  Inzamamul Alam, Md Tanvir Islam, Khan Muhammad, Simon S. Woo

• Unsupervised Backdoor Detection and Mitigation for Spiking Neural Networks

  Jiachen Li, Bang Wu, Xiaoyu Xia, Xiaoning Liu, Xun Yi, Xiuzhen Zhang

• SaFeR-VLM: Toward Safety-aware Fine-grained Reasoning in Multimodal Models

  Huahui Yi, Kun Wang, Qiankun Li, Miao Yu, Liang Lin, Gongli Xi, Hao Wu, Xuming Hu, Kang Li, Yang Liu

• Revisiting Mixout: An Overlooked Path to Robust Finetuning

  Masih Aminbeidokhti, Heitor Rapela Medeiros, Eric Granger, Marco Pedersoli

• Is the Hard-Label Cryptanalytic Model Extraction Really Polynomial?

  Akira Ito, Takayuki Miura, Yosuke Todo

• Get RICH or Die Scaling: Profitably Trading Inference Compute for Robustness

  Tavish McDonald, Bo Lei, Stanislav Fort, Bhavya Kailkhura, Brian Bartoldson

• Poisoning Attacks on LLMs Require a Near-constant Number of Poison Samples

  Alexandra Souly, Javier Rando, Ed Chapman, Xander Davies, Burak Hasircioglu, Ezzeldin Shereen, Carlos Mougan, Vasilios Mavroudis, Erik Jones, Chris Hicks, Nicholas Carlini, Yarin Gal, Robert Kirk

• Falsification-Driven Reinforcement Learning for Maritime Motion Planning

  Marlon Müller, Florian Finkeldei, Hanna Krasowski, Murat Arcak, Matthias Althoff

• Code Agent can be an End-to-end System Hacker: Benchmarking Real-world Threats of Computer-use Agent

  Weidi Luo, Qiming Zhang, Tianyu Lu, Xiaogeng Liu, Bin Hu, Hung-Chun Chiu, Siyuan Ma, Yizhe Zhang, Xusheng Xiao, Yinzhi Cao, Zhen Xiang, Chaowei Xiao

• Exposing LLM User Privacy via Traffic Fingerprint Analysis: A Study of Privacy Risks in LLM Agent Interactions

  Yixiang Zhang, Xinhao Deng, Zhongyi Gu, Yihao Chen, Ke Xu, Qi Li, Jianping Wu

• Security-Robustness Trade-offs in Diffusion Steganography: A Comparative Analysis of Pixel-Space and VAE-Based Architectures

  Yuhua Xu, Wei Sun, Chengpei Tang, Jiaxing Lu, Jingying Zhou, Chen Gu

• Benchmarking Fake Voice Detection in the Fake Voice Generation Arms Race

  Xutao Mao, Ke Li, Cameron Baird, Ezra Xuanru Tao, Dan Lin

• DGTEN: A Robust Deep Gaussian based Graph Neural Network for Dynamic Trust Evaluation with Uncertainty-Quantification Support

  Muhammad Usman, Yugyung Lee

• PEAR: Planner-Executor Agent Robustness Benchmark

  Shen Dong, Mingxuan Zhang, Pengfei He, Li Ma, Bhavani Thuraisingham, Hui Liu, Yue Xing

• A2AS: Agentic AI Runtime Security and Self-Defense

  Eugene Neelou, Ivan Novikov, Max Moroz, Om Narayan, Tiffany Saade, Mika Ayenson, Ilya Kabanov, Jen Ozmen, Edward Lee, Vineeth Sai Narajala, Emmanuel Guilherme Junior, Ken Huang, Huseyin Gulsin, Jason Ross, Marat Vyshegorodtsev, Adelin Travers, Idan Habler, Rahul Jadav

• Benchmarking Fake Voice Detection in the Fake Voice Generation Arms Race

  Xutao Mao, Ke Li, Cameron Baird, Ezra Xuanru Tao, Dan Lin

2025-10-07

• RGBD Gaze Tracking Using Transformer for Feature Fusion

  Tobias J. Bauer

• Protecting De-identified Documents from Search-based Linkage Attacks

  Pierre Lison, Mark Anderson

• Geometry-Aware Backdoor Attacks: Leveraging Curvature in Hyperbolic Embeddings

  Ali Baheri

• A Survey on Agentic Security: Applications, Threats and Defenses

  Asif Shahriar, Md Nafiu Rahman, Sadif Ahmed, Farig Sadeque, Md Rizwan Parvez

• Text-to-Image Models Leave Identifiable Signatures: Implications for Leaderboard Security

  Ali Naseh, Anshuman Suri, Yuefeng Peng, Harsh Chaudhari, Alina Oprea, Amir Houmansadr

• Empirical Comparison of Membership Inference Attacks in Deep Transfer Learning

  Yuxuan Bai, Gauri Pradhan, Marlon Tobaben, Antti Honkela

• Automated Repeatable Adversary Threat Emulation with Effects Language (EL)

  Suresh K. Damodaran, Paul D. Rowe

• Proofs of No Intrusion

  Vipul Goyal, Justin Raizes

• LatentBreak: Jailbreaking Large Language Models through Latent Space Feedback

  Raffaele Mura, Giorgio Piras, Kamilė Lukošiūtė, Maura Pintor, Amin Karbasi, Battista Biggio

• Toward a Safer Web: Multilingual Multi-Agent LLMs for Mitigating Adversarial Misinformation Attacks

  Nouar Aldahoul, Yasir Zaki

• Adversarial-Resilient RF Fingerprinting: A CNN-GAN Framework for Rogue Transmitter Detection

  Raju Dhakal, Prashant Shekhar, Laxima Niure Kandel

• RareAgent: Self-Evolving Reasoning for Drug Repurposing in Rare Diseases

  Lang Qin, Zijian Gan, Xu Cao, Pengcheng Jiang, Yankai Jiang, Jiawei Han, Kaishun Wu, Jintai Chen

• The Role of Federated Learning in Improving Financial Security: A Survey

  Cade Houston Kennedy, Amr Hilal, Morteza Momeni

• LatentBreak: Jailbreaking Large Language Models through Latent Space Feedback

  Raffaele Mura, Giorgio Piras, Kamilė Lukošiūtė, Maura Pintor, Amin Karbasi, Battista Biggio

2025-10-06

• RareGraph-Synth: Knowledge-Guided Diffusion Models for Generating Privacy-Preserving Synthetic Patient Trajectories in Ultra-Rare Diseases

  Khartik Uppalapati, Shakeel Abdulkareem, Bora Yimenicioglu

• A Calibration-Free Fixed Point of Curved Boolean Logic Matching the Fine-Structure Constant

  Maximilian R. P. von Liechtenstein

• AutoDAN-Reasoning: Enhancing Strategies Exploration based Jailbreak Attacks with Test-Time Scaling

  Xiaogeng Liu, Chaowei Xiao

• Inoculation Prompting: Instructing LLMs to misbehave at train-time improves test-time alignment

  Nevan Wichers, Aram Ebtekar, Ariana Azarbal, Victor Gillioz, Christine Ye, Emil Ryd, Neil Rathi, Henry Sleight, Alex Mallen, Fabien Roger, Samuel Marks

• Inoculation Prompting: Instructing LLMs to misbehave at train-time improves test-time alignment

  Nevan Wichers, Aram Ebtekar, Ariana Azarbal, Victor Gillioz, Christine Ye, Emil Ryd, Neil Rathi, Henry Sleight, Alex Mallen, Fabien Roger, Samuel Marks

2025-10-05

• SafeGuider: Robust and Practical Content Safety Control for Text-to-Image Models

  Peigui Qi, Kunsheng Tang, Wenbo Zhou, Weiming Zhang, Nenghai Yu, Tianwei Zhang, Qing Guo, Jie Zhang

• Rounding-Guided Backdoor Injection in Deep Learning Model Quantization

  Xiangxiang Chen, Peixin Zhang, Jun Sun, Wenhai Wang, Jingyi Wang

• SafeGuider: Robust and Practical Content Safety Control for Text-to-Image Models

  Peigui Qi, Kunsheng Tang, Wenbo Zhou, Weiming Zhang, Nenghai Yu, Tianwei Zhang, Qing Guo, Jie Zhang

• Inoculation Prompting: Eliciting traits from LLMs during training can suppress them at test-time

  Daniel Tan, Anders Woodruff, Niels Warncke, Arun Jose, Maxime Riché, David Demitri Africa, Mia Taylor

• Agentic Misalignment: How LLMs Could Be Insider Threats

  Aengus Lynch, Benjamin Wright, Caleb Larson, Stuart J. Ritchie, Soren Mindermann, Evan Hubinger, Ethan Perez, Kevin Troy

2025-10-04

• Less Diverse, Less Safe: The Indirect But Pervasive Risk of Test-Time Scaling in Large Language Models

  Shahriar Kabir Nahin, Hadi Askari, Muhao Chen, Anshuman Chhabra

• Detecting Malicious Pilot Contamination in Multiuser Massive MIMO Using Decision Trees

  Pedro Ivo da Cruz, Dimitri Silva, Tito Spadini, Ricardo Suyama, Murilo Bellezoni Loiola

2025-10-03

• Uncertainty Quantification In Surface Landmines and UXO Classification Using MC Dropout

  Sagar Lekhak, Emmett J. Ientilucci, Dimah Dera, Susmita Ghosh

• Malice in Agentland: Down the Rabbit Hole of Backdoors in the AI Supply Chain

  Léo Boisvert, Abhay Puri, Chandra Kiran Reddy Evuru, Nicolas Chapados, Quentin Cappart, Alexandre Lacoste, Krishnamurthy Dj Dvijotham, Alexandre Drouin

• Attack via Overfitting: 10-shot Benign Fine-tuning to Jailbreak LLMs

  Zhixin Xie, Xurui Song, Jun Luo

• Machine Unlearning Meets Adversarial Robustness via Constrained Interventions on LLMs

  Fatmazohra Rezkellah, Ramzi Dakhmouche

• Untargeted Jailbreak Attack

  Xinzhe Huang, Wenjing Hu, Tianhang Zheng, Kedong Xiu, Xiaojun Jia, Di Wang, Zhan Qin, Kui Ren

• Fine-Tuning on Noisy Instructions: Effects on Generalization and Performance

  Ahmed Alajrami, Xingwei Tan, Nikolaos Aletras

• Time-To-Inconsistency: A Survival Analysis of Large Language Model Robustness to Adversarial Attacks

  Yubo Li, Ramayya Krishnan, Rema Padman

2025-10-02

• Dynamic Target Attack

  Kedong Xiu, Churui Zeng, Tianhang Zheng, Xinzhe Huang, Xiaojun Jia, Di Wang, Puning Zhao, Zhan Qin, Kui Ren

2025-10-01

• Vicinity-Guided Discriminative Latent Diffusion for Privacy-Preserving Domain Adaptation

  Jing Wang, Wonho Bae, Jiahong Chen, Wenxu Wang, Junhyug Noh

• Reinforcement Learning with Verifiable yet Noisy Rewards under Imperfect Verifiers

  Xin-Qiang Cai, Wei Wang, Feng Liu, Tongliang Liu, Gang Niu, Masashi Sugiyama

• Eliciting Secret Knowledge from Language Models

  Bartosz Cywiński, Emil Ryd, Rowan Wang, Senthooran Rajamanoharan, Neel Nanda, Arthur Conmy, Samuel Marks

• Private Online Learning against an Adaptive Adversary: Realizable and Agnostic Settings

  Bo Li, Wei Wang, Peng Ye

2025-09-30

• Baseline Systems For The 2025 Low-Resource Audio Codec Challenge

  Yusuf Ziya Isik, Rafał Łaganowski

• A Generalized Information Bottleneck Theory of Deep Learning

  Charles Westphal, Stephen Hailes, Mirco Musolesi

2025-09-29

• AdvChain: Adversarial Chain-of-Thought Tuning for Robust Safety Alignment of Large Reasoning Models

  Zihao Zhu, Xinyu Wu, Gehan Hu, Siwei Lyu, Ke Xu, Baoyuan Wu

• Towards Safe Reasoning in Large Reasoning Models via Corrective Intervention

  Yichi Zhang, Yue Ding, Jingwen Yang, Tianwei Luo, Dongbai Li, Ranjie Duan, Qiang Liu, Hang Su, Yinpeng Dong, Jun Zhu

• UniAPL: A Unified Adversarial Preference Learning Framework for Instruct-Following

  FaQiang Qian, WeiKun Zhang, Ziliang Wang, Kang An, Xuhui Zheng, Liangjian Wen, Mengya Gao, Yong Dai, Yichao Wu

• Stable Forgetting: Bounded Parameter-Efficient Unlearning in LLMs

  Arpit Garg, Hemanth Saratchandran, Ravi Garg, Simon Lucey

• Metamorphic Testing for Audio Content Moderation Software

  Wenxuan Wang, Yongjiang Wu, Junyuan Zhang, Shuqing Li, Yun Peng, Wenting Chen, Shuai Wang, Michael R. Lyu

• Adversarial Reinforcement Learning Framework for ESP Cheater Simulation

  Inkyu Park, Jeong-Gwan Lee, Taehwan Kwon, Juheon Choi, Seungku Kim, Junsu Kim, Kimin Lee

• DiffuGuard: How Intrinsic Safety is Lost and Found in Diffusion Large Language Models

  Zherui Li, Zheng Nie, Zhenhong Zhou, Yufei Guo, Yue Liu, Yitong Zhang, Yu Cheng, Qingsong Wen, Kun Wang, Jiaheng Zhang

• HarmMetric Eval: Benchmarking Metrics and Judges for LLM Harmfulness Assessment

  Langqi Yang, Tianhang Zheng, Kedong Xiu, Yixuan Chen, Di Wang, Puning Zhao, Zhan Qin, Kui Ren

• Community detection robustness of graph neural networks

  Jaidev Goel, Pablo Moriano, Ramakrishnan Kannan, Yulia R. Gel

• Robust Policy Expansion for Offline-to-Online RL under Diverse Data Corruption

  Longxiang He, Deheng Ye, Junbo Tan, Xueqian Wang, Li Shen

• Scalable GANs with Transformers

  Sangeek Hyun, MinKyu Lee, Jae-Pil Heo

• SecInfer: Preventing Prompt Injection via Inference-time Scaling

  Yupei Liu, Yanting Wang, Yuqi Jia, Jinyuan Jia, Neil Zhenqiang Gong

• GHOST: Hallucination-Inducing Image Generation for Multimodal LLMs

  Aryan Yazdan Parast, Parsa Hosseini, Hesam Asadollahzadeh, Arshia Soltani Moakhar, Basim Azam, Soheil Feizi, Naveed Akhtar

• Sanitize Your Responses: Mitigating Privacy Leakage in Large Language Models

  Wenjie Fu, Huandong Wang, Junyao Gao, Guoan Wan, Tao Jiang

• SemanticShield: LLM-Powered Audits Expose Shilling Attacks in Recommender Systems

  Kaihong Li, Huichi Zhou, Bin Ma, Fangjun Huang

• DRIFT: Divergent Response in Filtered Transformations for Robust Adversarial Defense

  Amira Guesmi, Muhammad Shafique

• TokenSwap: Backdoor Attack on the Compositional Understanding of Large Vision-Language Models

  Zhifang Zhang, Qiqi Tao, Jiaqi Lv, Na Zhao, Lei Feng, Joey Tianyi Zhou

• VAGUEGAN: Stealthy Poisoning and Backdoor Attacks on Image Generative Pipelines

  Mostafa Mohaimen Akand Faisal, Rabeya Amin Jhuma

• MANI-Pure: Magnitude-Adaptive Noise Injection for Adversarial Purification

  Xiaoyi Huang, Junwei Wu, Kejia Zhang, Carl Yang, Zhiming Luo

• Score-based Membership Inference on Diffusion Models

  Mingxing Rao, Bowen Qu, Daniel Moyer

• H+: An Efficient Similarity-Aware Aggregation for Byzantine Resilient Federated Learning

  Shiyuan Zuo, Rongfei Fan, Cheng Zhan, Jie Xu, Puning Zhao, Han Hu

• Distributionally Robust Federated Learning with Outlier Resilience

  Zifan Wang, Xinlei Yi, Xenia Konti, Michael M. Zavlanos, Karl H. Johansson

• Guided Uncertainty Learning Using a Post-Hoc Evidential Meta-Model

  Charmaine Barker, Daniel Bethell, Simos Gerasimou

• Learning in an Echo Chamber: Online Learning with Replay Adversary

  Daniil Dmitriev, Harald Eskelund Franck, Carolin Heinzler, Amartya Sanyal

• FuncPoison: Poisoning Function Library to Hijack Multi-agent Autonomous Driving Systems

  Yuzhen Long, Songze Li

• Takedown: How It's Done in Modern Coding Agent Exploits

  Eunkyu Lee, Donghyeon Kim, Wonyoung Kim, Insu Yun

• When MCP Servers Attack: Taxonomy, Feasibility, and Mitigation

  Weibo Zhao, Jiahao Liu, Bonan Ruan, Shaofei Li, Zhenkai Liang

• GSPR: Aligning LLM Safeguards as Generalizable Safety Policy Reasoners

  Haoran Li, Yulin Chen, Jingru Zeng, Hao Peng, Huihao Jing, Wenbin Hu, Xi Yang, Ziqian Zeng, Sirui Han, Yangqiu Song

• PRIVMARK: Private Large Language Models Watermarking with MPC

  Thomas Fargues, Ye Dong, Tianwei Zhang, Jin-Song Dong

• Secret Leader Election in Ethereum PoS: An Empirical Security Analysis of Whisk and Homomorphic Sortition under DoS on the Leader and Censorship Attacks

  Tereza Burianová, Martin Perešíni, Ivan Homoliak

2025-09-28

• Formalization Driven LLM Prompt Jailbreaking via Reinforcement Learning

  Zhaoqi Wang, Daqing He, Zijian Zhang, Xin Li, Liehuang Zhu, Meng Li, Jiamou Liu

• SafeSearch: Automated Red-Teaming for the Safety of LLM-Based Search Agents

  Jianshuo Dong, Sheng Guo, Hao Wang, Zhuotao Liu, Tianwei Zhang, Ke Xu, Minlie Huang, Han Qiu

• Quant Fever, Reasoning Blackholes, Schrodinger's Compliance, and More: Probing GPT-OSS-20B

  Shuyi Lin, Tian Lu, Zikai Wang, Bo Wen, Yibo Zhao, Cheng Tan

• Uncovering Vulnerabilities of LLM-Assisted Cyber Threat Intelligence

  Yuqiao Meng, Luoxi Tang, Feiyang Yu, Jinyuan Jia, Guanhua Yan, Ping Yang, Zhaohan Xi

• BioVessel-Net and RetinaMix: Unsupervised Retinal Vessel Segmentation from OCTA Images

  Cheng Huang, Weizheng Xie, Fan Gao, Yutong Liu, Ruoling Wu, Zeyu Han, Jingxi Qiu, Xiangxiang Wang, Zhenglin Yang, Hao Wang, Yongbin Yu

• Generalizable Speech Deepfake Detection via Information Bottleneck Enhanced Adversarial Alignment

  Pu Huang, Shouguang Wang, Siya Yao, Mengchu Zhou

• Accuracy-Robustness Trade Off via Spiking Neural Network Gradient Sparsity Trail

  Nhan T. Luu

• HFuzzer: Testing Large Language Models for Package Hallucinations via Phrase-based Fuzzing

  Yukai Zhao, Menghan Wu, Xing Hu, Xin Xia

• Adversarial Diffusion for Robust Reinforcement Learning

  Daniele Foffano, Alessio Russo, Alexandre Proutiere

• Taught Well Learned Ill: Towards Distillation-conditional Backdoor Attack

  Yukun Chen, Boheng Li, Yu Yuan, Leyi Qi, Yiming Li, Tianwei Zhang, Zhan Qin, Kui Ren

• Towards Understanding Subliminal Learning: When and How Hidden Biases Transfer

  Simon Schrodi, Elias Kempf, Fazl Barez, Thomas Brox

• Preserving Cross-Modal Stability for Visual Unlearning in Multimodal Scenarios

  Jinghan Xu Yuyang Zhang Qixuan Cai Jiancheng Chen Keqiu Li

• Beyond Magic Words: Sharpness-Aware Prompt Evolving for Robust Large Language Models with TARE

  Guancheng Wan, Lucheng Fu, Haoxin Liu, Yiqiao Jin, Hui Yi Leong, Eric Hanchen Jiang, Hejia Geng, Jinhe Bi, Yunpu Ma, Xiangru Tang, B. Aditya Prakash, Yizhou Sun, Wei Wang

• Efficient Domain-Adaptive Multi-Task Dense Prediction with Vision Foundation Models

  Beomseok Kang, Niluthpol Chowdhury Mithun, Mikhail Sizintsev, Han-Pang Chiu, Supun Samarasekera

• Assessing Visual Privacy Risks in Multimodal AI: A Novel Taxonomy-Grounded Evaluation of Vision-Language Models

  Efthymios Tsaprazlis, Tiantian Feng, Anil Ramakrishna, Rahul Gupta, Shrikanth Narayanan

• FairViT-GAN: A Hybrid Vision Transformer with Adversarial Debiasing for Fair and Explainable Facial Beauty Prediction

  Djamel Eddine Boukhari

• Adversarial Versus Federated: An Adversarial Learning based Multi-Modality Cross-Domain Federated Medical Segmentation

  You Zhou, Lijiang Chen, Shuchang Lyu, Guangxia Cui, Wenpei Bai, Zheng Zhou, Meng Li, Guangliang Cheng, Huiyu Zhou, Qi Zhao

• Bridging the Task Gap: Multi-Task Adversarial Transferability in CLIP and Its Derivatives

  Kuanrong Liu, Siyuan Liang, Cheng Qian, Ming Zhang, Xiaochun Cao

• StolenLoRA: Exploring LoRA Extraction Attacks via Synthetic Data

  Yixu Wang, Yan Teng, Yingchun Wang, Xingjun Ma

• FedDAPL: Toward Client-Private Generalization in Federated Learning

  Soroosh Safari Loaliyan, Jose-Luis Ambite, Paul M. Thompson, Neda Jahanshad, Greg Ver Steeg

• Merge Now, Regret Later: The Hidden Cost of Model Merging is Adversarial Transferability

  Ankit Gangwal, Aaryan Ajay Sharma

• Visual CoT Makes VLMs Smarter but More Fragile

  Chunxue Xu, Yiwei Wang, Yujun Cai, Bryan Hooi, Songze Li

• Influence-Guided Concolic Testing of Transformer Robustness

  Chih-Duo Hong, Yu Wang, Yao-Chen Chang, Fang Yu

• Learning-Based Testing for Deep Learning: Enhancing Model Robustness with Adversarial Input Prioritization

  Sheikh Md Mushfiqur Rahman, Nasir Eisty

• AutoML in Cybersecurity: An Empirical Study

  Sherif Saad, Kevin Shi, Mohammed Mamun, Hythem Elmiligi

• A First Look at Privacy Risks of Android Task-executable Voice Assistant Applications

  Shidong Pan, Yikai Ge, Xiaoyu Sun

• GPM: The Gaussian Pancake Mechanism for Planting Undetectable Backdoors in Differential Privacy

  Haochen Sun, Xi He

• Binary Diff Summarization using Large Language Models

  Meet Udeshi, Venkata Sai Charan Putrevu, Prashanth Krishnamurthy, Prashant Anantharaman, Sean Carrick, Ramesh Karri, Farshad Khorrami

• Analyzing and Evaluating Unbiased Language Model Watermark

  Yihan Wu, Xuehao Cui, Ruibo Chen, Heng Huang

• Performance of Machine Learning Methods for Gravity Inversion: Successes and Challenges

  Vahid Negahdari, Shirin Samadi Bahrami, Seyed Reza Moghadasi, Mohammad Reza Razvan

2025-09-27

• Deceive, Detect, and Disclose: Large Language Models Play Mini-Mafia

  Davi Bastos Costa, Renato Vicente

• LLM Watermark Evasion via Bias Inversion

  Jeongyeon Hwang, Sangdon Park, Jungseul Ok

• DPFNAS: Differential Privacy-Enhanced Federated Neural Architecture Search for 6G Edge Intelligence

  Yang Lv, Jin Cao, Ben Niu, Zhe Sun, Fengwei Wang, Fenghua Li, Hui Li

• Virus Infection Attack on LLMs: Your Poisoning Can Spread "VIA" Synthetic Data

  Zi Liang, Qingqing Ye, Xuan Liu, Yanyun Wang, Jianliang Xu, Haibo Hu

• Patch Rebirth: Toward Fast and Transferable Model Inversion of Vision Transformers

  Seongsoo Heo, Dong-Wan Choi

• Adaptive Token-Weighted Differential Privacy for LLMs: Not All Tokens Require Equal Protection

  Manjiang Yu, Priyanka Singh, Xue Li, Yang Cao

• Vid-Freeze: Protecting Images from Malicious Image-to-Video Generation via Temporal Freezing

  Rohit Chowdhury, Aniruddha Bala, Rohan Jaiswal, Siddharth Roheda

• A2D: Any-Order, Any-Step Safety Alignment for Diffusion Language Models

  Wonje Jeung, Sangyeon Yoon, Yoonjun Cho, Dongjae Jeon, Sangwoo Shin, Hyesoo Hong, Albert No

• Robust Fine-Tuning from Non-Robust Pretrained Models: Mitigating Suboptimal Transfer With Adversarial Scheduling

  Jonas Ngnawé, Maxime Heuillet, Sabyasachi Sahoo, Yann Pequignot, Ola Ahmad, Audrey Durand, Frédéric Precioso, Christian Gagné

• Dual-Space Smoothness for Robust and Balanced LLM Unlearning

  Han Yan, Zheyuan Liu, Meng Jiang

• Factor Decorrelation Enhanced Data Removal from Deep Predictive Models

  Wenhao Yang, Lin Li, Xiaohui Tao, Kaize Shi

• ReliabilityRAG: Effective and Provably Robust Defense for RAG-based Web-Search

  Zeyu Shen, Basileal Imana, Tong Wu, Chong Xiang, Prateek Mittal, Aleksandra Korolova

• Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT

  Wonhyuk Lee, Youngchol Kim, Yunjin Park, Junhyung Moon, Dongyoung Jeong, Wanjin Park

• MaskSQL: Safeguarding Privacy for LLM-Based Text-to-SQL via Abstraction

  Sepideh Abedini, Shubhankar Mohapatra, D. B. Emerson, Masoumeh Shafieinejad, Jesse C. Cresswell, Xi He

• Desensitizing for Improving Corruption Robustness in Point Cloud Classification through Adversarial Training

  Zhiqiang Tian, Weigang Li, Chunhua Deng, Junwei Hu, Yongqiang Wang, Wenping Liu

• Real-World Transferable Adversarial Attack on Face-Recognition Systems

  Andrey Kaznacheev, Matvey Mikhalchuk, Andrey Kuznetsov, Aleksandr Petiushko, Anton Razzhigaev

• Robust Multi-Modal Face Anti-Spoofing with Domain Adaptation: Tackling Missing Modalities, Noisy Pseudo-Labels, and Model Degradation

  Ming-Tsung Hsu, Fang-Yu Hsu, Yi-Ting Lin, Kai-Heng Chien, Jun-Ren Chen, Cheng-Hsiang Su, Yi-Chen Ou, Chiou-Ting Hsu, Pei-Kai Huang

• Targeted perturbations reveal brain-like local coding axes in robustified, but not standard, ANN-based brain models

  Nikolas McNeal, N. Apurva Ratan Murty

• GuardNet: Graph-Attention Filtering for Jailbreak Defense in Large Language Models

  Javad Forough, Mohammad Maheri, Hamed Haddadi

• CoSIFL: Collaborative Secure and Incentivized Federated Learning with Differential Privacy

  Zhanhong Xie, Meifan Zhang, Lihua Yin

• NanoFlux: Adversarial Dual-LLM Evaluation and Distillation For Multi-Domain Reasoning

  Raviteja Anantha, Soheil Hor, Teodor Nicola Antoniu, Layne C. Price

• FedBit: Accelerating Privacy-Preserving Federated Learning via Bit-Interleaved Packing and Cross-Layer Co-Design

  Xiangchen Meng, Yangdi Lyu

• Noisy Networks, Nosy Neighbors: Inferring Privacy Invasive Information from Encrypted Wireless Traffic

  Bartosz Burgiel

2025-09-26

• Benchmarking MLLM-based Web Understanding: Reasoning, Robustness and Safety

  Junliang Liu, Jingyu Xiao, Wenxin Tang, Wenxuan Wang, Zhixian Wang, Minrui Zhang, Shuanghe Yu

• Backdoor Attribution: Elucidating and Controlling Backdoor in Language Models

  Miao Yu, Zhenhong Zhou, Moayad Aloqaily, Kun Wang, Biwei Huang, Stephen Wang, Yueming Jin, Qingsong Wen

• You Can't Steal Nothing: Mitigating Prompt Leakages in LLMs via System Vectors

  Bochuan Cao, Changjiang Li, Yuanpu Cao, Yameng Ge, Ting Wang, Jinghui Chen

• Active Attacks: Red-teaming LLMs via Adaptive Environments

  Taeyoung Yun, Pierre-Luc St-Charles, Jinkyoo Park, Yoshua Bengio, Minsu Kim

• Benchmarking and Mitigate Psychological Sycophancy in Medical Vision-Language Models

  Zikun Guo, Xinyue Xu, Pei Xiang, Shu Yang, Xin Han, Di Wang, Lijie Hu

• Decoding Deception: Understanding Automatic Speech Recognition Vulnerabilities in Evasion and Poisoning Attacks

  Aravindhan G, Yuvaraj Govindarajulu, Parin Shah

• The Rogue Scalpel: Activation Steering Compromises LLM Safety

  Anton Korznikov, Andrey Galichin, Alexey Dontsov, Oleg Y. Rogov, Ivan Oseledets, Elena Tutubalina

• Jailbreaking on Text-to-Video Models via Scene Splitting Strategy

  Wonjun Lee, Haon Park, Doehyeon Lee, Bumsub Ham, Suhyun Kim

• Evaluating the Limits of Large Language Models in Multilingual Legal Reasoning

  Antreas Ioannou, Andreas Shiamishis, Nora Hollenstein, Nezihe Merve Gürel

• Mixture of Detectors: A Compact View of Machine-Generated Text Detection

  Sai Teja Lekkala, Yadagiri Annepaka, Arun Kumar Challa, Samatha Reddy Machireddy, Partha Pakray, Chukhu Chunka

• Context Parametrization with Compositional Adapters

  Josip Jukić, Martin Tutek, Jan Šnajder

• SBFA: Single Sneaky Bit Flip Attack to Break Large Language Models

  Jingkai Guo, Chaitali Chakrabarti, Deliang Fan

• Deepfakes: we need to re-think the concept of "real" images

  Janis Keuper, Margret Keuper

• FailureAtlas:Mapping the Failure Landscape of T2I Models via Active Exploration

  Muxi Chen, Zhaohua Zhang, Chenchen Zhao, Mingyang Chen, Wenyu Jiang, Tianwen Jiang, Jianhuan Zhuo, Yu Tang, Qiuyong Xiao, Jihong Zhang, Qiang Xu

• RAPID^3: Tri-Level Reinforced Acceleration Policies for Diffusion Transformer

  Wangbo Zhao, Yizeng Han, Zhiwei Tang, Jiasheng Tang, Pengfei Zhou, Kai Wang, Bohan Zhuang, Zhangyang Wang, Fan Wang, Yang You

• Text Adversarial Attacks with Dynamic Outputs

  Wenqiang Wang, Siyuan Liang, Xiao Yan, Xiaochun Cao

• Closing the Safety Gap: Surgical Concept Erasure in Visual Autoregressive Models

  Xinhao Zhong, Yimin Zhou, Zhiqi Zhang, Junhao Li, Yi Sun, Bin Chen, Shu-Tao Xia, Ke Xu

• Zubov-Net: Adaptive Stability for Neural ODEs Reconciling Accuracy with Robustness

  Chaoyang Luo, Yan Zou, Nanjing Huang

• Concept-SAE: Active Causal Probing of Visual Model Behavior

  Jianrong Ding, Muxi Chen, Chenchen Zhao, Qiang Xu

• Non-Linear Trajectory Modeling for Multi-Step Gradient Inversion Attacks in Federated Learning

  Li Xia, Zheng Liu, Sili Huang, Wei Tang, Xuan Liu

• Countering adversarial evasion in regression analysis

  David Benfield, Phan Tu Vuong, Alain Zemkoho

• A Law of Data Reconstruction for Random Features (and Beyond)

  Leonardo Iurada, Simone Bombari, Tatiana Tommasi, Marco Mondelli

• Erase or Hide? Suppressing Spurious Unlearning Neurons for Robust Unlearning

  Nakyeong Yang, Dong-Kyum Kim, Jea Kwon, Minsung Kim, Kyomin Jung, Meeyoung Cha

• Nonlinear Optimization with GPU-Accelerated Neural Network Constraints

  Robert Parker, Oscar Dowson, Nicole LoGiudice, Manuel Garcia, Russell Bent

• "Your AI, My Shell": Demystifying Prompt Injection Attacks on Agentic AI Coding Editors

  Yue Liu, Yanjie Zhao, Yunbo Lyu, Ting Zhang, Haoyu Wang, David Lo

• Collusion-Driven Impersonation Attack on Channel-Resistant RF Fingerprinting

  Zhou Xu, Guyue Li, Zhe Peng, Aiqun Hu

• Privacy Mechanism Design based on Empirical Distributions

  Leonhard Grosse, Sara Saeidian, Mikael Skoglund, Tobias J. Oechtering

• Your RAG is Unfair: Exposing Fairness Vulnerabilities in Retrieval-Augmented Generation via Backdoor Attacks

  Gaurav Bagwe, Saket S. Chaturvedi, Xiaolong Ma, Xiaoyong Yuan, Kuang-Ching Wang, Lan Zhang

• Creative Adversarial Testing (CAT): A Novel Framework for Evaluating Goal-Oriented Agentic AI Systems

  Hassen Dhrif

• Defending MoE LLMs against Harmful Fine-Tuning via Safety Routing Alignment

  Jaehan Kim, Minkyoo Song, Seungwon Shin, Sooel Son

• Seeing Isn't Believing: Context-Aware Adversarial Patch Synthesis via Conditional GAN

  Roie Kazoom, Alon Goldberg, Hodaya Cohen, Ofer Hadar

• Boundary on the Table: Efficient Black-Box Decision-Based Attacks for Structured Data

  Roie Kazoom, Yuval Ratzabi, Etamar Rothstein, Ofer Hadar

• Observation-Free Attacks on Online Learning to Rank

  Sameep Chattopadhyay, Nikhil Karamchandani, Sharayu Mohair

• Soft-Di[M]O: Improving One-Step Discrete Image Generation with Soft Embeddings

  Yuanzhi Zhu, Xi Wang, Stéphane Lathuilière, Vicky Kalogeiton

• Unsupervised Speech Enhancement using Data-defined Priors

  Dominik Klement, Matthew Maciejewski, Sanjeev Khudanpur, Jan Černocký, Lukáš Burget

• ChatInject: Abusing Chat Templates for Prompt Injection in LLM Agents

  Hwan Chang, Yonghyun Jun, Hwanhee Lee

• Concept activation vectors: a unifying view and adversarial attacks

  Ekkehard Schnoor, Malik Tiomoko, Jawher Said, Alex Jung, Wojciech Samek

• Model Context Protocol for Vision Systems: Audit, Security, and Protocol Extensions

  Aditi Tiwari, Akshit Bhalla, Darshan Prasad

• PAPER: Privacy-Preserving ResNet Models using Low-Degree Polynomial Approximations and Structural Optimizations on Leveled FHE

  Eduardo Chielle, Manaar Alam, Jinting Liu, Jovan Kascelan, Michail Maniatakos

• AntiFLipper: A Secure and Efficient Defense Against Label-Flipping Attacks in Federated Learning

  Aashnan Rahman, Abid Hasan, Sherajul Arifin, Faisal Haque Bappy, Tahrim Hossain, Tariqul Islam, Abu Raihan Mostofa Kamal, Md. Azam Hossain

• Defending MoE LLMs against Harmful Fine-Tuning via Safety Routing Alignment

  Jaehan Kim, Minkyoo Song, Seungwon Shin, Sooel Son

• On Robustness of Vision-Language-Action Model against Multi-Modal Perturbations

  Jianing Guo, Zhenhong Wu, Chang Tu, Yiyao Ma, Xiangqi Kong, Zhiqian Liu, Jiaming Ji, Shuning Zhang, Yuanpei Chen, Kai Chen, Xianglong Liu, Qi Dou, Yaodong Yang, Huijie Zhao, Weifeng Lv, Simin Li

• Memory Self-Regeneration: Uncovering Hidden Knowledge in Unlearned Models

  Agnieszka Polowczyk, Alicja Polowczyk, Joanna Waczyńska, Piotr Borycki, Przemysław Spurek

2025-09-25

• SAGE: A Realistic Benchmark for Semantic Understanding

  Samarth Goel, Reagan J. Lee, Kannan Ramchandran

• A Framework for Rapidly Developing and Deploying Protection Against Large Language Model Attacks

  Adam Swanda, Amy Chang, Alexander Chen, Fraser Burch, Paul Kassianik, Konstantin Berlin

• Addressing Gradient Misalignment in Data-Augmented Training for Robust Speech Deepfake Detection

  Duc-Tuan Truong, Tianchi Liu, Junjie Li, Ruijie Tao, Kong Aik Lee, Eng Siong Chng

• DAC-LoRA: Dynamic Adversarial Curriculum for Efficient and Robust Few-Shot Adaptation

  Ved Umrajkar

• Trustworthy Semantic Communication for Vehicular Networks: Challenges and Solutions

  Yanghe Pan, Yuntao Wang, Shaolong Guo, Chengyu Yin, Ruidong Li, Zhou Su, Yuan Wu

• Security-aware Semantic-driven ISAC via Paired Adversarial Residual Networks

  Yu Liu, Boxiang He, Fanggang Wang

• Automatic Red Teaming LLM-based Agents with Model Context Protocol Tools

  Ping He, Changjiang Li, Binbin Zhao, Tianyu Du, Shouling Ji

• The Use of the Simplex Architecture to Enhance Safety in Deep-Learning-Powered Autonomous Systems

  Federico Nesti, Niko Salamini, Mauro Marinoni, Giorgio Maria Cicero, Gabriele Serra, Alessandro Biondi, Giorgio Buttazzo

• Vision Transformers: the threat of realistic adversarial patches

  Kasper Cools, Clara Maathuis, Alexander M. van Oers, Claudia S. Hübner, Nikos Deligiannis, Marijke Vandewal, Geert De Cubber

• Evading Overlapping Community Detection via Proxy Node Injection

  Dario Loi, Matteo Silvestri, Fabrizio Silvestri, Gabriele Tolomei

• No Prior, No Leakage: Revisiting Reconstruction Attacks in Trained Neural Networks

  Yehonatan Refael, Guy Smorodinsky, Ofir Lindenbaum, Itay Safran

• RedHerring Attack: Testing the Reliability of Attack Detection

  Jonathan Rusert

• Overcoming Black-box Attack Inefficiency with Hybrid and Dynamic Select Algorithms

  Abhinay Shankar Belde, Rohit Ramkumar, Jonathan Rusert

• Zero-Shot Privacy-Aware Text Rewriting via Iterative Tree Search

  Shuo Huang, Xingliang Yuan, Gholamreza Haffari, Lizhen Qu

• Learning to Summarize by Learning to Quiz: Adversarial Agentic Collaboration for Long Document Summarization

  Weixuan Wang, Minghao Wu, Barry Haddow, Alexandra Birch

• Learning the Wrong Lessons: Syntactic-Domain Spurious Correlations in Language Models

  Chantal Shaib, Vinith M. Suriyakumar, Levent Sagun, Byron C. Wallace, Marzyeh Ghassemi

• GEP: A GCG-Based method for extracting personally identifiable information from chatbots built on small language models

  Jieli Zhu, Vi Ngoc-Nha Tran

• Bounds of Chain-of-Thought Robustness: Reasoning Steps, Embed Norms, and Beyond

  Dingzirui Wang, Xuanliang Zhang, Keyan Xu, Qingfu Zhu, Wanxiang Che, Yang Deng

• Can Federated Learning Safeguard Private Data in LLM Training? Vulnerabilities, Attacks, and Defense Evaluation

  Wenkai Guo, Xuefeng Liu, Haolin Wang, Jianwei Niu, Shaojie Tang, Jing Yuan

• CLUE: Conflict-guided Localization for LLM Unlearning Framework

  Hang Chen, Jiaying Zhu, Xinyu Yang, Wenya Wang

• Poisoning Prompt-Guided Sampling in Video Large Language Models

  Yuxin Cao, Wei Song, Jingling Xue, Jin Song Dong

• The Unanticipated Asymmetry Between Perceptual Optimization and Assessment

  Jiabei Zhang, Qi Wang, Siyu Wu, Du Chen, Tianhe Wu

• A Single Neuron Works: Precise Concept Erasure in Text-to-Image Diffusion Models

  Qinqin He, Jiaqi Weng, Jialing Tao, Hui Xue

• The Unwinnable Arms Race of AI Image Detection

  Till Aczel, Lorenzo Vettor, Andreas Plesner, Roger Wattenhofer

• FERD: Fairness-Enhanced Data-Free Robustness Distillation

  Zhengxiao Li, Liming Lu, Xu Zheng, Siyuan Liang, Zhenghan Chen, Yongbin Zhou, Shuchao Pang

• Sparse Representations Improve Adversarial Robustness of Neural Network Classifiers

  Killian Steunou, Sigurd Saue, Théo Druilhe

• The Impact of Audio Watermarking on Audio Anti-Spoofing Countermeasures

  Zhenshan Zhang, Xueping Zhang, Yechen Wang, Liwei Jin, Ming Li

• FORCE: Transferable Visual Jailbreaking Attacks via Feature Over-Reliance CorrEction

  Runqi Lin, Alasdair Paren, Suqin Yuan, Muyang Li, Philip Torr, Adel Bibi, Tongliang Liu

• EvoMail: Self-Evolving Cognitive Agents for Adaptive Spam and Phishing Email Defense

  Wei Huang, De-Tian Chu, Lin-Yuan Bai, Wei Kang, Hai-Tao Zhang, Bo Li, Zhi-Mo Han, Jing Ge, Hai-Feng Lin

• Optimal Robust Recourse with $L^p$-Bounded Model Change

  Phone Kyaw, Kshitij Kayastha, Shahin Jabbari

• Cryptographic Backdoor for Neural Networks: Boon and Bane

  Anh Tu Ngo, Anupam Chattopadhyay, Subhamoy Maitra

• Are Modern Speech Enhancement Systems Vulnerable to Adversarial Attacks?

  Rostislav Makarov, Lea Schönherr, Timo Gerkmann

• RLCracker: Exposing the Vulnerability of LLM Watermarks with Adaptive RL Attacks

  Hanbo Huang, Yiran Zhang, Hao Zheng, Xuan Gong, Yihan Li, Lin Liu, Shiyu Liang

• TRiCo: Triadic Game-Theoretic Co-Training for Robust Semi-Supervised Learning

  Hongyang He, Xinyuan Song, Yangfan He, Zeyu Zhang, Yanshu Li, Haochen You, Lifan Sun, Wenqiao Zhang

• Wav2Arrest 2.0: Long-Horizon Cardiac Arrest Prediction with Time-to-Event Modeling, Identity-Invariance, and Pseudo-Lab Alignment

  Saurabh Kataria, Davood Fattahi, Minxiao Wang, Ran Xiao, Matthew Clark, Timothy Ruchti, Mark Mai, Xiao Hu

• Functional Encryption in Secure Neural Network Training: Data Leakage and Practical Mitigations

  Alexandru Ioniţă, Andreea Ioniţă

• HuLA: Prosody-Aware Anti-Spoofing with Multi-Task Learning for Expressive and Emotional Synthetic Speech

  Aurosweta Mahapatra, Ismail Rasim Ulgen, Berrak Sisman

• Bidirectional Intention Inference Enhances LLMs' Defense Against Multi-Turn Jailbreak Attacks

  Haibo Tong, Dongcheng Zhao, Guobin Shen, Xiang He, Dachuan Lin, Feifei Zhao, Yi Zeng

• Responsible Diffusion: A Comprehensive Survey on Safety, Ethics, and Trust in Diffusion Models

  Kang Wei, Xin Yuan, Fushuo Huo, Chuan Ma, Long Yuan, Songze Li, Ming Ding, Dacheng Tao

2025-09-24

• LatentGuard: Controllable Latent Steering for Robust Refusal of Attacks and Reliable Response Generation

  Huizhen Shu, Xuying Li, Zhuo Li

• CON-QA: Privacy-Preserving QA using cloud LLMs in Contract Domain

  Ajeet Kumar Singh, Rajsabi Surya, Anurag Tripathi, Santanu Choudhury, Sudhir Bisane

• Steerable Adversarial Scenario Generation through Test-Time Preference Alignment

  Tong Nie, Yuewen Mei, Yihong Tang, Junlin He, Jie Sun, Haotian Shi, Wei Ma, Jian Sun

• bi-GRPO: Bidirectional Optimization for Jailbreak Backdoor Injection on LLMs

  Wence Ji, Jiancan Wu, Aiying Li, Shuyi Zhang, Junkang Wu, An Zhang, Xiang Wang, Xiangnan He

• A Set of Generalized Components to Achieve Effective Poison-only Clean-label Backdoor Attacks with Collaborative Sample Selection and Triggers

  Zhixiao Wu, Yao Lu, Jie Wen, Hao Sun, Qi Zhou, Guangming Lu

• Generative Adversarial Networks Applied for Privacy Preservation in Biometric-Based Authentication and Identification

  Lubos Mjachky, Ivan Homoliak

• Beyond Sharp Minima: Robust LLM Unlearning via Feedback-Guided Multi-Point Optimization

  Wenhan Wu, Zheyuan Liu, Chongyang Gao, Ren Wang, Kaize Ding

• RAG Security and Privacy: Formalizing the Threat Model and Attack Surface

  Atousa Arzanipour, Rouzbeh Behnia, Reza Ebrahimi, Kaushik Dutta

• Benchmarking Gaslighting Attacks Against Speech Large Language Models

  Jinyang Wu, Bin Zhu, Xiandong Zou, Qiquan Zhang, Xu Fang, Pan Zhou

• BiTAA: A Bi-Task Adversarial Attack for Object Detection and Depth Estimation via 3D Gaussian Splatting

  Yixun Zhang, Feng Zhou, Jianqin Yin

• FreezeVLA: Action-Freezing Attacks against Vision-Language-Action Models

  Xin Wang, Jie Li, Zejia Weng, Yixu Wang, Yifeng Gao, Tianyu Pang, Chao Du, Yan Teng, Yingchun Wang, Zuxuan Wu, Xingjun Ma, Yu-Gang Jiang

• Improving Generalizability and Undetectability for Targeted Adversarial Attacks on Multimodal Pre-trained Models

  Zhifang Zhang, Jiahan Zhang, Shengjie Zhou, Qi Wei, Shuo He, Feng Liu, Lei Feng

• Does the Manipulation Process Matter? RITA: Reasoning Composite Image Manipulations via Reversely-Ordered Incremental-Transition Autoregression

  Xuekang Zhu, Ji-Zhe Zhou, Kaiwen Feng, Chenfan Qu, Yunfei Wang, Liting Zhou, Jian liu

• Smaller is Better: Enhancing Transparency in Vehicle AI Systems via Pruning

  Sanish Suwal, Shaurya Garg, Dipkamal Bhusal, Michael Clifford, Nidhi Rastogi

• Universal Camouflage Attack on Vision-Language Models for Autonomous Driving

  Dehong Kong, Sifan Yu, Siyuan Liang, Jiawei Liang, Jianhou Gan, Aishan Liu, Wenqi Ren

• Consistent Estimation of Numerical Distributions under Local Differential Privacy by Wavelet Expansion

  Puning Zhao, Zhikun Zhang, Bo Sun, Li Shen, Liang Zhang, Shaowei Wang, Zhe Liu

• On the Fragility of Contribution Score Computation in Federated Learning

  Balazs Pejo, Marcell Frank, Krisztian Varga, Peter Veliczky

• Generative Model Inversion Through the Lens of the Manifold Hypothesis

  Xiong Peng, Bo Han, Fengfei Yu, Tongliang Liu, Feng Liu, Mingyuan Zhou

• Staying on the Manifold: Geometry-Aware Noise Injection

  Albert Kjøller Jacobsen, Johanna Marie Gegenfurtner, Georgios Arvanitidis

• Monitoring Violations of Differential Privacy over Time

  Önder Askin, Tim Kutta, Holger Dette

• FlyTrap: Physical Distance-Pulling Attack Towards Camera-based Autonomous Target Tracking Systems

  Shaoyuan Xie, Mohamad Habib Fakih, Junchi Lu, Fayzah Alshammari, Ningfei Wang, Takami Sato, Halima Bouzidi, Mohammad Abdullah Al Faruque, Qi Alfred Chen

• Are Neural Networks Collision Resistant?

  Marco Benedetti, Andrej Bogdanov, Enrico M. Malatesta, Marc Mézard, Gianmarco Perrupato, Alon Rosen, Nikolaj I. Schwartzbach, Riccardo Zecchina

• Adversarial Defense in Cybersecurity: A Systematic Review of GANs for Threat Detection and Mitigation

  Tharcisse Ndayipfukamiye, Jianguo Ding, Doreen Sebastian Sarwatt, Adamu Gaston Philipo, Huansheng Ning

• Understanding and Improving Adversarial Robustness of Neural Probabilistic Circuits

  Weixin Chen, Han Zhao

• Perspectra: Choosing Your Experts Enhances Critical Thinking in Multi-Agent Research Ideation

  Yiren Liu, Viraj Shah, Sangho Suh, Pao Siangliulue, Tal August, Yun Huang

• Every Character Counts: From Vulnerability to Defense in Phishing Detection

  Maria Chiper, Radu Tudor Ionescu

• Bridging Privacy and Utility: Synthesizing anonymized EEG with constraining utility functions

  Kay Fuhrmeister, Arne Pelzer, Fabian Radke, Julia Lechinger, Mahzad Gharleghi, Thomas Köllmer, Insa Wolf

• Efficiently Attacking Memorization Scores

  Tue Do, Varun Chandrasekaran, Daniel Alabi

• Differential Privacy of Network Parameters from a System Identification Perspective

  Andrew Campbell, Anna Scaglione, Hang Liu, Victor Elvira, Sean Peisert, Daniel Arnold

• Advancing Practical Homomorphic Encryption for Federated Learning: Theoretical Guarantees and Efficiency Optimizations

  Ren-Yi Huang, Dumindu Samaraweera, Prashant Shekhar, J. Morris Chang

• JaiLIP: Jailbreaking Vision-Language Models via Loss Guided Image Perturbation

  Md Jueal Mia, M. Hadi Amini

• Dynamic Dual-level Defense Routing for Continual Adversarial Training

  Wenxuan Wang, Chenglei Wang, Xuelin Qian

• SafeSteer: Adaptive Subspace Steering for Efficient Jailbreak Defense in Vision-Language Models

  Xiyu Zeng, Siyuan Liang, Liming Lu, Haotian Zhu, Enguang Liu, Jisheng Dang, Yongbin Zhou, Shuchao Pang

• Large Language Models for Real-World IoT Device Identification

  Rameen Mahmood, Tousif Ahmed, Sai Teja Peddinti, Danny Yuxing Huang

2025-09-23

• TIMED: Adversarial and Autoregressive Refinement of Diffusion-Based Time Series Generation

  MohammadReza EskandariNasab, Shah Muhammad Hamdi, Soukaina Filali Boubrahimi

• The Pareto Frontier of Resilient Jet Tagging

  Rikab Gambhir, Matt LeBlanc, Yuanchen Zhou

• Stochastic Path Planning in Correlated Obstacle Fields

  Li Zhou, Elvan Ceyhan

• Improving Credit Card Fraud Detection through Transformer-Enhanced GAN Oversampling

  Kashaf Ul Emaan

• The Secret Agenda: LLMs Strategically Lie and Our Current Safety Tools Are Blind

  Caleb DeLeeuw, Gaurav Chawla, Aniket Sharma, Vanessa Dietze

• Defending against Stegomalware in Deep Neural Networks with Permutation Symmetry

  Birk Torpmann-Hagen, Michael A. Riegler, Pål Halvorsen, Dag Johansen

• Why Speech Deepfake Detectors Won't Generalize: The Limits of Detection in an Open World

  Visar Berisha, Prad Kadambi, Isabella Lenz

• SAEmnesia: Erasing Concepts in Diffusion Models with Sparse Autoencoders

  Enrico Cassano, Riccardo Renzulli, Marco Nurisso, Mirko Zaffaroni, Alan Perotti, Marco Grangetto

• Localizing Adversarial Attacks To Produces More Imperceptible Noise

  Pavan Reddy, Aditya Sanjay Gujral

• Diversity Boosts AI-Generated Text Detection

  Advik Raj Basani, Pin-Yu Chen

• Uncovering Privacy Vulnerabilities through Analytical Gradient Inversion Attacks

  Tamer Ahmed Eltaras, Qutaibah Malluhi, Alessandro Savino, Stefano Di Carlo, Adnan Qayyum

• Rule Encoding and Compliance in Large Language Models: An Information-Theoretic Analysis

  Joachim Diederich

• DevFD: Developmental Face Forgery Detection by Learning Shared and Orthogonal LoRA Subspaces

  Tianshuo Zhang, Li Gao, Siran Peng, Xiangyu Zhu, Zhen Lei

• Revealing Adversarial Smart Contracts through Semantic Interpretation and Uncertainty Estimation

  Yating Liu, Xing Su, Hao Wu, Sijin Li, Yuxi Cheng, Fengyuan Xu, Sheng Zhong

2025-09-22

• Is It Certainly a Deepfake? Reliability Analysis in Detection & Generation Ecosystem

  Neslihan Kose, Anthony Rhodes, Umur Aybars Ciftci, Ilke Demir

• Distributionally Robust Safety Verification of Neural Networks via Worst-Case CVaR

  Masako Kishida

• Privacy in Action: Towards Realistic Privacy Mitigation and Evaluation for LLM-Powered Agents

  Shouju Wang, Fenglin Yu, Xirui Liu, Xiaoting Qin, Jue Zhang, Qingwei Lin, Dongmei Zhang, Saravan Rajmohan

• Hybrid Reputation Aggregation: A Robust Defense Mechanism for Adversarial Federated Learning in 5G and Edge Network Environments

  Saeid Sheikhi, Panos Kostakos, Lauri Loven

• Strategic Dishonesty Can Undermine AI Safety Evaluations of Frontier LLM

  Alexander Panfilov, Evgenii Kortukov, Kristina Nikolić, Matthias Bethge, Sebastian Lapuschkin, Wojciech Samek, Ameya Prabhu, Maksym Andriushchenko, Jonas Geiping

• D-REX: A Benchmark for Detecting Deceptive Reasoning in Large Language Models

  Satyapriya Krishna, Andy Zou, Rahul Gupta, Eliot Krzysztof Jones, Nick Winter, Dan Hendrycks, J. Zico Kolter, Matt Fredrikson, Spyros Matsoukas

• An Unlearning Framework for Continual Learning

  Sayanta Adhikari, Vishnuprasadh Kumaravelu, P. K. Srijith

• Budgeted Adversarial Attack against Graph-Based Anomaly Detection in Sensor Networks

  Sanju Xaviar, Omid Ardakanian

• SilentStriker:Toward Stealthy Bit-Flip Attacks on Large Language Models

  Haotian Xu, Qingsong Peng, Jie Shi, Huadi Zheng, Yu Li, Cheng Zhuo

• Lipschitz-Based Robustness Certification for Recurrent Neural Networks via Convex Relaxation

  Paul Hamelbeck, Johannes Schiffer

• Shilling Recommender Systems by Generating Side-feature-aware Fake User Profiles

  Yuanrong Wang, Yingpeng Du

• TextCrafter: Optimization-Calibrated Noise for Defending Against Text Embedding Inversion

  Duoxun Tang, Xinhang Jiang, Jiajun Niu

• B-Privacy: Defining and Enforcing Privacy in Weighted Voting

  Samuel Breckenridge, Dani Vilardell, Andrés Fábrega, Amy Zhao, Patrick McCorry, Rafael Solari, Ari Juels

• Synth-MIA: A Testbed for Auditing Privacy Leakage in Tabular Data Synthesis

  Joshua Ward, Xiaofeng Lin, Chi-Hua Wang, Guang Cheng

• Quickest Change Detection in Continuous-Time in Presence of a Covert Adversary

  Amir Reza Ramtin, Philippe Nain, Don Towsley

• Design and Implementation of a Secure RAG-Enhanced AI Chatbot for Smart Tourism Customer Service: Defending Against Prompt Injection Attacks -- A Case Study of Hsinchu, Taiwan

  Yu-Kai Shih, You-Kai Kang

• Shilling Recommender Systems by Generating Side-feature-aware Fake User Profiles

  Yuanrong Wang, Yingpeng Du

• TextCrafter: Optimization-Calibrated Noise for Defending Against Text Embedding Inversion

  Duoxun Tang, Xinhang Jiang, Jiajun Niu

2025-09-21

• Mind the Gap: Comparing Model- vs Agentic-Level Red Teaming with Action-Graph Observability on GPT-OSS-20B

  Ilham Wicaksono, Zekun Wu, Rahul Patel, Theo King, Adriano Koshiyama, Philip Treleaven

• AdaptiveGuard: Towards Adaptive Runtime Safety for LLM-Powered Software

  Rui Yang, Michael Fu, Chakkrit Tantithamthavorn, Chetan Arora, Gunel Gulmammadova, Joey Chua

• Learning from Gene Names, Expression Values and Images: Contrastive Masked Text-Image Pretraining for Spatial Transcriptomics Representation Learning

  Jiahe Qian, Yaoyu Fang, Ziqiao Weng, Xinkun Wang, Lee A. Cooper, Bo Zhou

• Localizing Malicious Outputs from CodeLLM

  Mayukh Borana, Junyi Liang, Sai Sathiesh Rajan, Sudipta Chattopadhyay

• SVeritas: Benchmark for Robust Speaker Verification under Diverse Conditions

  Massa Baali, Sarthak Bisht, Francisco Teixeira, Kateryna Shapovalenko, Rita Singh, Bhiksha Raj

• TraceHiding: Scalable Machine Unlearning for Mobility Data

  Ali Faraji, Manos Papagelis

• Temporal Logic-Based Multi-Vehicle Backdoor Attacks against Offline RL Agents in End-to-end Autonomous Driving

  Xuan Chen, Shiwei Feng, Zikang Xiong, Shengwei An, Yunshu Mao, Lu Yan, Guanhong Tao, Wenbo Guo, Xiangyu Zhang

• Seeing is Deceiving: Mirror-Based LiDAR Spoofing for Autonomous Vehicle Deception

  Selma Yahia, Ildi Alla, Girija Bangalore Mohan, Daniel Rau, Mridula Singh, Valeria Loscri

• DecipherGuard: Understanding and Deciphering Jailbreak Prompts for a Safer Deployment of Intelligent Software Systems

  Rui Yang, Michael Fu, Chakkrit Tantithamthavorn, Chetan Arora, Gunel Gulmammadova, Joey Chua

• Lightweight MobileNetV1+GRU for ECG Biometric Authentication: Federated and Adversarial Evaluation

  Dilli Hang Rai, Sabin Kafley

• MARS: A Malignity-Aware Backdoor Defense in Federated Learning

  Wei Wan, Yuxuan Ning, Zhicong Huang, Cheng Hong, Shengshan Hu, Ziqi Zhou, Yechao Zhang, Tianqing Zhu, Wanlei Zhou, Leo Yu Zhang

• Multimodal Prompt Decoupling Attack on the Safety Filters in Text-to-Image Models

  Xingkai Peng, Jun Jiang, Meng Tong, Shuai Li, Weiming Zhang, Nenghai Yu, Kejiang Chen

• Temporal Logic-Based Multi-Vehicle Backdoor Attacks against Offline RL Agents in End-to-end Autonomous Driving

  Xuan Chen, Shiwei Feng, Zikang Xiong, Shengwei An, Yunshu Mao, Lu Yan, Guanhong Tao, Wenbo Guo, Xiangyu Zhang

2025-09-20

• Can an Individual Manipulate the Collective Decisions of Multi-Agents?

  Fengyuan Liu, Rui Zhao, Shuo Chen, Guohao Li, Philip Torr, Lei Han, Jindong Gu

• Train to Defend: First Defense Against Cryptanalytic Neural Network Parameter Extraction Attacks

  Ashley Kurian, Aydin Aysu

• V-CECE: Visual Counterfactual Explanations via Conceptual Edits

  Nikolaos Spanos, Maria Lymperaiou, Giorgos Filandrianos, Konstantinos Thomas, Athanasios Voulodimos, Giorgos Stamou

• FakeChain: Exposing Shallow Cues in Multi-Step Deepfake Detection

  Minji Heo, Simon S. Woo

• MoRoVoc: A Large Dataset for Geographical Variation Identification of the Spoken Romanian Language

  Andrei-Marius Avram, Ema-Ioana Bănescu, Anda-Teodora Robea, Dumitru-Clementin Cercel, Mihaela-Claudia Cercel

• OS-DiffVSR: Towards One-step Latent Diffusion Model for High-detailed Real-world Video Super-Resolution

  Hanting Li, Huaao Tang, Jianhong Han, Tianxiong Zhou, Jiulong Cui, Haizhen Xie, Yan Chen, Jie Hu

• A Novel Metric for Detecting Memorization in Generative Models for Brain MRI Synthesis

  Antonio Scardace, Lemuel Puglisi, Francesco Guarnera, Sebastiano Battiato, Daniele Ravì

• ADVEDM:Fine-grained Adversarial Attack against VLM-based Embodied Agents

  Yichen Wang, Hangtao Zhang, Hewen Pan, Ziqi Zhou, Xianlong Wang, Peijin Guo, Lulu Xue, Shengshan Hu, Minghui Li, Leo Yu Zhang

• SOLAR: Switchable Output Layer for Accuracy and Robustness in Once-for-All Training

  Shaharyar Ahmed Khan Tareen, Lei Fan, Xiaojing Yuan, Qin Lin, Bin Hu

• FairTune: A Bias-Aware Fine-Tuning Framework Towards Fair Heart Rate Prediction from PPG

  Lovely Yeswanth Panchumarthi, Saurabh Kataria, Yi Wu, Xiao Hu, Alex Fedorov, Hyunjung Gloria Kwak

• Delving into Cryptanalytic Extraction of PReLU Neural Networks

  Yi Chen, Xiaoyang Dong, Ruijie Ma, Yantian Shen, Anyu Wang, Hongbo Yu, Xiaoyun Wang

• "Digital Camouflage": The LLVM Challenge in LLM-Based Malware Detection

  Ekin Böke, Simon Torka

2025-09-19

• Stress Testing Deliberative Alignment for Anti-Scheming Training

  Bronson Schoen, Evgenia Nitishinskaya, Mikita Balesni, Axel Højmark, Felix Hofstätter, Jérémy Scheurer, Alexander Meinke, Jason Wolfe, Teun van der Weij, Alex Lloyd, Nicholas Goldowsky-Dill, Angela Fan, Andrei Matveiakin, Rusheb Shah, Marcus Williams, Amelia Glaese, Boaz Barak, Wojciech Zaremba, Marius Hobbhahn

• Attention Schema-based Attention Control (ASAC): A Cognitive-Inspired Approach for Attention Management in Transformers

  Krati Saxena, Federico Jurado Ruiz, Guido Manzi, Dianbo Liu, Alex Lamb

• Reward Hacking Mitigation using Verifiable Composite Rewards

  Mirza Farhan Bin Tarek, Rahmatollah Beheshti

• Robust Vision-Language Models via Tensor Decomposition: A Defense Against Adversarial Attacks

  Het Patel, Muzammil Allie, Qian Zhang, Jia Chen, Evangelos E. Papalexakis

• DNA-DetectLLM: Unveiling AI-Generated Text via a DNA-Inspired Mutation-Repair Paradigm

  Xiaowei Zhu, Yubing Ren, Fang Fang, Qingfeng Tan, Shi Wang, Yanan Cao

• Sparse-Autoencoder-Guided Internal Representation Unlearning for Large Language Models

  Tomoya Yamashita, Akira Ito, Yuuki Yamanaka, Masanori Yamada, Takayuki Miura, Toshiki Shibahara

• SABER: Uncovering Vulnerabilities in Safety Alignment via Cross-Layer Residual Connection

  Maithili Joshi, Palash Nandi, Tanmoy Chakraborty

• Backdoor Mitigation via Invertible Pruning Masks

  Kealan Dunnett, Reza Arablouei, Dimity Miller, Volkan Dedeoglu, Raja Jurdak

• PolyJuice Makes It Real: Black-Box, Universal Red Teaming for Synthetic Image Detectors

  Sepehr Dehdashtian, Mashrur M. Morshed, Jacob H. Seidman, Gaurav Bharaj, Vishnu Naresh Boddeti

• Adversarial Graph Fusion for Incomplete Multi-view Semi-supervised Learning with Tensorial Imputation

  Zhangqi Jiang, Tingjin Luo, Xu Yang, Xinyan Liang

• Randomized Smoothing Meets Vision-Language Models

  Emmanouil Seferis, Changshun Wu, Stefanos Kollias, Saddek Bensalem, Chih-Hong Cheng

• Inverting Trojans in LLMs

  Zhengxing Li, Guangmingmei Yang, Jayaram Raghuram, David J. Miller, George Kesidis

• Adversarially Robust Assembly Language Model for Packed Executables Detection

  Shijia Li, Jiang Ming, Lanqing Liu, Longwei Yang, Ni Zhang, Chunfu Jia

• Cuckoo Attack: Stealthy and Persistent Attacks Against AI-IDE

  Xinpeng Liu, Junming Liu, Peiyu Liu, Han Zheng, Qinying Wang, Mathias Payer, Shouling Ji, Wenhai Wang

• Inference Attacks on Encrypted Online Voting via Traffic Analysis

  Anastasiia Belousova, Francesco Marchiori, Mauro Conti

• An Adversarial Robust Behavior Sequence Anomaly Detection Approach Based on Critical Behavior Unit Learning

  Dongyang Zhan, Kai Tan, Lin Ye, Xiangzhan Yu, Hongli Zhang, Zheng He

• Secure Confidential Business Information When Sharing Machine Learning Models

  Yunfan Yang, Jiarong Xu, Hongzhe Zhang, Xiao Fang

• Evaluating CxG Generalisation in LLMs via Construction-Based NLI Fine Tuning

  Tom Mackintosh, Harish Tayyar Madabushi, Claire Bonial

• Overfitting in Adaptive Robust Optimization

  Karl Zhu, Dimitris Bertsimas

• EigenTrack: Spectral Activation Feature Tracking for Hallucination and Out-of-Distribution Detection in LLMs and VLMs

  Davide Ettori, Nastaran Darabi, Sina Tayebati, Ranganath Krishnan, Mahesh Subedar, Omesh Tickoo, Amit Ranjan Trivedi

2025-09-18

• SynBench: A Benchmark for Differentially Private Text Generation

  Yidan Sun, Viktor Schlegel, Srinivasan Nandakumar, Iqra Zahid, Yuping Wu, Yulong Wu, Hao Li, Jie Zhang, Warren Del-Pinto, Goran Nenadic, Siew Kei Lam, Anil Anthony Bharath

• Enhancing Retrieval Augmentation via Adversarial Collaboration

  Letian Zhang, Guanghao Meng, Xudong Ren, Yiming Wang, Shu-Tao Xia

• Sentinel Agents for Secure and Trustworthy Agentic AI in Multi-Agent Systems

  Diego Gosmar, Deborah A. Dahl

• LLM Jailbreak Detection for (Almost) Free!

  Guorui Chen, Yifan Xia, Xiaojun Jia, Zhijiang Li, Philip Torr, Jindong Gu

• Enterprise AI Must Enforce Participant-Aware Access Control

  Shashank Shreedhar Bhatt, Tanmay Rajore, Khushboo Aggarwal, Ganesh Ananthanarayanan, Ranveer Chandra, Nishanth Chandran, Suyash Choudhury, Divya Gupta, Emre Kiciman, Sumit Kumar Pandey, Srinath Setty, Rahul Sharma, Teijia Zhao

• Adversarial Distilled Retrieval-Augmented Guarding Model for Online Malicious Intent Detection

  Yihao Guo, Haocheng Bian, Liutong Zhou, Ze Wang, Zhaoyi Zhang, Francois Kawala, Milan Dean, Ian Fischer, Yuantao Peng, Noyan Tokgozoglu, Ivan Barrientos, Riyaaz Shaik, Rachel Li, Chandru Venkataraman, Reza Shifteh Far, Moses Pawar, Venkat Sundaranatha, Michael Xu, Frank Chu

• Reveal and Release: Iterative LLM Unlearning with Self-generated Data

  Linxi Xie, Xin Teng, Shichang Ke, Hongyi Wen, Shengjie Wang

• MUSE: MCTS-Driven Red Teaming Framework for Enhanced Multi-Turn Dialogue Safety in Large Language Models

  Siyu Yan, Long Zeng, Xuecheng Wu, Chengcheng Han, Kongcheng Zhang, Chong Peng, Xuezhi Cao, Xunliang Cai, Chenjuan Guo

• [Re] Improving Interpretation Faithfulness for Vision Transformers

  Izabela Kurek, Wojciech Trejter, Stipe Frkovic, Andro Erdelez

• Discrete optimal transport is a strong audio adversarial attack

  Anton Selitskiy, Akib Shahriyar, Jishnuraj Prakasan

• Vulnerable Agent Identification in Large-Scale Multi-Agent Reinforcement Learning

  Simin Li, Zheng Yuwei, Zihao Mao, Linhao Wang, Ruixiao Xu, Chengdong Ma, Xin Yu, Yuqing Ma, Qi Dou, Xin Wang, Jie Luo, Bo An, Yaodong Yang, Weifeng Lv, Xianglong Liu

• Watermarking and Anomaly Detection in Machine Learning Models for LORA RF Fingerprinting

  Aarushi Mahajan, Wayne Burleson

• LNE-Blocking: An Efficient Framework for Contamination Mitigation Evaluation on Large Language Models

  Ruijie Hou, Yueyang Jiao, Hanxu Hu, Yingming Li, Wai Lam, Huajian Zhang, Hongyuan Lu

• AIP: Subverting Retrieval-Augmented Generation via Adversarial Instructional Prompt

  Saket S. Chaturvedi, Gaurav Bagwe, Lan Zhang, Xiaoyong Yuan

• Edge-Aware Normalized Attention for Efficient and Detail-Preserving Single Image Super-Resolution

  Penghao Rao, Tieyong Zeng

• Geometric Image Synchronization with Deep Watermarking

  Pierre Fernandez, Tomáš Souček, Nikola Jovanović, Hady Elsahar, Sylvestre-Alvise Rebuffi, Valeriu Lacatusu, Tuan Tran, Alexandre Mourachko

• Towards Privacy-Preserving and Heterogeneity-aware Split Federated Learning via Probabilistic Masking

  Xingchen Wang, Feijie Wu, Chenglin Miao, Tianchun Li, Haoyu Hu, Qiming Cao, Jing Gao, Lu Su

• CUFG: Curriculum Unlearning Guided by the Forgetting Gradient

  Jiaxing Miao, Liang Hu, Qi Zhang, Lai Zhong Yuan, Usman Naseem

• STEP: Structured Training and Evaluation Platform for benchmarking trajectory prediction models

  Julian F. Schumann, Anna Mészáros, Jens Kober, Arkady Zgonnikov

• Benefits of Online Tilted Empirical Risk Minimization: A Case Study of Outlier Detection and Robust Regression

  Yigit E. Yildirim, Samet Demir, Zafer Dogan

• Beyond Surface Alignment: Rebuilding LLMs Safety Mechanism via Probabilistically Ablating Refusal Direction

  Yuanbo Xie, Yingjie Zhang, Tianyun Liu, Duohe Ma, Tingwen Liu

• Evil Vizier: Vulnerabilities of LLM-Integrated XR Systems

  Yicheng Zhang, Zijian Huang, Sophie Chen, Erfan Shayegani, Jiasi Chen, Nael Abu-Ghazaleh

• Acoustic Simulation Framework for Multi-channel Replay Speech Detection

  Michael Neri, Tuomas Virtanen

• ORCA: Agentic Reasoning For Hallucination and Adversarial Robustness in Vision-Language Models

  Chung-En Johnny Yu, Hsuan-Chih (Neil)Chen, Brian Jalaian, Nathaniel D. Bastian

• Impact of Phonetics on Speaker Identity in Adversarial Voice Attack

  Daniyal Kabir Dar, Qiben Yan, Li Xiao, Arun Ross

• Toxicity Red-Teaming: Benchmarking LLM Safety in Singapore's Low-Resource Languages

  Yujia Hu, Ming Shan Hee, Preslav Nakov, Roy Ka-Wei Lee

• Red Teaming Multimodal Language Models: Evaluating Harm Across Prompt Modalities and Models

  Madison Van Doren, Casey Ford, Emily Dix

• Stochastic Sample Approximations of (Local) Moduli of Continuity

  Rodion Nazarov, Allen Gehret, Robert Shorten, Jakub Marecek

• Adversarial generalization of unfolding (model-based) networks

  Vicky Kouni

• Assessing metadata privacy in neuroimaging

  Emilie Kibsgaard, Anita Sue Jwa, Christopher J Markiewicz, David Rodriguez Gonzalez, Judith Sainz Pardo, Russell A. Poldrack, Cyril R. Pernet

• Benchmarking and Improving LLM Robustness for Personalized Generation

  Chimaobi Okite, Naihao Deng, Kiran Bodipati, Huaidian Hou, Joyce Chai, Rada Mihalcea

• Semantic Representation Attack against Aligned Large Language Models

  Jiawei Lian, Jianhong Pan, Lefan Wang, Yi Wang, Shaohui Mei, Lap-Pui Chau

• Adversarial generalization of unfolding (model-based) networks

  Vicky Kouni

2025-09-17

• DSCC-HS: A Dynamic Self-Reinforcing Framework for Hallucination Suppression in Large Language Models

  Xiao Zheng

• Scrub It Out! Erasing Sensitive Memorization in Code Language Models via Machine Unlearning

  Zhaoyang Chu, Yao Wan, Zhikun Zhang, Di Wang, Zhou Yang, Hongyu Zhang, Pan Zhou, Xuanhua Shi, Hai Jin, David Lo

• Differential Privacy in Federated Learning: Mitigating Inference Attacks with Randomized Response

  Ozer Ozturk, Busra Buyuktanir, Gozde Karatas Baydogmus, Kazim Yildiz

• Privacy-Aware In-Context Learning for Large Language Models

  Bishnu Bhusal, Manoj Acharya, Ramneet Kaur, Colin Samplawski, Anirban Roy, Adam D. Cobb, Rohit Chadha, Susmit Jha

• StyleProtect: Safeguarding Artistic Identity in Fine-tuned Diffusion Models

  Qiuyu Tang, Joshua Krinsky, Aparna Bharati

• Towards Robust Defense against Customization via Protective Perturbation Resistant to Diffusion-based Purification

  Wenkui Yang, Jie Cao, Junxian Duan, Ran He

• Is GPT-4o mini Blinded by its Own Safety Filters? Exposing the Multimodal-to-Unimodal Bottleneck in Hate Speech Detection

  Niruthiha Selvanayagam, Ted Kurti

• Secure UAV-assisted Federated Learning: A Digital Twin-Driven Approach with Zero-Knowledge Proofs

  Md Bokhtiar Al Zami, Md Raihan Uddin, Dinh C. Nguyen

• ParaAegis: Parallel Protection for Flexible Privacy-preserved Federated Learning

  Zihou Wu, Yuecheng Li, Tianchi Liao, Jian Lou, Chuan Chen

• Differentially private federated learning for localized control of infectious disease dynamics

  Raouf Kerkouche, Henrik Zunker, Mario Fritz, Martin J. Kühn

• Defending Diffusion Models Against Membership Inference Attacks via Higher-Order Langevin Dynamics

  Benjamin Sterling, Yousef El-Laham, Mónica F. Bugallo

• Accelerated Gradient Methods with Biased Gradient Estimates: Risk Sensitivity, High-Probability Guarantees, and Large Deviation Bounds

  Mert Gürbüzbalaban, Yasa Syed, Necdet Serhat Aybat

• Who Taught the Lie? Responsibility Attribution for Poisoned Knowledge in Retrieval-Augmented Generation

  Baolei Zhang, Haoran Xin, Yuxi Chen, Zhuqing Liu, Biao Yi, Tong Li, Lihai Nie, Zheli Liu, Minghong Fang

• Cybersecurity AI: Humanoid Robots as Attack Vectors

  Víctor Mayoral-Vilches

• VCBench: Benchmarking LLMs in Venture Capital

  Rick Chen, Joseph Ternasky, Afriyie Samuel Kwesi, Ben Griffin, Aaron Ontoyin Yin, Zakari Salifu, Kelvin Amoaba, Xianling Mu, Fuat Alican, Yigit Ihlamur

• A Simple and Efficient Jailbreak Method Exploiting LLMs' Helpfulness

  Xuan Luo, Yue Wang, Zefeng He, Geng Tu, Jing Li, Ruifeng Xu

• RLBind: Adversarial-Invariant Cross-Modal Alignment for Unified Robust Embeddings

  Yuhong Lu

2025-09-16

• Forget What's Sensitive, Remember What Matters: Token-Level Differential Privacy in Memory Sculpting for Continual Learning

  Bihao Zhan, Jie Zhou, Junsong Li, Yutao Yang, Shilian Chen, Qianjun Pan, Xin Li, Wen Wu, Xingjiao Wu, Qin Chen, Hang Yan, Liang He

• RepIt: Representing Isolated Targets to Steer Language Models

  Vincent Siu, Nathan W. Henry, Nicholas Crispino, Yang Liu, Dawn Song, Chenguang Wang

• DisorientLiDAR: Physical Attacks on LiDAR-based Localization

  Yizhen Lao, Yu Zhang, Ziting Wang, Chengbo Wang, Yifei Xue, Wanpeng Shao

• CIARD: Cyclic Iterative Adversarial Robustness Distillation

  Liming Lu, Shuchao Pang, Xu Zheng, Xiang Gu, Anan Du, Yunhuai Liu, Yongbin Zhou

• A Systematic Evaluation of Parameter-Efficient Fine-Tuning Methods for the Security of Code LLMs

  Kiho Lee, Jungkon Kim, Doowon Kim, Hyoungshick Kim

• Beyond Artificial Misalignment: Detecting and Grounding Semantic-Coordinated Multimodal Manipulations

  Jinjie Shen, Yaxiong Wang, Lechao Cheng, Nan Pu, Zhun Zhong

• Defense-to-Attack: Bypassing Weak Defenses Enables Stronger Jailbreaks in Vision-Language Models

  Yunhan Zhao, Xiang Zheng, Xingjun Ma

• Jailbreaking Large Language Models Through Content Concretization

  Johan Wahréus, Ahmed Hussain, Panos Papadimitratos

• Sy-FAR: Symmetry-based Fair Adversarial Robustness

  Haneen Najjar, Eyal Ronen, Mahmood Sharif

• MIA-EPT: Membership Inference Attack via Error Prediction for Tabular Data

  Eyal German, Daniel Samira, Yuval Elovici, Asaf Shabtai

• JANUS: A Dual-Constraint Generative Framework for Stealthy Node Injection Attacks

  Jiahao Zhang, Xiaobing Pei, Zhaokun Zhong, Wenqiang Hao, Zhenghao Tang

• Towards Inclusive Toxic Content Moderation: Addressing Vulnerabilities to Adversarial Attacks in Toxicity Classifiers Tackling LLM-generated Content

  Shaz Furniturewala, Arkaitz Zubiaga

• Empowering LLMs with Parameterized Skills for Adversarial Long-Horizon Planning

  Sijia Cui, Shuai Xu, Aiyao He, Yanna Wang, Bo Xu

• Do Natural Language Descriptions of Model Activations Convey Privileged Information?

  Millicent Li, Alberto Mario Ceballos Arroyo, Giordano Rogers, Naomi Saphra, Byron C. Wallace

• When Inverse Data Outperforms: Exploring the Pitfalls of Mixed Data in Multi-Stage Fine-Tuning

  Mengyi Deng, Xin Li, Tingyu Zhu, Zhicheng Yang, Zhijiang Guo, Wei Wang

• Agent4FaceForgery: Multi-Agent LLM Framework for Realistic Face Forgery Detection

  Yingxin Lai, Zitong Yu, Jun Wang, Linlin Shen, Yong Xu, Xiaochun Cao

• End4: End-to-end Denoising Diffusion for Diffusion-Based Inpainting Detection

  Fei Wang, Xuecheng Wu, Zheng Zhang, Danlei Huang, Yuheng Huang, BoWang

• Selective Risk Certification for LLM Outputs via Information-Lift Statistics: PAC-Bayes, Robustness, and Skeleton Design

  Sanjeda Akter, Ibne Farabi Shihab, Anuj Sharma

• BAPFL: Exploring Backdoor Attacks Against Prototype-based Federated Learning

  Honghong Zeng, Jiong Lou, Zhe Wang, Hefeng Zhou, Chentao Wu, Wei Zhao, Jie Li

• On the Out-of-Distribution Backdoor Attack for Federated Learning

  Jiahao Xu, Zikai Zhang, Rui Hu

• EByFTVeS: Efficient Byzantine Fault Tolerant-based Verifiable Secret-sharing in Distributed Privacy-preserving Machine Learning

  Zhen Li, Zijian Zhang, Wenjin Yang, Pengbo Wang, Zhaoqi Wang, Meng Li, Yan Wu, Xuyang Liu, Jing Sun, Liehuang Zhu

• Bridging Threat Models and Detections: Formal Verification via CADP

  Dumitru-Bogdan Prelipcean, Cătălin Dima

• Adversarial Appearance Learning in Augmented Cityscapes for Pedestrian Recognition in Autonomous Driving

  Artem Savkin, Thomas Lapotre, Kevin Strauss, Uzair Akbar, Federico Tombari

• Valuation of Exotic Options and Counterparty Games Based on Conditional Diffusion

  Helin Zhao, Junchi Shen

• AQUA-LLM: Evaluating Accuracy, Quantization, and Adversarial Robustness Trade-offs in LLMs for Cybersecurity Question Answering

  Onat Gungor, Roshan Sood, Harold Wang, Tajana Rosing

• FedMentor: Domain-Aware Differential Privacy for Heterogeneous Federated LLMs in Mental Health

  Nobin Sarwar, Shubhashis Roy Dipta

• Beyond Data Privacy: New Privacy Risks for Large Language Models

  Yuntao Du, Zitao Li, Ninghui Li, Bolin Ding

• The Sum Leaks More Than Its Parts: Compositional Privacy Risks and Mitigations in Multi-Agent Collaboration

  Vaidehi Patil, Elias Stengel-Eskin, Mohit Bansal

• A Multi-Agent LLM Defense Pipeline Against Prompt Injection Attacks

  S M Asif Hossain, Ruksat Khan Shayoni, Mohd Ruhul Ameen, Akif Islam, M. F. Mridha, Jungpil Shin

• Towards mitigating information leakage when evaluating safety monitors

  Gerard Boxo, Aman Neelappa, Shivam Raval

• SteeringSafety: A Systematic Safety Evaluation Framework of Representation Steering in LLMs

  Vincent Siu, Nicholas Crispino, David Park, Nathan W. Henry, Zhun Wang, Yang Liu, Dawn Song, Chenguang Wang

• Membership Inference Attack against Large Language Model-based Recommendation Systems: A New Distillation-based Paradigm

  Li Cuihong, Huang Xiaowen, Yin Chuanhuan, Sang Jitao

2025-09-15

• When Safe Unimodal Inputs Collide: Optimizing Reasoning Chains for Cross-Modal Safety in Multimodal Large Language Models

  Wei Cai, Shujuan Liu, Jian Zhao, Ziyan Shi, Yusheng Zhao, Yuchen Yuan, Tianle Zhang, Chi Zhang, Xuelong Li

• Inducing Uncertainty for Test-Time Privacy

  Muhammad H. Ashiq, Peter Triantafillou, Hung Yun Tseng, Grigoris G. Chrysos

• Reasoned Safety Alignment: Ensuring Jailbreak Defense via Answer-Then-Check

  Chentao Cao, Xiaojun Xu, Bo Han, Hang Li

• Collapse of Irrelevant Representations (CIR) Ensures Robust and Non-Disruptive LLM Unlearning

  Filip Sondej, Yushi Yang

• Probabilistic Robustness Analysis in High Dimensional Space: Application to Semantic Segmentation Network

  Navid Hashemi, Samuel Sasaki, Diego Manzanas Lopez, Ipek Oguz, Meiyi Ma, Taylor T. Johnson

• Time-Constrained Intelligent Adversaries for Automation Vulnerability Testing: A Multi-Robot Patrol Case Study

  James C. Ward, Alex Bott, Connor York, Edmund R. Hunt

• Poison to Detect: Detection of Targeted Overfitting in Federated Learning

  Soumia Zohra El Mestari, Maciej Krzysztof Zuziak, Gabriele Lenzini

• Beyond PII: How Users Attempt to Estimate and Mitigate Implicit LLM Inference

  Synthia Wang, Sai Teja Peddinti, Nina Taft, Nick Feamster

• A Controllable 3D Deepfake Generation Framework with Gaussian Splatting

  Wending Liu, Siyun Liang, Huy H. Nguyen, Isao Echizen

• Robust Concept Erasure in Diffusion Models: A Theoretical Perspective on Security and Robustness

  Zixuan Fu, Yan Ren, Finn Carter, Chenyue Wen, Le Ku, Daheng Yu, Emily Davis, Bo Zhang

• DRAG: Data Reconstruction Attack using Guided Diffusion

  Wa-Kin Lei, Jun-Cheng Chen, Shang-Tse Chen

• DARD: Dice Adversarial Robustness Distillation against Adversarial Attacks

  Jing Zou, Shungeng Zhang, Meikang Qiu, Chong Li

• From Autoencoders to CycleGAN: Robust Unpaired Face Manipulation via Adversarial Learning

  Collin Guo

• Removal Attack and Defense on AI-generated Content Latent-based Watermarking

  De Zhang Lee, Han Fang, Hanyi Wang, Ee-Chien Chang

• A Practical Adversarial Attack against Sequence-based Deep Learning Malware Classifiers

  Kai Tan, Dongyang Zhan, Lin Ye, Hongli Zhang, Binxing Fang

• NeuroStrike: Neuron-Level Attacks on Aligned LLMs

  Lichao Wu, Sasha Behrouzi, Mohamadreza Rostami, Maximilian Thang, Stjepan Picek, Ahmad-Reza Sadeghi

• Efficient Byzantine-Robust Privacy-Preserving Federated Learning via Dimension Compression

  Xian Qin, Xue Yang, Xiaohu Tang

• MORABLES: A Benchmark for Assessing Abstract Moral Reasoning in LLMs with Fables

  Matteo Marcuzzo, Alessandro Zangari, Andrea Albarelli, Jose Camacho-Collados, Mohammad Taher Pilehvar

• Geometric Red-Teaming for Robotic Manipulation

  Divyam Goel, Yufei Wang, Tiancheng Wu, Guixiu Qiao, Pavel Piliptchak, David Held, Zackory Erickson

• Amulet: a Python Library for Assessing Interactions Among ML Defenses and Risks

  Asim Waheed, Vasisht Duddu, Rui Zhang, Sebastian Szyller, N. Asokan

• Phi: Preference Hijacking in Multi-modal Large Language Models at Inference Time

  Yifan Lan, Yuanpu Cao, Weitong Zhang, Lu Lin, Jinghui Chen

• Secure Human Oversight of AI: Exploring the Attack Surface of Human Oversight

  Jonas C. Ditz, Veronika Lazar, Elmar Lichtmeß, Carola Plesch, Matthias Heck, Kevin Baum, Markus Langer

• Redefining Website Fingerprinting Attacks With Multiagent LLMs

  Chuxu Song, Dheekshith Dev Manohar Mekala, Hao Wang, Richard Martin

• Early Approaches to Adversarial Fine-Tuning for Prompt Injection Defense: A 2022 Study of GPT-3 and Contemporary Models

  Gustavo Sandoval, Denys Fenchenko, Junyao Chen

2025-09-14

• Free-MAD: Consensus-Free Multi-Agent Debate

  Yu Cui, Hang Fu, Haibin Zhang, Licheng Wang, Cong Zuo

• Membership Inference Attacks on Recommender System: A Survey

  Jiajie He, Yuechun Gu, Keke Chen, Xintong Chen

• ENJ: Optimizing Noise with Genetic Algorithms to Jailbreak LSMs

  Yibo Zhang, Liang Lin

• Feature Space Topology Control via Hopkins Loss

  Einari Vaaras, Manu Airaksinen

• Your Compiler is Backdooring Your Model: Understanding and Exploiting Compilation Inconsistency Vulnerabilities in Deep Learning Compilers

  Simin Chen, Jinjun Peng, Yixin He, Junfeng Yang, Baishakhi Ray

• From Firewalls to Frontiers: AI Red-Teaming is a Domain-Specific Evolution of Cyber Red-Teaming

  Anusha Sinha, Keltin Grimes, James Lucassen, Michael Feffer, Nathan VanHoudnos, Zhiwei Steven Wu, Hoda Heidari

• When Smiley Turns Hostile: Interpreting How Emojis Trigger LLMs' Toxicity

  Shiyao Cui, Xijia Feng, Yingkang Wang, Junxiao Yang, Zhexin Zhang, Biplab Sikdar, Hongning Wang, Han Qiu, Minlie Huang

• RanAT4BIE: Random Adversarial Training for Biomedical Information Extraction

  Jian Chen, Shengyi Lv, Leilei Su

• Beyond Sliders: Mastering the Art of Diffusion-based Image Manipulation

  Yufei Tang, Daiheng Gao, Pingyu Wu, Wenbo Zhou, Bang Zhang, Weiming Zhang

• ANROT-HELANet: Adverserially and Naturally Robust Attention-Based Aggregation Network via The Hellinger Distance for Few-Shot Classification

  Gao Yu Lee, Tanmoy Dam, Md Meftahul Ferdaus, Daniel Puiu Poenar, Vu N.Duong

• Realistic Environmental Injection Attacks on GUI Agents

  Yitong Zhang, Ximo Li, Liyi Cai, Jia Li

• Stabilizing Data-Free Model Extraction

  Dat-Thinh Nguyen, Kim-Hung Le, Nhien-An Le-Khac

• On the Escaping Efficiency of Distributed Adversarial Training Algorithms

  Ying Cao, Kun Yuan, Ali H. Sayed

• SoK: How Sensor Attacks Disrupt Autonomous Vehicles: An End-to-end Analysis, Challenges, and Missed Threats

  Qingzhao Zhang, Shaocheng Luo, Z. Morley Mao, Miroslav Pajic, Michael K. Reiter

• DMLDroid: Deep Multimodal Fusion Framework for Android Malware Detection with Resilience to Code Obfuscation and Adversarial Perturbations

  Doan Minh Trung, Tien Duc Anh Hao, Luong Hoang Minh, Nghi Hoang Khoa, Nguyen Tan Cam, Van-Hau Pham, Phan The Duy

• Make Identity Unextractable yet Perceptible: Synthesis-Based Privacy Protection for Subject Faces in Photos

  Tao Wang, Yushu Zhang, Xiangli Xiao, Kun Xu, Lin Yuan, Wenying Wen, Yuming Fang

• MAUI: Reconstructing Private Client Data in Federated Transfer Learning

  Ahaan Dabholkar, Atul Sharma, Z. Berkay Celik, Saurabh Bagchi

• Pulse-to-Circuit Characterization of Stealthy Crosstalk Attack on Multi-Tenant Superconducting Quantum Hardware

  Syed Emad Uddin Shubha, Tasnuva Farheen

• Hybrid Quantum-Classical Model for Image Classification

  Muhammad Adnan Shahzad

• Self-Evolving LLMs via Continual Instruction Tuning

  Jiazheng Kang, Le Huang, Cheng Hou, Zhe Zhao, Zhenxiang Yan, Chuan Shi, Ting Bai

• Pathological Truth Bias in Vision-Language Models

  Yash Thube

2025-09-13

• Harmful Prompt Laundering: Jailbreaking LLMs with Abductive Styles and Symbolic Encoding

  Seongho Joo, Hyukhun Koh, Kyomin Jung

• Public Data Assisted Differentially Private In-Context Learning

  Seongho Joo, Hyukhun Koh, Kyomin Jung

• Simulating Sinogram-Domain Motion and Correcting Image-Domain Artifacts Using Deep Learning in HR-pQCT Bone Imaging

  Farhan Sadik, Christopher L. Newman, Stuart J. Warden, Rachel K. Surowiec

• Robustifying Diffusion-Denoised Smoothing Against Covariate Shift

  Ali Hedayatnia, Mostafa Tavassolipour, Babak Nadjar Araabi, Abdol-Hossein Vahabie

• A Modern Look at Simplicity Bias in Image Classification Tasks

  Xiaoguang Chang, Teng Wang, Changyin Sun

• A Biosecurity Agent for Lifecycle LLM Biosecurity Alignment

  Meiyin Meng, Zaixi Zhang

2025-09-12

• GAMA: A General Anonymizing Multi-Agent System for Privacy Preservation Enhanced by Domain Rules and Disproof Method

  Hailong Yang, Renhuo Zhao, Guanjin Wang, Zhaohong Deng

• Adaptive Token Merging for Efficient Transformer Semantic Communication at the Edge

  Omar Erak, Omar Alhussein, Hatem Abou-Zeid, Mehdi Bennis, Sami Muhaidat

• Adversarial robustness through Lipschitz-Guided Stochastic Depth in Neural Networks

  Laith Nayal, Mahmoud Mousatat, Bader Rasheed

• Immunizing Images from Text to Image Editing via Adversarial Cross-Attention

  Matteo Trippodo, Federico Becattini, Lorenzo Seidenari

• FedRP: A Communication-Efficient Approach for Differentially Private Federated Learning Using Random Projection

  Mohammad Hasan Narimani, Mostafa Tavassolipour

• Prompt Injection Attacks on LLM Generated Reviews of Scientific Publications

  Janis Keuper

• When Your Reviewer is an LLM: Biases, Divergence, and Prompt Injection Risks in Peer Review

  Changjia Zhu, Junjie Xiong, Renkai Ma, Zhicong Lu, Yao Liu, Lingyao Li

• Machine Unlearning for Responsible and Adaptive AI in Education

  Betty Mayeku, Sandra Hummel, Parisa Memarmoshrefi

• LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems

  Vitor Hugo Galhardo Moia, Igor Jochem Sanz, Gabriel Antonio Fontes Rebello, Rodrigo Duarte de Meneses, Briland Hitaj, Ulf Lindqvist

• Privacy-Preserving Decentralized Federated Learning via Explainable Adaptive Differential Privacy

  Fardin Jalil Piran, Zhiling Chen, Yang Zhang, Qianyu Zhou, Jiong Tang, Farhad Imani

• Dark Patterns Meet GUI Agents: LLM Agent Susceptibility to Manipulative Interfaces and the Role of Human Oversight

  Jingyu Tang, Chaoran Chen, Jiawen Li, Zhiping Zhang, Bingcan Guo, Ibrahim Khalilov, Simret Araya Gebreegziabher, Bingsheng Yao, Dakuo Wang, Yanfang Ye, Tianshi Li, Ziang Xiao, Yaxing Yao, Toby Jia-Jun Li

• Safety and Security Analysis of Large Language Models: Risk Profile and Harm Potential

  Charankumar Akiri, Harrison Simpson, Kshitiz Aryal, Aarav Khanna, Maanak Gupta

• Side-channel Inference of User Activities in AR/VR Using GPU Profiling

  Seonghun Son, Chandrika Mukherjee, Reham Mohamed Aburas, Berk Gulmezoglu, Z. Berkay Celik

• JU-NLP at Touché: Covert Advertisement in Conversational AI-Generation and Detection Strategies

  Arka Dutta, Agrik Majumdar, Sombrata Biswas, Dipankar Das, Sivaji Bandyopadhyay

2025-09-11

• Enabling Regulatory Multi-Agent Collaboration: Architecture, Challenges, and Solutions

  Qinnan Hu, Yuntao Wang, Yuan Gao, Zhou Su, Linkang Du

• Towards Confidential and Efficient LLM Inference with Dual Privacy Protection

  Honglan Yu, Yibin Wang, Feifei Dai, Dong Liu, Haihui Fan, Xiaoyan Gu

• Character-Level Perturbations Disrupt LLM Watermarks

  Zhaoxi Zhang, Xiaomei Zhang, Yanjun Zhang, He Zhang, Shirui Pan, Bo Liu, Asif Qumer Gill, Leo Yu Zhang

• Prompt Pirates Need a Map: Stealing Seeds helps Stealing Prompts

  Felix Mächtle, Ashwath Shetty, Jonas Sander, Nils Loose, Sören Pirk, Thomas Eisenbarth

• OpenFake: An Open Dataset and Platform Toward Large-Scale Deepfake Detection

  Victor Livernoche, Akshatha Arodi, Andreea Musulan, Zachary Yang, Adam Salvail, Gaétan Marceau Caron, Jean-François Godbout, Reihaneh Rabbany

• Steering MoE LLMs via Expert (De)Activation

  Mohsen Fayyaz, Ali Modarressi, Hanieh Deilamsalehy, Franck Dernoncourt, Ryan Rossi, Trung Bui, Hinrich Schütze, Nanyun Peng

• Balancing Utility and Privacy: Dynamically Private SGD with Random Projection

  Zhanhong Jiang, Md Zahid Hasan, Nastaran Saadati, Aditya Balu, Chao Liu, Soumik Sarkar

• ProDiGy: Proximity- and Dissimilarity-Based Byzantine-Robust Federated Learning

  Sena Ergisi, Luis Maßny, Rawad Bitar

• Representation-Aware Distributionally Robust Optimization: A Knowledge Transfer Framework

  Zitao Wang, Nian Si, Molei Liu

• ZORRO: Zero-Knowledge Robustness and Privacy for Split Learning (Full Version)

  Nojan Sheybani, Alessandro Pegoraro, Jonathan Knauer, Phillip Rieger, Elissa Mollakuqe, Farinaz Koushanfar, Ahmad-Reza Sadeghi

• Images in Motion?: A First Look into Video Leakage in Collaborative Deep Learning

  Md Fazle Rasul, Alanood Alqobaisi, Bruhadeshwar Bezawada, Indrakshi Ray

• Privacy-Preserving Automated Rosacea Detection Based on Medically Inspired Region of Interest Selection

  Chengyu Yang, Rishik Reddy Yesgari, Chengjun Liu

• Safe-SAIL: Towards a Fine-grained Safety Landscape of Large Language Models via Sparse Autoencoder Interpretation Framework

  Jiaqi Weng, Han Zheng, Hanyu Zhang, Qinqin He, Jialing Tao, Hui Xue, Zhixuan Chu, Xiting Wang

• The Coding Limits of Robust Watermarking for Generative Models

  Danilo Francati, Yevin Nikhel Goonatilake, Shubham Pawar, Daniele Venturi, Giuseppe Ateniese

2025-09-10

• Symmetry-Guided Multi-Agent Inverse Reinforcement Learnin

  Yongkai Tian, Yirong Qi, Xin Yu, Wenjun Wu, Jie Luo

• Adversarial Attacks Against Automated Fact-Checking: A Survey

  Fanzhen Liu, Alsharif Abuadbba, Kristen Moore, Surya Nepal, Cecile Paris, Jia Wu, Jian Yang, Quan Z. Sheng

• Architecting Resilient LLM Agents: A Guide to Secure Plan-then-Execute Implementations

  Ron F. Del Rosario, Klaudia Krawiecka, Christian Schroeder de Witt

• X-Teaming Evolutionary M2S: Automated Discovery of Multi-turn to Single-turn Jailbreak Templates

  Hyunjun Kim, Junwoo Ha, Sangyoon Yu, Haon Park

• Learning Turbulent Flows with Generative Models: Super-resolution, Forecasting, and Sparse Flow Reconstruction

  Vivek Oommen, Siavash Khodakarami, Aniruddha Bora, Zhicheng Wang, George Em Karniadakis

• GTA-Crime: A Synthetic Dataset and Generation Framework for Fatal Violence Detection with Adversarial Snippet-Level Domain Adaptation

  Seongho Kim, Sejong Ryu, Hyoukjun You, Je Hyeong Hong

• Ensemble Distribution Distillation for Self-Supervised Human Activity Recognition

  Matthew Nolan, Lina Yao, Robert Davidson

• Perfectly-Private Analog Secure Aggregation in Federated Learning

  Delio Jaramillo-Velez, Charul Rajput, Ragnar Freij-Hollanti, Camilla Hollanti, Alexandre Graell i Amat

• Securing Private Federated Learning in a Malicious Setting: A Scalable TEE-Based Approach with Client Auditing

  Shun Takagi, Satoshi Hasegawa

• Tight Privacy Audit in One Run

  Zihang Xiang, Tianhao Wang, Hanshen Xiao, Yuan Tian, Di Wang

• Approximate Algorithms for Verifying Differential Privacy with Gaussian Distributions

  Bishnu Bhusal, Rohit Chadha, A. Prasad Sistla, Mahesh Viswanathan

• Corruption-Tolerant Asynchronous Q-Learning with Near-Optimal Rates

  Sreejeet Maity, Aritra Mitra

• Group Distributionally Robust Machine Learning under Group Level Distributional Uncertainty

  Xenia Konti, Yi Shen, Zifan Wang, Karl Henrik Johansson, Michael J. Pencina, Nicoleta J. Economou-Zavlanos, Michael M. Zavlanos

• Quantum Error Correction in Adversarial Regimes

  Rahul Arvind, Nikhil Bansal, Dax Enshan Koh, Tobias Haug, Kishor Bharti

• AVEC: Bootstrapping Privacy for Local LLMs

  Madhava Gaikwad

• X-Teaming Evolutionary M2S: Automated Discovery of Multi-turn to Single-turn Jailbreak Templates

  Hyunjun Kim, Junwoo Ha, Sangyoon Yu, Haon Park

2025-09-09

• How Far Are We from True Unlearnability?

  Kai Ye, Liangcai Su, Chenxiong Qian

• Nearest Neighbor Projection Removal Adversarial Training

  Himanshu Singh, A. V. Subramanyam, Shivank Rajput, Mohan Kankanhalli

• Hammer and Anvil: A Principled Defense Against Backdoors in Federated Learning

  Lucas Fenaux, Zheng Wang, Jacob Yan, Nathan Chung, Florian Kerschbaum

• Sketched Gaussian Mechanism for Private Federated Learning

  Qiaobo Li, Zhijie Chen, Arindam Banerjee

• SAGE: Sample-Aware Guarding Engine for Robust Intrusion Detection Against Adversarial Attacks

  Jing Chen, Onat Gungor, Zhengli Shang, Tajana Rosing

• Asynchronous Gossip Algorithms for Rank-Based Statistical Methods

  Anna Van Elst, Igor Colin, Stephan Clémençon

• Spectral Masking and Interpolation Attack (SMIA): A Black-box Adversarial Attack against Voice Authentication and Anti-Spoofing Systems

  Kamel Kamel, Hridoy Sankar Dutta, Keshav Sood, Sunil Aryal

2025-09-08

• Towards Trustworthy Agentic IoEV: AI Agents for Explainable Cyberthreat Mitigation and State Analytics

  Meryem Malak Dif, Mouhamed Amine Bouchiha, Abdelaziz Amara Korba, Yacine Ghamri-Doudane

• When Secure Isn't: Assessing the Security of Machine Learning Model Sharing

  Gabriele Digregorio, Marco Di Gennaro, Stefano Zanero, Stefano Longari, Michele Carminati

• Sequentially Auditing Differential Privacy

  Tomás González, Mateo Dulce-Rubio, Aaditya Ramdas, Mónica Ribero

• From Noise to Narrative: Tracing the Origins of Hallucinations in Transformers

  Praneet Suresh, Jack Stanley, Sonia Joseph, Luca Scimeca, Danilo Bzdok

• Mind Your Server: A Systematic Study of Parasitic Toolchain Attacks on the MCP Ecosystem

  Shuli Zhao, Qinsheng Hou, Zihan Zhan, Yanhao Wang, Yuchong Xie, Yu Guo, Libo Chen, Shenghong Li, Zhi Xue

2025-09-07

• RetinaGuard: Obfuscating Retinal Age in Fundus Images for Biometric Privacy Preserving

  Zhengquan Luo, Chi Liu, Dongfu Xiao, Zhen Yu, Yueye Wang, Tianqing Zhu

• Beyond I'm Sorry, I Can't: Dissecting Large Language Model Refusal

  Nirmalendu Prakash, Yeo Wei Jie, Amir Abdullah, Ranjan Satapathy, Erik Cambria, Roy Ka Wei Lee

• Robust DDoS-Attack Classification with 3D CNNs Against Adversarial Methods

  Landon Bragg, Nathan Dorsey, Josh Prior, John Ajit, Ben Kim, Nate Willis, Pablo Rivas

• Uncovering the Vulnerability of Large Language Models in the Financial Domain via Risk Concealment

  Gang Cheng, Haibo Jin, Wenbin Zhang, Haohan Wang, Jun Zhuang

2025-09-06

• AntiDote: Bi-level Adversarial Training for Tamper-Resistant LLMs

  Debdeep Sanyal, Manodeep Ray, Murari Mandal

• EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System

  Pavan Reddy, Aditya Sanjay Gujral

• Exploit Tool Invocation Prompt for Tool Behavior Hijacking in LLM-Based Agentic System

  Yu Liu, Yuchong Xie, Mingyu Luo, Zesen Liu, Zhixiang Zhang, Kaikai Zhang, Zongjie Li, Ping Chen, Shuai Wang, Dongdong She

• Decoding Latent Attack Surfaces in LLMs: Prompt Injection via HTML in Web Summarization

  Ishaan Verma

2025-09-05

• CTCC: A Robust and Stealthy Fingerprinting Framework for Large Language Models via Cross-Turn Contextual Correlation Backdoor

  Zhenhua Xu, Xixiang Zhao, Xubin Yue, Shengwei Tian, Changting Lin, Meng Han

• Differential Robustness in Transformer Language Models: Empirical Evaluation Under Adversarial Text Attacks

  Taniya Gidatkar, Oluwaseun Ajao, Matthew Shardlow

• Contextuality, Holonomy and Discrete Fiber Bundles in Group-Valued Boltzmann Machines

  Jean-Pierre Magnot

• Pre-Forgettable Models: Prompt Learning as a Native Mechanism for Unlearning

  Rutger Hendrix, Giovanni Patanè, Leonardo G. Russo, Simone Carnemolla, Giovanni Bellitto, Federica Proietto Salanitri, Concetto Spampinato, Matteo Pennisi

2025-09-04

• A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Models

  Yanbo Wang, Yongcan Yu, Jian Liang, Ran He

• NeuroBreak: Unveil Internal Jailbreak Mechanisms in Large Language Models

  Chuhan Zhang, Ye Zhang, Bowen Shi, Yuyou Gan, Tianyu Du, Shouling Ji, Dazhan Deng, Yingcai Wu

• Detecting Regional Spurious Correlations in Vision Transformers via Token Discarding

  Solha Kang, Esla Timothy Anzaku, Wesley De Neve, Arnout Van Messem, Joris Vankerschaver, Francois Rameau, Utku Ozbulak

• False Sense of Security: Why Probing-based Malicious Input Detection Fails to Generalize

  Cheng Wang, Zeming Wei, Qin Liu, Muhao Chen

• Inverse IFEval: Can LLMs Unlearn Stubborn Training Conventions to Follow Real Instructions?

  Qinyan Zhang, Xinping Lei, Ruijie Miao, Yu Fu, Haojie Fan, Le Chang, Jiafan Hou, Dingling Zhang, Zhongfei Hou, Ziqiang Yang, Changxin Pu, Fei Hu, Jingkai Liu, Mengyun Liu, Yang Liu, Xiang Gao, Jiaheng Liu, Tong Yang, Zaiyuan Wang, Ge Zhang, Wenhao Huang

• Evaluating the Robustness of Retrieval-Augmented Generation to Adversarial Evidence in the Health Domain

  Shakiba Amirshahi, Amin Bigdeli, Charles L. A. Clarke, Amira Ghenai

• Self-adaptive Dataset Construction for Real-World Multimodal Safety Scenarios

  Jingen Qu, Lijun Li, Bo Zhang, Yichen Yan, Jing Shao

• Formal Verification of Local Robustness of a Classification Algorithm for a Spatial Use Case

  Delphine Longuet, Amira Elouazzani, Alejandro Penacho Riveiros, Nicola Bastianello

• Privacy Risks in Time Series Forecasting: User- and Record-Level Membership Inference

  Nicolas Johansson, Tobias Olsson, Daniel Nilsson, Johan Östman, Fazeleh Hoseini

• Rethinking Layer-wise Gaussian Noise Injection: Bridging Implicit Objectives and Privacy Budget Allocation

  Qifeng Tan, Shusen Yang, Xuebin Ren, Yikai Zhang

• Peekaboo, I See Your Queries: Passive Attacks Against DSSE Via Intermittent Observations

  Hao Nie, Wei Wang, Peng Xu, Wei Chen, Laurence T. Yang, Mauro Conti, Kaitai Liang

• An Automated, Scalable Machine Learning Model Inversion Assessment Pipeline

  Tyler Shumaker, Jessica Carpenter, David Saranchak, Nathaniel D. Bastian

• Between a Rock and a Hard Place: Exploiting Ethical Reasoning to Jailbreak LLMs

  Shei Pern Chua, Zhen Leng Thai, Teh Kai Jun, Xiao Li, Xiaolin Hu

• Variational Gaussian Mixture Manifold Models for Client-Specific Federated Personalization

  Sai Puppala, Ismail Hossain, Md Jahangir Alam, Sajedul Talukder

• MEUV: Achieving Fine-Grained Capability Activation in Large Language Models via Mutually Exclusive Unlock Vectors

  Xin Tong, Zhi Lin, Jingya Wang, Meng Han, Bo Jin

• Visible Yet Unreadable: A Systematic Blind Spot of Vision Language Models Across Writing Systems

  Jie Zhang, Ting Xu, Gelei Deng, Runyi Hu, Han Qiu, Tianwei Zhang, Qing Guo, Ivor Tsang

• EvoEmo: Towards Evolved Emotional Policies for Adversarial LLM Agents in Multi-Turn Price Negotiation

  Yunbo Long, Liming Xu, Lukas Beckenbauer, Yuhan Liu, Alexandra Brintrup

• AI-in-the-Loop: Privacy Preserving Real-Time Scam Detection and Conversational Scambaiting by Leveraging LLMs and Federated Learning

  Ismail Hossain, Sai Puppala, Md Jahangir Alam, Sajedul Talukder

2025-09-03

• ANNIE: Be Careful of Your Robots

  Yiyang Huang, Zixuan Wang, Zishen Wan, Yapeng Tian, Haobo Xu, Yinhe Han, Yiming Gan

• AutoDetect: Designing an Autoencoder-based Detection Method for Poisoning Attacks on Object Detection Applications in the Military Domain

  Alma M. Liezenga, Stefan Wijnja, Puck de Haan, Niels W. T. Brink, Jip J. van Stijn, Yori Kamphuis, Klamer Schutte

• On the MIA Vulnerability Gap Between Private GANs and Diffusion Models

  Ilana Sebag, Jean-Yves Franceschi, Alain Rakotomamonjy, Alexandre Allauzen, Jamal Atif

• DPQuant: Efficient and Differentially-Private Model Training via Dynamic Quantization Scheduling

  Yubo Gao, Renbo Tu, Gennady Pekhimenko, Nandita Vijaykumar

• SafeProtein: Red-Teaming Framework and Benchmark for Protein Foundation Models

  Jigang Fan, Zhenghong Zhou, Ruofan Jin, Le Cong, Mengdi Wang, Zaixi Zhang

• Enhancing Robustness in Post-Processing Watermarking: An Ensemble Attack Network Using CNNs and Transformers

  Tzuhsuan Huang, Cheng Yu Yeo, Tsai-Ling Huang, Hong-Han Shuai, Wen-Huang Cheng, Jun-Cheng Chen

• Background Matters Too: A Language-Enhanced Adversarial Framework for Person Re-Identification

  Kaicong Huang, Talha Azfar, Jack M. Reilly, Thomas Guggisberg, Ruimin Ke

• High Cursive Complex Character Recognition using GAN External Classifier

  S M Rafiuddin

• Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods

  Shota Iwamatsu, Koichi Ito, Takafumi Aoki

• Prompt-Guided Patch UNet-VAE with Adversarial Supervision for Adrenal Gland Segmentation in Computed Tomography Medical Images

  Hania Ghouse, Muzammil Behzad

• Delayed Momentum Aggregation: Communication-efficient Byzantine-robust Federated Learning with Partial Participation

  Kaoru Otsuka, Yuki Takezawa, Makoto Yamada

• LSAM: Asynchronous Distributed Training with Landscape-Smoothed Sharpness-Aware Minimization

  Yunfei Teng, Sixin Zhang

• Can LLMs Lie? Investigation beyond Hallucination

  Haoran Huan, Mihir Prabhudesai, Mengning Wu, Shantanu Jaiswal, Deepak Pathak

• EverTracer: Hunting Stolen Large Language Models via Stealthy and Robust Probabilistic Fingerprint

  Zhenhua Xu, Meng Han, Wenpeng Xing

• Exposing Privacy Risks in Anonymizing Clinical Data: Combinatorial Refinement Attacks on k-Anonymity Without Auxiliary Information

  Somiya Chhillar, Mary K. Righi, Rebecca E. Sutter, Evgenios M. Kornaropoulos

• Federated Learning: An approach with Hybrid Homomorphic Encryption

  Pedro Correia, Ivan Silva, Ivone Amorim, Eva Maia, Isabel Praça

• PersonaTeaming: Exploring How Introducing Personas Can Improve Automated AI Red-Teaming

  Wesley Hanwen Deng, Sunnie S. Y. Kim, Akshita Jha, Ken Holstein, Motahhare Eslami, Lauren Wilcox, Leon A Gatys

• Learning an Adversarial World Model for Automated Curriculum Generation in MARL

  Brennen Hill

• Stealth by Conformity: Evading Robust Aggregation through Adaptive Poisoning

  Ryan McGaughey, Jesus Martinez del Rincon, Ihsen Alouani

• Silent Until Sparse: Backdoor Attacks on Semi-Structured Sparsity

  Wei Guo, Maura Pintor, Ambra Demontis, Battista Biggio

• Prototype-Guided Robust Learning against Backdoor Attacks

  Wei Guo, Maura Pintor, Ambra Demontis, Battista Biggio

• From Injection to Defense: Constructing Edit-Based Fingerprints for Large Language Models

  Yue Li, Xin Yi, Dongsheng Shi, Yongyi Cui, Gerard de Melo, Linlin Wang

• SafeProtein: Red-Teaming Framework and Benchmark for Protein Foundation Models

  Jigang Fan, Zhenghong Zhou, Ruofan Jin, Le Cong, Mengdi Wang, Zaixi Zhang

2025-09-02

• A-SEA3L-QA: A Fully Automated Self-Evolving, Adversarial Workflow for Arabic Long-Context Question-Answer Generation

  Kesen Wang, Daulet Toibazar, Pedro J. Moreno

• Speech DF Arena: A Leaderboard for Speech DeepFake Detection Models

  Sandipana Dowerah, Atharva Kulkarni, Ajinkya Kulkarni, Hoan My Tran, Joonas Kalda, Artem Fedorchenko, Benoit Fauve, Damien Lolive, Tanel Alumäe, Matthew Magimai Doss

• See No Evil: Adversarial Attacks Against Linguistic-Visual Association in Referring Multi-Object Tracking Systems

  Halima Bouzidi, Haoyu Liu, Mohammad Abdullah Al Faruque

• The Anti-Ouroboros Effect: Emergent Resilience in Large Language Models from Recursive Selective Feedback

  Sai Teja Reddy Adapala

• Abex-rat: Synergizing Abstractive Augmentation and Adversarial Training for Classification of Occupational Accident Reports

  Jian Chen, Jiabao Dou, Jinbao Tian, Yunqi Yang, Zhou Li

2025-09-01

• PIR-RAG: A System for Private Information Retrieval in Retrieval-Augmented Generation

  Baiqiang Wang, Qian Lou, Mengxin Zheng, Dongfang Zhao

2025-08-31

• Distributed Gossip-GAN for Low-overhead CSI Feedback Training in FDD mMIMO-OFDM Systems

  Yuwen Cao, Guijun Liu, Tomoaki Ohtsuki, Howard H. Yang, Tony Q. S. Quek

2025-08-30

• Deep opacity and AI: A threat to XAI and to privacy protection mechanisms

  Vincent C. Müller

• Partially Functional Dynamic Backdoor Diffusion-based Causal Model

  Xinwen Liu, Lei Qian, Song Xi Chen, Niansheng Tang

• When Thinking Backfires: Mechanistic Insights Into Reasoning-Induced Misalignment

  Hanqi Yan, Hainiu Xu, Siya Qi, Shu Yang, Yulan He

• When Thinking Backfires: Mechanistic Insights Into Reasoning-Induced Misalignment

  Hanqi Yan, Hainiu Xu, Siya Qi, Shu Yang, Yulan He

2025-08-29

• SoK: Exposing the Generation and Detection Gaps in LLM-Generated Phishing Through Examination of Generation Methods, Content Characteristics, and Countermeasures

  Fengchao Chen, Tingmin Wu, Van Nguyen, Carsten Rudolph

2025-08-28

• GCAV: A Global Concept Activation Vector Framework for Cross-Layer Consistency in Interpretability

  Zhenghao He, Sanchit Sinha, Guangzhi Xiong, Aidong Zhang

• PromptSleuth: Detecting Prompt Injection via Semantic Intent Invariance

  Mengxiao Wang, Yuxuan Zhang, Guofei Gu

• Enhancing Resilience for IoE: A Perspective of Networking-Level Safeguard

  Guan-Yan Yang, Jui-Ning Chen, Farn Wang, Kuo-Hui Yeh

• Safe-Control: A Safety Patch for Mitigating Unsafe Content in Text-to-Image Generation Models

  Xiangtao Meng, Yingkai Dong, Ning Yu, Li Wang, Zheng Li, Shanqing Guo

• Phased One-Step Adversarial Equilibrium for Video Diffusion Models

  Jiaxiang Cheng, Bing Ma, Xuhua Ren, Hongyi Henry Jin, Kai Yu, Peng Zhang, Wenyue Li, Yuan Zhou, Tianxiang Zheng, Qinglin Lu

2025-08-27

• Network-Level Prompt and Trait Leakage in Local Research Agents

  Hyejun Jeong, Mohammadreza Teymoorianfard, Abhinav Kumar, Amir Houmansadr, Eugene Bagdasarian

• Pruning Weights but Not Truth: Safeguarding Truthfulness While Pruning LLMs

  Yao Fu, Runchao Li, Xianxuan Long, Haotian Yu, Xiaotian Han, Yu Yin, Pan Li

• Mind the Third Eye! Benchmarking Privacy Awareness in MLLM-powered Smartphone Agents

  Zhixin Lin, Jungang Li, Shidong Pan, Yibo Shi, Yue Yao, Dongliang Xu

• AR$^2$: Adversarial Reinforcement Learning for Abstract Reasoning in Large Language Models

  Cheng-Kai Yeh, Hsing-Wang Lee, Chung-Hung Kuo, Hen-Hsen Huang

• Forewarned is Forearmed: Pre-Synthesizing Jailbreak-like Instructions to Enhance LLM Safety Guardrail to Potential Attacks

  Sheng Liu, Qiang Sheng, Danding Wang, Yang Li, Guang Yang, Juan Cao

• Language Models Identify Ambiguities and Exploit Loopholes

  Jio Choi, Mohit Bansal, Elias Stengel-Eskin

• AEGIS : Automated Co-Evolutionary Framework for Guarding Prompt Injections Schema

  Ting-Chun Liu, Ching-Yu Hsu, Kuan-Yi Lee, Chi-An Fu, Hung-yi Lee

• Robustness Assessment and Enhancement of Text Watermarking for Google's SynthID

  Xia Han, Qi Li, Jianbing Ni, Mohammad Zulkernine

• Robustness is Important: Limitations of LLMs for Data Fitting

  Hejia Liu, Mochen Yang, Gediminas Adomavicius

2025-08-26

• PRISM: Robust VLM Alignment with Principled Reasoning for Integrated Safety in Multimodality

  Nanxi Li, Zhengyue Zhao, Chaowei Xiao

• Membership Inference Attacks on LLM-based Recommender Systems

  Jiajie He, Yuechun Gu, Min-Chun Chen, Keke Chen

• Auditing Approximate Machine Unlearning for Differentially Private Models

  Yuechun Gu, Jiajie He, Keke Chen

• FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks

  Enrique Mármol Campos, Aurora González Vidal, José Luis Hernández Ramos, Antonio Skarmeta

• SegReConcat: A Data Augmentation Method for Voice Anonymization Attack

  Ridwan Arefeen, Xiaoxiao Miao, Rong Tong, Aik Beng Ng, Simon See

• Enhancing Model Privacy in Federated Learning with Random Masking and Quantization

  Zhibo Xu, Jianhao Zhu, Jingwen Xu, Changze Lv, Zisu Huang, Xiaohua Wang, Muling Wu, Qi Qian, Xiaoqing Zheng, Xuanjing Huang

• Tackling Federated Unlearning as a Parameter Estimation Problem

  Antonio Balordi, Lorenzo Manini, Fabio Stella, Alessio Merlo

• Attackers Strike Back? Not Anymore - An Ensemble of RL Defenders Awakens for APT Detection

  Sidahmed Benabderrahmane, Talal Rahwan

• SecureV2X: An Efficient and Privacy-Preserving System for Vehicle-to-Everything (V2X) Applications

  Joshua Lee, Ali Arastehfard, Weiran Liu, Xuegang Ban, Yuan Hong

• UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation

  Runpeng Geng, Yanting Wang, Ying Chen, Jinyuan Jia

• The Double-edged Sword of LLM-based Data Reconstruction: Understanding and Mitigating Contextual Vulnerability in Word-level Differential Privacy Text Sanitization

  Stephen Meisenbacher, Alexandra Klymenko, Andreea-Elena Bodea, Florian Matthes

• Flatness-aware Curriculum Learning via Adversarial Difficulty

  Hiroaki Aizawa, Yoshikazu Hayashi

• A Closer Look at Edema Area Segmentation in SD-OCT Images Using Adversarial Framework

  Yuhui Tao, Yizhe Zhang, Qiang Chen

• Can we make NeRF-based visual localization privacy-preserving?

  Maxime Pietrantoni, Martin Humenberger, Torsten Sattler, Gabriela Csurka

• Hidden Tail: Adversarial Image Causing Stealthy Resource Consumption in Vision-Language Models

  Rui Zhang, Zihan Wang, Tianli Yang, Hongwei Li, Wenbo Jiang, Qingchuan Zhao, Yang Liu, Guowen Xu

• Saddle Hierarchy in Dense Associative Memory

  Robin Thériault, Daniele Tantari

• Get Global Guarantees: On the Probabilistic Nature of Perturbation Robustness

  Wenchuan Mu, Kwan Hui Lim

• A Tight Context-aware Privacy Bound for Histogram Publication

  Sara Saeidian, Ata Yavuzyılmaz, Leonhard Grosse, Georg Schuppe, Tobias J. Oechtering

• Memorization in Graph Neural Networks

  Adarsh Jamadandi, Jing Xu, Adam Dziedzic, Franziska Boenisch

• Membership Inference Attacks on LLM-based Recommender Systems

  Jiajie He, Yuechun Gu, Min-Chun Chen, Keke Chen

• On Surjectivity of Neural Networks: Can you elicit any behavior from your model?

  Haozhe Jiang, Nika Haghtalab

2025-08-25

• Attacking LLMs and AI Agents: Advertisement Embedding Attacks Against Large Language Models

  Qiming Guo, Jinwen Tang, Xingran Huang

• Robustness Feature Adapter for Efficient Adversarial Training

  Quanwei Wu, Jun Guo, Wei Wang, Yi Wang

• Speculative Safety-Aware Decoding

  Xuekang Wang, Shengyu Zhu, Xueqi Cheng

• FasterVoiceGrad: Faster One-step Diffusion-Based Voice Conversion with Adversarial Diffusion Conversion Distillation

  Takuhiro Kaneko, Hirokazu Kameoka, Kou Tanaka, Yuto Kondo

• Vocoder-Projected Feature Discriminator

  Takuhiro Kaneko, Hirokazu Kameoka, Kou Tanaka, Yuto Kondo

• Learning from Few Samples: A Novel Approach for High-Quality Malcode Generation

  Haijian Ma, Daizong Liu, Xiaowen Cai, Pan Zhou, Yulai Xie

• ISACL: Internal State Analyzer for Copyrighted Training Data Leakage

  Guangwei Zhang, Qisheng Su, Jiateng Liu, Cheng Qian, Yanzhou Pan, Yanjie Fu, Denghui Zhang

• CATformer: Contrastive Adversarial Transformer for Image Super-Resolution

  Qinyi Tian, Spence Cox, Laura E. Dalton

• SCOUT: Semi-supervised Camouflaged Object Detection by Utilizing Text and Adaptive Data Selection

  Weiqi Yan, Lvhai Chen, Shengchuan Zhang, Yan Zhang, Liujuan Cao

• Does simple trump complex? Comparing strategies for adversarial robustness in DNNs

  William Brooks, Marelie H. Davel, Coenraad Mouton

• FedGreed: A Byzantine-Robust Loss-Based Aggregation Method for Federated Learning

  Emmanouil Kritharakis, Antonios Makris, Dusan Jakovetic, Konstantinos Tserpes

• Quantum-Classical Hybrid Framework for Zero-Day Time-Push GNSS Spoofing Detection

  Abyad Enan, Mashrur Chowdhury, Sagar Dasgupta, Mizanur Rahman

• PhantomLint: Principled Detection of Hidden LLM Prompts in Structured Documents

  Toby Murray

• ClearMask: Noise-Free and Naturalness-Preserving Protection Against Voice Deepfake Attacks

  Yuanda Wang, Bocheng Chen, Hanqing Guo, Guangjing Wang, Weikang Ding, Qiben Yan

• Backprompting: Leveraging Synthetic Production Data for Health Advice Guardrails

  Kellen Tan Cheng, Anna Lisa Gentile, Chad DeLuca, Guang-Jie Ren

• Analise de Desaprendizado de Maquina em Modelos de Classificacao de Imagens Medicas

  Andreza M. C. Falcao, Filipe R. Cordeiro

• Training Language Model Agents to Find Vulnerabilities with CTF-Dojo

  Terry Yue Zhuo, Dingmin Wang, Hantian Ding, Varun Kumar, Zijian Wang

• Privacy-Preserving Federated Learning Framework for Risk-Based Adaptive Authentication

  Yaser Baseri, Abdelhakim Senhaji Hafid, Dimitrios Makrakis, Hamidreza Fereidouni

• A.S.E: A Repository-Level Benchmark for Evaluating Security in AI-Generated Code

  Keke Lian, Bin Wang, Lei Zhang, Libo Chen, Junjie Wang, Ziming Zhao, Yujiu Yang, Miaoqian Lin, Haotong Duan, Haoran Zhao, Shuang Liao, Mingda Guo, Jiazheng Quan, Yilu Zhong, Chenhao He, Zichuan Chen, Jie Wu, Haoling Li, Zhaoxuan Li, Jiongchi Yu, Hui Li, Dong Zhang

2025-08-24

• School of Reward Hacks: Hacking harmless tasks generalizes to misaligned behavior in LLMs

  Mia Taylor, James Chua, Jan Betley, Johannes Treutlein, Owain Evans

• How to make Medical AI Systems safer? Simulating Vulnerabilities, and Threats in Multimodal Medical RAG System

  Kaiwen Zuo, Zelin Liu, Raman Dutt, Ziyang Wang, Zhongtian Sun, Yeming Wang, Fan Mo, Pietro Liò

• Exposing Privacy Risks in Graph Retrieval-Augmented Generation

  Jiale Liu, Jiahao Zhang, Suhang Wang

• Agent-Testing Agent: A Meta-Agent for Automated Testing and Evaluation of Conversational AI Agents

  Sameer Komoravolu, Khalil Mrini

• Activation Transport Operators

  Andrzej Szablewski, Marek Masiak

• Persuasion Dynamics in LLMs: Investigating Robustness and Adaptability in Knowledge and Safety with DuET-PD

  Bryan Chen Zhengyu Tan, Daniel Wai Kit Chin, Zhengyuan Liu, Nancy F. Chen, Roy Ka-Wei Lee

• Advancing Weakly-Supervised Change Detection in Satellite Images via Adversarial Class Prompting

  Zhenghui Zhao, Chen Wu, Di Wang, Hongruixuan Chen, Cuiqun Chen, Zhuo Zheng, Bo Du, Liangpei Zhang

• Uncovering and Mitigating Destructive Multi-Embedding Attacks in Deepfake Proactive Forensics

  Lixin Jia, Haiyang Sun, Zhiqing Guo, Yunfeng Diao, Dan Ma, Gaobo Yang

• AdaGAT: Adaptive Guidance Adversarial Training for the Robustness of Deep Neural Networks

  Zhenyu Liu, Huizhi Liang, Xinrun Li, Vaclav Snasel, Varun Ojha

• Defending Deepfake via Texture Feature Perturbation

  Xiao Zhang, Changfang Chen, Tianyi Wang

• Sharpness-Aware Geometric Defense for Robust Out-Of-Distribution Detection

  Jeng-Lin Li, Ming-Ching Chang, Wei-Chao Chen

• MetaFed: Advancing Privacy, Performance, and Sustainability in Federated Metaverse Systems

  Muhammet Anil Yagiz, Zeynep Sude Cengiz, Polat Goktas

• Trust Me, I Know This Function: Hijacking LLM Static Analysis using Bias

  Shir Bernstein, David Beste, Daniel Ayzenshteyn, Lea Schonherr, Yisroel Mirsky

• FRAME : Comprehensive Risk Assessment Framework for Adversarial Machine Learning Threats

  Avishag Shapira, Simon Shigol, Asaf Shabtai

• Adversarial Examples Are Not Bugs, They Are Superposition

  Liv Gorton, Owen Lewis

• Risk Assessment and Security Analysis of Large Language Models

  Xiaoyan Zhang, Dongyang Lyu, Xiaoqi Li

• SoK: Cybersecurity Assessment of Humanoid Ecosystem

  Priyanka Prakash Surve, Asaf Shabtai, Yuval Elovici

• LLMs Can't Handle Peer Pressure: Crumbling under Multi-Agent Social Interactions

  Maojia Song, Tej Deep Pala, Weisheng Jin, Amir Zadeh, Chuan Li, Dorien Herremans, Soujanya Poria

2025-08-23

• WildSpoof Challenge Evaluation Plan

  Yihan Wu, Jee-weon Jung, Hye-jin Shim, Xin Cheng, Xin Wang

• ObjexMT: Objective Extraction and Metacognitive Calibration for LLM-as-a-Judge under Multi-Turn Jailbreaks

  Hyunjun Kim, Junwoo Ha, Sangyoon Yu, Haon Park

• NAT: Learning to Attack Neurons for Enhanced Adversarial Transferability

  Krishna Kanth Nakka, Alexandre Alahi

• Unveiling the Latent Directions of Reflection in Large Language Models

  Fu-Chieh Chang, Yu-Ting Lee, Pei-Yuan Wu

• Towards Safeguarding LLM Fine-tuning APIs against Cipher Attacks

  Jack Youstra, Mohammed Mahfoud, Yang Yan, Henry Sleight, Ethan Perez, Mrinank Sharma

• Rao Differential Privacy

  Carlos Soto

• SALMAN: Stability Analysis of Language Models Through the Maps Between Graph-based Manifolds

  Wuxinlin Cheng, Yupeng Cao, Jinwen Wu, Koduvayur Subbalakshmi, Tian Han, Zhuo Feng

2025-08-22

• STA-GANN: A Valid and Generalizable Spatio-Temporal Kriging Approach

  Yujie Li, Zezhi Shao, Chengqing Yu, Tangwen Qian, Zhao Zhang, Yifan Du, Shaoming He, Fei Wang, Yongjun Xu

• An Investigation of Visual Foundation Models Robustness

  Sandeep Gupta, Roberto Passerone

• From Confidence to Collapse in LLM Factual Robustness

  Alina Fastowski, Bardh Prenkaj, Gjergji Kasneci

• LLMSymGuard: A Symbolic Safety Guardrail Framework Leveraging Interpretable Jailbreak Concepts

  Darpan Aswal, Céline Hudelot

• Confusion is the Final Barrier: Rethinking Jailbreak Evaluation and Investigating the Real Misuse Threat of LLMs

  Yu Yan, Sheng Sun, Zhe Wang, Yijun Lin, Zenghao Duan, zhifei zheng, Min Liu, Zhiyi yin, Jianping Zhang

• HAMSA: Hijacking Aligned Compact Models via Stealthy Automation

  Alexey Krylov, Iskander Vagizov, Dmitrii Korzh, Maryam Douiba, Azidine Guezzaz, Vladimir Kokh, Sergey D. Erokhin, Elena V. Tutubalina, Oleg Y. Rogov

• Retrieval-Augmented Defense: Adaptive and Controllable Jailbreak Prevention for Large Language Models

  Guangyu Yang, Jinghong Chen, Jingbiao Mei, Weizhe Lin, Bill Byrne

• Domain Adaptation via Feature Refinement

  Savvas Karatsiolis, Andreas Kamilaris

• PromptFlare: Prompt-Generalized Defense via Cross-Attention Decoy in Diffusion-Based Inpainting

  Hohyun Na, Seunghoo Hong, Simon S. Woo

• Benchmarking the Robustness of Agentic Systems to Adversarially-Induced Harms

  Jonathan Nöther, Adish Singla, Goran Radanovic

• Quality control in sublinear time: a case study via random graphs

  Cassandra Marcussen, Ronitt Rubinfeld, Madhu Sudan

• Evaluating the Defense Potential of Machine Unlearning against Membership Inference Attacks

  Aristeidis Sidiropoulos, Christos Chrysanthos Nikolaidis, Theodoros Tsiolakis, Nikolaos Pavlidis, Vasilis Perifanis, Pavlos S. Efraimidis

• How to Beat Nakamoto in the Race

  Shu-Jie Cao, Dongning Guo

• Guarding Your Conversations: Privacy Gatekeepers for Secure Interactions with Cloud-Based AI Models

  GodsGift Uzor, Hasan Al-Qudah, Ynes Ineza, Abdul Serwadda

• A Survey of Threats Against Voice Authentication and Anti-Spoofing Systems

  Kamel Kamel, Keshav Sood, Hridoy Sankar Dutta, Sunil Aryal

• Aligning Distributionally Robust Optimization with Practical Deep Learning Needs

  Dmitrii Feoktistov, Igor Ignashin, Andrey Veprikov, Nikita Borovko, Alexander Bogdanov, Savelii Chezhegov, Aleksandr Beznosikov

• Securing Heterogeneous Network (HetNet) Communications for Wildfire Management: Mitigating the Effects of Adversarial and Environmental Threats

  Nesrine Benchoubane, Olfa Ben Yahia, William Ferguson, Gurkan Gur, Sumit Chakravarty, Gregory Falco, Gunes Karabulut Kurt

2025-08-21

• Conflict-Aware Soft Prompting for Retrieval-Augmented Generation

  Eunseong Choi, June Park, Hyeri Lee, Jongwuk Lee

• IPIGuard: A Novel Tool Dependency Graph-Based Defense Against Indirect Prompt Injection in LLM Agents

  Hengyu An, Jinghuai Zhang, Tianyu Du, Chunyi Zhou, Qingming Li, Tao Lin, Shouling Ji

• VideoEraser: Concept Erasure in Text-to-Video Diffusion Models

  Naen Xu, Jinghuai Zhang, Changjiang Li, Zhi Chen, Chunyi Zhou, Qingming Li, Tianyu Du, Shouling Ji

• Unveiling Trust in Multimodal Large Language Models: Evaluation, Analysis, and Mitigation

  Yichi Zhang, Yao Huang, Yifan Wang, Yitong Sun, Chang Liu, Zhe Zhao, Zhengwei Fang, Huanran Chen, Xiao Yang, Xingxing Wei, Hang Su, Yinpeng Dong, Jun Zhu

• Reliable Unlearning Harmful Information in LLMs with Metamorphosis Representation Projection

  Chengcan Wu, Zeming Wei, Huanran Chen, Yinpeng Dong, Meng Sun

• Towards a 3D Transfer-based Black-box Attack via Critical Feature Guidance

  Shuchao Pang, Zhenghan Chen, Shen Zhang, Liming Lu, Siyuan Liang, Anan Du, Yongbin Zhou

• A Study of Privacy-preserving Language Modeling Approaches

  Pritilata Saha, Abhirup Sinha

• SafetyFlow: An Agent-Flow System for Automated LLM Safety Benchmarking

  Xiangyang Zhu, Yuan Tian, Chunyi Li, Kaiwei Zhang, Wei Sun, Guangtao Zhai

• SDGO: Self-Discrimination-Guided Optimization for Consistent Safety in Large Language Models

  Peng Ding, Wen Sun, Dailin Li, Wei Zou, Jiaming Wang, Jiajun Chen, Shujian Huang

• Retrieval-Augmented Review Generation for Poisoning Recommender Systems

  Shiyi Yang, Xinshu Li, Guanglin Zhou, Chen Wang, Xiwei Xu, Liming Zhu, Lina Yao

• Adversarial Attacks against Neural Ranking Models via In-Context Learning

  Amin Bigdeli, Negar Arabzadeh, Ebrahim Bagheri, Charles L. A. Clarke

• Adversarial Agent Behavior Learning in Autonomous Driving Using Deep Reinforcement Learning

  Arjun Srinivasan, Anubhav Paras, Aniket Bera

• Fast globally optimal Truncated Least Squares point cloud registration with fixed rotation axis

  Ivo Ivanov, Carsten Markgraf

• DoSReMC: Domain Shift Resilient Mammography Classification using Batch Normalization Adaptation

  Uğurcan Akyüz, Deniz Katircioglu-Öztürk, Emre K. Süslü, Burhan Keleş, Mete C. Kaya, Gamze Durhan, Meltem G. Akpınar, Figen B. Demirkazık, Gözde B. Akar

• SafeLLM: Unlearning Harmful Outputs from Large Language Models against Jailbreak Attacks

  Xiangman Li, Xiaodong Wu, Qi Li, Jianbing Ni, Rongxing Lu

• Mini-Batch Robustness Verification of Deep Neural Networks

  Saar Tzour-Shaday, Dana Drachsler Cohen

• Distributed Detection of Adversarial Attacks in Multi-Agent Reinforcement Learning with Continuous Action Space

  Kiarash Kazari, Ezzeldin Shereen, György Dán

• BadFU: Backdoor Federated Learning through Adversarial Machine Unlearning

  Bingguang Lu, Hongsheng Hu, Yuantian Miao, Shaleeza Sohail, Chaoxiang He, Shuo Wang, Xiao Chen

• Strategic Sample Selection for Improved Clean-Label Backdoor Attacks in Text Classification

  Onur Alp Kirci, M. Emre Gursoy

2025-08-20

• Foe for Fraud: Transferable Adversarial Attacks in Credit Card Fraud Detection

  Jan Lum Fok, Qingwen Zeng, Shiping Chen, Oscar Fawkes, Huaming Chen

• Adversarial Generation and Collaborative Evolution of Safety-Critical Scenarios for Autonomous Vehicles

  Jiangfan Liu, Yongkang Guo, Fangzhi Zhong, Tianyuan Zhang, Zonglei Jing, Siyuan Liang, Jiakai Wang, Mingchuan Zhang, Aishan Liu, Xianglong Liu

• Adversarial Hospital-Invariant Feature Learning for WSI Patch Classification

  Mengliang Zhang, Jacob M. Luber

• Improving Fairness in Graph Neural Networks via Counterfactual Debiasing

  Zengyi Wo, Chang Liu, Yumeng Wang, Minglai Shao, Wenjun Wang

• Universal and Transferable Adversarial Attack on Large Language Models Using Exponentiated Gradient Descent

  Sajib Biswas, Mao Nishino, Samuel Jacob Chacko, Xiuwen Liu

• Distributional Adversarial Attacks and Training in Deep Hedging

  Guangyi He, Tobias Sutter, Lukas Gonon

• DOPA: Stealthy and Generalizable Backdoor Attacks from a Single Client under Challenging Federated Constraints

  Xuezheng Qin, Ruwei Huang, Xiaolong Tang, Feng Li

• A Lightweight Incentive-Based Privacy-Preserving Smart Metering Protocol for Value-Added Services

  Farid Zaredar, Morteza Amini

• A Lightweight Privacy-Preserving Smart Metering Billing Protocol with Dynamic Tariff Policy Adjustment

  Farid Zaredar, Morteza Amini

• TAIGen: Training-Free Adversarial Image Generation via Diffusion Models

  Susim Roy, Anubhooti Jain, Mayank Vatsa, Richa Singh

• A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives

  Kaixiang Zhao, Lincan Li, Kaize Ding, Neil Zhenqiang Gong, Yue Zhao, Yushun Dong

• MoEcho: Exploiting Side-Channel Attacks to Compromise User Privacy in Mixture-of-Experts LLMs

  Ruyi Ding, Tianhong Xu, Xinyi Shen, Aidong Adam Ding, Yunsi Fei

• Paired-Sampling Contrastive Framework for Joint Physical-Digital Face Attack Detection

  Andrei Balykin, Anvar Ganiev, Denis Kondranin, Kirill Polevoda, Nikolai Liudkevich, Artem Petrov

• Side Effects of Erasing Concepts from Diffusion Models

  Shaswati Saha, Sourajit Saha, Manas Gaur, Tejas Gokhale

• Aura-CAPTCHA: A Reinforcement Learning and GAN-Enhanced Multi-Modal CAPTCHA System

  Joydeep Chandra, Prabal Manhas, Ramanjot Kaur, Rashi Sahay

• Robust Estimation Under Heterogeneous Corruption Rates

  Syomantak Chaudhuri, Jerry Li, Thomas A. Courtade

• Potential and challenges of generative adversarial networks for super-resolution in 4D Flow MRI

  Oliver Welin Odeback, Arivazhagan Geetha Balasubramanian, Jonas Schollenberger, Edward Ferdiand, Alistair A. Young, C. Alberto Figueroa, Susanne Schnell, Outi Tammisola, Ricardo Vinuesa, Tobias Granberg, Alexander Fyrdahl, David Marlevi

• Self-Disguise Attack: Induce the LLM to disguise itself for AIGT detection evasion

  Yinghan Zhou, Juan Wen, Wanli Peng, Zhengxian Wu, Ziwei Zhang, Yiming Xue

• Linkage Attacks Expose Identity Risks in Public ECG Data Sharing

  Ziyu Wang, Elahe Khatibi, Farshad Firouzi, Sanaz Rahimi Mousavi, Krishnendu Chakrabarty, Amir M. Rahmani

• Sealing The Backdoor: Unlearning Adversarial Text Triggers In Diffusion Models Using Knowledge Distillation

  Ashwath Vaithinathan Aravindan, Abha Jha, Matthew Salaway, Atharva Sandeep Bhide, Duygu Nur Yaldiz

2025-08-19

• The AI Risk Spectrum: From Dangerous Capabilities to Existential Threats

  Markov Grey, Charbel-Raphaël Segerie

• On the Security and Privacy of Federated Learning: A Survey with Attacks, Defenses, Frameworks, Applications, and Future Directions

  Daniel M. Jimenez-Gutierrez, Yelizaveta Falkouskaya, Jose L. Hernandez-Ramos, Aris Anagnostopoulos, Ioannis Chatzigiannakis, Andrea Vitaletti

• Evaluating Identity Leakage in Speaker De-Identification Systems

  Seungmin Seo, Oleg Aulov, Afzal Godil, Kevin Mangold

• Unintended Misalignment from Agentic Fine-Tuning: Risks and Mitigation

  Dongyoon Hahm, Taywon Min, Woogyeol Jin, Kimin Lee

• CRISP: Persistent Concept Unlearning via Sparse Autoencoders

  Tomer Ashuach, Dana Arad, Aaron Mueller, Martin Tutek, Yonatan Belinkov

• Sycophancy under Pressure: Evaluating and Mitigating Sycophantic Bias via Adversarial Dialogues in Scientific QA

  Kaiwei Zhang, Qi Jia, Zijian Chen, Wei Sun, Xiangyang Zhu, Chunyi Li, Dandan Zhu, Guangtao Zhai

• Enhancing Robustness of Implicit Neural Representations Against Weight Perturbations

  Wenyong Zhou, Yuxin Cheng, Zhengwu Liu, Taiqiang Wu, Chen Zhang, Ngai Wong

• Enhancing Targeted Adversarial Attacks on Large Vision-Language Models through Intermediate Projector Guidance

  Yiming Cao, Yanjie Li, Kaisheng Liang, Yuni Lai, Bin Xiao

• Timestep-Compressed Attack on Spiking Neural Networks through Timestep-Level Backpropagation

  Donghwa Kang, Doohyun Kim, Sang-Ki Ko, Jinkyu Lee, Hyeongboo Baek, Brent ByungHoon Kang

• Backdooring Self-Supervised Contrastive Learning by Noisy Alignment

  Tuo Chen, Jie Gui, Minjing Dong, Ju Jia, Lanting Fang, Jian Liu

• Learning to See Through Flare

  Xiaopeng Peng, Heath Gemar, Erin Fleet, Kyle Novak, Abbie Watnik, Grover Swartzlander

• Text2Weight: Bridging Natural Language and Neural Network Weight Spaces

  Bowen Tian, Wenshuo Chen, Zexi Li, Songning Lai, Jiemin Wu, Yutao Yue

• Heavy-tailed Linear Bandits: Adversarial Robustness, Best-of-both-worlds, and Beyond

  Canzhe Zhao, Shinji Ito, Shuai Li

• FedUP: Efficient Pruning-based Federated Unlearning for Model Poisoning Attacks

  Nicolò Romandini, Cristian Borcea, Rebecca Montanari, Luca Foschini

• When Secure Aggregation Falls Short: Achieving Long-Term Privacy in Asynchronous Federated Learning for LEO Satellite Networks

  Mohamed Elmahallawy, Tie Luo

• Beneath the Mask: Can Contribution Data Unveil Malicious Personas in Open-Source Projects?

  Ruby Nealon

• Red Teaming Methodology for Design Obfuscation

  Yuntao Liu, Abir Akib, Zelin Lu, Qian Xu, Ankur Srivastava, Gang Qu, David Kehlet, Nij Dorairaj

• CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection

  Jiaming Hu, Haoyu Wang, Debarghya Mukherjee, Ioannis Ch. Paschalidis

• ERIS: An Energy-Guided Feature Disentanglement Framework for Out-of-Distribution Time Series Classification

  Xin Wu, Fei Teng, Ji Zhang, Xingwang Li, Yuxuan Liang

• Your Reward Function for RL is Your Best PRM for Search: Unifying RL and Search-Based TTS

  Can Jin, Yang Zhou, Qixin Zhang, Hongwu Peng, Di Zhang, Marco Pavone, Ligong Han, Zhang-Wei Hong, Tong Che, Dimitris N. Metaxas

• MMReview: A Multidisciplinary and Multimodal Benchmark for LLM-Based Peer Review Automation

  Xian Gao, Jiacheng Ruan, Zongyun Zhang, Jingsheng Gao, Ting Liu, Yuzhuo Fu

• Two Birds with One Stone: Multi-Task Detection and Attribution of LLM-Generated Text

  Zixin Rao, Youssef Mohamed, Shang Liu, Zeyan Liu

• Noise Robust One-Class Intrusion Detection on Dynamic Graphs

  Aleksei Liuliakov, Alexander Schulz, Luca Hermes, Barbara Hammer

• MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers

  Zhiqiang Wang, Yichao Gao, Yanting Wang, Suyuan Liu, Haifeng Sun, Haoran Cheng, Guanquan Shi, Haohua Du, Xiangyang Li

• CIA+TA Risk Assessment for AI Reasoning Vulnerabilities

  Yuksel Aydin

• Mechanistic Exploration of Backdoored Large Language Model Attention Patterns

  Mohammed Abu Baker, Lakshmi Babu-Saheer

• Unveiling Unicode's Unseen Underpinnings in Undermining Authorship Attribution

  Robert Dilworth

• MMReview: A Multidisciplinary and Multimodal Benchmark for LLM-Based Peer Review Automation

  Xian Gao, Jiacheng Ruan, Zongyun Zhang, Jingsheng Gao, Ting Liu, Yuzhuo Fu

• Unveiling Unicode's Unseen Underpinnings in Undermining Authorship Attribution

  Robert Dilworth

2025-08-18

• Systematic Analysis of MCP Security

  Yongjian Guo, Puzhuo Liu, Wanlun Ma, Zehang Deng, Xiaogang Zhu, Peng Di, Xi Xiao, Sheng Wen

• Robust Federated Learning under Adversarial Attacks via Loss-Based Client Clustering

  Emmanouil Kritharakis, Dusan Jakovetic, Antonios Makris, Konstantinos Tserpes

• RepreGuard: Detecting LLM-Generated Text by Revealing Hidden Representation Patterns

  Xin Chen, Junchao Wu, Shu Yang, Runzhe Zhan, Zeyu Wu, Ziyang Luo, Di Wang, Min Yang, Lidia S. Chao, Derek F. Wong

• Drifting Away from Truth: GenAI-Driven News Diversity Challenges LVLM-Based Misinformation Detection

  Fanxiao Li, Jiaying Wu, Tingchao Fu, Yunyun Dong, Bingbing Song, Wei Zhou

• Unlearning Comparator: A Visual Analytics System for Comparative Evaluation of Machine Unlearning Methods

  Jaeung Lee, Suhyeon Yu, Yurim Jang, Simon S. Woo, Jaemin Jo

• Efficient and Verifiable Privacy-Preserving Convolutional Computation for CNN Inference with Untrusted Clouds

  Jinyu Lu, Xinrong Sun, Yunting Tao, Tong Ji, Fanyu Kong, Guoqiang Yang

• The Hidden Cost of Correlation: Rethinking Privacy Leakage in Local Differential Privacy

  Sandaru Jayawardana, Sennur Ulukus, Ming Ding, Kanchana Thilakarathna

• MAJIC: Markovian Adaptive Jailbreaking via Iterative Composition of Diverse Innovative Strategies

  Weiwei Qi, Shuo Shao, Wei Gu, Tianhang Zheng, Puning Zhao, Zhan Qin, Kui Ren

• Involuntary Jailbreak

  Yangyang Guo, Yangyan Li, Mohan Kankanhalli

• DAASH: A Meta-Attack Framework for Synthesizing Effective and Stealthy Adversarial Examples

  Abdullah Al Nomaan Nafi, Habibur Rahaman, Zafaryab Haider, Tanzim Mahfuz, Fnu Suya, Swarup Bhunia, Prabuddha Chakraborty

• Efficient Constraint-Aware Flow Matching via Randomized Exploration

  Zhengyan Huan, Jacob Boerma, Li-Ping Liu, Shuchin Aeron

• DAIQ: Auditing Demographic Attribute Inference from Question in LLMs

  Srikant Panda, Hitesh Laxmichand Patel, Shahad Al-Khalifa, Amit Agarwal, Hend Al-Khalifa, Sharefah Al-Ghamdi

2025-08-17

• Distribution Matching via Generalized Consistency Models

  Sagar Shrestha, Rajesh Shrestha, Tri Nguyen, Subash Timilsina

• CRoC: Context Refactoring Contrast for Graph Anomaly Detection with Limited Supervision

  Siyue Xie, Da Sun Handason Tam, Wing Cheong Lau

• Where to Start Alignment? Diffusion Large Language Model May Demand a Distinct Position

  Zhixin Xie, Xurui Song, Jun Luo

• Adversarial Attacks on VQA-NLE: Exposing and Alleviating Inconsistencies in Visual Question Answering Explanations

  Yahsin Yeh, Yilun Wu, Bokai Ruan, Honghan Shuai

• EXOTIC: An Exact, Optimistic, Tree-Based Algorithm for Min-Max Optimization

  Chinmay Maheshwari, Chinmay Pimpalkhare, Debasish Chatterjee

• Rethinking Safety in LLM Fine-tuning: An Optimization Perspective

  Minseon Kim, Jin Myung Kwak, Lama Alssum, Bernard Ghanem, Philip Torr, David Krueger, Fazl Barez, Adel Bibi

• ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers

  Hanwen Cao, Haobo Lu, Xiaosen Wang, Kun He

• CryptPEFT: Efficient and Private Neural Network Inference via Parameter-Efficient Fine-Tuning

  Saisai Xia, Wenhao Wang, Zihao Wang, Yuhui Zhang, Yier Jin, Dan Meng, Rui Hou

• Adjustable AprilTags For Identity Secured Tasks

  Hao Li

• MCPSecBench: A Systematic Security Benchmark and Playground for Testing Model Context Protocols

  Yixuan Yang, Daoyuan Wu, Yufan Chen

• Passive Hack-Back Strategies for Cyber Attribution: Covert Vectors in Denied Environment

  Abraham Itzhak Weinberg

• MCPSecBench: A Systematic Security Benchmark and Playground for Testing Model Context Protocols

  Yixuan Yang, Daoyuan Wu, Yufan Chen

2025-08-16

• Rigorous Feature Importance Scores based on Shapley Value and Banzhaf Index

  Xuanxiang Huang, Olivier Létoffé, Joao Marques-Silva

• Deciphering the Interplay between Attack and Protection Complexity in Privacy-Preserving Federated Learning

  Xiaojin Zhang, Mingcong Xu, Yiming Li, Wei Chen, Qiang Yang

• CAMF: Collaborative Adversarial Multi-agent Framework for Machine Generated Text Detection

  Yue Wang, Liesheng Wei, Yuxiang Wang

• Mitigating Jailbreaks with Intent-Aware LLMs

  Wei Jie Yeo, Ranjan Satapathy, Erik Cambria

• ComplicitSplat: Downstream Models are Vulnerable to Blackbox Attacks by 3D Gaussian Splat Camouflages

  Matthew Hull, Haoyang Yang, Pratham Mehta, Mansi Phute, Aeree Cho, Haorang Wang, Matthew Lau, Wenke Lee, Wilian Lunardi, Martin Andreoni, Polo Chau

• TriQDef: Disrupting Semantic and Gradient Alignment to Prevent Adversarial Patch Transferability in Quantized Neural Networks

  Amira Guesmi, Bassem Ouni, Muhammad Shafique

• An Improved Algorithm for Adversarial Linear Contextual Bandits via Reduction

  Tim van Erven, Jack Mayo, Julia Olkhovskaya, Chen-Yu Wei

• Adversarial Robustness in Distributed Quantum Machine Learning

  Pouya Kananian, Hans-Arno Jacobsen

• Invitation Is All You Need! Promptware Attacks Against LLM-Powered Assistants in Production Are Practical and Dangerous

  Ben Nassi, Stav Cohen, Or Yair

• Too Easily Fooled? Prompt Injection Breaks LLMs on Frustratingly Simple Multiple-Choice Questions

  Xuyang Guo, Zekai Huang, Zhao Song, Jiahao Zhang

2025-08-15

• When Punctuation Matters: A Large-Scale Comparison of Prompt Robustness Methods for LLMs

  Mikhail Seleznyov, Mikhail Chaichuk, Gleb Ershov, Alexander Panchenko, Elena Tutubalina, Oleg Somov

• Noise Matters: Optimizing Matching Noise for Diffusion Classifiers

  Yanghao Wang, Long Chen

• Semantically Guided Adversarial Testing of Vision Models Using Language Models

  Katarzyna Filus, Jorge M. Cruz-Duarte

• Remove360: Benchmarking Residuals After Object Removal in 3D Gaussian Splatting

  Simona Kocour, Assia Benbihi, Torsten Sattler

• Boosting the Robustness-Accuracy Trade-off of SNNs by Robust Temporal Self-Ensemble

  Jihang Wang, Dongcheng Zhao, Ruolin Chen, Qian Zhang, Yi Zeng

• Robust Convolution Neural ODEs via Contractivity-promoting regularization

  Muhammad Zakwan, Liang Xu, Giancarlo Ferrari-Trecate

• SafeSieve: From Heuristics to Experience in Progressive Pruning for LLM-based Multi-Agent Communication

  Ruijia Zhang, Xinyan Zhao, Ruixiang Wang, Sigen Chen, Guibin Zhang, An Zhang, Kun Wang, Qingsong Wen

• Limitation Learning: Catching Adverse Dialog with GAIL

  Noah Kasmanoff, Rahul Zalkikar

• Assessing User Privacy Leakage in Synthetic Packet Traces: An Attack-Grounded Approach

  Minhao Jin, Hongyu He, Maria Apostolaki

2025-08-14

• A Vision-Language Pre-training Model-Guided Approach for Mitigating Backdoor Attacks in Federated Learning

  Keke Gai, Dongjue Wang, Jing Yu, Liehuang Zhu, Qi Wu

• Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation

  Huizhen Shu, Xuying Li, Qirui Wang, Yuji Kosuga, Mengqiu Tian, Zhuo Li

• Contrastive ECOC: Learning Output Codes for Adversarial Defense

  Che-Yu Chou, Hung-Hsuan Chen

• Hybrid Generative Fusion for Efficient and Privacy-Preserving Face Recognition Dataset Generation

  Feiran Li, Qianqian Xu, Shilong Bao, Boyu Han, Zhiyong Yang, Qingming Huang

• Enhancing Fairness in Autoencoders for Node-Level Graph Anomaly Detection

  Shouju Wang, Yuchen Song, Sheng'en Li, Dongmian Zou

• Searching for Privacy Risks in LLM Agents via Simulation

  Yanzhe Zhang, Diyi Yang

• Jailbreaking Commercial Black-Box LLMs with Explicitly Harmful Prompts

  Chiyu Zhang, Lu Zhou, Xiaogang Xu, Jiafei Wu, Liming Fang, Zhe Liu

• Towards Powerful and Practical Patch Attacks for 2D Object Detection in Autonomous Driving

  Yuxin Cao, Yedi Zhang, Wentao He, Yifan Liao, Yan Xiao, Chang Li, Zhiyong Huang, Jin Song Dong

• Pruning and Malicious Injection: A Retraining-Free Backdoor Attack on Transformer Models

  Taibiao Zhao, Mingxuan Sun, Hao Wang, Xiaobing Chen, Xiangwei Zhou

• Oops!... They Stole it Again: Attacks on Split Learning

  Tanveer Khan, Antonis Michalas

• BERTector: Intrusion Detection Based on Joint-Dataset Learning

  Haoyang Hu, Xun Huang, Chenyu Wu, Shiwen Liu, Zhichao Lian, Shuangquan Zhang

• MirGuard: Towards a Robust Provenance-based Intrusion Detection System Against Graph Manipulation Attacks

  Anyuan Sang, Lu Zhou, Li Yang, Junbo Jia, Huipeng Yang, Pengbin Feng, Jianfeng Ma

• Bistochastically private release of longitudinal data

  Nicolas Ruiz

• MCP-Guard: A Defense Framework for Model Context Protocol Integrity in Large Language Model Applications

  Wenpeng Xing, Zhonghao Qi, Yupeng Qin, Yilin Li, Caini Chang, Jiahui Yu, Changting Lin, Zhenzhen Xie, Meng Han

• SproutBench: A Benchmark for Safe and Ethical Large Language Models for Youth

  Wenpeng Xing, Lanyi Wei, Haixiao Hu, Rongchang Li, Mohan Li, Changting Lin, Meng Han

• Failures to Surface Harmful Contents in Video Large Language Models

  Yuxin Cao, Wei Song, Derui Wang, Jingling Xue, Jin Song Dong

• SHLIME: Foiling adversarial attacks fooling SHAP and LIME

  Sam Chauhan, Estelle Duguet, Karthik Ramakrishnan, Hugh Van Deventer, Jack Kruger, Ranjan Subbaraman

• Privacy-Aware Detection of Fake Identity Documents: Methodology, Benchmark, and Improved Detection Methods (FakeIDet2)

  Javier Muñoz-Haro, Ruben Tolosana, Ruben Vera-Rodriguez, Aythami Morales, Julian Fierrez

• Contrast Sensitivity in Multimodal Large Language Models: A Psychophysics-Inspired Evaluation

  Pablo Hernández-Cámara, Alexandra Gomez-Villa, Jose Manuel Jaén-Lorites, Jorge Vila-Tomás, Valero Laparra, Jesus Malo

• A Vision-Language Pre-training Model-Guided Approach for Mitigating Backdoor Attacks in Federated Learning

  Keke Gai, Dongjue Wang, Jing Yu, Liehuang Zhu, Qi Wu

• Jailbreaking Commercial Black-Box LLMs with Explicitly Harmful Prompts

  Chiyu Zhang, Lu Zhou, Xiaogang Xu, Jiafei Wu, Liming Fang, Zhe Liu

2025-08-13

• Shadow in the Cache: Unveiling and Mitigating Privacy Risks of KV-cache in LLM Inference

  Zhifan Luo, Shuo Shao, Su Zhang, Lijing Zhou, Yuke Hu, Chenxu Zhao, Zhihao Liu, Zhan Qin

• NeuronTune: Fine-Grained Neuron Modulation for Balanced Safety-Utility Alignment in LLMs

  Birong Pan, Mayi Xu, Qiankun Pi, Jianhao Chen, Yuanyuan Zhu, Ming Zhong, Tieyun Qian

• Generation of Indian Sign Language Letters, Numbers, and Words

  Ajeet Kumar Yadav, Nishant Kumar, Rathna G N

• Demystifying the Role of Rule-based Detection in AI Systems for Windows Malware Detection

  Andrea Ponte, Luca Demetrio, Luca Oneto, Ivan Tesfai Ogbu, Battista Biggio, Fabio Roli

• The Surprising Effectiveness of Membership Inference with Simple N-Gram Coverage

  Skyler Hallinan, Jaehun Jung, Melanie Sclar, Ximing Lu, Abhilasha Ravichander, Sahana Ramnath, Yejin Choi, Sai Praneeth Karimireddy, Niloofar Mireshghallah, Xiang Ren

• Slow Tuning and Low-Entropy Masking for Safe Chain-of-Thought Distillation

  Ziyang Ma, Qingyue Yuan, Linhai Zhang, Deyu Zhou

• The Perils of Chart Deception: How Misleading Visualizations Affect Vision-Language Models

  Ridwan Mahbub, Mohammed Saidul Islam, Md Tahmid Rahman Laskar, Mizanur Rahman, Mir Tafseer Nayeem, Enamul Hoque

• IAG: Input-aware Backdoor Attack on VLMs for Visual Grounding

  Junxian Li, Beining Xu, Di Zhang

• CLIP-Flow: A Universal Discriminator for AI-Generated Images Inspired by Anomaly Detection

  Zhipeng Yuan, Kai Wang, Weize Quan, Dong-Ming Yan, Tieru Wu

• Improving the Speaker Anonymization Evaluation's Robustness to Target Speakers with Adversarial Learning

  Carlos Franzreb, Arnab Das, Tim Polzehl, Sebastian Möller

• Security Analysis of ChatGPT: Threats and Privacy Risks

  Yushan Xiang, Zhongwen Li, Xiaoqi Li

• Extending the OWASP Multi-Agentic System Threat Modeling Guide: Insights from Multi-Agent Security Research

  Klaudia Krawiecka, Christian Schroeder de Witt

• Amazon Nova AI Challenge -- Trusted AI: Advancing secure, AI-assisted software development

  Sattvik Sahai, Prasoon Goyal, Michael Johnston, Anna Gottardi, Yao Lu, Lucy Hu, Luke Dai, Shaohua Liu, Samyuth Sagi, Hangjie Shi, Desheng Zhang, Lavina Vaz, Leslie Ball, Maureen Murray, Rahul Gupta, Shankar Ananthakrishna

• Empowering Morphing Attack Detection using Interpretable Image-Text Foundation Model

  Sushrut Patwardhan, Raghavendra Ramachandra, Sushma Venkatesh

• Detecting Untargeted Attacks and Mitigating Unreliable Updates in Federated Learning for Underground Mining Operations

  Md Sazedur Rahman, Mohamed Elmahallawy, Sanjay Madria, Samuel Frimpong

• IPG: Incremental Patch Generation for Generalized Adversarial Patch Training

  Wonho Lee, Hyunsik Na, Jisu Lee, Daeseon Choi

• Do Language Models Agree with Human Perceptions of Suspense in Stories?

  Glenn Matlin, Devin Zhang, Rodrigo Barroso Loza, Diana M. Popescu, Joni Isbell, Chandreyi Chakraborty, Mark Riedl

2025-08-12

• Safe Semantics, Unsafe Interpretations: Tackling Implicit Reasoning Safety in Large Vision-Language Models

  Wei Cai, Jian Zhao, Yuchu Jiang, Tianle Zhang, Xuelong Li

• SMA: Who Said That? Auditing Membership Leakage in Semi-Black-box RAG Controlling

  Shixuan Sun, Siyuan Liang, Ruoyu Chen, Jianjie Huang, Jingzhi Li, Xiaochun Cao

• AI Security Map: Holistic Organization of AI Security Technologies and Impacts on Stakeholders

  Hiroya Kato, Kentaro Kita, Kento Hasegawa, Seira Hidano

• Generative AI for Critical Infrastructure in Smart Grids: A Unified Framework for Synthetic Data Generation and Anomaly Detection

  Aydin Zaboli, Junho Hong

• Securing Educational LLMs: A Generalised Taxonomy of Attacks on LLMs and DREAD Risk Assessment

  Farzana Zahid, Anjalika Sewwandi, Lee Brandon, Vimal Kumar, Roopak Sinha

• SafeFix: Targeted Model Repair via Controlled Image Generation

  Ouyang Xu, Baoming Zhang, Ruiyu Mao, Yunhui Guo

• EditMF: Drawing an Invisible Fingerprint for Your Large Language Models

  Jiaxuan Wu, Yinghan Zhou, Wanli Peng, Yiming Xue, Juan Wen, Ping Zhong

• Oblivionis: A Lightweight Learning and Unlearning Framework for Federated Large Language Models

  Fuyao Zhang, Xinyu Yan, Tiantong Wu, Wenjie Li, Tianxiang Chen, Yang Cao, Ran Yan, Longtao Huang, Wei Yang Bryan Lim, Qiang Yang

• Attacks and Defenses Against LLM Fingerprinting

  Kevin Kurian, Ethan Holland, Sean Oesch

• When Deepfakes Look Real: Detecting AI-Generated Faces with Unlabeled Data due to Annotation Challenges

  Zhiqiang Yang, Renshuai Tao, Xiaolong Zheng, Guodong Yang, Chunjie Zhang

• Privacy-protected Retrieval-Augmented Generation for Knowledge Graph Question Answering

  Yunfeng Ning, Mayi Xu, Jintao Wen, Qiankun Pi, Yuanyuan Zhu, Ming Zhong, Jiawei Jiang, Tieyun Qian

• MADPromptS: Unlocking Zero-Shot Morphing Attack Detection with Multiple Prompt Aggregation

  Eduarda Caldeira, Fadi Boutros, Naser Damer

• Deep Learning Models for Robust Facial Liveness Detection

  Oleksandr Kuznetsov, Emanuele Frontoni, Luca Romeo, Riccardo Rosati, Andrea Maranesi, Alessandro Muscatello

• Exploring Cross-Stage Adversarial Transferability in Class-Incremental Continual Learning

  Jungwoo Kim, Jong-Seok Lee

• Fre-CW: Targeted Attack on Time Series Forecasting using Frequency Domain Loss

  Naifu Feng, Lixing Chen, Junhua Tang, Hua Ding, Jianhua Li, Yang Bai

• Multi-Target Backdoor Attacks Against Speaker Recognition

  Alexandrine Fortier, Sonal Joshi, Thomas Thebaud, Jesus Villalba Lopez, Najim Dehak, Patrick Cardinal

• Image selective encryption analysis using mutual information in CNN based embedding space

  Ikram Messadi, Giulia Cervia, Vincent Itier

• Evasive Ransomware Attacks Using Low-level Behavioral Adversarial Examples

  Manabu Hirano, Ryotaro Kobayashi

• Never Compromise to Vulnerabilities: A Comprehensive Survey on AI Governance

  Yuchu Jiang, Jian Zhao, Yuchen Yuan, Tianle Zhang, Yao Huang, Yanghao Zhang, Yan Wang, Yanshu Li, Xizhong Guo, Yusheng Zhao, Jun Zhang, Zhi Zhang, Xiaojian Lin, Yixiu Zou, Haoxuan Ma, Yuhu Shang, Yuzhi Hu, Keshu Cai, Ruochen Zhang, Boyuan Chen, Yilan Gao, Ziheng Jiao, Yi Qin, Shuangjun Du, Xiao Tong, Zhekun Liu, Yu Chen, Xuankun Rong, Rui Wang, Yejie Zheng, Zhaoxin Fan, Hongyuan Zhang, Pan Zhou, Lei Jin, Hao Zhao, Xu Yang, Jiaojiao Zhao, Jianshu Li, Joey Tianyi Zhou, Zhi-Qi Cheng, Longtao Huang, Zhiyi Liu, Zheng Zhu, Jianan Li, Gang Wang, Qi Li, Xu-Yao Zhang, Yaodong Yang, Mang Ye, Wenqi Ren, Zhaofeng He, Hang Su, Rongrong Ni, Liping Jing, Xingxing Wei, Junliang Xing, Massimo Alioto, Shengmei Shen, Petia Radeva, Dacheng Tao, Ya-Qin Zhang, Shuicheng Yan, Chi Zhang, Zhongjiang He, Xuelong Li

• Cowpox: Towards the Immunity of VLM-based Multi-Agent Systems

  Yutong Wu, Jie Zhang, Yiming Li, Chao Zhang, Qing Guo, Nils Lukas, Tianwei Zhang

• Can AI Keep a Secret? Contextual Integrity Verification: A Provable Security Architecture for LLMs

  Aayush Gupta

• Exact Verification of Graph Neural Networks with Incremental Constraint Solving

  Minghao Liu, Chia-Hsuan Lu, Marta Kwiatkowska

• Collective dynamics of strategic classification

  Marta C. Couto, Flavia Barsotti, Fernando P. Santos

• Beyond Blanket Masking: Examining Granularity for Privacy Protection in Images Captured by Blind and Low Vision Users

  Jeffri Murrugarra-LLerena, Haoran Niu, K. Suzanne Barber, Hal Daumé III, Yang Trista Cao, Paola Cascante-Bonilla

• Constrained Black-Box Attacks Against Multi-Agent Reinforcement Learning

  Amine Andam, Jamal Bentahar, Mustapha Hedabou

• Securing Agentic AI: Threat Modeling and Risk Analysis for Network Monitoring Agentic AI System

  Pallavi Zambare, Venkata Nikhil Thanikella, Ying Liu

• Search-Time Data Contamination

  Ziwen Han, Meher Mankikar, Julian Michael, Zifan Wang

• Special-Character Adversarial Attacks on Open-Source Language Model

  Ephraiem Sarabamoun

• A Guide to Robust Generalization: The Impact of Architecture, Pre-training, and Optimization Strategy

  Maxime Heuillet, Rishika Bhagwatkar, Jonas Ngnawé, Yann Pequignot, Alexandre Larouche, Christian Gagné, Irina Rish, Ola Ahmad, Audrey Durand

• Privacy Preserving Inference of Personalized Content for Out of Matrix Users

  Michael Sun, Tai Vu, Andrew Wang

2025-08-11

• Optimization of Private Semantic Communication Performance: An Uncooperative Covert Communication Method

  Wenjing Zhang, Ye Hu, Tao Luo, Zhilong Zhang, Mingzhe Chen

• 1-2-3 Check: Enhancing Contextual Privacy in LLM via Multi-Agent Reasoning

  Wenkai Li, Liwen Sun, Zhenxiang Guan, Xuhui Zhou, Maarten Sap

• Best-Effort Policies for Robust Markov Decision Processes

  Alessandro Abate, Thom Badings, Giuseppe De Giacomo, Francesco Fabiano

• BlindGuard: Safeguarding LLM-based Multi-Agent Systems under Unknown Attacks

  Rui Miao, Yixin Liu, Yili Wang, Xu Shen, Yue Tan, Yiwei Dai, Shirui Pan, Xin Wang

• Uncertainty-Driven Reliability: Selective Prediction and Trustworthy Deployment in Modern Machine Learning

  Stephan Rabanser

• BadPromptFL: A Novel Backdoor Threat to Prompt-based Federated Learning in Multimodal Models

  Maozhen Zhang, Mengnan Zhao, Bo Wang

• Can You Trick the Grader? Adversarial Persuasion of LLM Judges

  Yerin Hwang, Dongryeol Lee, Taegwan Kang, Yongil Kim, Kyomin Jung

• Jinx: Unlimited LLMs for Probing Alignment Failures

  Jiahao Zhao, Liwei Dong

• Anatomy-Aware Low-Dose CT Denoising via Pretrained Vision Models and Semantic-Guided Contrastive Learning

  Runze Wang, Zeli Chen, Zhiyun Song, Wei Fang, Jiajin Zhang, Danyang Tu, Yuxing Tang, Minfeng Xu, Xianghua Ye, Le Lu, Dakai Jin

• Boosting Active Defense Persistence: A Two-Stage Defense Framework Combining Interruption and Poisoning Against Deepfake

  Hongrui Zheng, Yuezun Li, Liejun Wang, Yunfeng Diao, Zhiqing Guo

• MIMIC: Multimodal Inversion for Model Interpretation and Conceptualization

  Animesh Jain, Alexandros Stergiou

• VOIDFace: A Privacy-Preserving Multi-Network Face Recognition With Enhanced Security

  Ajnas Muhammed, Iurri Medvedev, Nuno Gonçalves

• Mitigating Biases in Surgical Operating Rooms with Geometry

  Tony Danjun Wang, Tobias Czempiel, Nassir Navab, Lennart Bastian

• Pindrop it! Audio and Visual Deepfake Countermeasures for Robust Detection and Fine Grained-Localization

  Nicholas Klein, Hemlata Tak, James Fullwood, Krishna Regmi, Leonidas Spinoulas, Ganesh Sivaraman, Tianxiang Chen, Elie Khoury

• Integrating Task-Specific and Universal Adapters for Pre-Trained Model-based Class-Incremental Learning

  Yan Wang, Da-Wei Zhou, Han-Jia Ye

• IPBA: Imperceptible Perturbation Backdoor Attack in Federated Self-Supervised Learning

  Jiayao Wang, Yang Song, Zhendong Zhao, Jiale Zhang, Qilin Wu, Junwu Zhu, Dongfang Zhao

• FairDRL-ST: Disentangled Representation Learning for Fair Spatio-Temporal Mobility Prediction

  Sichen Zhao, Wei Shao, Jeffrey Chan, Ziqi Xu, Flora Salim

• Multi-Turn Jailbreaks Are Simpler Than They Seem

  Xiaoxue Yang, Jaeha Lee, Anna-Katharina Dick, Jasper Timm, Fei Xie, Diogo Cruz

• Multi-Hop Privacy Propagation for Differentially Private Federated Learning in Social Networks

  Chenchen Lin, Xuehe Wang

• EFU: Enforcing Federated Unlearning via Functional Encryption

  Samaneh Mohammadi, Vasileios Tsouvalas, Iraklis Symeonidis, Ali Balador, Tanir Ozcelebi, Francesco Flammini, Nirvana Meratnia

• Robust Anomaly Detection in O-RAN: Leveraging LLMs against Data Manipulation Attacks

  Thusitha Dayaratne, Ngoc Duy Pham, Viet Vo, Shangqi Lai, Sharif Abuadbba, Hajime Suzuki, Xingliang Yuan, Carsten Rudolph

• False Reality: Uncovering Sensor-induced Human-VR Interaction Vulnerability

  Yancheng Jiang, Yan Jiang, Ruochen Zhou, Yi-Chao Chen, Xiaoyu Ji, Wenyuan Xu

• Fully-Fluctuating Participation in Sleepy Consensus

  Yuval Efron, Joachim Neu, Toniann Pitassi

• Processing of synthetic data in AI development for healthcare and the definition of personal data in EU law

  Vibeke Binz Vallevik, Anne Kjersti C. Befring, Severin Elvatun, Jan Franz Nygaard

• VISOR: Visual Input-based Steering for Output Redirection in Vision-Language Models

  Mansi Phute, Ravikumar Balakrishnan

• Selective KV-Cache Sharing to Mitigate Timing Side-Channels in LLM Inference

  Kexin Chu, Zecheng Lin, Dawei Xiang, Zixu Shen, Jianchang Su, Cheng Chu, Yiwei Yang, Wenhui Zhang, Wenfei Wu, Wei Zhang

• Designing with Deception: ML- and Covert Gate-Enhanced Camouflaging to Thwart IC Reverse Engineering

  Junling Fan, David Koblah, Domenic Forte

• Towards Effective MLLM Jailbreaking Through Balanced On-Topicness and OOD-Intensity

  Zuoou Li, Weitong Zhang, Jingyuan Wang, Shuyuan Zhang, Wenjia Bai, Bernhard Kainz, Mengyun Qiao

• FIDELIS: Blockchain-Enabled Protection Against Poisoning Attacks in Federated Learning

  Jane Carney, Kushal Upreti, Gaby G. Dagher, Tim Andersen

• Signature vs. Substance: Evaluating the Balance of Adversarial Resistance and Linguistic Quality in Watermarking Large Language Models

  William Guo, Adaku Uchendu, Ana Smith

2025-08-10

• Hallucination as a Computational Boundary: A Hierarchy of Inevitability and the Oracle Escape

  Quan Shi, Wang Xi, Zenghui Ding, Jianqing Gao, Xianjun Yang

• A Real-Time, Self-Tuning Moderator Framework for Adversarial Prompt Detection

  Ivan Zhang

• Representation Understanding via Activation Maximization

  Hongbo Zhu, Angelo Cangelosi

• ObfusQAte: A Proposed Framework to Evaluate LLM Robustness on Obfuscated Factual Question Answering

  Shubhra Ghosh, Abhilekh Borah, Aditya Kumar Guru, Kripabandhu Ghosh

• A Spin Glass Characterization of Neural Networks

  Jun Li

• Gradient Surgery for Safe LLM Fine-Tuning

  Biao Yi, Jiahao Li, Baolei Zhang, Lihai Nie, Tong Li, Tiansheng Huang, Zheli Liu

• HaDM-ST: Histology-Assisted Differential Modeling for Spatial Transcriptomics Generation

  Xuepeng Liu, Zheng Jiang, Pinan Zhu, Hanyu Liu, Chao Li

• ForensicsSAM: Toward Robust and Unified Image Forgery Detection and Localization Resisting to Adversarial Attack

  Rongxuan Peng, Shunquan Tan, Chenqi Kong, Anwei Luo, Alex C. Kot, Jiwu Huang

• Fading the Digital Ink: A Universal Black-Box Attack Framework for 3DGS Watermarking Systems

  Qingyuan Zeng, Shu Jiang, Jiajing Lin, Zhenzhong Wang, Kay Chen Tan, Min Jiang

• Towards Unveiling Predictive Uncertainty Vulnerabilities in the Context of the Right to Be Forgotten

  Wei Qian, Chenxu Zhao, Yangyi Li, Wenqian Ye, Mengdi Huai

• Enhancing Privacy in Decentralized Min-Max Optimization: A Differentially Private Approach

  Yueyang Quan, Chang Wang, Shengjie Zhai, Minghong Fang, Zhuqing Liu

• Certifiably robust malware detectors by design

  Pierre-Francois Gimenez, Sarath Sivaprasad, Mario Fritz

• Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries

  Wenqiang Wang, Yan Xiao, Hao Lin, Yangshijie Zhang, Xiaochun Cao

• Assessing and Mitigating Data Memorization Risks in Fine-Tuned Large Language Models

  Badrinath Ramakrishnan, Akshaya Balaji

2025-08-09

• Many-Turn Jailbreaking

  Xianjun Yang, Liqiang Xiao, Shiyang Li, Faisal Ladhak, Hyokun Yun, Linda Ruth Petzold, Yi Xu, William Yang Wang

• PROPS: Progressively Private Self-alignment of Large Language Models

  Noel Teku, Fengwei Tian, Payel Bhattacharjee, Souradip Chakraborty, Amrit Singh Bedi, Ravi Tandon

• Who's the Evil Twin? Differential Auditing for Undesired Behavior

  Ishwar Balappanawar, Venkata Hasith Vattikuti, Greta Kintzley, Ronan Azimi-Mancel, Satvik Golechha

• Balancing Privacy and Efficiency: Music Information Retrieval via Additive Homomorphic Encryption

  William Zerong Wang, Dongfang Zhao

• Membership and Memorization in LLM Knowledge Distillation

  Ziqi Zhang, Ali Shahin Shamsabadi, Hanxiao Lu, Yifeng Cai, Hamed Haddadi

• Model-Agnostic Sentiment Distribution Stability Analysis for Robust LLM-Generated Texts Detection

  Siyuan Li, Xi Lin, Guangyan Li, Zehao Liu, Aodu Wulianghai, Li Ding, Jun Wu, Jianhua Li

• Adversarial Video Promotion Against Text-to-Video Retrieval

  Qiwei Tian, Chenhao Lin, Zhengyu Zhao, Qian Li, Shuai Liu, Chao Shen

• Membership Inference Attacks with False Discovery Rate Control

  Chenxu Zhao, Wei Qian, Aobo Chen, Mengdi Huai

• Sensory robustness through top-down feedback and neural stochasticity in recurrent vision models

  Antonino Greco, Marco D'Alessandro, Karl J. Friston, Giovanni Pezzulo, Markus Siegel

• SEF-MK: Speaker-Embedding-Free Voice Anonymization through Multi-k-means Quantization

  Beilong Tang, Xiaoxiao Miao, Xin Wang, Ming Li

• Label Inference Attacks against Federated Unlearning

  Wei Wang, Xiangyun Tang, Yajie Wang, Yijing Lin, Tao Zhang, Meng Shen, Dusit Niyato, Liehuang Zhu

• Towards Effective Prompt Stealing Attack against Text-to-Image Diffusion Models

  Shiqian Zhao, Chong Wang, Yiming Li, Yihao Huang, Wenjie Qu, Siew-Kei Lam, Yi Xie, Kangjie Chen, Jie Zhang, Tianwei Zhang

• Context Misleads LLMs: The Role of Context Filtering in Maintaining Safe Alignment of LLMs

  Jinhwa Kim, Ian G. Harris

• The Cost of Thinking: Increased Jailbreak Risk in Large Language Models

  Fan Yang

2025-08-08

• LLM Robustness Leaderboard v1 --Technical report

  Pierre Peigné - Lefebvre, Quentin Feuillade-Montixi, Tom David, Nicolas Miailhe

• ETA: Energy-based Test-time Adaptation for Depth Completion

  Younjoon Chung, Hyoungseob Park, Patrick Rim, Xiaoran Zhang, Jihe He, Ziyao Zeng, Safa Cicek, Byung-Woo Hong, James S. Duncan, Alex Wong

• Differentially Private Federated Clustering with Random Rebalancing

  Xiyuan Yang, Shengyuan Hu, Soyeon Kim, Tian Li

• Membership Inference Attack with Partial Features

  Xurun Wang, Guangrui Liu, Xinjie Li, Haoyu He, Lin Yao, Weizhe Zhang

• In-Training Defenses against Emergent Misalignment in Language Models

  David Kaczér, Magnus Jørgenvåg, Clemens Vetter, Lucie Flek, Florian Mai

• FedMeNF: Privacy-Preserving Federated Meta-Learning for Neural Fields

  Junhyeog Yun, Minui Hong, Gunhee Kim

• ScamAgents: How AI Agents Can Simulate Human-Level Scam Calls

  Sanket Badhe

• WGAST: Weakly-Supervised Generative Network for Daily 10 m Land Surface Temperature Estimation via Spatio-Temporal Fusion

  Sofiane Bouaziz, Adel Hafiane, Raphael Canals, Rachid Nedjai

• Adversarial Topic-aware Prompt-tuning for Cross-topic Automated Essay Scoring

  Chunyun Zhang, Hongyan Zhao, Chaoran Cui, Qilong Song, Zhiqing Lu, Shuai Gong, Kailin Liu

• Beyond Uniform Criteria: Scenario-Adaptive Multi-Dimensional Jailbreak Evaluation

  Lai Jiang, Yuekang Li, Xiaohan Zhang, Youtao Ding, Li Pan

• Quantifying Conversation Drift in MCP via Latent Polytope

  Haoran Shi, Hongwei Yao, Shuo Shao, Shaopeng Jiao, Ziqi Peng, Zhan Qin, Cong Wang

• Fact2Fiction: Targeted Poisoning Attack to Agentic Fact-checking System

  Haorui He, Yupeng Li, Bin Benjamin Zhu, Dacheng Wen, Reynold Cheng, Francis C. M. Lau

• SAM Encoder Breach by Adversarial Simplicial Complex Triggers Downstream Model Failures

  Yi Qin, Rui Wang, Tao Huang, Tong Xiao, Liping Jing

• SDEval: Safety Dynamic Evaluation for Multimodal Large Language Models

  Hanqing Wang, Yuan Tian, Mingyu Liu, Zhenhao Zhang, Xiangyang Zhu

• FVGen: Accelerating Novel-View Synthesis with Adversarial Video Diffusion Distillation

  Wenbin Teng, Gonglin Chen, Haiwei Chen, Yajie Zhao

• Adaptive Backtracking for Privacy Protection in Large Language Models

  Zhihao Yao, Yuxuan Gu, Xiachong Feng, Weitao Ma, Bo Li, Xiaocheng Feng

• ProvX: Generating Counterfactual-Driven Attack Explanations for Provenance-Based Detection

  Weiheng Wu, Wei Qiao, Teng Li, Yebo Feng, Zhuo Ma, Jianfeng Ma, Yang Liu

• SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs

  Zhengxian Wu, Juan Wen, Wanli Peng, Haowei Chang, Yinghan Zhou, Yiming Xue

• When AIOps Become "AI Oops": Subverting LLM-driven IT Operations via Telemetry Manipulation

  Dario Pasquini, Evgenios M. Kornaropoulos, Giuseppe Ateniese, Omer Akgul, Athanasios Theocharis, Petros Efstathopoulos

• Deep Ignorance: Filtering Pretraining Data Builds Tamper-Resistant Safeguards into Open-Weight LLMs

  Kyle O'Brien, Stephen Casper, Quentin Anthony, Tomek Korbak, Robert Kirk, Xander Davies, Ishan Mishra, Geoffrey Irving, Yarin Gal, Stella Biderman

• Train It and Forget It: Merge Lists are Unnecessary for BPE Inference in Language Models

  Tomohiro Sawada, Kartik Goyal

• ContextGuard-LVLM: Enhancing News Veracity through Fine-grained Cross-modal Contextual Consistency Verification

  Sihan Ma, Qiming Wu, Ruotong Jiang, Frank Burns

• Learning to Forget with Information Divergence Reweighted Objectives for Noisy Labels

  Jeremiah Birrell, Reza Ebrahimi

• Privacy-Preserving Tabular Synthetic Data Generation Using TabularARGN

  Andrey Sidorenko, Paul Tiwald

• Fine-Grained Safety Neurons with Training-Free Continual Projection to Reduce LLM Fine Tuning Risks

  Bing Han, Feifei Zhao, Dongcheng Zhao, Guobin Shen, Ping Wu, Yu Shi, Yi Zeng

• Latent Fusion Jailbreak: Blending Harmful and Harmless Representations to Elicit Unsafe LLM Outputs

  Wenpeng Xing, Mohan Li, Chunqiang Hu, Haitao XuNingyu Zhang, Bo Lin, Meng Han

• Beyond Prompt-Induced Lies: Investigating LLM Deception on Benign Prompts

  Zhaomin Wu, Mingzhe Du, See-Kiong Ng, Bingsheng He

• Learning to Detect Unknown Jailbreak Attacks in Large Vision-Language Models

  Shuang Liang, Zhihao Xu, Jialing Tao, Hui Xue, Xiting Wang

2025-08-07

• MedMKEB: A Comprehensive Knowledge Editing Benchmark for Medical Multimodal Large Language Models

  Dexuan Xu, Jieyi Wang, Zhongyan Chai, Yongzhi Cao, Hanpin Wang, Huamin Zhang, Yu Huang

• Automatic Image Colorization with Convolutional Neural Networks and Generative Adversarial Networks

  Ruiyu Li, Changyuan Qiu, Hangrui Cao, Qihan Ren, Yuqing Qiu

• JPS: Jailbreak Multimodal Large Language Models with Collaborative Visual Perturbation and Textual Steering

  Renmiao Chen, Shiyao Cui, Xuancheng Huang, Chengwei Pan, Victor Shea-Jay Huang, QingLin Zhang, Xuan Ouyang, Zhexin Zhang, Hongning Wang, Minlie Huang

• Navigating the Trade-off: A Synthesis of Defensive Strategies for Zero-Shot Adversarial Robustness in Vision-Language Models

  Zane Xu, Jason Sun

• Building Effective Safety Guardrails in AI Education Tools

  Hannah-Beth Clark, Laura Benton, Emma Searle, Margaux Dowland, Matthew Gregory, Will Gayne, John Roberts

• PhysPatch: A Physically Realizable and Transferable Adversarial Patch Attack for Multimodal Large Language Models-based Autonomous Driving Systems

  Qi Guo, Xiaojun Jia, Shanmin Pang, Simeng Qin, Lin Wang, Ju Jia, Yang Liu, Qing Guo

• From Detection to Correction: Backdoor-Resilient Face Recognition via Vision-Language Trigger Detection and Noise-Based Neutralization

  Farah Wahida, M.A.P. Chamikara, Yashothara Shanmugarasa, Mohan Baruwal Chhetri, Thilina Ranbaduge, Ibrahim Khalil

• Physical Adversarial Camouflage through Gradient Calibration and Regularization

  Jiawei Liang, Siyuan Liang, Jianjie Huang, Chenxi Si, Ming Zhang, Xiaochun Cao

• Keep It Real: Challenges in Attacking Compression-Based Adversarial Purification

  Samuel Räber, Till Aczel, Andreas Plesner, Roger Wattenhofer

• FS-IQA: Certified Feature Smoothing for Robust Image Quality Assessment

  Ekaterina Shumitskaya, Dmitriy Vatolin, Anastasia Antsiferova

• Don't Reach for the Stars: Rethinking Topology for Resilient Federated Learning

  Mirko Konstantin, Anirban Mukhopadhyay

• NT-ML: Backdoor Defense via Non-target Label Training and Mutual Learning

  Wenjie Huo, Katinka Wolter

• Let's Measure Information Step-by-Step: LLM-Based Evaluation Beyond Vibes

  Zachary Robertson, Sanmi Koyejo

• Non-omniscient backdoor injection with a single poison sample: Proving the one-poison hypothesis for linear regression and linear classification

  Thorsten Peinemann, Paula Arnold, Sebastian Berndt, Thomas Eisenbarth, Esfandiar Mohammadi

• Anti-Jamming Sensing with Distributed Reconfigurable Intelligent Metasurface Antennas

  Zhaowei Wang, Yunsong Huang, Weicheng Liu, Hui-Ming Wang

• Necessity of Block Designs for Optimal Locally Private Distribution Estimation

  Abigail Gentle

• Safety of Embodied Navigation: A Survey

  Zixia Wang, Jia Hu, Ronghui Mu

• Guardians and Offenders: A Survey on Harmful Content Generation and Safety Mitigation

  Chi Zhang, Changjia Zhu, Junjie Xiong, Xiaoran Xu, Lingyao Li, Yao Liu, Zhuo Lu

• System Security Framework for 5G Advanced /6G IoT Integrated Terrestrial Network-Non-Terrestrial Network (TN-NTN) with AI-Enabled Cloud Security

  Sasa Maric, Rasil Baidar, Robert Abbas, Sam Reisenfeld

• A Neurosymbolic Framework for Interpretable Cognitive Attack Detection in Augmented Reality

  Rongqian Chen, Allison Andreyev, Yanming Xiu, Mahdi Imani, Bin Li, Maria Gorlatova, Gang Tan, Tian Lan

• RL-MoE: An Image-Based Privacy Preserving Approach In Intelligent Transportation System

  Abdolazim Rezaei, Mehdi Sookhak, Mahboobeh Haghparast

• Robust Market Making: To Quote, or not To Quote

  Ziyi Wang, Carmine Ventre, Maria Polukarov

2025-08-06

• Adversarial Attacks and Defenses on Graph-aware Large Language Models (LLMs)

  Iyiola E. Olatunji, Franziska Boenisch, Jing Xu, Adam Dziedzic

• IFDECORATOR: Wrapping Instruction Following Reinforcement Learning with Verifiable Rewards

  Xu Guo, Tianyi Liang, Tong Jian, Xiaogui Yang, Ling-I Wu, Chenhui Li, Zhihui Lu, Qipeng Guo, Kai Chen

• ANPrompt: Anti-noise Prompt Tuning for Vision-Language Models

  Yansheng Gao, Yufei Zheng, Jinghan Qu, Zixi Zhu, Yukuan Zhang, Shengsheng Wang

• Boosting Adversarial Transferability via Residual Perturbation Attack

  Jinjia Peng, Zeze Tao, Huibing Wang, Meng Wang, Yang Wang

• AuthPrint: Fingerprinting Generative Models Against Malicious Model Providers

  Kai Yao, Marc Juarez

• Communication-Learning Co-Design for Differentially Private Over-the-Air Federated Distillation

  Zihao Hu, Jia Yan, Ying-Jun Angela Zhang

• SEAgent: Self-Evolving Computer Use Agent with Autonomous Learning from Experience

  Zeyi Sun, Ziyu Liu, Yuhang Zang, Yuhang Cao, Xiaoyi Dong, Tong Wu, Dahua Lin, Jiaqi Wang

• A Few Words Can Distort Graphs: Knowledge Poisoning Attacks on Graph-based Retrieval-Augmented Generation of Large Language Models

  Jiayi Wen, Tianxin Chen, Zhirun Zheng, Cheng Huang

• An Audit and Analysis of LLM-Assisted Health Misinformation Jailbreaks Against LLMs

  Ayana Hussain, Patrick Zhao, Nicholas Vincent

• Assessing Representation Stability for Transformer Models

  Bryan E. Tuck, Rakesh M. Verma

• Unsupervised Pairwise Learning Optimization Framework for Cross-Corpus EEG-Based Emotion Recognition Based on Prototype Representation

  Guangli Li, Canbiao Wu, Zhen Liang

• Per-element Secure Aggregation against Data Reconstruction Attacks in Federated Learning

  Takumi Suimon, Yuki Koizumi, Junji Takemasa, Toru Hasegawa

• Prompt Injection Vulnerability of Consensus Generating Applications in Digital Democracy

  Jairo Gudiño-Rosero, Clément Contet, Umberto Grandi, César A. Hidalgo

• PrivDFS: Private Inference via Distributed Feature Sharing against Data Reconstruction Attacks

  Zihan Liu, Jiayi Wen, Junru Wu, Xuyang Zou, Shouhong Tan, Zhirun Zheng, Cheng Huang

• Dynamic User-controllable Privacy-preserving Few-shot Sensing Framework

  Ajesh Koyatan Chathoth, Shuhao Yu, Stephen Lee

• BadTime: An Effective Backdoor Attack on Multivariate Long-Term Time Series Forecasting

  Kunlan Xiang, Haomiao Yang, Meng Hao, Wenbo Jiang, Haoxin Wang, Shiyue Huang, Shaofeng Li, Yijing Liu, Ji Guo, Dusit Niyato

2025-08-05

• Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning

  Rui Pu, Chaozhuo Li, Rui Ha, Litian Zhang, Lirong Qiu, Xi Zhang

• T2UE: Generating Unlearnable Examples from Text Descriptions

  Xingjun Ma, Hanxun Huang, Tianwei Song, Ye Sun, Yifeng Gao, Yu-Gang Jiang

• Hide and Seek with LLMs: An Adversarial Game for Sneaky Error Generation and Self-Improving Diagnosis

  Rui Zou, Mengqi Wei, Yutao Zhu, Jirong Wen, Xin Zhao, Jing Chen

• VCNet: Recreating High-Level Visual Cortex Principles for Robust Artificial Vision

  Brennen A. Hill, Zhang Xinyu, Timothy Putra Prasetio

• Untraceable DeepFakes via Traceable Fingerprint Elimination

  Jiewei Lai, Lan Zhang, Chen Tang, Pengcheng Sun, Xinming Wang, Yunhao Wang

• VFLAIR-LLM: A Comprehensive Framework and Benchmark for Split Learning of LLMs

  Zixuan Gu, Qiufeng Fan, Long Sun, Yang Liu, Xiaojun Ye

• Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS

  Bingyu Yan, Ziyi Zhou, Xiaoming Zhang, Chaozhuo Li, Ruilin Zeng, Yirui Qi, Tianbo Wang, Litian Zhang

• GeoShield: Safeguarding Geolocation Privacy from Vision-Language Models via Adversarial Perturbations

  Xinwei Liu, Xiaojun Jia, Yuan Xun, Simeng Qin, Xiaochun Cao

• The Power of Many: Synergistic Unification of Diverse Augmentations for Efficient Adversarial Robustness

  Wang Yu-Hang, Shiwei Li, Jianxiang Liao, Li Bohan, Jian Liu, Wenfei Yin

• When Good Sounds Go Adversarial: Jailbreaking Audio-Language Models with Benign Inputs

  Bodam Kim, Hiskias Dingeto, Taeyoun Kwon, Dasol Choi, DongGeon Lee, Haon Park, JaeHoon Lee, Jongho Shin

• VideoGuard: Protecting Video Content from Unauthorized Editing

  Junjie Cao, Kaizhou Li, Xinchun Yu, Hongxiang Li, Xiaoping Zhang

• CoCoTen: Detecting Adversarial Inputs to Large Language Models through Latent Space Features of Contextual Co-occurrence Tensors

  Sri Durga Sai Sowmya Kadali, Evangelos E. Papalexakis

• Privacy-Aware Decoding: Mitigating Privacy Leakage of Large Language Models in Retrieval-Augmented Generation

  Haoran Wang, Xiongxiao Xu, Baixiang Huang, Kai Shu

• Token-Level Precise Attack on RAG: Searching for the Best Alternatives to Mislead Generation

  Zizhong Li, Haopeng Zhang, Jiawei Zhang

• Adversarial Attention Perturbations for Large Object Detection Transformers

  Zachary Yahn, Selim Furkan Tekin, Fatih Ilhan, Sihao Hu, Tiansheng Huang, Yichang Xu, Margaret Loper, Ling Liu

• Seeing It Before It Happens: In-Generation NSFW Detection for Diffusion-Based Text-to-Image Models

  Fan Yang, Yihao Huang, Jiayi Zhu, Ling Shi, Geguang Pu, Jin Song Dong, Kailong Wang

• evTransFER: A Transfer Learning Framework for Event-based Facial Expression Recognition

  Rodrigo Verschae, Ignacio Bugueno-Cordova

• BadBlocks: Low-Cost and Stealthy Backdoor Attacks Tailored for Text-to-Image Diffusion Models

  Yu Pan, Jiahao Chen, Lin Wang, Bingrong Dai, Yi Du

• Heterogeneity-Oblivious Robust Federated Learning

  Weiyao Zhang, Jinyang Li, Qi Song, Miao Wang, Chungang Lin, Haitong Luo, Xuying Meng, Yujun Zhang

• What If, But Privately: Private Counterfactual Retrieval

  Shreya Meel, Mohamed Nomeir, Pasan Dissanayake, Sanghamitra Dutta, Sennur Ulukus

• BDFirewall: Towards Effective and Expeditiously Black-Box Backdoor Defense in MLaaS

  Ye Li, Chengcheng Zhu, Yanchao Zhao, Jiale Zhang

• Probing and Enhancing the Robustness of GNN-based QEC Decoders with Reinforcement Learning

  Ryota Ikeda

• Adversarial Attacks on Reinforcement Learning-based Medical Questionnaire Systems: Input-level Perturbation Strategies and Medical Constraint Validation

  Peizhuo Liu

• Selection-Based Vulnerabilities: Clean-Label Backdoor Attacks in Active Learning

  Yuhan Zhi, Longtian Wang, Xiaofei Xie, Chao Shen, Qiang Hu, Xiaohong Guan

• Anti-Tamper Protection for Unauthorized Individual Image Generation

  Zelin Li, Ruohan Zong, Yifan Liu, Ruichen Yao, Yaokun Liu, Yang Zhang, Dong Wang

• EvaDrive: Evolutionary Adversarial Policy Optimization for End-to-End Autonomous Driving

  Siwen Jiao, Kangan Qian, Hao Ye, Yang Zhong, Ziang Luo, Sicong Jiang, Zilin Huang, Yangyi Fang, Jinyu Miao, Zheng Fu, Yunlong Wang, Kun Jiang, Diange Yang, Rui Fan, Baoyun Peng

2025-08-04

• Defend LLMs Through Self-Consciousness

  Boshi Huang, Fabio Nonato de Paula

• Secure mmWave Beamforming with Proactive-ISAC Defense Against Beam-Stealing Attacks

  Seyed Bagher Hashemi Natanzi, Hossein Mohammadi, Bo Tang, Vuk Marojevic

• Highlight & Summarize: RAG without the jailbreaks

  Giovanni Cherubin, Andrew Paverd

• Hidden in the Noise: Unveiling Backdoors in Audio LLMs Alignment through Latent Acoustic Pattern Triggers

  Liang Lin, Miao Yu, Kaiwen Luo, Yibo Zhang, Lilan Peng, Dexian Wang, Xuehai Tang, Yuanhe Zhang, Xikang Yang, Zhenhong Zhou, Kun Wang, Yang Liu

• Defending Against Knowledge Poisoning Attacks During Retrieval-Augmented Generation

  Kennedy Edemacu, Vinay M. Shashidhar, Micheal Tuape, Dan Abudu, Beakcheol Jang, Jong Wook Kim

• Online Robust Multi-Agent Reinforcement Learning under Model Uncertainties

  Zain Ulabedeen Farhat, Debamita Ghosh, George K. Atia, Yue Wang

• DINA: A Dual Defense Framework Against Internal Noise and External Attacks in Natural Language Processing

  Ko-Wei Chuang, Hen-Hsen Huang, Tsai-Yen Li

• MetAdv: A Unified and Interactive Adversarial Testing Platform for Autonomous Driving

  Aishan Liu, Jiakai Wang, Tianyuan Zhang, Hainan Li, Jiangfan Liu, Siyuan Liang, Yilong Ren, Xianglong Liu, Dacheng Tao

• Towards Stealthy and Effective Backdoor Attacks on Lane Detection: A Naturalistic Data Poisoning Approach

  Yifan Liao, Yuxin Cao, Yedi Zhang, Wentao He, Yan Xiao, Xianglong Du, Zhiyong Huang, Jin Song Dong

• Is Uncertainty Quantification a Viable Alternative to Learned Deferral?

  Anna M. Wundram, Christian F. Baumgartner

• Mitigating Attention Hacking in Preference-Based Reward Modeling via Interaction Distillation

  Jianxiang Zang, Meiling Ning, Shihan Dou, Jiazheng Zhang, Tao Gui, Qi Zhang, Xuanjing Huang

2025-08-03

• What Makes "Good" Distractors for Object Hallucination Evaluation in Large Vision-Language Models?

  Ming-Kun Xie, Jia-Hao Xiao, Gang Niu, Lei Feng, Zhiqiang Kou, Min-Ling Zhang, Masashi Sugiyama

• IMU: Influence-guided Machine Unlearning

  Xindi Fan, Jing Wu, Mingyi Zhou, Pengwei Liang, Dinh Phung

• Pr$^2$R: Information-Fused and Style-Aware Privacy-Preserving Replay for Lifelong Person Re-Identification

  Mingyu Wang, Haojie Liu, Zhiyong Li, Wei Jiang

• Joint Lossless Compression and Steganography for Medical Images via Large Language Models

  Pengcheng Zheng, Xiaorong Pu, Kecheng Chen, Jiaxin Huang, Meng Yang, Bai Feng, Yazhou Ren, Jianan Jiang, Chaoning Zhang, Yang Yang, Heng Tao Shen

2025-08-02

• BlockA2A: Towards Secure and Verifiable Agent-to-Agent Interoperability

  Zhenhua Zou, Zhuotao Liu, Lepeng Zhao, Qiuyang Zhan

• ConfGuard: A Simple and Effective Backdoor Detection for Large Language Models

  Zihan Wang, Rui Zhang, Hongwei Li, Wenshu Fan, Wenbo Jiang, Qingchuan Zhao, Guowen Xu

• PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation

  Zonglei Jing, Xiao Yang, Xiaoqian Li, Siyuan Liang, Aishan Liu, Mingchuan Zhang, Xianglong Liu

• AgentArmor: Enforcing Program Analysis on Agent Runtime Trace to Defend Against Prompt Injection

  Peiran Wang, Yang Liu, Yunfei Lu, Yifeng Cai, Hongbo Chen, Qingyou Yang, Jie Zhang, Jue Hong, Ye Wu

2025-08-01

• R1-ACT: Efficient Reasoning Model Safety Alignment by Activating Safety Knowledge

  Yeonjun In, Wonjoong Kim, Sangwu Park, Chanyoung Park

• Pro2Guard: Proactive Runtime Enforcement of LLM Agent Safety via Probabilistic Model Checking

  Haoyu Wang, Chris M. Poskitt, Jun Sun, Jiali Wei

• CyGATE: Game-Theoretic Cyber Attack-Defense Engine for Patch Strategy Optimization

  Yuning Jiang, Nay Oo, Qiaoran Meng, Lu Lin, Dusit Niyato, Zehui Xiong, Hoon Wei Lim, Biplab Sikdar

• Activation-Guided Local Editing for Jailbreaking Attacks

  Jiecong Wang, Haoran Li, Hao Peng, Ziqian Zeng, Zihao Wang, Haohua Du, Zhengtao Yu

• Wukong Framework for Not Safe For Work Detection in Text-to-Image systems

  Mingrui Liu, Sixiao Zhang, Cheng Long

• LeakSealer: A Semisupervised Defense for LLMs Against Prompt Injection and Leakage Attacks

  Francesco Panebianco, Stefano Bonfanti, Francesco Trovò, Michele Carminati

• Backdoor Attacks on Deep Learning Face Detection

  Quentin Le Roux, Yannick Teglia, Teddy Furon, Philippe Loubet-Moundi

• Is It Really You? Exploring Biometric Verification Scenarios in Photorealistic Talking-Head Avatar Videos

  Laura Pedrouzo-Rodriguez, Pedro Delgado-DeRobles, Luis F. Gomez, Ruben Tolosana, Ruben Vera-Rodriguez, Aythami Morales, Julian Fierrez

• MMBERT: Scaled Mixture-of-Experts Multimodal BERT for Robust Chinese Hate Speech Detection under Cloaking Perturbations

  Qiyao Xue, Yuchen Dou, Ryan Shi, Xiang Lorraine Li, Wei Gao

• DACTYL: Diverse Adversarial Corpus of Texts Yielded from Large Language Models

  Shantanu Thorat, Andrew Caines

• Privacy-Preserving Driver Drowsiness Detection with Spatial Self-Attention and Federated Learning

  Tran Viet Khoa, Do Hai Son, Mohammad Abu Alsheikh, Yibeltal F Alem, Dinh Thai Hoang

• IN2OUT: Fine-Tuning Video Inpainting Model for Video Outpainting Using Hierarchical Discriminator

  Sangwoo Youn, Minji Lee, Nokap Tony Park, Yeonggyoo Jeon, Taeyoung Na

• DBLP: Noise Bridge Consistency Distillation For Efficient And Reliable Adversarial Purification

  Chihan Huang, Belal Alsinglawi, Islam Al-qudah

• Revisiting Adversarial Patch Defenses on Object Detectors: Unified Evaluation, Large-Scale Dataset, and New Insights

  Junhao Zheng, Jiahao Sun, Chenhao Lin, Zhengyu Zhao, Chen Ma, Chong Zhang, Cong Wang, Qian Wang, Chao Shen

• STF: Shallow-Level Temporal Feedback to Enhance Spiking Transformers

  Zeqi Zheng, Zizheng Zhu, Yingchao Yu, Yanchen Huang, Changze Lv, Junfeng Tang, Zhaofei Yu, Yaochu Jin

• Wind Power Scenario Generation based on the Generalized Dynamic Factor Model and Generative Adversarial Network

  Young-ho Cho, Hao Zhu, Duehee Lee, Ross Baldick

• FedGuard: A Diverse-Byzantine-Robust Mechanism for Federated Learning with Major Malicious Clients

  Haocheng Jiang, Hua Shen, Jixin Zhang, Willy Susilo, Mingwu Zhang

• LeakyCLIP: Extracting Training Data from CLIP

  Yunhao Chen, Shujie Wang, Xin Wang, Xingjun Ma

• Random Walk Learning and the Pac-Man Attack

  Xingran Chen, Parimal Parag, Rohit Bhagat, Zonghong Liu, Salim El Rouayheb

• Privacy Enhancement for Gaze Data Using a Noise-Infused Autoencoder

  Samantha Aziz, Oleg Komogortsev

2025-07-31

• Hyperproperty-Constrained Secure Reinforcement Learning

  Ernest Bonnah, Luan Viet Nguyen, Khaza Anuarul Hoque

• Watch the Weights: Unsupervised monitoring and control of fine-tuned LLMs

  Ziqian Zhong, Aditi Raghunathan

• On the Risk of Misleading Reports: Diagnosing Textual Biases in Multimodal Clinical AI

  David Restrepo, Ira Ktena, Maria Vakalopoulou, Stergios Christodoulidis, Enzo Ferrante

• Improved Robustness and Functional Localization in Topographic CNNs Through Weight Similarity

  Nhut Truong, Uri Hasson

• Data-driven global ocean model resolving ocean-atmosphere coupling dynamics

  Jeong-Hwan Kim, Daehyun Kang, Young-Min Yang, Jae-Heung Park, Yoo-Geun Ham

• Gaussian Splatting Feature Fields for Privacy-Preserving Visual Localization

  Maxime Pietrantoni, Gabriela Csurka, Torsten Sattler

• Foundations and Models in Modern Computer Vision: Key Building Blocks in Landmark Architectures

  Radu-Andrei Bourceanu, Neil De La Fuente, Jan Grimm, Andrei Jardan, Andriy Manucharyan, Cornelius Weiss, Daniel Cremers, Roman Pflugfelder

• FastDriveVLA: Efficient End-to-End Driving via Plug-and-Play Reconstruction-based Token Pruning

  Jiajun Cao, Qizhe Zhang, Peidong Jia, Xuhui Zhao, Bo Lan, Xiaoan Zhang, Zhuo Li, Xiaobao Wei, Sixiang Chen, Liyun Li, Xianming Liu, Ming Lu, Yang Wang, Shanghang Zhang

• Measuring Harmfulness of Computer-Using Agents

  Aaron Xuxiang Tian, Ruofan Zhang, Janet Tang, Ji Wang, Tianyu Shi, Jiaxin Wen

• Differentially Private Clipped-SGD: High-Probability Convergence with Arbitrary Clipping Level

  Saleh Vatan Khah, Savelii Chezhegov, Shahrokh Farahmand, Samuel Horváth, Eduard Gorbunov

• LLMs Can Covertly Sandbag on Capability Evaluations Against Chain-of-Thought Monitoring

  Chloe Li, Mary Phuong, Noah Y. Siegel

• Fine-Grained Privacy Extraction from Retrieval-Augmented Generation Systems via Knowledge Asymmetry Exploitation

  Yufei Chen, Yao Wang, Haibin Zhang, Tao Gu

2025-07-30

• Theoretical Analysis of Relative Errors in Gradient Computations for Adversarial Attacks with CE Loss

  Yunrui Yu, Hang Su, Cheng-zhong Xu, Zhizhong Su, Jun Zhu

• RCR-AF: Enhancing Model Generalization via Rademacher Complexity Reduction Activation Function

  Yunrui Yu, Kafeng Wang, Hang Su, Jun Zhu

• LoReUn: Data Itself Implicitly Provides Cues to Improve Machine Unlearning

  Xiang Li, Qianli Shen, Haonan Wang, Kenji Kawaguchi

• Exploiting Synergistic Cognitive Biases to Bypass Safety in LLMs

  Xikang Yang, Biyu Zhou, Xuehai Tang, Jizhong Han, Songlin Hu

• Efficient Differentially Private Fine-Tuning of LLMs via Reinforcement Learning

  Afshin Khadangi, Amir Sartipi, Igor Tchappi, Ramin Bahmani, Gilbert Fridgen

• Metamorphic Testing of Deep Code Models: A Systematic Literature Review

  Ali Asgari, Milan de Koning, Pouria Derakhshanfar, Annibale Panichella

• Of Good Demons and Bad Angels: Guaranteeing Safe Control under Finite Precision

  Samuel Teuber, Debasmita Lohar, Bernhard Beckert

• CapRecover: A Cross-Modality Feature Inversion Attack Framework on Vision Language Models

  Kedong Xiu, Saiqian Zhang

• On the Reliability of Vision-Language Models Under Adversarial Frequency-Domain Perturbations

  Jordan Vice, Naveed Akhtar, Yansong Gao, Richard Hartley, Ajmal Mian

• Bridging the Gap in Missing Modalities: Leveraging Knowledge Distillation and Style Matching for Brain Tumor Segmentation

  Shenghao Zhu, Yifei Chen, Weihong Chen, Yuanhan Wang, Chang Liu, Shuo Jiang, Feiwei Qin, Changmiao Wang

• DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion

  Hossein Mirzaei, Zeinab Taghavi, Sepehr Rezaee, Masoud Hadi, Moein Madadi, Mackenzie W. Mathis

• LCS: An AI-based Low-Complexity Scaler for Power-Efficient Super-Resolution of Game Content

  Simon Pochinda, Momen K. Tageldeen, Mark Thompson, Tony Rinaldi, Troy Giorshev, Keith Lee, Jie Zhou, Frederick Walls

• Hate in Plain Sight: On the Risks of Moderating AI-Generated Hateful Illusions

  Yiting Qu, Ziqing Yang, Yihan Ma, Michael Backes, Savvas Zannettou, Yang Zhang

• Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding

  Chetan Pathade

• Benchmarking Fraud Detectors on Private Graph Data

  Alexander Goldberg, Giulia Fanti, Nihar Shah, Zhiwei Steven Wu

• Low-Communication Resilient Distributed Estimation Algorithm Based on Memory Mechanism

  Wei Li, Limei Hu, Feng Chen, Ye Yao

• Universally Unfiltered and Unseen:Input-Agnostic Multimodal Jailbreaks against Text-to-Image Model Safeguards

  Song Yan, Hui Wei, Jinlong Fei, Guoliang Yang, Zhengyu Zhao, Zheng Wamg

• Whisper Smarter, not Harder: Adversarial Attack on Partial Suppression

  Zheng Jie Wong, Bingquan Shen

2025-07-29

• When Truthful Representations Flip Under Deceptive Instructions?

  Xianxuan Long, Yao Fu, Runchao Li, Mu Sheng, Haotian Yu, Xiaotian Han, Pan Li

• Strategic Deflection: Defending LLMs from Logit Manipulation

  Yassine Rachidy, Jihad Rbaiti, Youssef Hmamouche, Faissal Sehbaoui, Amal El Fallah Seghrouchni

• Quantum-Inspired Audio Unlearning: Towards Privacy-Preserving Voice Biometrics

  Shreyansh Pathak, Sonu Shreshtha, Richa Singh, Mayank Vatsa

• Prompt Optimization and Evaluation for LLM Automated Red Teaming

  Michael Freenor, Lauren Alvarez, Milton Leal, Lily Smith, Joel Garrett, Yelyzaveta Husieva, Madeline Woodruff, Ryan Miller, Erich Kummerfeld, Rafael Medeiros, Sander Schulhoff

• Towards Privacy-preserving Photorealistic Self-avatars in Mixed Reality

  Ethan Wilson, Vincent Bindschaedler, Sophie Jörg, Sean Sheikholeslam, Kevin Butler, Eakta Jain

• Cascading and Proxy Membership Inference Attacks

  Yuntao Du, Jiacheng Li, Yuetian Chen, Kaiyuan Zhang, Zhizhen Yuan, Hanshen Xiao, Bruno Ribeiro, Ninghui Li

• Adversarial Defence without Adversarial Defence: Enhancing Language Model Robustness via Instance-level Principal Component Removal

  Yang Wang, Chenghao Xiao, Yizhi Li, Stuart E. Middleton, Noura Al Moubayed, Chenghua Lin

• Adversarial Defence without Adversarial Defence: Enhancing Language Model Robustness via Instance-level Principal Component Removal

  Yang Wang, Chenghao Xiao, Yizhi Li, Stuart E. Middleton, Noura Al Moubayed, Chenghua Lin

• UnsafeChain: Enhancing Reasoning Model Safety via Hard Cases

  Raj Vardhan Tomar, Preslav Nakov, Yuxia Wang

• Bridging Synthetic and Real-World Domains: A Human-in-the-Loop Weakly-Supervised Framework for Industrial Toxic Emission Segmentation

  Yida Tao, Yen-Chia Hsu

2025-07-28

• Enhancing Jailbreak Attacks on LLMs via Persona Prompts

  Zheng Zhang, Peilin Zhao, Deheng Ye, Hao Wang

• Harnessing Diffusion-Yielded Score Priors for Image Restoration

  Xinqi Lin, Fanghua Yu, Jinfan Hu, Zhiyuan You, Wu Shi, Jimmy S. Ren, Jinjin Gu, Chao Dong

• Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition

  Andy Zou, Maxwell Lin, Eliot Jones, Micha Nowak, Mateusz Dziemian, Nick Winter, Alexander Grattan, Valent Nathanael, Ayla Croft, Xander Davies, Jai Patel, Robert Kirk, Nate Burnikell, Yarin Gal, Dan Hendrycks, J. Zico Kolter, Matt Fredrikson

• Core Safety Values for Provably Corrigible Agents

  Aran Nayebi

• Text2VLM: Adapting Text-Only Datasets to Evaluate Alignment Training in Visual Language Models

  Gabriel Downer, Sean Craven, Damian Ruck, Jake Thomas

• From Entanglement to Alignment: Representation Space Decomposition for Unsupervised Time Series Domain Adaptation

  Rongyao Cai, Ming Jin, Qingsong Wen, Kexin Zhang

• Security Tensors as a Cross-Modal Bridge: Extending Text-Aligned Safety to Vision in LVLM

  Shen Li, Liuyi Yao, Wujia Niu, Lan Zhang, Yaliang Li

• Memorization in Fine-Tuned Large Language Models

  Danil Savine, Muni Sreenivas Pydi, Jamal Atif, Olivier Cappé

• Verification Cost Asymmetry in Cognitive Warfare: A Complexity-Theoretic Framework

  Joshua Luberisse

• From Entanglement to Alignment: Representation Space Decomposition for Unsupervised Time Series Domain Adaptation

  Rongyao Cai, Ming Jin, Qingsong Wen, Kexin Zhang

• Memorization in Fine-Tuned Large Language Models

  Danil Savine

2025-07-27

• The Blessing and Curse of Dimensionality in Safety Alignment

  Rachel S.Y. Teo, Laziz U. Abdullaev, Tan M. Nguyen

• Do Not Mimic My Voice: Speaker Identity Unlearning for Zero-Shot Text-to-Speech

  Taesoo Kim, Jinju Kim, Dongchan Kim, Jong Hwan Ko, Gyeong-Moon Park

• WBHT: A Generative Attention Architecture for Detecting Black Hole Anomalies in Backbone Networks

  Kiymet Kaya, Elif Ak, Sule Gunduz Oguducu

2025-07-26

• VAE-GAN Based Price Manipulation in Coordinated Local Energy Markets

  Biswarup Mukherjee, Li Zhou, S. Gokul Krishnan, Milad Kabirifar, Subhash Lakshminarayana, Charalambos Konstantinou

• Trivial Trojans: How Minimal MCP Servers Enable Cross-Tool Exfiltration of Sensitive Data

  Nicola Croce, Tobin South

2025-07-25

• Graph Structure Learning with Privacy Guarantees for Open Graph Data

  Muhao Guo, Jiaqi Wu, Yang Weng, Yizheng Liao, Shengzhe Chen

• PrompTrend: Continuous Community-Driven Vulnerability Discovery and Assessment for Large Language Models

  Tarek Gasmi, Ramzi Guesmi, Mootez Aloui, Jihene Bennaceur

• Can Small-Scale Data Poisoning Exacerbate Dialect-Linked Biases in Large Language Models?

  Chaymaa Abbas, Mariette Awad, Razane Tajeddine

• Running in CIRCLE? A Simple Benchmark for LLM Code Interpreter Security

  Gabriel Chua

• Jailbreaking Large Language Diffusion Models: Revealing Hidden Safety Flaws in Diffusion-Based Text Generation

  Yuanhe Zhang, Fangzhou Xie, Zhenhong Zhou, Zherui Li, Hao Chen, Kun Wang, Yufei Guo

• Transferable and Undefendable Point Cloud Attacks via Medial Axis Transform

  Keke Tang, Yuze Gao, Weilong Peng, Xiaofei Wang, Meie Fang, Peican Zhu

• Secure Best Arm Identification in the Presence of a Copycat

  Asaf Cohen, Onur Günlü

• Clustering-Oriented Generative Attribute Graph Imputation

  Mulin Chen, Bocheng Wang, Jiaxin Zhong, Zongcheng Miao, Xuelong Li

• Game-Theoretic Gradient Control for Robust Neural Network Training

  Maria Zaitseva, Ivan Tomilov, Natalia Gusarova

• MOCHA: Are Code Language Models Robust Against Multi-Turn Malicious Coding Prompts?

  Muntasir Wahed, Xiaona Zhou, Kiet A. Nguyen, Tianjiao Yu, Nirav Diwan, Gang Wang, Dilek Hakkani-Tür, Ismini Lourentzou

2025-07-24

• ViGText: Deepfake Image Detection with Vision-Language Model Explanations and Graph Neural Networks

  Ahmad ALBarqawi, Mahmoud Nazzal, Issa Khalil, Abdallah Khreishah, NhatHai Phan

• Safeguarding RAG Pipelines with GMTP: A Gradient-based Masked Token Probability Method for Poisoned Document Detection

  San Kim, Jonghwi Kim, Yejin Jeon, Gary Geunbae Lee

• LoRA-Leak: Membership Inference Attacks Against LoRA Fine-tuned Language Models

  Delong Ran, Xinlei He, Tianshuo Cong, Anyu Wang, Qi Li, Xiaoyun Wang

• Revisiting Physically Realizable Adversarial Object Attack against LiDAR-based Detection: Clarifying Problem Formulation and Experimental Protocols

  Luo Cheng, Hanwei Zhang, Lijun Zhang, Holger Hermanns

• Reinforced Embodied Active Defense: Exploiting Adaptive Interaction for Robust Visual Perception in Adversarial 3D Environments

  Xiao Yang, Lingxuan Wu, Lizhong Wang, Chengyang Ying, Hang Su, Jun Zhu

• Privacy-Preserving Synthetic Review Generation with Diverse Writing Styles Using LLMs

  Tevin Atwal, Chan Nam Tieu, Yefeng Yuan, Zhan Shi, Yuhong Liu, Liang Cheng

• Exploring the Impact of Instruction-Tuning on LLM's Susceptibility to Misinformation

  Kyubeen Han, Junseo Jang, Hongjin Kim, Geunyeong Jeong, Harksoo Kim

• BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit

  Biao Yi, Zekun Fei, Jianing Geng, Tong Li, Lihai Nie, Zheli Liu, Yiming Li

• RECALLED: An Unbounded Resource Consumption Attack on Large Vision-Language Models

  Haoran Gao, Yuanhe Zhang, Zhenhong Zhou, Lei Jiang, Fanyu Meng, Yujia Xiao, Kun Wang, Yang Liu, Junlan Feng

• Facial Demorphing from a Single Morph Using a Latent Conditional GAN

  Nitish Shukla, Arun Ross

• Adversarial Distribution Matching for Diffusion Distillation Towards Efficient Image and Video Synthesis

  Yanzuo Lu, Yuxi Ren, Xin Xia, Shanchuan Lin, Xing Wang, Xuefeng Xiao, Andy J. Ma, Xiaohua Xie, Jian-Huang Lai

• NWaaS: Nonintrusive Watermarking as a Service for X-to-Image DNN

  Haonan An, Guang Hua, Yu Guo, Hangcheng Cao, Susanto Rahardja, Yuguang Fang

• C-AAE: Compressively Anonymizing Autoencoders for Privacy-Preserving Activity Recognition in Healthcare Sensor Streams

  Ryusei Fujimoto, Yugo Nakamura, Yutaka Arakawa

• Policy Disruption in Reinforcement Learning:Adversarial Attack with Large Language Models and Critical State Identification

  Junyong Jiang, Buwei Tian, Chenxing Xu, Songze Li, Lu Dong

• On Reconstructing Training Data From Bayesian Posteriors and Trained Models

  George Wynne

• Removing Box-Free Watermarks for Image-to-Image Models via Query-Based Reverse Engineering

  Haonan An, Guang Hua, Hangcheng Cao, Zhengru Fang, Guowen Xu, Susanto Rahardja, Yuguang Fang

• Layer-Aware Representation Filtering: Purifying Finetuning Data to Preserve LLM Safety Alignment

  Hao Li, Lijun Li, Zhenghao Lu, Xianyi Wei, Rui Li, Jing Shao, Lei Sha

• RecPS: Privacy Risk Scoring for Recommender Systems

  Jiajie He, Yuechun Gu, Keke Chen

• The Right to be Forgotten in Pruning: Unveil Machine Unlearning on Sparse Models

  Yang Xiao, Gen Li, Jie Ji, Ruimeng Ye, Xiaolong Ma, Bo Hui

• Layer-Aware Representation Filtering: Purifying Finetuning Data to Preserve LLM Safety Alignment

  Hao Li, Lijun Li, Zhenghao Lu, Xianyi Wei, Rui Li, Jing Shao, Lei Sha

• Rainbow Noise: Stress-Testing Multimodal Harmful-Meme Detectors on LGBTQ Content

  Ran Tong, Songtao Wei, Jiaqi Liu, Lanruo Wang

• Rainbow Noise: Stress-Testing Multimodal Harmful-Meme Detectors on LGBTQ Content

  Ran Tong, Songtao Wei, Jiaqi Liu, Lanruo Wang

2025-07-23

• Ctx2TrajGen: Traffic Context-Aware Microscale Vehicle Trajectories using Generative Adversarial Imitation Learning

  Joobin Jin, Seokjun Hong, Gyeongseon Baek, Yeeun Kim, Byeongjoon Noh

• P3SL: Personalized Privacy-Preserving Split Learning on Heterogeneous Edge Devices

  Wei Fan, JinYi Yoon, Xiaochang Li, Huajie Shao, Bo Ji

• Investigating Training Data Detection in AI Coders

  Tianlin Li, Yunxiang Wei, Zhiming Li, Aishan Liu, Qing Guo, Xianglong Liu, Dongning Sun, Yang Liu

• On the Interaction of Compressibility and Adversarial Robustness

  Melih Barsbey, Antônio H. Ribeiro, Umut Şimşekli, Tolga Birdal

• Pretraining on the Test Set Is No Longer All You Need: A Debate-Driven Approach to QA Benchmarks

  Linbo Cao, Jinman Zhao

• Tab-MIA: A Benchmark Dataset for Membership Inference Attacks on Tabular Data in LLMs

  Eyal German, Sagiv Antebi, Daniel Samira, Asaf Shabtai, Yuval Elovici

• An h-space Based Adversarial Attack for Protection Against Few-shot Personalization

  Xide Xu, Sandesh Kamath, Muhammad Atif Butt, Bogdan Raducanu

• Boosting Ray Search Procedure of Hard-label Attacks with Transfer-based Priors

  Chen Ma, Xinjie Xu, Shuyu Cheng, Qi Xuan

• BetterCheck: Towards Safeguarding VLMs for Automotive Perception Systems

  Malsha Ashani Mahawatta Dona, Beatriz Cabrero-Daniel, Yinan Yu, Christian Berger

• A Comprehensive Evaluation Framework for the Study of the Effects of Facial Filters on Face Recognition Accuracy

  Kagan Ozturk, Louisa Conwill, Jacob Gutierrez, Kevin Bowyer, Walter J. Scheirer

• Efficient Neural Network Verification via Order Leading Exploration of Branch-and-Bound Trees

  Guanqin Zhang, Kota Fukuda, Zhenya Zhang, H.M.N. Dilum Bandara, Shiping Chen, Jianjun Zhao, Yulei Sui

• A Privacy-Preserving Data Collection Method for Diversified Statistical Analysis

  Hao Jiang, Quan Zhou, Dongdong Zhao, Shangshang Yang, Wenjian Luo, Xingyi Zhang

• Threshold-Protected Searchable Sharing: Privacy Preserving Aggregated-ANN Search for Collaborative RAG

  Ruoyang Rykie Guo

• From Seed to Harvest: Augmenting Human Creativity with AI for Red-teaming Text-to-Image Models

  Jessica Quaye, Charvi Rastogi, Alicia Parrish, Oana Inel, Minsuk Kahng, Lora Aroyo, Vijay Janapa Reddi

• Bob's Confetti: Phonetic Memorization Attacks in Music and Video Generation

  Jaechul Roh, Zachary Novack, Yuefeng Peng, Niloofar Mireshghallah, Taylor Berg-Kirkpatrick, Amir Houmansadr

• Minimax Data Sanitization with Distortion Constraint and Adversarial Inference

  Amirarsalan Moatazedian, Yauhen Yakimenka, Rémi A. Chou, Jörg Kliewer

• Evaluating the Performance of AI Text Detectors, Few-Shot and Chain-of-Thought Prompting Using DeepSeek Generated Text

  Hulayyil Alshammari, Praveen Rao

• Wasserstein GAN-Based Precipitation Downscaling with Optimal Transport for Enhancing Perceptual Realism

  Kenta Shiraishi, Yuka Muto, Atsushi Okazaki, Shunji Kotsuki

• Lower Bounds for Public-Private Learning under Distribution Shift

  Amrith Setlur, Pratiksha Thaker, Jonathan Ullman

2025-07-22

• CompLeak: Deep Learning Model Compression Exacerbates Privacy Leakage

  Na Li, Yansong Gao, Hongsheng Hu, Boyu Kuang, Anmin Fu

• Finding Dori: Memorization in Text-to-Image Diffusion Models Is Less Local Than Assumed

  Antoni Kowalczuk, Dominik Hintersdorf, Lukas Struppek, Kristian Kersting, Adam Dziedzic, Franziska Boenisch

• Towards Trustworthy AI: Secure Deepfake Detection using CNNs and Zero-Knowledge Proofs

  H M Mohaimanul Islam, Huynh Q. N. Vo, Aditya Rane

• Advancing Robustness in Deep Reinforcement Learning with an Ensemble Defense Approach

  Adithya Mohan, Dominik Rößle, Daniel Cremers, Torsten Schön

• Risk In Context: Benchmarking Privacy Leakage of Foundation Models in Synthetic Tabular Data Generation

  Jessup Byun, Xiaofeng Lin, Joshua Ward, Guang Cheng

• GATEBLEED: Exploiting On-Core Accelerator Power Gating for High Performance & Stealthy Attacks on AI

  Joshua Kalyanapu, Farshad Dizani, Darsh Asher, Azam Ghanbari, Rosario Cammarota, Aydin Aysu, Samira Mirbagher Ajorpaz

• LENS-DF: Deepfake Detection and Temporal Localization for Long-Form Noisy Speech

  Xuechen Liu, Wanying Ge, Xin Wang, Junichi Yamagishi

• ShrinkBox: Backdoor Attack on Object Detection to Disrupt Collision Avoidance in Machine Learning-based Advanced Driver Assistance Systems

  Muhammad Zaeem Shahzad, Muhammad Abdullah Hanif, Bassem Ouni, Muhammad Shafique

• Argument Quality Annotation and Gender Bias Detection in Financial Communication through Large Language Models

  Alaa Alhamzeh, Mays Al Rebdawi

• The Cost of Compression: Tight Quadratic Black-Box Attacks on Sketches for $\ell_2$ Norm Estimation

  Sara Ahmadian, Edith Cohen, Uri Stemmer

• Robustifying Learning-Augmented Caching Efficiently without Compromising 1-Consistency

  Peng Chen, Hailiang Zhao, Jiaji Zhang, Xueyan Tang, Yixuan Wang, Shuiguang Deng

2025-07-21

• Challenges of Trustworthy Federated Learning: What's Done, Current Trends and Remaining Work

  Nuria Rodríguez-Barroso, Mario García-Márquez, M. Victoria Luzón, Francisco Herrera

• PromptArmor: Simple yet Effective Prompt Injection Defenses

  Tianneng Shi, Kaijie Zhu, Zhun Wang, Yuqi Jia, Will Cai, Weida Liang, Haonan Wang, Hend Alzahrani, Joshua Lu, Kenji Kawaguchi, Basel Alomair, Xuandong Zhao, William Yang Wang, Neil Gong, Wenbo Guo, Dawn Song

• Scaling Decentralized Learning with FLock

  Zehua Cheng, Rui Sun, Jiahao Sun, Yike Guo

• Red-Team Multi-Agent Reinforcement Learning for Emergency Braking Scenario

  Yinsong Chen, Kaifeng Wang, Xiaoqiang Meng, Xueyuan Li, Zirui Li, Xin Gao

• Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems

  Andrii Balashov, Olena Ponomarova, Xiaohua Zhai

• Missing value imputation with adversarial random forests -- MissARF

  Pegah Golchian, Jan Kapar, David S. Watson, Marvin N. Wright

• Beyond Easy Wins: A Text Hardness-Aware Benchmark for LLM-generated Text Detection

  Navid Ayoobi, Sadat Shahriar, Arjun Mukherjee

• Exploiting Context-dependent Duration Features for Voice Anonymization Attack Systems

  Natalia Tomashenko, Emmanuel Vincent, Marc Tommasi

• In-context Learning of Vision Language Models for Detection of Physical and Digital Attacks against Face Recognition Systems

  Lazaro Janier Gonzalez-Soler, Maciej Salwowski, Christoph Busch

• Rethinking Occlusion in FER: A Semantic-Aware Perspective and Go Beyond

  Huiyu Zhai, Xingxing Yang, Yalan Ye, Chenyang Li, Bin Fan, Changze Li

• Optimizing Canaries for Privacy Auditing with Metagradient Descent

  Matteo Boglioni, Terrance Liu, Andrew Ilyas, Zhiwei Steven Wu

• Robust and Differentially Private PCA for non-Gaussian data

  Minwoo Kim, Sungkyu Jung

• Weak Links in LinkedIn: Enhancing Fake Profile Detection in the Age of LLMs

  Apoorva Gulati, Rajesh Kumar, Vinti Agarwal, Aditya Sharma

• Security study based on the Chatgptplugin system: ldentifying Security Vulnerabilities

  Ruomai Ren

2025-07-20

• DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection

  Jerry Wang, Fang Yu

• Manipulating LLM Web Agents with Indirect Prompt Injection Attack via HTML Accessibility Tree

  Sam Johnson, Viet Pham, Thai Le

• Subliminal Learning: Language models transmit behavioral traits via hidden signals in data

  Alex Cloud, Minh Le, James Chua, Jan Betley, Anna Sztyber-Betley, Jacob Hilton, Samuel Marks, Owain Evans

• Byzantine-Robust Decentralized Coordination of LLM Agents

  Yongrae Jo, Chanik Park

• Robust Control with Gradient Uncertainty

  Qian Qi

• Towards Video Thinking Test: A Holistic Benchmark for Advanced Video Reasoning and Understanding

  Yuanhan Zhang, Yunice Chew, Yuhao Dong, Aria Leo, Bo Hu, Ziwei Liu

• Clustered Federated Learning for Generalizable FDIA Detection in Smart Grids with Heterogeneous Data

  Yunfeng Li, Junhong Liu, Zhaohui Yang, Guofu Liao, Chuyun Zhang

• ROBAD: Robust Adversary-aware Local-Global Attended Bad Actor Detection Sequential Model

  Bing He, Mustaque Ahamad, Srijan Kumar

• Distributional Unlearning: Forgetting Distributions, Not Just Samples

  Youssef Allouah, Rachid Guerraoui, Sanmi Koyejo

• Differentially Private Synthetic Graphs Preserving Triangle-Motif Cuts

  Pan Peng, Hangyu Xu

• Privacy Risks of LLM-Empowered Recommender Systems: An Inversion Attack Perspective

  Yubo Wang, Min Tang, Nuo Shen, Shujie Cui, Weiqing Wang

2025-07-19

• Automated Safety Evaluations Across 20 Large Language Models: The Aymara LLM Risk and Responsibility Matrix

  Juan Manuel Contreras

• VTarbel: Targeted Label Attack with Minimal Knowledge on Detector-enhanced Vertical Federated Learning

  Juntao Tan, Anran Li, Quanchao Liu, Peng Ran, Lan Zhang

• VMask: Tunable Label Privacy Protection for Vertical Federated Learning via Layer Masking

  Juntao Tan, Lan Zhang, Zhonghao Hu, Kai Yang, Peng Ran, Bo Li

• GCC-Spam: Spam Detection via GAN, Contrastive Learning, and Character Similarity Networks

  Zixin Xu, Zhijie Wang, Zhiyuan Pan

• Analyzing Internal Activity and Robustness of SNNs Across Neuron Parameter Space

  Szymon Mazurek, Jakub Caputa, Maciej Wielgosz

• MultiRetNet: A Multimodal Vision Model and Deferral System for Staging Diabetic Retinopathy

  Jeannie She, Katie Spivakovsky

• Glitches in Decision Tree Ensemble Models

  Satyankar Chandra, Ashutosh Gupta, Kaushik Mallik, Krishna Shankaranarayanan, Namrita Varshney

• FORTA: Byzantine-Resilient FL Aggregation via DFT-Guided Krum

  Usayd Shahul, J. Harshan

• Towards Urban Planing AI Agent in the Age of Agentic AI

  Yanjie Fu, Dongjie Wang

• Towards Urban Planing AI Agent in the Age of Agentic AI

  Rui Liu, Tao Zhe, Zhong-Ren Peng, Necati Catbas, Xinyue Ye, Dongjie Wang, Yanjie Fu

2025-07-18

• GIFT: Gradient-aware Immunization of diffusion models against malicious Fine-Tuning with safe concepts retention

  Amro Abdalla, Ismail Shaheen, Dan DeGenaro, Rupayan Mallick, Bogdan Raita, Sarah Adel Bargal

• Large Language Models in Cybersecurity: Applications, Vulnerabilities, and Defense Techniques

  Niveen O. Jaffal, Mohammed Alkhanafseh, David Mohaisen

• Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models

  Palash Nandi, Maithili Joshi, Tanmoy Chakraborty

• Learning Deblurring Texture Prior from Unpaired Data with Diffusion Model

  Chengxu Liu, Lu Qi, Jinshan Pan, Xueming Qian, Ming-Hsuan Yang

• Adversarial Training Improves Generalization Under Distribution Shifts in Bioacoustics

  René Heinrich, Lukas Rauch, Bernhard Sick, Christoph Scholz

• Byzantine-resilient federated online learning for Gaussian process regression

  Xu Zhang, Zhenyuan Yuan, Minghui Zhu

• FuSeFL: Fully Secure and Scalable Cross-Silo Federated Learning

  Sahar Ghoflsaz Ghinani, Elaheh Sadredini

• An Adversarial-Driven Experimental Study on Deep Learning for RF Fingerprinting

  Xinyu Cao, Bimal Adhikari, Shangqing Zhao, Jingxian Wu, Yanjun Pan

• TopicAttack: An Indirect Prompt Injection Attack via Topic Transition

  Yulin Chen, Haoran Li, Yuexin Li, Yue Liu, Yangqiu Song, Bryan Hooi

• Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack

  Eldor Abdukhamidov, Mohammed Abuhamad, Simon S. Woo, Hyoungshick Kim, Tamer Abuhmed

• Hallucination Score: Towards Mitigating Hallucinations in Generative Image Super-Resolution

  Weiming Ren, Raghav Goyal, Zhiming Hu, Tristan Ty Aumentado-Armstrong, Iqbal Mohomed, Alex Levinshtein

• FedStrategist: A Meta-Learning Framework for Adaptive and Robust Aggregation in Federated Learning

  Md Rafid Haque, Abu Raihan Mostofa Kamal, Md. Azam Hossain

2025-07-17

• Manipulation Attacks by Misaligned AI: Risk Analysis and Safety Case Framework

  Rishane Dassanayake, Mario Demetroudi, James Walpole, Lindley Lentati, Jason R. Brown, Edward James Young

• A Distributed Generative AI Approach for Heterogeneous Multi-Domain Environments under Data Sharing constraints

  Youssef Tawfilis, Hossam Amer, Minar El-Aasser, Tallal Elshabrawy

• Prompt Injection 2.0: Hybrid AI Threats

  Jeremy McHugh, Kristina Šekrst, Jon Cefalu

• SHIELD: A Secure and Highly Enhanced Integrated Learning for Robust Deepfake Detection against Adversarial Attacks

  Kutub Uddin, Awais Khan, Muhammad Umar Farooq, Khalid Malik

• Automating Steering for Safe Multimodal Large Language Models

  Lyucheng Wu, Mengru Wang, Ziwen Xu, Tri Cao, Nay Oo, Bryan Hooi, Shumin Deng

• DiffClean: Diffusion-based Makeup Removal for Accurate Age Estimation

  Ekta Balkrishna Gavas, Chinmay Hegde, Nasir Memon, Sudipta Banerjee

• Taming Diffusion Transformer for Real-Time Mobile Video Generation

  Yushu Wu, Yanyu Li, Anil Kag, Ivan Skorokhodov, Willi Menapace, Ke Ma, Arpit Sahni, Ju Hu, Aliaksandr Siarohin, Dhritiman Sagar, Yanzhi Wang, Sergey Tulyakov

• Training Transformers with Enforced Lipschitz Constants

  Laker Newhouse, R. Preston Hess, Franz Cesista, Andrii Zahorodnii, Jeremy Bernstein, Phillip Isola

• Architectural Backdoors in Deep Learning: A Survey of Vulnerabilities, Detection, and Defense

  Victoria Childress, Josh Collyer, Jodie Knapp

• MAD-Spear: A Conformity-Driven Prompt Injection Attack on Multi-Agent Debate Systems

  Yu Cui, Hongyang Du

• IConMark: Robust Interpretable Concept-Based Watermark For AI Images

  Vinu Sankar Sadasivan, Mehrdad Saberi, Soheil Feizi

• Paper Summary Attack: Jailbreaking LLMs through LLM Safety Papers

  Liang Lin, Zhihao Xu, Xuehai Tang, Shi Liu, Biyu Zhou, Fuqing Zhu, Jizhong Han, Songlin Hu

• Revisiting LLM Value Probing Strategies: Are They Robust and Expressive?

  Siqi Shen, Mehar Singh, Lajanugen Logeswaran, Moontae Lee, Honglak Lee, Rada Mihalcea

• Fake or Real: The Impostor Hunt in Texts for Space Operations

  Agata Kaczmarek, Dawid Płudowski, Piotr Wilczyński, Przemysław Biecek, Krzysztof Kotowski, Ramez Shendy, Jakub Nalepa, Artur Janicki, Evridiki Ntagiou

2025-07-16

• Spatial Frequency Modulation for Semantic Segmentation

  Linwei Chen, Ying Fu, Lin Gu, Dezhi Zheng, Jifeng Dai

• Robust Planning for Autonomous Vehicles with Diffusion-Based Failure Samplers

  Juanran Wang, Marc R. Schlichting, Mykel J. Kochenderfer

• InstructFLIP: Exploring Unified Vision-Language Model for Face Anti-spoofing

  Kun-Hsiang Lin, Yu-Wen Tseng, Kang-Yang Huang, Jhih-Ciang Wu, Wen-Huang Cheng

• Non-Adaptive Adversarial Face Generation

  Sunpill Kim, Seunghun Paik, Chanwoo Hwang, Minsu Kim, Jae Hong Seo

• Thought Purity: Defense Paradigm For Chain-of-Thought Attack

  Zihao Xue, Zhen Bi, Long Ma, Zhenlin Hu, Yan Wang, Zhenfang Liu, Qing Sheng, Jie Xiao, Jungang Lou

• LLMs Encode Harmfulness and Refusal Separately

  Jiachen Zhao, Jing Huang, Zhengxuan Wu, David Bau, Weiyan Shi

• Overview of the Sensemaking Task at the ELOQUENT 2025 Lab: LLMs as Teachers, Students and Evaluators

  Pavel Šindelář, Ondřej Bojar

• Nonlinear Concept Erasure: a Density Matching Approach

  Antoine Saillenfest, Pirmin Lemberger

• Watch, Listen, Understand, Mislead: Tri-modal Adversarial Attacks on Short Videos for Content Appropriateness Evaluation

  Sahid Hossain Mustakim, S M Jishanul Islam, Ummay Maria Muna, Montasir Chowdhury, Mohammed Jawwadul Islam, Sadia Ahmmed, Tashfia Sikder, Syed Tasdid Azam Dhrubo, Swakkhar Shatabda

• FADE: Adversarial Concept Erasure in Flow Models

  Zixuan Fu, Yan Ren, Finn Carter, Chenyue Wang, Ze Niu, Dacheng Yu, Emily Davis, Bo Zhang

• Self-Adaptive and Robust Federated Spectrum Sensing without Benign Majority for Cellular Networks

  Ngoc Duy Pham, Thusitha Dayaratne, Viet Vo, Shangqi Lai, Sharif Abuadbba, Hajime Suzuki, Xingliang Yuan, Carsten Rudolph

• Trustworthy Tree-based Machine Learning by $MoS_2$ Flash-based Analog CAM with Inherent Soft Boundaries

  Bo Wen, Guoyun Gao, Zhicheng Xu, Ruibin Mao, Xiaojuan Qi, X. Sharon Hu, Xunzhao Yin, Can Li

• A Bayesian Incentive Mechanism for Poison-Resilient Federated Learning

  Daniel Commey, Rebecca A. Sarpong, Griffith S. Klogo, Winful Bagyl-Bac, Garth V. Crosby

• A Privacy-Preserving Framework for Advertising Personalization Incorporating Federated Learning and Differential Privacy

  Xiang Li, Yifan Lin, Yuanzhe Zhang

• Exploiting Jailbreaking Vulnerabilities in Generative AI to Bypass Ethical Safeguards for Facilitating Phishing Attacks

  Rina Mishra, Gaurav Varshney

• Benchmarking Deception Probes via Black-to-White Performance Boosts

  Avi Parrack, Carlo Leonardo Attubato, Stefan Heimersheim

• Safeguarding Federated Learning-based Road Condition Classification

  Sheng Liu, Panos Papadimitratos

• Minimalist Concept Erasure in Generative Models

  Yang Zhang, Er Jin, Yanfei Dong, Yixuan Wu, Philip Torr, Ashkan Khakzar, Johannes Stegmaier, Kenji Kawaguchi

2025-07-15

• How to Protect Models against Adversarial Unlearning?

  Patryk Jasiorski, Marek Klonowski, Michał Woźniak

• Crafting Imperceptible On-Manifold Adversarial Attacks for Tabular Data

  Zhipeng He, Alexander Stevens, Chun Ouyang, Johannes De Smedt, Alistair Barros, Catarina Moreira

• The Devil behind the mask: An emergent safety vulnerability of Diffusion LLMs

  Zichen Wen, Jiashu Qu, Dongrui Liu, Zhiyuan Liu, Ruixi Wu, Yicun Yang, Xiangqi Jin, Haoyun Xu, Xuyang Liu, Weijia Li, Chaochao Lu, Jing Shao, Conghui He, Linfeng Zhang

• Multi-Trigger Poisoning Amplifies Backdoor Vulnerabilities in LLMs

  Sanhanat Sivapiromrat, Caiqi Zhang, Marco Basaldella, Nigel Collier

• What Should LLMs Forget? Quantifying Personal Data in LLMs for Right-to-Be-Forgotten Requests

  Dimitri Staufer

• Real-Time Bayesian Detection of Drift-Evasive GNSS Spoofing in Reinforcement Learning Based UAV Deconfliction

  Deepak Kumar Panda, Weisi Guo

• Striking the Perfect Balance: Preserving Privacy While Boosting Utility in Collaborative Medical Prediction Platforms

  Shao-Bo Lin, Xiaotong Liu, Yao Wang

• Robust-Multi-Task Gradient Boosting

  Seyedsaman Emami, Gonzalo Martínez-Muñoz, Daniel Hernández-Lobato

• Hashed Watermark as a Filter: Defeating Forging and Overwriting Attacks in Weight-based Neural Network Watermarking

  Yuan Yao, Jin Song, Jian Jin

• A Parallelizable Approach for Characterizing NE in Zero-Sum Games After a Linear Number of Iterations of Gradient Descent

  Taemin Kim, James P. Bailey

• Jailbreak-Tuning: Models Efficiently Learn Jailbreak Susceptibility

  Brendan Murphy, Dillon Bowen, Shahrad Mohammadzadeh, Julius Broomfield, Adam Gleave, Kellin Pelrine

• Subgraph Generation for Generalizing on Out-of-Distribution Links

  Jay Revolinsky, Harry Shomer, Jiliang Tang

• Challenges in GenAI and Authentication: a scoping review

  Wesley dos Reis Bezerra, Lais Machado Bezerra, Carlos Becker Westphall

• ZKP-FedEval: Verifiable and Privacy-Preserving Federated Evaluation using Zero-Knowledge Proofs

  Daniel Commey, Benjamin Appiah, Griffith S. Klogo, Garth V. Crosby

• Evasion Under Blockchain Sanctions

  Endong Liu, Mark Ryan, Liyi Zhou, Pascal Berrang

• Differentially Private Conformal Prediction via Quantile Binary Search

  Ogonnaya M. Romanus, Roberto Molinari

• Mitigating Trojanized Prompt Chains in Educational LLM Use Cases: Experimental Findings and Detection Tool Design

  Richard M. Charles, James H. Curry, Richard B. Charles

• Secure Goal-Oriented Communication: Defending against Eavesdropping Timing Attacks

  Federico Mason, Federico Chiariotti, Pietro Talli, Andrea Zanella

2025-07-14

• BlueGlass: A Framework for Composite AI Safety

  Harshal Nandigramwar, Syed Qutub, Kay-Ulrich Scholl

• Differentially Private Federated Low Rank Adaptation Beyond Fixed-Matrix

  Ming Wen, Jiaqi Zhu, Yuedong Xu, Yipeng Zhou, Dingding Han

• Learning Private Representations through Entropy-based Adversarial Training

  Tassilo Klein, Moin Nabi

• Logic layer Prompt Control Injection (LPCI): A Novel Security Vulnerability Class in Agentic Systems

  Hammad Atta, Ken Huang, Manish Bhatt, Kamal Ahmed, Muhammad Aziz Ul Haq, Yasir Mehmood

• Can You Detect the Difference?

  İsmail Tarım, Aytuğ Onan

• Bridging Robustness and Generalization Against Word Substitution Attacks in NLP via the Growth Bound Matrix Approach

  Mohammed Bouri, Adnane Saoud

• Counterfactual Visual Explanation via Causally-Guided Adversarial Steering

  Yiran Qiao, Disheng Liu, Yiren Lu, Yu Yin, Mengnan Du, Jing Ma

• 3DGAA: Realistic and Robust 3D Gaussian-based Adversarial Attack for Autonomous Driving

  Yixun Zhang, Lizhi Wang, Junjun Zhao, Wending Zhao, Feng Zhou, Yonghao Dang, Jianqin Yin

• Navigating the Challenges of AI-Generated Image Detection in the Wild: What Truly Matters?

  Despina Konstantinidou, Dimitrios Karageorgiou, Christos Koutlis, Olga Papadopoulou, Emmanouil Schinas, Symeon Papadopoulos

• Transferring Styles for Reduced Texture Bias and Improved Robustness in Semantic Segmentation Networks

  Ben Hamscher, Edgar Heinert, Annika Mütze, Kira Maag, Matthias Rottmann

• Kaleidoscopic Background Attack: Disrupting Pose Estimation with Multi-Fold Radial Symmetry Textures

  Xinlong Ding, Hongwei Yu, Jiawei Li, Feifan Li, Yu Shang, Bochao Zou, Huimin Ma, Jiansheng Chen

• Test-Time Canonicalization by Foundation Models for Robust Perception

  Utkarsh Singhal, Ryan Feng, Stella X. Yu, Atul Prakash

• On the Efficiency of Training Robust Decision Trees

  Benedict Gerlach, Marie Anastacio, Holger H. Hoos

• MoCap-Impute: A Comprehensive Benchmark and Comparative Analysis of Imputation Methods for IMU-based Motion Capture Data

  Mahmoud Bekhit, Ahmad Salah, Ahmed Salim Alrawahi, Tarek Attia, Ahmed Ali, Esraa Eldesokey, Ahmed Fathalla

• Split Happens: Combating Advanced Threats with Split Learning and Function Secret Sharing

  Tanveer Khan, Mindaugas Budzys, Antonis Michalas

• The Man Behind the Sound: Demystifying Audio Private Attribute Profiling via Multimodal Large Language Model Agents

  Lixu Wang, Kaixiang Yao, Xinfeng Li, Dong Yang, Haoyang Li, Xiaofeng Wang, Wei Dong

• HASSLE: A Self-Supervised Learning Enhanced Hijacking Attack on Vertical Federated Learning

  Weiyang He, Chip-Hong Chang

• BURN: Backdoor Unlearning via Adversarial Boundary Analysis

  Yanghao Su, Jie Zhang, Yiming Li, Tianwei Zhang, Qing Guo, Weiming Zhang, Nenghai Yu, Nils Lukas, Wenbo Zhou

• AdvGrasp: Adversarial Attacks on Robotic Grasping from a Physical Perspective

  Xiaofei Wang, Mingliang Han, Tianyu Hao, Cegang Li, Yunbo Zhao, Keke Tang

• Game Theory Meets LLM and Agentic AI: Reimagining Cybersecurity for the Age of Intelligent Threats

  Quanyan Zhu

• HKGAI-V1: Towards Regional Sovereign Large Language Model for Hong Kong

  Sirui Han, Junqi Zhu, Ruiyuan Zhang, Yike Guo

• Distributionally Robust Optimization with Adversarial Data Contamination

  Shuyao Li, Ilias Diakonikolas, Jelena Diakonikolas

• Formal Verification of Variational Quantum Circuits

  Nicola Assolini, Luca Marzari, Isabella Mastroeni, Alessandra di Pierro

• 3S-Attack: Spatial, Spectral and Semantic Invisible Backdoor Attack Against DNN Models

  Jianyao Yin, Luca Arnaboldi, Honglong Chen, Pascal Berrang

• REAL-IoT: Characterizing GNN Intrusion Detection Robustness under Practical Adversarial Attack

  Zhonghao Zhan, Huichi Zhou, Hamed Haddadi

• ARMOR: Aligning Secure and Safe Large Language Models via Meticulous Reasoning

  Zhengyue Zhao, Yingzi Ma, Somesh Jha, Marco Pavone, Chaowei Xiao

• Optimal Debiased Inference on Privatized Data via Indirect Estimation and Parametric Bootstrap

  Zhanyu Wang, Arin Chang, Jordan Awan

• PRM-Free Security Alignment of Large Models via Red Teaming and Adversarial Training

  Pengfei Du

2025-07-13

• DRAGD: A Federated Unlearning Data Reconstruction Attack Based on Gradient Differences

  Bocheng Ju, Junchao Fan, Jiaqi Liu, Xiaolin Chang

• Conformal Prediction for Privacy-Preserving Machine Learning

  Alexander David Balinsky, Dominik Krzeminski, Alexander Balinsky

• Large Language Models Encode Semantics in Low-Dimensional Linear Subspaces

  Baturay Saglam, Paul Kassianik, Blaine Nelson, Sajana Weerawardhena, Yaron Singer, Amin Karbasi

• Efficient Private Inference Based on Helper-Assisted Malicious Security Dishonest Majority MPC

  Kaiwen Wang, Yuehan Dong, Junchao Fan, Xiaolin Chang

• LaSM: Layer-wise Scaling Mechanism for Defending Pop-up Attack on GUI Agents

  Zihe Yan, Zhuosheng Zhang

2025-07-12

• Hide-and-Shill: A Reinforcement Learning Framework for Market Manipulation Detection in Symphony-a Decentralized Multi-Agent System

  Ronghua Shi, Yiou Liu, Xinyu Ying, Yang Tan, Yuchun Feng, Lynn Ai, Bill Shi, Xuhui Wang, Zhuang Liu

• LLM-Stackelberg Games: Conjectural Reasoning Equilibria and Their Applications to Spearphishing

  Quanyan Zhu

• Adversarial Activation Patching: A Framework for Detecting and Mitigating Emergent Deception in Safety-Aligned Transformers

  Santhosh Kumar Ravindran

• ClaritySpeech: Dementia Obfuscation in Speech

  Dominika Woszczyk, Ranya Aloufi, Soteris Demetriou

• On the Fragility of Multimodal Perception to Temporal Misalignment in Autonomous Driving

  Md Hasan Shahriar, Md Mohaimin Al Barat, Harshavardhan Sundar, Naren Ramakrishnan, Y. Thomas Hou, Wenjing Lou

• Digital Twin-Assisted Explainable AI for Robust Beam Prediction in mmWave MIMO Systems

  Nasir Khan, Asmaa Abdallah, Abdulkadir Celik, Ahmed M. Eltawil, Sinem Coleri

2025-07-11

• Agent Safety Alignment via Reinforcement Learning

  Zeyang Sha, Hanling Tian, Zhuoer Xu, Shiwen Cui, Changhua Meng, Weiqiang Wang

• Lightweight Safety Guardrails via Synthetic Data and RL-guided Adversarial Training

  Aleksei Ilin, Gor Matevosyan, Xueying Ma, Vladimir Eremin, Suhaa Dada, Muqun Li, Riyaaz Shaik, Haluk Noyan Tokgozoglu

• Invariant-based Robust Weights Watermark for Large Language Models

  Qingxiao Guo, Xinjie Zhu, Yilong Ma, Hui Jin, Yunhao Wang, Weifeng Zhang, Xiaobing Guo

• One Token to Fool LLM-as-a-Judge

  Yulai Zhao, Haolin Liu, Dian Yu, S.Y. Kung, Haitao Mi, Dong Yu

• Towards Imperceptible JPEG Image Hiding: Multi-range Representations-driven Adversarial Stego Generation

  Junxue Yang, Xin Liao, Weixuan Tang, Jianhua Yang, Zheng Qin

• SPLASH! Sample-efficient Preference-based inverse reinforcement learning for Long-horizon Adversarial tasks from Suboptimal Hierarchical demonstrations

  Peter Crowley, Zachary Serlin, Tyler Paine, Makai Mann, Michael Benjamin, Calin Belta

• Admissibility of Stein Shrinkage for Batch Normalization in the Presence of Adversarial Attacks

  Sofia Ivolgina, P. Thomas Fletcher, Baba C. Vemuri

• Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security

  Pascal Debus, Maximilian Wendlinger, Kilian Tscharke, Daniel Herr, Cedric Brügmann, Daniel Ohl de Mello, Juris Ulmanis, Alexander Erhard, Arthur Schmidt, Fabian Petsch

• Detecting Deepfake Talking Heads from Facial Biometric Anomalies

  Justin D. Norman, Hany Farid

• VIP: Visual Information Protection through Adversarial Attacks on Vision-Language Models

  Hanene F. Z. Brachemi Meftah, Wassim Hamidouche, Sid Ahmed Fezza, Olivier Déforges

• Exploiting Leaderboards for Large-Scale Distribution of Malicious Models

  Anshuman Suri, Harsh Chaudhari, Yuefeng Peng, Ali Naseh, Amir Houmansadr, Alina Oprea

• When and Where do Data Poisons Attack Textual Inversion?

  Jeremy Styborski, Mingzhi Lyu, Jiayou Lu, Nupur Kapur, Adams Kong

• $\texttt{Droid}$: A Resource Suite for AI-Generated Code Detection

  Daniil Orel, Indraneil Paul, Iryna Gurevych, Preslav Nakov

2025-07-10

• May I have your Attention? Breaking Fine-Tuning based Prompt Injection Defenses using Architecture-Aware Attacks

  Nishit V. Pandya, Andrey Labunets, Sicun Gao, Earlence Fernandes

• OPC: One-Point-Contraction Unlearning Toward Deep Feature Forgetting

  Jaeheun Jung, Bosung Jung, Suhyun Bae, Donghun Lee

• Mitigating Watermark Stealing Attacks in Generative Models via Multi-Key Watermarking

  Toluwani Aremu, Noor Hussein, Munachiso Nwadike, Samuele Poppi, Jie Zhang, Karthik Nandakumar, Neil Gong, Nils Lukas

• Low Resource Reconstruction Attacks Through Benign Prompts

  Sol Yarkoni, Roi Livni

• Rethinking the Privacy of Text Embeddings: A Reproducibility Study of "Text Embeddings Reveal (Almost) As Much As Text"

  Dominykas Seputis, Yongkang Li, Karsten Langerak, Serghei Mihailov

• GuardVal: Dynamic Large Language Model Jailbreak Evaluation for Comprehensive Safety Testing

  Peiyan Zhang, Haibo Jin, Liying Kang, Haohan Wang

• Temporal Unlearnable Examples: Preventing Personal Video Data from Unauthorized Exploitation by Object Tracking

  Qiangqiang Wu, Yi Yu, Chenqi Kong, Ziquan Liu, Jia Wan, Haoliang Li, Alex C. Kot, Antoni B. Chan

• One Object, Multiple Lies: A Benchmark for Cross-task Adversarial Attack on Unified Vision-Language Models

  Jiale Zhao, Xinyang Jiang, Junyao Gao, Yuhao Xue, Cairong Zhao

• SCOOTER: A Human Evaluation Framework for Unrestricted Adversarial Examples

  Dren Fazlija, Monty-Maximilian Zühlke, Johanna Schrader, Arkadij Orlov, Clara Stein, Iyiola E. Olatunji, Daniel Kudenko

• TRIX- Trading Adversarial Fairness via Mixed Adversarial Training

  Tejaswini Medi, Steffen Jung, Margret Keuper

• Rainbow Artifacts from Electromagnetic Signal Injection Attacks on Image Sensors

  Youqian Zhang, Xinyu Ji, Zhihao Wang, Qinhong Jiang

• Defending Against Prompt Injection With a Few DefensiveTokens

  Sizhe Chen, Yizhu Wang, Nicholas Carlini, Chawin Sitawarin, David Wagner

• A Dynamic Stackelberg Game Framework for Agentic AI Defense Against LLM Jailbreaking

  Zhengye Han, Quanyan Zhu

• An Enhanced Privacy-preserving Federated Few-shot Learning Framework for Respiratory Disease Diagnosis

  Ming Wang, Zhaoyang Duan, Dong Xue, Fangzhou Liu, Zhongheng Zhang

• Quantum Properties Trojans (QuPTs) for Attacking Quantum Neural Networks

  Sounak Bhowmik, Travis S. Humble, Himanshu Thapliyal

• Simple Mechanistic Explanations for Out-Of-Context Reasoning

  Atticus Wang, Joshua Engels, Oliver Clive-Griffin

• Adaptive Diffusion Denoised Smoothing : Certified Robustness via Randomized Smoothing with Differentially Private Guided Denoising Diffusion

  Frederick Shpilevskiy, Saiyue Lyu, Krishnamurthy Dj Dvijotham, Mathias Lécuyer, Pierre-André Noël

• EvA: Evolutionary Attacks on Graphs

  Mohammad Sadegh Akhondzadeh, Soroush H. Zargarbashi, Jimin Cao, Aleksandar Bojchevski

• Beyond the Worst Case: Extending Differential Privacy Guarantees to Realistic Adversaries

  Marika Swanberg, Meenatchi Sundaram Muthu Selva Annamalai, Jamie Hayes, Borja Balle, Adam Smith

• Towards Privacy-Preserving and Personalized Smart Homes via Tailored Small Language Models

  Xinyu Huang, Leming Shen, Zijing Ma, Yuanqing Zheng

2025-07-09

• Exploiting Edge Features for Transferable Adversarial Attacks in Distributed Machine Learning

  Giulio Rossolini, Fabio Brau, Alessandro Biondi, Battista Biggio, Giorgio Buttazzo

• The Dark Side of LLMs: Agent-based Attacks for Complete Computer Takeover

  Matteo Lupinacci, Francesco Aurelio Pironti, Francesco Blefari, Francesco Romeo, Luigi Arena, Angelo Furfaro

• Image Can Bring Your Memory Back: A Novel Multi-Modal Guided Attack against Image Generation Model Unlearning

  Renyang Liu, Guanlin Li, Tianwei Zhang, See-Kiong Ng

• Concept Unlearning by Modeling Key Steps of Diffusion Process

  Chaoshuo Zhang, Chenhao Lin, Zhengyu Zhao, Le Yang, Qian Wang, Chao Shen

• An attention-aware GNN-based input defender against multi-turn jailbreak on LLMs

  Zixuan Huang, Kecheng Huang, Lihao Yin, Bowei He, Huiling Zhen, Mingxuan Yuan, Zili Shao

• Optimizing Model Splitting and Device Task Assignment for Deceptive Signal Assisted Private Multi-hop Split Learning

  Dongyu Wei, Xiaoren Xu, Yuchen Liu, H. Vincent Poor, Mingzhe Chen

• On the Impossibility of Separating Intelligence from Judgment: The Computational Intractability of Filtering for AI Alignment

  Sarah Ball, Greg Gluch, Shafi Goldwasser, Frauke Kreuter, Omer Reingold, Guy N. Rothblum

• Privacy-Utility-Fairness: A Balanced Approach to Vehicular-Traffic Management System

  Poushali Sengupta, Sabita Maharjan, frank Eliassen, Yan Zhang

• RAG Safety: Exploring Knowledge Poisoning Attacks to Retrieval-Augmented Generation

  Tianzhe Zhao, Jiaoyan Chen, Yanchi Ru, Haiping Zhu, Nan Hu, Jun Liu, Qika Lin

• VisualTrap: A Stealthy Backdoor Attack on GUI Agents via Visual Grounding Manipulation

  Ziang Ye, Yang Zhang, Wentao Shi, Xiaoyu You, Fuli Feng, Tat-Seng Chua

2025-07-08

• DATABench: Evaluating Dataset Auditing in Deep Learning from an Adversarial Perspective

  Shuo Shao, Yiming Li, Mengren Zheng, Zhiyang Hu, Yukun Chen, Boheng Li, Yu He, Junfeng Guo, Tianwei Zhang, Dacheng Tao, Zhan Qin

• How Not to Detect Prompt Injections with an LLM

  Sarthak Choudhary, Divyam Anshumaan, Nils Palumbo, Somesh Jha

• TuneShield: Mitigating Toxicity in Conversational AI while Fine-tuning on Untrusted Data

  Aravind Cheruvu, Shravya Kanchi, Sifat Muhammad Abdullah, Nicholas Kong, Daphne Yao, Murtuza Jadliwala, Bimal Viswanath

• CAVGAN: Unifying Jailbreak and Defense of LLMs via Generative Adversarial Attacks on their Internal Representations

  Xiaohu Li, Yunfeng Ning, Zepeng Bao, Mayi Xu, Jianhao Chen, Tieyun Qian

• RabakBench: Scaling Human Annotations to Construct Localized Multilingual Safety Benchmarks for Low-Resource Languages

  Gabriel Chua, Leanne Tan, Ziyu Ge, Roy Ka-Wei Lee

• The Landscape of Memorization in LLMs: Mechanisms, Measurement, and Mitigation

  Alexander Xiong, Xuandong Zhao, Aneesh Pappu, Dawn Song

• ScoreAdv: Score-based Targeted Generation of Natural Adversarial Examples via Diffusion Models

  Chihan Huang, Hao Tang

• On the Inherent Privacy of Zeroth Order Projected Gradient Descent

  Devansh Gupta, Meisam Razaviyayn, Vatsal Sharan

• Asynchronous Event Error-Minimizing Noise for Safeguarding Event Dataset

  Ruofei Wang, Peiqi Duan, Boxin Shi, Renjie Wan

• Circumventing Safety Alignment in Large Language Models Through Embedding Space Toxicity Attenuation

  Zhibo Zhang, Yuxi Li, Kailong Wang, Shuai Yuan, Ling Shi, Haoyu Wang

• The Safety Gap Toolkit: Evaluating Hidden Dangers of Open-Source Models

  Ann-Kathrin Dombrowski, Dillon Bowen, Adam Gleave, Chris Cundy

• Hedge Funds on a Swamp: Analyzing Patterns, Vulnerabilities, and Defense Measures in Blockchain Bridges

  Poupak Azad, Jiahua Xu, Yebo Feng, Preston Strowbridge, Cuneyt Akcora

• ScoreAdv: Score-based Targeted Generation of Natural Adversarial Examples via Diffusion Models

  Chihan Huang, Hao Tang

2025-07-07

• Trojan Horse Prompting: Jailbreaking Conversational Multimodal Models by Forging Assistant Message

  Wei Duan, Li Qian

• Losing Control: Data Poisoning Attack on Guided Diffusion via ControlNet

  Raz Lapid, Almog Dubin

• Beyond Training-time Poisoning: Component-level and Post-training Backdoors in Deep Reinforcement Learning

  Sanyam Vyas, Alberto Caron, Chris Hicks, Pete Burnap, Vasilios Mavroudis

• BackFed: An Efficient & Standardized Benchmark Suite for Backdoor Attacks in Federated Learning

  Thinh Dao, Dung Thuy Nguyen, Khoa D Doan, Kok-Seng Wong

• ICAS: Detecting Training Data from Autoregressive Image Generative Models

  Hongyao Yu, Yixiang Qiu, Yiheng Yang, Hao Fang, Tianqu Zhuang, Jiaxin Hong, Bin Chen, Hao Wu, Shu-Tao Xia

• The Hidden Threat in Plain Text: Attacking RAG Data Loaders

  Alberto Castagnaro, Umberto Salviati, Mauro Conti, Luca Pajola, Simeone Pizzi

• Response Attack: Exploiting Contextual Priming to Jailbreak Large Language Models

  Ziqi Miao, Lijun Li, Yuan Xiong, Zhenhua Liu, Pengyu Zhu, Jing Shao

• Robustifying 3D Perception through Least-Squares Multi-Agent Graphs Object Tracking

  Maria Damanaki, Ioulia Kapsali, Nikos Piperigkos, Alexandros Gkillas, Aris S. Lalos

• FedPall: Prototype-based Adversarial and Collaborative Learning for Federated Learning with Feature Drift

  Yong Zhang, Feng Liang, Guanghu Yuan, Min Yang, Chengming Li, Xiping Hu

• Cascade: Token-Sharded Private LLM Inference

  Rahul Thomas, Louai Zahran, Erica Choi, Akilesh Potti, Micah Goldblum, Arka Pal

• CLIP-Guided Backdoor Defense through Entropy-Based Poisoned Dataset Separation

  Binyan Xu, Fan Yang, Xilin Dai, Di Tang, Kehuan Zhang

• Red Teaming AI Red Teaming

  Subhabrata Majumdar, Brian Pendleton, Abhishek Gupta

• Controlling What You Share: Assessing Language Model Adherence to Privacy Preferences

  Guillem Ramírez, Alexandra Birch, Ivan Titov

• Adversarial Machine Learning Attacks on Financial Reporting via Maximum Violated Multi-Objective Attack

  Edward Raff, Karen Kukla, Michel Benaroch, Joseph Comprix

• Bit-Flip Fault Attack: Crushing Graph Neural Networks via Gradual Bit Search

  Sanaz Kazemi Abharian, Sai Manoj Pudukotai Dinakarrao

• CLIP-Guided Backdoor Defense through Entropy-Based Poisoned Dataset Separation

  Binyan Xu, Fan Yang, Xilin Dai, Di Tang, Kehuan Zhang

• When do World Models Successfully Learn Dynamical Systems?

  Edmund Ross, Claudia Drygala, Leonhard Schwarz, Samir Kaiser, Francesca di Mare, Tobias Breiten, Hanno Gottschalk

2025-07-06

• Towards integration of Privacy Enhancing Technologies in Explainable Artificial Intelligence

  Sonal Allana, Rozita Dara, Xiaodong Lin, Pulei Xiong

• Hijacking JARVIS: Benchmarking Mobile GUI Agents against Unprivileged Third Parties

  Guohong Liu, Jialei Ye, Jiacheng Liu, Yuanchun Li, Wei Liu, Pengzhi Gao, Jian Luan, Yunxin Liu

• Attention Slipping: A Mechanistic Understanding of Jailbreak Attacks and Defenses in LLMs

  Xiaomeng Hu, Pin-Yu Chen, Tsung-Yi Ho

• Model Inversion Attacks on Llama 3: Extracting PII from Large Language Models

  Sathesh P.Sivashanmugam

• DP-Fusion: Token-Level Differentially Private Inference for Large Language Models

  Rushil Thareja, Preslav Nakov, Praneeth Vepakomma, Nils Lukas

• Tail-aware Adversarial Attacks: A Distributional Approach to Efficient LLM Jailbreaking

  Tim Beyer, Yan Scholten, Stephan Günnemann, Leo Schwinn

• Mass-Scale Analysis of In-the-Wild Conversations Reveals Complexity Bounds on LLM Jailbreaking

  Aldan Creo, Raul Castro Fernandez, Manuel Cebrian

2025-07-05

• Enhancing Robustness of LLM-Driven Multi-Agent Systems through Randomized Smoothing

  Jinwei Hu, Yi Dong, Zhengtao Ding, Xiaowei Huang

• Evaluating Adversarial Protections for Diffusion Personalization: A Comprehensive Study

  Kai Ye, Tianyi Chen, Zhen Wang

• Hierarchical Testing with Rabbit Optimization for Industrial Cyber-Physical Systems

  Jinwei Hu, Zezhi Tang, Xin Jin, Benyuan Zhang, Yi Dong, Xiaowei Huang

• Addressing The Devastating Effects Of Single-Task Data Poisoning In Exemplar-Free Continual Learning

  Stanisław Pawlak, Bartłomiej Twardowski, Tomasz Trzciński, Joost van de Weijer

• When Data-Free Knowledge Distillation Meets Non-Transferable Teacher: Escaping Out-of-Distribution Trap is All You Need

  Ziming Hong, Runnan Chen, Zengmao Wang, Bo Han, Bo Du, Tongliang Liu

2025-07-04

• On Jailbreaking Quantized Language Models Through Fault Injection Attacks

  Noureldin Zahran, Ahmad Tahmasivand, Ihsen Alouani, Khaled Khasawneh, Mohammed E. Fouda

• De-Fake: Style based Anomaly Deepfake Detection

  Sudev Kumar Padhi, Harshit Kumar, Umesh Kashyap, Sk. Subidh Ali

• Evaluating the Evaluators: Trust in Adversarial Robustness Tests

  Antonio Emanuele Cinà, Maura Pintor, Luca Demetrio, Ambra Demontis, Battista Biggio, Fabio Roli

• Beyond Weaponization: NLP Security for Medium and Lower-Resourced Languages in Their Own Right

  Heather Lent

• Rectifying Adversarial Sample with Low Entropy Prior for Test-Time Defense

  Lina Ma, Xiaowei Fu, Fuxiang Huang, Xinbo Gao, Lei Zhang

• SecureT2I: No More Unauthorized Manipulation on AI Generated Images from Prompts

  Xiaodong Wu, Xiangman Li, Qi Li, Jianbing Ni, Rongxing Lu

• Action Robust Reinforcement Learning via Optimal Adversary Aware Policy Optimization

  Buqing Nie, Yangqing Fu, Jingtian Ji, Yue Gao

• Blackbox Dataset Inference for LLM

  Ruikai Zhou, Kang Yang, Xun Chen, Wendy Hui Wang, Guanhong Tao, Jun Xu

• When There Is No Decoder: Removing Watermarks from Stable Diffusion Models in a No-box Setting

  Xiaodong Wu, Tianyi Tang, Xiangman Li, Jianbing Ni, Yong Yu

2025-07-03

• De-AntiFake: Rethinking the Protective Perturbations Against Voice Cloning Attacks

  Wei Fan, Kejiang Chen, Chang Liu, Weiming Zhang, Nenghai Yu

• Meta SecAlign: A Secure Foundation LLM Against Prompt Injection Attacks

  Sizhe Chen, Arman Zharmagambetov, David Wagner, Chuan Guo

• Is Reasoning All You Need? Probing Bias in the Age of Reasoning Language Models

  Riccardo Cantini, Nicola Gabriele, Alessio Orsino, Domenico Talia

• LLM Hypnosis: Exploiting User Feedback for Unauthorized Knowledge Injection to All Users

  Almog Hilel, Idan Shenfeld, Leshem Choshen, Jacob Andreas

• Visual Contextual Attack: Jailbreaking MLLMs with Image-Driven Context Injection

  Ziqi Miao, Yi Ding, Lijun Li, Jing Shao

• Fluid Democracy in Federated Data Aggregation

  Aditya Vema Reddy Kesari, Krishna Reddy Kesari

• PII Jailbreaking in LLMs via Activation Steering Reveals Personal Information Leakage

  Krishna Kanth Nakka, Xue Jiang, Xuebing Zhou

• On the Mathematical Impossibility of Safe Universal Approximators

  Jasper Yao

• Adversarial Manipulation of Reasoning Models using Internal Representations

  Kureha Yamaguchi, Benjamin Etheridge, Andy Arditi

• Adopting a human developmental visual diet yields robust, shape-based AI vision

  Zejin Lu, Sushrut Thorat, Radoslaw M Cichy, Tim C Kietzmann

• Rethinking Data Protection in the (Generative) Artificial Intelligence Era

  Yiming Li, Shuo Shao, Yu He, Junfeng Guo, Tianwei Zhang, Zhan Qin, Pin-Yu Chen, Michael Backes, Philip Torr, Dacheng Tao, Kui Ren

• CyberRAG: An Agentic RAG cyber attack classification and reporting tool

  Francesco Blefari, Cristian Cosentino, Francesco Aurelio Pironti, Angelo Furfaro, Fabrizio Marozzo

2025-07-02

• ICLShield: Exploring and Mitigating In-Context Learning Backdoor Attacks

  Zhiyao Ren, Siyuan Liang, Aishan Liu, Dacheng Tao

• Survivability of Backdoor Attacks on Unconstrained Face Recognition Systems

  Quentin Le Roux, Yannick Teglia, Teddy Furon, Philippe Loubet-Moundi, Eric Bourbao

• GPT, But Backwards: Exactly Inverting Language Model Outputs

  Adrians Skapars, Edoardo Manino, Youcheng Sun, Lucas C. Cordeiro

• Tuning without Peeking: Provable Privacy and Generalization Bounds for LLM Post-Training

  Ismail Labiad, Mathurin Videau, Matthieu Kowalski, Marc Schoenauer, Alessandro Leite, Julia Kempe, Olivier Teytaud

• Are Vision Transformer Representations Semantically Meaningful? A Case Study in Medical Imaging

  Montasir Shams, Chashi Mahiul Islam, Shaeke Salman, Phat Tran, Xiuwen Liu

• 3D Gaussian Splatting Driven Multi-View Robust Physical Adversarial Camouflage Generation

  Tianrui Lou, Xiaojun Jia, Siyuan Liang, Jiawei Liang, Ming Zhang, Yanjun Xiao, Xiaochun Cao

• Gradient Short-Circuit: Efficient Out-of-Distribution Detection via Feature Intervention

  Jiawei Gu, Ziyue Qiao, Zechao Li

• Boosting Adversarial Transferability Against Defenses via Multi-Scale Transformation

  Zihong Guo, Chen Wan, Yayin Zheng, Hailing Kuang, Xiaohai Lu

• SafePTR: Token-Level Jailbreak Defense in Multimodal LLMs via Prune-then-Restore Mechanism

  Beitao Chen, Xinyu Lyu, Lianli Gao, Jingkuan Song, Heng Tao Shen

• Graph Representation-based Model Poisoning on Federated LLMs in CyberEdge Networks

  Hanlin Cai, Haofan Dong, Houtianfu Wang, Kai Li, Ozgur B. Akan

• Towards Better Attribute Inference Vulnerability Measures

  Paul Francis, David Wagner

• Subversion via Focal Points: Investigating Collusion in LLM Monitoring

  Olli Järviniemi

• Following the Clues: Experiments on Person Re-ID using Cross-Modal Intelligence

  Robert Aufschläger, Youssef Shoeb, Azarm Nowzad, Michael Heigl, Fabian Bally, Martin Schramm

2025-07-01

• PNAct: Crafting Backdoor Attacks in Safe Reinforcement Learning

  Weiran Guo, Guanjun Liu, Ziyuan Zhou, Ling Wang

• BadViM: Backdoor Attack against Vision Mamba

  Yinghao Wu, Liyan Zhang

• CAVALRY-V: A Large-Scale Generator Framework for Adversarial Attacks on Video MLLMs

  Jiaming Zhang, Rui Hu, Qing Guo, Wei Yang Bryan Lim

• Reasoning as an Adaptive Defense for Safety

  Taeyoun Kim, Fahim Tajwar, Aditi Raghunathan, Aviral Kumar

• Cage-Based Deformation for Transferable and Undefendable Point Cloud Attack

  Keke Tang, Ziyong Du, Weilong Peng, Xiaofei Wang, Peican Zhu, Ligang Liu, Zhihong Tian

• Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning

  Wenjin Mo, Zhiyuan Li, Minghong Fang, Mingwei Fang

• `For Argument's Sake, Show Me How to Harm Myself!': Jailbreaking LLMs in Suicide and Self-Harm Contexts

  Annika M Schoene, Cansu Canca

• PAE MobiLLM: Privacy-Aware and Efficient LLM Fine-Tuning on the Mobile Device via Additive Side-Tuning

  Xingke Yang, Liang Li, Zhiyi Wan, Sicong Li, Xiaoqi Qi, Jiang Liu, Tomoaki Ohtsuki, Xin Fu, Miao Pan

• Geological Everything Model 3D: A Physics-informed Promptable Foundation Model for Unified and Zero-Shot Subsurface Understanding

  Yimin Dou, Xinming Wu, Nathan L Bangs, Harpreet Singh Sethi, Jintao Li, Hang Gao, Zhixiang Guo

2025-06-30

• Evaluating Multi-Agent Defences Against Jailbreaking Attacks on Large Language Models

  Maria Carolina Cornelia Wit, Jun Pang

• PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection

  Xiao Li, Yiming Zhu, Yifan Huang, Wei Zhang, Yingzhe He, Jie Shi, Xiaolin Hu

• SoK: Semantic Privacy in Large Language Models

  Baihe Ma, Yanna Jiang, Xu Wang, Guangshen Yu, Qin Wang, Caijun Sun, Chen Li, Xuelei Qi, Ying He, Wei Ni, Ren Ping Liu

• AutoEvoEval: An Automated Framework for Evolving Close-Ended LLM Evaluation Data

  JiaRu Wu, Mingwei Liu

• STACK: Adversarial Attacks on LLM Safeguard Pipelines

  Ian R. McKenzie, Oskar J. Hollinsworth, Tom Tseng, Xander Davies, Stephen Casper, Aaron D. Tucker, Robert Kirk, Adam Gleave

• SQUASH: A SWAP-Based Quantum Attack to Sabotage Hybrid Quantum Neural Networks

  Rahul Kumar, Wenqi Wei, Ying Mao, Junaid Farooq, Ying Wang, Juntao Chen

• Robustness of Misinformation Classification Systems to Adversarial Examples Through BeamAttack

  Arnisa Fazla, Lucas Krauter, David Guzman Piedrahita, Andrianos Michail

• AdFair-CLIP: Adversarial Fair Contrastive Language-Image Pre-training for Chest X-rays

  Chenlang Yi, Zizhan Xiong, Qi Qi, Xiyuan Wei, Girish Bathla, Ching-Long Lin, Bobak Jack Mortazavi, Tianbao Yang

• A Unified Framework for Stealthy Adversarial Generation via Latent Optimization and Transferability Enhancement

  Gaozheng Pei, Ke Ma, Dongpeng Zhang, Chengzhi Sun, Qianqian Xu, Qingming Huang

• A Scalable Approach for Safe and Robust Learning via Lipschitz-Constrained Networks

  Zain ul Abdeen, Vassilis Kekatos, Ming Jin

• Consensus-based optimization for closed-box adversarial attacks and a connection to evolution strategies

  Tim Roith, Leon Bungert, Philipp Wacker

• Privacy-Preserving Federated Learning Scheme with Mitigating Model Poisoning Attacks: Vulnerabilities and Countermeasures

  Jiahui Wu, Fucai Luo, Tiecheng Sun, Haiyan Wang, Weizhe Zhang

• Poisoning Attacks to Local Differential Privacy for Ranking Estimation

  Pei Zhan, Peng Tang, Yangzhuo Li, Puwen Wei, Shanqing Guo

• Impact of Fine-Tuning Methods on Memorization in Large Language Models

  Jie Hou, Chuxiong Wu, Lannan Luo, Qiang Zeng

• PPFL-RDSN: Privacy-Preserving Federated Learning-based Residual Dense Spatial Networks for Encrypted Lossy Image Reconstruction

  Peilin He, James Joshi

• Concept-based Adversarial Attack: a Probabilistic Perspective

  Andi Zhang, Xuan Ding, Steven McDonagh, Samuel Kaski

2025-06-29

• From Prompt Injections to Protocol Exploits: Threats in LLM-Powered AI Agents Workflows

  Mohamed Amine Ferrag, Norbert Tihanyi, Djallel Hamouda, Leandros Maglaras, Merouane Debbah

• Securing AI Systems: A Guide to Known Attacks and Impacts

  Naoto Kiribuchi, Kengo Zenitani, Takayuki Semitsu

• TuCo: Measuring the Contribution of Fine-Tuning to Individual Responses of LLMs

  Felipe Nuti, Tim Franzmeyer, João Henriques

• Trident: Detecting Face Forgeries with Adversarial Triplet Learning

  Mustafa Hakan Kara, Aysegul Dundar, Uğur Güdükbay

• Forget-MI: Machine Unlearning for Forgetting Multimodal Information in Healthcare Settings

  Shahad Hardan, Darya Taratynova, Abdelmajid Essofi, Karthik Nandakumar, Mohammad Yaqub

• A Practical and Secure Byzantine Robust Aggregator

  De Zhang Lee, Aashish Kolluri, Prateek Saxena, Ee-Chien Chang

• A Representation Engineering Perspective on the Effectiveness of Multi-Turn Jailbreaks

  Blake Bullwinkel, Mark Russinovich, Ahmed Salem, Santiago Zanella-Beguelin, Daniel Jones, Giorgio Severi, Eugenia Kim, Keegan Hines, Amanda Minnich, Yonatan Zunger, Ram Shankar Siva Kumar

• Mirror Descent Policy Optimisation for Robust Constrained Markov Decision Processes

  David Bossens, Atsushi Nitanda

• A Practical and Secure Byzantine Robust Aggregator

  De Zhang Lee, Aashish Kolluri, Prateek Saxena, Ee-Chien Chang

2025-06-28

• Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks

  Anmin Fu, Fanyu Meng, Huaibing Peng, Hua Ma, Zhi Zhang, Yifeng Zheng, Willy Susilo, Yansong Gao

• Smaller = Weaker? Benchmarking Robustness of Quantized LLMs in Code Generation

  Sen Fang, Weiyuan Ding, Antonio Mastropaolo, Bowen Xu

• PhonemeFake: Redefining Deepfake Realism with Language-Driven Segmental Manipulation and Adaptive Bilevel Detection

  Oguzhan Baser, Ahmet Ege Tanriverdi, Sriram Vishwanath, Sandeep P. Chinchali

• WavShape: Information-Theoretic Speech Representation Learning for Fair and Privacy-Aware Audio Processing

  Oguzhan Baser, Ahmet Ege Tanriverdi, Kaan Kale, Sandeep P. Chinchali, Sriram Vishwanath

• Concept Pinpoint Eraser for Text-to-image Diffusion Models via Residual Attention Gate

  Byung Hyun Lee, Sungjin Lim, Seunggyu Lee, Dong Un Kang, Se Young Chun

• Peccavi: Visual Paraphrase Attack Safe and Distortion Free Image Watermarking Technique for AI-Generated Images

  Shreyas Dixit, Ashhar Aziz, Shashwat Bajpai, Vasu Sharma, Aman Chadha, Vinija Jain, Amitava Das

• Revisiting CroPA: A Reproducibility Study and Enhancements for Cross-Prompt Adversarial Transferability in Vision-Language Models

  Atharv Mittal, Agam Pandey, Amritanshu Tiwari, Sukrit Jindal, Swadesh Swain

• Fragile, Robust, and Antifragile: A Perspective from Parameter Responses in Reinforcement Learning Under Stress

  Zain ul Abdeen, Ming Jin

• FreqDGT: Frequency-Adaptive Dynamic Graph Networks with Transformer for Cross-subject EEG Emotion Recognition

  Yueyang Li, Shengyu Gong, Weiming Zeng, Nizhuan Wang, Wai Ting Siok

2025-06-27

• On the Feasibility of Poisoning Text-to-Image AI Models via Adversarial Mislabeling

  Stanley Wu, Ronik Bhaskar, Anna Yoo Jeong Ha, Shawn Shan, Haitao Zheng, Ben Y. Zhao

• Advancing Jailbreak Strategies: A Hybrid Approach to Exploiting LLM Vulnerabilities and Bypassing Modern Defenses

  Mohamed Ahmed, Mohamed Abdelmouty, Mingyu Kim, Gunvanth Kandula, Alex Park, James C. Davis

• ARMOR: Robust Reinforcement Learning-based Control for UAVs under Physical Attacks

  Pritam Dash, Ethan Chan, Nathan P. Lawrence, Karthik Pattabiraman

• Adversarial Threats in Quantum Machine Learning: A Survey of Attacks and Defenses

  Archisman Ghosh, Satwik Kundu, Swaroop Ghosh

• VERA: Variational Inference Framework for Jailbreaking Large Language Models

  Anamika Lochab, Lu Yan, Patrick Pynadath, Xiangyu Zhang, Ruqi Zhang

• Are Fast Methods Stable in Adversarially Robust Transfer Learning?

  Joshua C. Zhao, Saurabh Bagchi

• MetaCipher: A General and Extensible Reinforcement Learning Framework for Obfuscation-Based Jailbreak Attacks on Black-Box LLMs

  Boyuan Chen, Minghao Shao, Abdul Basit, Siddharth Garg, Muhammad Shafique

2025-06-26

• Robust Policy Switching for Antifragile Reinforcement Learning for UAV Deconfliction in Adversarial Environments

  Deepak Kumar Panda, Weisi Guo

• Curriculum-Guided Antifragile Reinforcement Learning for Secure UAV Deconfliction under Observation-Space Attacks

  Deepak Kumar Panda, Adolfo Perrusquia, Weisi Guo

• TITAN: Query-Token based Domain Adaptive Adversarial Learning

  Tajamul Ashraf, Janibul Bashir

• Boosting Generative Adversarial Transferability with Self-supervised Vision Transformer Features

  Shangbo Wu, Yu-an Tan, Ruinan Ma, Wencong Ma, Dehua Zhu, Yuanzhang Li

• GANet-Seg: Adversarial Learning for Brain Tumor Segmentation with Hybrid Generative Models

  Qifei Cui, Xinyu Lu

• Generative Adversarial Evasion and Out-of-Distribution Detection for UAV Cyber-Attacks

  Deepak Kumar Panda, Weisi Guo

• CodeGuard: A Generalized and Stealthy Backdoor Watermarking for Generative Code Models

  Haoxuan Li, Jiale Zhang, Xiaobing Sun, Xiapu Luo

• SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning

  Chengcheng Zhu, Ye Li, Bosen Rao, Jiale Zhang, Yunlong Mao, Sheng Zhong

• PrivacyGo: Privacy-Preserving Ad Measurement with Multidimensional Intersection

  Jian Du, Haohao Qian, Shikun Zhang, Wen-jie Lu, Donghang Lu, Yongchuan Niu, Bo Jiang, Yongjun Zhao, Qiang Yan

• AgentStealth: Reinforcing Large Language Model for Anonymizing User-generated Text

  Chenyang Shao, Tianxing Li, Chenhao Pu, Fengli Xu, Yong Li

• A Survey on Model Extraction Attacks and Defenses for Large Language Models

  Kaixiang Zhao, Lincan Li, Kaize Ding, Neil Zhenqiang Gong, Yue Zhao, Yushun Dong

• Balancing Privacy and Utility in Correlated Data: A Study of Bayesian Differential Privacy

  Martin Lange, Patricia Guerra-Balboa, Javier Parra-Arnau, Thorsten Strufe

• Boosting Generative Adversarial Transferability with Self-supervised Vision Transformer Features

  Shangbo Wu, Yu-an Tan, Ruinan Ma, Wencong Ma, Dehua Zhu, Yuanzhang Li

2025-06-25

• Client Clustering Meets Knowledge Sharing: Enhancing Privacy and Robustness in Personalized Peer-to-Peer Learning

  Mohammad Mahdi Maheri, Denys Herasymuk, Hamed Haddadi

• Pay Less Attention to Deceptive Artifacts: Robust Detection of Compressed Deepfakes on Online Social Networks

  Manyi Li, Renshuai Tao, Yufan Liu, Chuangchuang Tan, Haotong Qin, Bing Li, Yunchao Wei, Yao Zhao

• Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS

  Sabrine Ennaji, Elhadj Benkhelifa, Luigi V. Mancini

• InvZW: Invariant Feature Learning via Noise-Adversarial Training for Robust Image Zero-Watermarking

  Abdullah All Tanvir, Xin Zhong

• AdvMIM: Adversarial Masked Image Modeling for Semi-Supervised Medical Image Segmentation

  Lei Zhu, Jun Zhou, Rick Siow Mong Goh, Yong Liu

• Hear No Evil: Detecting Gradient Leakage by Malicious Servers in Federated Learning

  Fei Wang, Baochun Li

• Autonomous Cyber Resilience via a Co-Evolutionary Arms Race within a Fortified Digital Twin Sandbox

  Malikussaid, Sutiyo

• Don't Hash Me Like That: Exposing and Mitigating Hash-Induced Unfairness in Local Differential Privacy

  Berkay Kemal Balioglu, Alireza Khodaie, Mehmet Emre Gursoy

• Poster: Enhancing GNN Robustness for Network Intrusion Detection via Agent-based Analysis

  Zhonghao Zhan, Huichi Zhou, Hamed Haddadi

• Leaner Training, Lower Leakage: Revisiting Memorization in LLM Fine-Tuning with LoRA

  Fei Wang, Baochun Li

• Universal and Efficient Detection of Adversarial Data through Nonuniform Impact on Network Layers

  Furkan Mumcu, Yasin Yilmaz

• On the Necessity of Output Distribution Reweighting for Effective Class Unlearning

  Yian Wang, Ali Ebrahimpour-Boroojeny, Hari Sundaram

• SABRE-FL: Selective and Accurate Backdoor Rejection for Federated Prompt Learning

  Momin Ahmad Khan, Yasra Chandio, Fatima Muhammad Anwar

• VSF-Med:A Vulnerability Scoring Framework for Medical Vision-Language Models

  Binesh Sadanandan, Vahid Behzadan

• RedCoder: Automated Multi-Turn Red Teaming for Code LLMs

  Wenjie Jacky Mo, Qin Liu, Xiaofei Wen, Dongwon Jung, Hadi Askari, Wenxuan Zhou, Zhe Zhao, Muhao Chen

• On Convolutions, Intrinsic Dimension, and Diffusion Models

  Kin Kwan Leung, Rasa Hosseinzadeh, Gabriel Loaiza-Ganem

2025-06-24

• Automated Detection of Pre-training Text in Black-box LLMs

  Ruihan Hu, Yu-Ming Shang, Jiankun Peng, Wei Luo, Yazhe Wang, Xi Zhang

• Recalling The Forgotten Class Memberships: Unlearned Models Can Be Noisy Labelers to Leak Privacy

  Zhihao Sui, Liang Hu, Jian Cao, Dora D. Liu, Usman Naseem, Zhongyuan Lai, Qi Zhang

• PrivacyXray: Detecting Privacy Breaches in LLMs through Semantic Consistency and Probability Certainty

  Jinwen He, Yiyang Lu, Zijin Lin, Kai Chen, Yue Zhao

• MSR-Align: Policy-Grounded Multimodal Alignment for Safety-Aware Reasoning in Vision-Language Models

  Yinan Xia, Yilei Jiang, Yingshui Tan, Xiaoyong Zhu, Xiangyu Yue, Bo Zheng

• Self-Paced Collaborative and Adversarial Network for Unsupervised Domain Adaptation

  Weichen Zhang, Dong Xu, Wanli Ouyang, Wen Li

• Assessing Risk of Stealing Proprietary Models for Medical Imaging Tasks

  Ankita Raj, Harsh Swaika, Deepankar Varma, Chetan Arora

• Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks

  Ankita Raj, Ambar Pal, Chetan Arora

• SoK: Can Synthetic Images Replace Real Data? A Survey of Utility and Privacy of Synthetic Image Generation

  Yunsung Chung, Yunbei Zhang, Nassir Marrouche, Jihun Hamm

• Adversarial Attacks on Deep Learning-Based False Data Injection Detection in Differential Relays

  Ahmad Mohammad Saber, Aditi Maheshwari, Amr Youssef, Deepa Kundur

• Network Structures as an Attack Surface: Topology-Based Privacy Leakage in Federated Learning

  Murtaza Rangwala, Richard O. Sinnott, Rajkumar Buyya

• KnowML: Improving Generalization of ML-NIDS with Attack Knowledge Graphs

  Xin Fan Guo, Albert Merono Penuela, Sergio Maffeis, Fabio Pierazzi

• Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models

  Wanli Peng, Xin Chen, Hang Fu, XinYu He, Xue Yiming, Juan Wen

• RepuNet: A Reputation System for Mitigating Malicious Clients in DFL

  Isaac Marroqui Penalva, Enrique Tomás Martínez Beltrán, Manuel Gil Pérez, Alberto Huertas Celdrán

• Diffusion-based Task-oriented Semantic Communications with Model Inversion Attack

  Xuesong Wang, Mo Li, Xingyan Shi, Zhaoqian Liu, Shenghao Yang

• Holmes: Towards Effective and Harmless Model Ownership Verification to Personalized Large Vision Models via Decoupling Common Features

  Linghui Zhu, Yiming Li, Haiqin Weng, Yan Liu, Tianwei Zhang, Shu-Tao Xia, Zhi Wang

• Robust Behavior Cloning Via Global Lipschitz Regularization

  Shili Wu, Yizhao Jin, Puhua Niu, Aniruddha Datta, Sean B. Andersson

• Model Guidance via Robust Feature Attribution

  Mihnea Ghitu, Vihari Piratla, Matthew Wicker

• Orthogonal Soft Pruning for Efficient Class Unlearning

  Qinghui Gong, Xue Yang, Xiaohu Tang

2025-06-23

• Semantic Structure-Aware Generative Attacks for Enhanced Adversarial Transferability

  Jongoh Jeong, Hunmin Yang, Jaeseok Jeong, Kuk-Jin Yoon

• Sharpening the Spear: Adaptive Expert-Guided Adversarial Attack Against DRL-based Autonomous Driving Policies

  Junchao Fan, Xuyang Lei, Xiaolin Chang

• Security Assessment of DeepSeek and GPT Series Models against Jailbreak Attacks

  Xiaodong Wu, Xiangman Li, Jianbing Ni

• SpaNN: Detecting Multiple Adversarial Patches on CNNs by Spanning Saliency Thresholds

  Mauricio Byrd Victorica, György Dán, Henrik Sandberg

• A Multi-view Divergence-Convergence Feature Augmentation Framework for Drug-related Microbes Prediction

  Xin An, Ruijie Li, Qiao Ning, Shikai Guo, Hui Li, Qian Ma

• Multi-Agent Online Control with Adversarial Disturbances

  Anas Barakat, John Lazarsfeld, Georgios Piliouras, Antonios Varvitsiotis

• DUMB and DUMBer: Is Adversarial Training Worth It in the Real World?

  Francesco Marchiori, Marco Alecci, Luca Pajola, Mauro Conti

• Amplifying Machine Learning Attacks Through Strategic Compositions

  Yugeng Liu, Zheng Li, Hai Huang, Michael Backes, Yang Zhang

• Enhancing Security in LLM Applications: A Performance Evaluation of Early Detection Systems

  Valerii Gakh, Hayretdin Bahsi

• NIC-RobustBench: A Comprehensive Open-Source Toolkit for Neural Image Compression and Robustness Analysis

  Georgii Bychkov, Khaled Abud, Egor Kovalev, Alexander Gushchin, Dmitriy Vatolin, Anastasia Antsiferova

• Towards Provable (In)Secure Model Weight Release Schemes

  Xing Yang, Bingtao Wang, Yuhao Wang, Zimo Ji, Terry Jingchen Zhang, Wenyuan Jiang

2025-06-22

• Multi-turn Jailbreaking via Global Refinement and Active Fabrication

  Hua Tang, Lingyong Yan, Yukun Zhao, Shuaiqiang Wang, Jizhou Huang, Dawei Yin

• Federated Learning-Based Data Collaboration Method for Enhancing Edge Cloud AI System Security Using Large Language Models

  Huaiying Luo, Cheng Ji

• $ϕ^{\infty}$: Clause Purification, Embedding Realignment, and the Total Suppression of the Em Dash in Autoregressive Language Models

  Bugra Kilictas, Faruk Alpay

• Targeted False Positive Synthesis via Detector-guided Adversarial Diffusion Attacker for Robust Polyp Detection

  Quan Zhou, Gan Luo, Qiang Hu, Qingyong Zhang, Jinhua Zhang, Yinjiao Tian, Qiang Li, Zhiwei Wang

• DRO-Augment Framework: Robustness by Synergizing Wasserstein Distributionally Robust Optimization and Data Augmentation

  Jiaming Hu, Debarghya Mukherjee, Ioannis Ch. Paschalidis

• Generalization under Byzantine & Poisoning Attacks: Tight Stability Bounds in Robust Distributed Learning

  Thomas Boudou, Batiste Le Bars, Nirupam Gupta, Aurélien Bellet

• An Attack Method for Medical Insurance Claim Fraud Detection based on Generative Adversarial Network

  Yining Pang, Chenghan Li

2025-06-21

• Exploiting Efficiency Vulnerabilities in Dynamic Deep Learning Systems

  Ravishka Rathnasuriya, Wei Yang

• Optimization-Free Patch Attack on Stereo Depth Estimation

  Hangcheng Liu, Xu Kuang, Xingshuo Han, Xingwan Wu, Haoran Ou, Shangwei Guo, Xingyi Huang, Tao Xiang, Tianwei Zhang

• CEGA: A Cost-Effective Approach for Graph-Based Model Extraction and Acquisition

  Zebin Wang, Menghan Lin, Bolin Shen, Ken Anderson, Molei Liu, Tianxi Cai, Yushun Dong

• AdRo-FL: Informed and Secure Client Selection for Federated Learning in the Presence of Adversarial Aggregator

  Md. Kamrul Hossain, Walid Aljoby, Anis Elgabli, Ahmed M. Abdelmoniem, Khaled A. Harras

• LastingBench: Defend Benchmarks Against Knowledge Leakage

  Yixiong Fang, Tianran Sun, Yuling Shi, Min Wang, Xiaodong Gu

2025-06-20

• TriCon-SF: A Triple-Shuffle and Contribution-Aware Serial Federated Learning Framework for Heterogeneous Healthcare Data

  Yuping Yan, Yizhi Wang, Yuanshuai Li, Yaochu Jin

• Off-Policy Actor-Critic for Adversarial Observation Robustness: Virtual Alternative Training via Symmetric Policy Evaluation

  Kosuke Nakanishi, Akihiro Kubo, Yuji Yasui, Shin Ishii

• MIST: Jailbreaking Black-box Large Language Models via Iterative Semantic Tuning

  Muyang Zheng, Yuanzhi Yao, Changting Lin, Rui Wang, Meng Han

• Robust Training with Data Augmentation for Medical Imaging Classification

  Josué Martínez-Martínez, Olivia Brown, Mostafa Karami, Sheida Nabavi

• Cross-Modal Obfuscation for Jailbreak Attacks on Large Vision-Language Models

  Lei Jiang, Zixun Zhang, Zizhou Wang, Xiaobing Sun, Zhen Li, Liangli Zhen, Xiaohua Xu

• Better Language Model Inversion by Compactly Representing Next-Token Distributions

  Murtaza Nazir, Matthew Finlayson, John X. Morris, Xiang Ren, Swabha Swayamdipta

• DepthVanish: Optimizing Adversarial Interval Structures for Stereo-Depth-Invisible Patches

  Yun Xing, Yue Cao, Nhat Chung, Jie Zhang, Ivor Tsang, Ming-Ming Cheng, Yang Liu, Lei Ma, Qing Guo

• Stretching Beyond the Obvious: A Gradient-Free Framework to Unveil the Hidden Landscape of Visual Invariance

  Lorenzo Tausani, Paolo Muratore, Morgan B. Talbot, Giacomo Amerio, Gabriel Kreiman, Davide Zoccolan

• Navigating the Deep: Signature Extraction on Deep Neural Networks

  Haolin Liu, Adrien Siproudhis, Samuel Experton, Peter Lorenz, Christina Boura, Thomas Peyrin

• Analyzing PDFs like Binaries: Adversarially Robust PDF Malware Analysis via Intermediate Representation and Language Model

  Side Liu, Jiang Ming, Guodong Zhou, Xinyi Liu, Jianming Fu, Guojun Peng

• CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks

  Yinghao Wu, Liyan Zhang

• Differentiation-Based Extraction of Proprietary Data from Fine-Tuned LLMs

  Zongjie Li, Daoyuan Wu, Shuai Wang, Zhendong Su

• SAFEx: Analyzing Vulnerabilities of MoE-Based LLMs via Stable Safety-critical Expert Identification

  Zhenglin Lai, Mengyao Liao, Dong Xu, Zebin Zhao, Zhihang Yuan, Chao Fan, Jianqiang Li, Bingzhe Wu

• A workflow for generating synthetic LiDAR datasets in simulation environments

  Abhishek Phadke, Shakib Mahmud Dipto, Pratip Rana

• SAFEx: Analyzing Vulnerabilities of MoE-Based LLMs via Stable Safety-critical Expert Identification

  Zhenglin Lai, Mengyao Liao, Bingzhe Wu, Dong Xu, Zebin Zhao, Zhihang Yuan, Chao Fan, Jianqiang Li

2025-06-19

• Probing the Robustness of Large Language Models Safety to Latent Perturbations

  Tianle Gu, Kexin Huang, Zongqi Wang, Yixu Wang, Jie Li, Yuanqi Yao, Yang Yao, Yujiu Yang, Yan Teng, Yingchun Wang

• Robustness Evaluation of OCR-based Visual Document Understanding under Multi-Modal Adversarial Attacks

  Dong Nguyen Tien, Dung D. Le

• Spotting tell-tale visual artifacts in face swapping videos: strengths and pitfalls of CNN detectors

  Riccardo Ziglio, Cecilia Pasquini, Silvio Ranise

• Latent Noise Injection for Private and Statistically Aligned Synthetic Data Generation

  Rex Shen, Lu Tian

• PL-Guard: Benchmarking Language Model Safety for Polish

  Aleksandra Krasnodębska, Karolina Seweryn, Szymon Łukasik, Wojciech Kusa

• Probe before You Talk: Towards Black-box Defense against Backdoor Unalignment for Large Language Models

  Biao Yi, Tiansheng Huang, Sishuo Chen, Tong Li, Zheli Liu, Zhixuan Chu, Yiming Li

• Adversarial Attacks and Detection in Visual Place Recognition for Safer Robot Navigation

  Connor Malone, Owen Claxton, Iman Shames, Michael Milford

• MBA: Multimodal Bidirectional Attack for Referring Expression Segmentation Models

  Xingbai Chen, Tingchao Fu, Renyang Liu, Wei Zhou, Chao Yi

• Black-Box Privacy Attacks on Shared Representations in Multitask Learning

  John Abascal, Nicolás Berrios, Alina Oprea, Jonathan Ullman, Adam Smith, Matthew Jagielski

• Mr. Snuffleupagus at SemEval-2025 Task 4: Unlearning Factual Knowledge from LLMs Using Adaptive RMU

  Arjun Dosajh, Mihika Sanghi

• SecureFed: A Two-Phase Framework for Detecting Malicious Clients in Federated Learning

  Likhitha Annapurna Kavuri, Akshay Mhatre, Akarsh K Nair, Deepti Gupta

• FOCoOp: Enhancing Out-of-Distribution Robustness in Federated Prompt Learning for Vision-Language Models

  Xinting Liao, Weiming Liu, Jiaming Qian, Pengyang Zhou, Jiahe Xu, Wenjie Wang, Chaochao Chen, Xiaolin Zheng, Tat-Seng Chua

• From Teacher to Student: Tracking Memorization Through Model Distillation

  Simardeep Singh

• PRISON: Unmasking the Criminal Potential of Large Language Models

  Xinyi Wu, Geng Hong, Pei Chen, Yueyue Chen, Xudong Pan, Min Yang

2025-06-18

• RAS-Eval: A Comprehensive Benchmark for Security Evaluation of LLM Agents in Real-World Environments

  Yuchuan Fu, Xiaohan Yuan, Dongxia Wang

• Pixel-level Certified Explanations via Randomized Smoothing

  Alaa Anani, Tobias Lorenz, Mario Fritz, Bernt Schiele

• LoX: Low-Rank Extrapolation Robustifies LLM Safety Against Fine-tuning

  Gabrel J. Perin, Runjin Chen, Xuxi Chen, Nina S. T. Hirata, Zhangyang Wang, Junyuan Hong

• Leaky Thoughts: Large Reasoning Models Are Not Private Thinkers

  Tommaso Green, Martin Gubri, Haritz Puerto, Sangdoo Yun, Seong Joon Oh

• Approximating Language Model Training Data from Weights

  John X. Morris, Junjie Oscar Yin, Woojeong Kim, Vitaly Shmatikov, Alexander M. Rush

• Privacy-Shielded Image Compression: Defending Against Exploitation from Vision-Language Pretrained Models

  Xuelin Shen, Jiayin Xu, Kangsheng Yin, Wenhan Yang

• ImprovDML: Improved Trade-off in Private Byzantine-Resilient Distributed Machine Learning

  Bing Liu, Chengcheng Zhao, Li Chai, Peng Cheng, Yaonan Wang

• Enhancing One-run Privacy Auditing with Quantile Regression-Based Membership Inference

  Terrance Liu, Matteo Boglioni, Yiwei Fu, Shengyuan Hu, Pratiksha Thaker, Zhiwei Steven Wu

• Insights on Adversarial Attacks for Tabular Machine Learning via a Systematic Literature Review

  Salijona Dyrmishi, Mohamed Djilani, Thibault Simonetto, Salah Ghamizi, Maxime Cordy

• PDLRecover: Privacy-preserving Decentralized Model Recovery with Machine Unlearning

  Xiangman Li, Xiaodong Wu, Jianbing Ni, Mohamed Mahmoud, Maazen Alsabaan

• From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystem

  Yanxu Mao, Tiehan Cui, Peipei Liu, Datao You, Hongsong Zhu

• Sysformer: Safeguarding Frozen Large Language Models with Adaptive System Prompts

  Kartik Sharma, Yiqiao Jin, Vineeth Rakesh, Yingtong Dou, Menghai Pan, Mahashweta Das, Srijan Kumar

• VLMInferSlow: Evaluating the Efficiency Robustness of Large Vision-Language Models as a Service

  Xiasi Wang, Tianliang Yao, Simin Chen, Runqi Wang, Lei YE, Kuofeng Gao, Yi Huang, Yuan Yao

• Context manipulation attacks : Web agents are susceptible to corrupted memory

  Atharv Singh Patlan, Ashwin Hebbar, Pramod Viswanath, Prateek Mittal

• PolyGuard: Massive Multi-Domain Safety Policy-Grounded Guardrail Dataset

  Mintong Kang, Zhaorun Chen, Chejian Xu, Jiawei Zhang, Chengquan Guo, Minzhou Pan, Ivan Revilla, Yu Sun, Bo Li

• LoX: Low-Rank Extrapolation Robustifies LLM Safety Against Fine-tuning

  Gabriel J. Perin, Runjin Chen, Xuxi Chen, Nina S. T. Hirata, Zhangyang Wang, Junyuan Hong

2025-06-17

• Frequency-Calibrated Membership Inference Attacks on Medical Image Diffusion Models

  Xinkai Zhao, Yuta Tokuoka, Junichiro Iwasawa, Keita Oda

• Winter Soldier: Backdooring Language Models at Pre-Training with Indirect Data Poisoning

  Wassim Bouaziz, Mathurin Videau, Nicolas Usunier, El-Mahdi El-Mhamdi

• RL-Obfuscation: Can Language Models Learn to Evade Latent-Space Monitors?

  Rohan Gupta, Erik Jenner

• LLM Jailbreak Oracle

  Shuyi Lin, Anshuman Suri, Alina Oprea, Cheng Tan

• Doppelganger Method: Breaking Role Consistency in LLM Agent via Prompt-based Transferable Adversarial Attack

  Daewon Kang, YeongHwan Shin, Doyeon Kim, Kyu-Hwan Jung, Meong Hi Son

• ROSE: Toward Reality-Oriented Safety Evaluation of Large Language Models

  Jiale Ding, Xiang Zheng, Cong Wang, Wei-Bin Lee, Xingjun Ma, Yu-Gang Jiang

• AGENTSAFE: Benchmarking the Safety of Embodied Agents on Hazardous Instructions

  Aishan Liu, Zonghao Ying, Le Wang, Junjie Mu, Jinyang Guo, Jiakai Wang, Yuqing Ma, Siyuan Liang, Mingchuan Zhang, Xianglong Liu, Dacheng Tao

• Empirical Evidence for Alignment Faking in a Small LLM and Prompt-Based Mitigation Techniques

  J. Koorndijk

• HiLight: A Hierarchical Reinforcement Learning Framework with Global Adversarial Guidance for Large-Scale Traffic Signal Control

  Yaqiao Zhu, Hongkai Wen, Geyong Min, Man Luo

• OS-Harm: A Benchmark for Measuring Safety of Computer Use Agents

  Thomas Kuntz, Agatha Duzan, Hao Zhao, Francesco Croce, Zico Kolter, Nicolas Flammarion, Maksym Andriushchenko

2025-06-16

• Navigating the Black Box: Leveraging LLMs for Effective Text-Level Graph Injection Attacks

  Yuefei Lyu, Chaozhuo Li, Xi Zhang, Tianle Zhang

• Weakest Link in the Chain: Security Vulnerabilities in Advanced Reasoning Models

  Arjun Krishna, Aaditya Rastogi, Erick Galinkin

• CertDW: Towards Certified Dataset Ownership Verification via Conformal Prediction

  Ting Qiao, Yiming Li, Jianbin Li, Yingjia Wang, Leyi Qi, Junfeng Guo, Ruili Feng, Dacheng Tao

• Screen Hijack: Visual Poisoning of VLM Agents in Mobile Environments

  Xuan Wang, Siyuan Liang, Zhe Liu, Yi Yu, Yuliang Lu, Xiaochun Cao, Ee-Chien Chang

• Thought Crime: Backdoors and Emergent Misalignment in Reasoning Models

  James Chua, Jan Betley, Mia Taylor, Owain Evans

• LapDDPM: A Conditional Graph Diffusion Model for scRNA-seq Generation with Spectral Adversarial Perturbations

  Lorenzo Bini, Stephane Marchand-Maillet

• EBS-CFL: Efficient and Byzantine-robust Secure Clustered Federated Learning

  Zhiqiang Li, Haiyong Bao, Menghong Guan, Hao Pan, Cheng Huang, Hong-Ning Dai

• Mitigating Safety Fallback in Editing-based Backdoor Injection on LLMs

  Houcheng Jiang, Zetong Zhao, Junfeng Fang, Haokai Ma, Ruipeng Wang, Yang Deng, Xiang Wang, Xiangnan He

• Perfect Privacy for Discriminator-Based Byzantine-Resilient Federated Learning

  Yue Xia, Christoph Hofmeister, Maximilian Egger, Rawad Bitar

• Rectifying Privacy and Efficacy Measurements in Machine Unlearning: A New Inference Attack Perspective

  Nima Naderloui, Shenao Yan, Binghui Wang, Jie Fu, Wendy Hui Wang, Weiran Liu, Yuan Hong

• Position: Certified Robustness Does Not (Yet) Imply Model Security

  Andrew C. Cullen, Paul Montague, Sarah M. Erfani, Benjamin I.P. Rubinstein

• From Promise to Peril: Rethinking Cybersecurity Red and Blue Teaming in the Age of LLMs

  Alsharif Abuadbba, Chris Hicks, Kristen Moore, Vasilios Mavroudis, Burak Hasircioglu, Diksha Goel, Piers Jennings

• Unlearning-Enhanced Website Fingerprinting Attack: Against Backdoor Poisoning in Anonymous Networks

  Yali Yuan, Kai Xu, Ruolin Ma, Yuchen Zhang

• Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models

  Quan Nguyen, Minh N. Vu, Truc Nguyen, My T. Thai

• Membership Inference Attacks as Privacy Tools: Reliability, Disparity and Ensemble

  Zhiqi Wang, Chengyu Zhang, Yuetian Chen, Nathalie Baracaldo, Swanand Kadhe, Lei Yu

• Unlearning Isn't Invisible: Detecting Unlearning Traces in LLMs from Model Outputs

  Yiwei Chen, Soumyadeep Pal, Yimeng Zhang, Qing Qu, Sijia Liu

• Online Selective Generation with Adversarial Bandit Feedback

  Minjae Lee, Yoonjae Jung, Sangdon Park

• Adversarial Disentanglement by Backpropagation with Physics-Informed Variational Autoencoder

  Ioannis Christoforos Koune, Alice Cicirello

• ExtendAttack: Attacking Servers of LRMs via Extending Reasoning

  Zhenhao Zhu, Yue Liu, Zhiwei Xu, Yingwei Ma, Hongcheng Gao, Nuo Chen, Yanpei Guo, Wenjie Qu, Huiying Xu, Zifeng Kang, Xinzhong Zhu, Jiaheng Zhang

2025-06-15

• Constraint-Guided Prediction Refinement via Deterministic Diffusion Trajectories

  Pantelis Dogoulis, Fabien Bernier, Félix Fourreau, Karim Tit, Maxime Cordy

• Alphabet Index Mapping: Jailbreaking LLMs through Semantic Dissimilarity

  Bilal Saleh Husain

• NAP-Tuning: Neural Augmented Prompt Tuning for Adversarially Robust Vision-Language Models

  Jiaming Zhang, Xin Wang, Xingjun Ma, Lingyu Qiu, Yu-Gang Jiang, Jitao Sang

• Privacy-Preserving Federated Learning against Malicious Clients Based on Verifiable Functional Encryption

  Nina Cai, Jinguang Han

• Transforming Chatbot Text: A Sequence-to-Sequence Approach

  Natesh Reddy, Mark Stamp

• SecurityLingua: Efficient Defense of LLM Jailbreak Attacks via Security-Aware Prompt Compression

  Yucheng Li, Surin Ahn, Huiqiang Jiang, Amir H. Abdi, Yuqing Yang, Lili Qiu

• Active Adversarial Noise Suppression for Image Forgery Localization

  Rongxuan Peng, Shunquan Tan, Xianbo Mo, Alex C. Kot, Jiwu Huang

• Intriguing Frequency Interpretation of Adversarial Robustness for CNNs and ViTs

  Lu Chen, Han Yang, Hu Wang, Yuxin Cao, Shaofeng Li, Yuan Luo

• Free Privacy Protection for Wireless Federated Learning: Enjoy It or Suffer from It?

  Weicai Li, Tiejun Lv, Xiyu Zhao, Xin Yuan, Wei Ni

• TrojanTO: Action-Level Backdoor Attacks against Trajectory Optimization Models

  Yang Dai, Oubo Ma, Longfei Zhang, Xingxing Liang, Xiaochun Cao, Shouling Ji, Jiaheng Zhang, Jincai Huang, Li Shen

• Jailbreak Strength and Model Similarity Predict Transferability

  Rico Angell, Jannik Brinkmann, He He

• Universal Jailbreak Suffixes Are Strong Attention Hijackers

  Matan Ben-Tov, Mor Geva, Mahmood Sharif

• The Safety Reminder: A Soft Prompt to Reactivate Delayed Safety Awareness in Vision-Language Models

  Peiyuan Tang, Haojie Xin, Xiaodong Zhang, Jun Sun, Qin Xia, Zijiang Yang

• Reasoning Model Unlearning: Forgetting Traces, Not Just Answers, While Preserving Reasoning Skills

  Changsheng Wang, Chongyu Fan, Yihua Zhang, Jinghan Jia, Dennis Wei, Parikshit Ram, Nathalie Baracaldo, Sijia Liu

2025-06-14

• MEraser: An Effective Fingerprint Erasure Approach for Large Language Models

  Jingxuan Zhang, Zhenhua Xu, Rui Hu, Wenpeng Xing, Xuhong Zhang, Meng Han

• Image Corruption-Inspired Membership Inference Attacks against Large Vision-Language Models

  Zongyu Wu, Minhua Lin, Zhiwei Zhang, Fali Wang, Xianren Zhang, Xiang Zhang, Suhang Wang

• Restoring Gaussian Blurred Face Images for Deanonymization Attacks

  Haoyu Zhai, Shuo Wang, Pirouz Naghavi, Qingying Hao, Gang Wang

• InverTune: Removing Backdoors from Multimodal Contrastive Learning Models via Trigger Inversion and Activation Tuning

  Mengyuan Sun, Yu Li, Yuchen Liu, Bo Du, Yunjie Ge

• Pushing the Limits of Safety: A Technical Report on the ATLAS Challenge 2025

  Zonghao Ying, Siyang Wu, Run Hao, Peng Ying, Shixuan Sun, Pengyu Chen, Junze Chen, Hao Du, Kaiwen Shen, Shangkun Wu, Jiwei Wei, Shiyuan He, Yang Yang, Xiaohai Xu, Ke Ma, Qianqian Xu, Qingming Huang, Shi Lin, Xun Wang, Changting Lin, Meng Han, Yilei Jiang, Siqi Lai, Yaozhi Zheng, Yifei Song, Xiangyu Yue, Zonglei Jing, Tianyuan Zhang, Zhilei Zhu, Aishan Liu, Jiakai Wang, Siyuan Liang, Xianglong Kong, Hainan Li, Junjie Mu, Haotong Qin, Yue Yu, Lei Chen, Felix Juefei-Xu, Qing Guo, Xinyun Chen, Yew Soon Ong, Xianglong Liu, Dawn Song, Alan Yuille, Philip Torr, Dacheng Tao

• Existence of Adversarial Examples for Random Convolutional Networks via Isoperimetric Inequalities on $\mathbb{so}(d)$

  Amit Daniely

• On the existence of consistent adversarial attacks in high-dimensional linear classification

  Matteo Vilucchio, Lenka Zdeborová, Bruno Loureiro

• Information-theoretic Estimation of the Risk of Privacy Leaks

  Kenneth Odoh

• Exploiting AI for Attacks: On the Interplay between Adversarial AI and Offensive AI

  Saskia Laura Schröer, Luca Pajola, Alberto Castagnaro, Giovanni Apruzzese, Mauro Conti

• When Forgetting Triggers Backdoors: A Clean Unlearning Attack

  Marco Arazzi, Antonino Nocera, Vinod P

• Step-by-Step Reasoning Attack: Revealing 'Erased' Knowledge in Large Language Models

  Yash Sinha, Manit Baser, Murari Mandal, Dinil Mon Divakaran, Mohan Kankanhalli

• Understanding and Benchmarking the Trustworthiness in Multimodal LLMs for Video Understanding

  Youze Wang, Zijun Chen, Ruoyu Chen, Shishen Gu, Wenbo Hu, Jiayang Liu, Yinpeng Dong, Hang Su, Jun Zhu, Meng Wang, Richang Hong

• Robust LLM Unlearning with MUDMAN: Meta-Unlearning with Disruption Masking And Normalization

  Filip Sondej, Yushi Yang, Mikołaj Kniejski, Marcel Windys

2025-06-13

• LoRA Users Beware: A Few Spurious Tokens Can Manipulate Your Finetuned Model

  Pradyut Sekhsaria, Marcel Mateos Salles, Hai Huang, Randall Balestriero

• Investigating Vulnerabilities and Defenses Against Audio-Visual Attacks: A Comprehensive Survey Emphasizing Multimodal Models

  Jinming Wen, Xinyi Wu, Shuai Zhao, Yanhao Jia, Yuwen Li

• Differential Privacy in Machine Learning: From Symbolic AI to LLMs

  Francisco Aguilera-Martínez, Fernando Berzal

• TrustGLM: Evaluating the Robustness of GraphLLMs Against Prompt, Text, and Structure Attacks

  Qihai Zhang, Xinyue Sheng, Yuanfu Sun, Qiaoyu Tan

• Attention-based Adversarial Robust Distillation in Radio Signal Classifications for Low-Power IoT Devices

  Lu Zhang, Sangarapillai Lambotharan, Gan Zheng, Guisheng Liao, Basil AsSadhan, Fabio Roli

• A Neural Rejection System Against Universal Adversarial Perturbations in Radio Signal Classification

  Lu Zhang, Sangarapillai Lambotharan, Gan Zheng, Fabio Roli

• Improving Large Language Model Safety with Contrastive Representation Learning

  Samuel Simko, Mrinmaya Sachan, Bernhard Schölkopf, Zhijing Jin

• Bias Amplification in RAG: Poisoning Knowledge Retrieval to Steer LLMs

  Linlin Wang, Tianqing Zhu, Laiqiao Qin, Longxiang Gao, Wanlei Zhou

• On the Natural Robustness of Vision-Language Models Against Visual Perception Attacks in Autonomous Driving

  Pedram MohajerAnsari, Amir Salarpour, Michael Kühr, Siyu Huang, Mohammad Hamad, Sebastian Steinhorst, Habeeb Olufowobi, Mert D. Pesé

• Byzantine Outside, Curious Inside: Reconstructing Data Through Malicious Updates

  Kai Yue, Richeng Jin, Chau-Wai Wong, Huaiyu Dai

• KCES: Training-Free Defense for Robust Graph Neural Networks via Kernel Complexity

  Yaning Jia, Shenyang Deng, Chiyu Ma, Yaoqing Yang, Soroush Vosoughi

• InfoFlood: Jailbreaking Large Language Models with Information Overload

  Advait Yadav, Haibo Jin, Man Luo, Jun Zhuang, Haohan Wang

• EgoPrivacy: What Your First-Person Camera Says About You?

  Yijiang Li, Genpei Zhang, Jiacheng Cheng, Yi Li, Xiaojun Shan, Dashan Gao, Jiancheng Lyu, Yuan Li, Ning Bi, Nuno Vasconcelos

• Vision Transformer with Adversarial Indicator Token against Adversarial Attacks in Radio Signal Classifications

  Lu Zhang, Sangarapillai Lambotharan, Gan Zheng, Guisheng Liao, Xuekang Liu, Fabio Roli, Carsten Maple

• DRIFT: Dynamic Rule-Based Defense with Injection Isolation for Securing LLM Agents

  Hao Li, Xiaogeng Liu, Hung-Chun Chiu, Dianqi Li, Ning Zhang, Chaowei Xiao

2025-06-12

• Collapsing Sequence-Level Data-Policy Coverage via Poisoning Attack in Offline Reinforcement Learning

  Xue Zhou, Dapeng Man, Chen Xu, Fanyi Zeng, Tao Liu, Huan Wang, Shucheng He, Chaoyang Gao, Wu Yang

• SOFT: Selective Data Obfuscation for Protecting LLM Fine-tuning against Membership Inference Attacks

  Kaiyuan Zhang, Siyuan Cheng, Hanxi Guo, Yuetian Chen, Zian Su, Shengwei An, Yuntao Du, Charles Fleming, Ashish Kundu, Xiangyu Zhang, Ninghui Li

• SoK: Evaluating Jailbreak Guardrails for Large Language Models

  Xunguang Wang, Zhenlan Ji, Wenxuan Wang, Zongjie Li, Daoyuan Wu, Shuai Wang

• TED-LaST: Towards Robust Backdoor Defense Against Adaptive Attacks

  Xiaoxing Mo, Yuxuan Cheng, Nan Sun, Leo Yu Zhang, Wei Luo, Shang Gao

• ME: Trigger Element Combination Backdoor Attack on Copyright Infringement

  Feiyu Yang, Siyuan Liang, Aishan Liu, Dacheng Tao

• Efficiency Robustness of Dynamic Deep Learning Systems

  Ravishka Rathnasuriya, Tingxi Li, Zexin Xu, Zihe Song, Mirazul Haque, Simin Chen, Wei Yang

• Monitoring Decomposition Attacks in LLMs with Lightweight Sequential Monitors

  Chen Yueh-Han, Nitish Joshi, Yulin Chen, Maksym Andriushchenko, Rico Angell, He He

• Can We Infer Confidential Properties of Training Data from LLMs?

  Penguin Huang, Chhavi Yadav, Ruihan Wu, Kamalika Chaudhuri

• Boosting Adversarial Transferability for Hyperspectral Image Classification Using 3D Structure-invariant Transformation and Intermediate Feature Distance

  Chun Liu, Bingqian Zhu, Tao Xu, Zheng Zheng, Zheng Li, Wei Yang, Zhigang Han, Jiayao Wang

• Unsourced Adversarial CAPTCHA: A Bi-Phase Adversarial CAPTCHA Framework

  Xia Du, Xiaoyuan Liu, Jizhe Zhou, Zheng Lin, Chi-man Pun, Zhe Chen, Wei Ni, Jun Luo

• Lattice Climber Attack: Adversarial attacks for randomized mixtures of classifiers

  Lucas Gnecco-Heredia, Benjamin Negrevergne, Yann Chevaleyre

• Distributionally-Constrained Adversaries in Online Learning

  Moïse Blanchard, Samory Kpotufe

• A Crack in the Bark: Leveraging Public Knowledge to Remove Tree-Ring Watermarks

  Junhua Lin, Marc Juarez

• Assessing the Resilience of Automotive Intrusion Detection Systems to Adversarial Manipulation

  Stefano Longari, Paolo Cerracchio, Michele Carminati, Stefano Zanero

• ObfusBFA: A Holistic Approach to Safeguarding DNNs from Different Types of Bit-Flip Attacks

  Xiaobei Yan, Han Qiu, Tianwei Zhang

• Monitoring Decomposition Attacks in LLMs with Lightweight Sequential Monitors

  Chen Yueh-Han, Nitish Joshi, Yulin Chen, Maksym Andriushchenko, Rico Angell, He He

• Can We Infer Confidential Properties of Training Data from LLMs?

  Pengrun Huang, Chhavi Yadav, Ruihan Wu, Kamalika Chaudhuri

• Unsourced Adversarial CAPTCHA: A Bi-Phase Adversarial CAPTCHA Framework

  Xia Du, Xiaoyuan Liu, Jizhe Zhou, Zheng Lin, Chi-man Pun, Cong Wu, Tao Li, Zhe Chen, Wei Ni, Jun Luo

• Distributionally-Constrained Adversaries in Online Learning

  Moïse Blanchard, Samory Kpotufe

• Hierarchical Adversarially-Resilient Multi-Agent Reinforcement Learning for Cyber-Physical Systems Security

  Saad Alqithami

• Boosting Adversarial Transferability for Hyperspectral Image Classification Using 3D Structure-invariant Transformation and Weighted Intermediate Feature Divergence

  Chun Liu, Bingqian Zhu, Tao Xu, Zheng Zheng, Zheng Li, Wei Yang, Zhigang Han, Jiayao Wang

• SoK: Evaluating Jailbreak Guardrails for Large Language Models

  Xunguang Wang, Zhenlan Ji, Wenxuan Wang, Zongjie Li, Daoyuan Wu, Shuai Wang

2025-06-11

• Token Constraint Decoding Improves Robustness on Question Answering for Large Language Models

  Jui-Ming Yao, Hao-Yuan Chen, Zi-Xian Tang, Bing-Jia Tan, Sheng-Wei Peng, Bing-Cheng Xie, Shun-Feng Su

• Effective Red-Teaming of Policy-Adherent Agents

  Itay Nakash, George Kour, Koren Lazar, Matan Vetzler, Guy Uziel, Ateret Anaby-Tavor

• Reasoning Models Are More Easily Gaslighted Than You Think

  Bin Zhu, Hailong Yin, Jingjing Chen, Yu-Gang Jiang

• Inverting Black-Box Face Recognition Systems via Zero-Order Optimization in Eigenface Space

  Anton Razzhigaev, Matvey Mikhalchuk, Klim Kireev, Igor Udovichenko, Andrey Kuznetsov, Aleksandr Petiushko

• LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge

  Sahar Abdelnabi, Aideen Fay, Ahmed Salem, Egor Zverev, Kai-Chieh Liao, Chi-Huang Liu, Chun-Chih Kuo, Jannis Weigend, Danyael Manlangit, Alex Apostolov, Haris Umair, João Donato, Masayuki Kawakita, Athar Mahboob, Tran Huu Bach, Tsun-Han Chiang, Myeongjin Cho, Hajin Choi, Byeonghyeon Kim, Hyeonjin Lee, Benjamin Pannell, Conor McCauley, Mark Russinovich, Andrew Paverd, Giovanni Cherubin

• Memorization in Language Models through the Lens of Intrinsic Dimension

  Stefan Arnold

• You Are What You Say: Exploiting Linguistic Content for VoicePrivacy Attacks

  Ünal Ege Gaznepoglu, Anna Leschanowsky, Ahmad Aloradi, Prachi Singh, Daniel Tenbrinck, Emanuël A. P. Habets, Nils Peters

• AngleRoCL: Angle-Robust Concept Learning for Physically View-Invariant T2I Adversarial Patches

  Wenjun Ji, Yuxiang Fu, Luyang Ying, Deng-Ping Fan, Yuyi Wang, Ming-Ming Cheng, Ivor Tsang, Qing Guo

• DAVSP: Safety Alignment for Large Vision-Language Models via Deep Aligned Visual Safety Prompt

  Yitong Zhang, Jia Li, Liyi Cai, Ge Li

• Canonical Latent Representations in Conditional Diffusion Models

  Yitao Xu, Tong Zhang, Ehsan Pajouheshgar, Sabine Süsstrunk

• Adversarial Surrogate Risk Bounds for Binary Classification

  Natalie S. Frank

• In-Context Bias Propagation in LLM-Based Tabular Data Generation

  Pol G.Recasens, Alberto Gutierrez, Jordi Torres, Josep.Ll Berral, Anisa Halimi, Kieran Fraser

• Devil's Hand: Data Poisoning Attacks to Locally Private Graph Learning Protocols

  Longzhu He, Chaozhuo Li, Peng Tang, Litian Zhang, Sen Su

• A look at adversarial attacks on radio waveforms from discrete latent space

  Attanasia Garuso, Silvija Kokalj-Filipovic, Yagna Kaasaragadda

• Apollo: A Posteriori Label-Only Membership Inference Attack Towards Machine Unlearning

  Liou Tang, James Joshi, Ashish Kundu

• TooBadRL: Trigger Optimization to Boost Effectiveness of Backdoor Attacks on Deep Reinforcement Learning

  Songze Li, Mingxuan Zhang, Oubo Ma, Kang Wei, Shouling Ji

• Evasion Attacks Against Bayesian Predictive Models

  Pablo G. Arce, Roi Naveiro, David Ríos Insua

• LLMs Cannot Reliably Judge (Yet?): A Comprehensive Assessment on the Robustness of LLM-as-a-Judge

  Songze Li, Chuokun Xu, Jiaying Wang, Xueluan Gong, Chen Chen, Jirui Zhang, Jun Wang, Kwok-Yan Lam, Shouling Ji

• Disclosure Audits for LLM Agents

  Saswat Das, Jameson Sandler, Ferdinando Fioretto

• Prompt Attacks Reveal Superficial Knowledge Removal in Unlearning Methods

  Yeonwoo Jang, Shariqah Hossain, Ashwin Sreevatsa, Diogo Cruz

• GenBreak: Red Teaming Text-to-Image Generators Using Large Language Models

  Zilong Wang, Xiang Zheng, Xiaosen Wang, Bo Wang, Xingjun Ma, Yu-Gang Jiang

• TooBadRL: Trigger Optimization to Boost Effectiveness of Backdoor Attacks on Deep Reinforcement Learning

  Songze Li, Mingxuan Zhang, Kang Wei, Shouling Ji

• Disclosure Audits for LLM Agents

  Saswat Das, Jameson Sandler, Ferdinando Fioretto

• Prompt Attacks Reveal Superficial Knowledge Removal in Unlearning Methods

  Yeonwoo Jang, Shariqah Hossain, Ashwin Sreevatsa, Diogo Cruz

• Revisiting Visual Understanding in Multimodal Reasoning through a Lens of Image Perturbation

  Yuting Li, Lai Wei, Kaipeng Zheng, Jingyuan Huang, Guilin Li, Bo Wang, Linghe Kong, Lichao Sun, Weiran Huang

• Adversarial Surrogate Risk Bounds for Binary Classification

  Natalie S. Frank

• Adv-BMT: Bidirectional Motion Transformer for Safety-Critical Traffic Scenario Generation

  Yuxin Liu, Zhenghao Peng, Xuanhao Cui, Bolei Zhou

2025-06-10

• Single-Node Trigger Backdoor Attacks in Graph-Based Recommendation Systems

  Runze Li, Di Jin, Xiaobao Wang, Dongxiao He, Bingdao Feng, Zhen Wang

• Your Agent Can Defend Itself against Backdoor Attacks

  Li Changjiang, Liang Jiacheng, Cao Bochuan, Chen Jinghui, Wang Ting

• SPBA: Utilizing Speech Large Language Model for Backdoor Attacks on Speech Classification Models

  Wenhan Yao, Fen Xiao, Xiarun Chen, Jia Liu, YongQiang He, Weiping Wen

• WGLE:Backdoor-free and Multi-bit Black-box Watermarking for Graph Neural Networks

  Tingzhi Li, Xuefeng Liu

• Towards Robust Deep Reinforcement Learning against Environmental State Perturbation

  Chenxu Wang, Huaping Liu

• CounselBench: A Large-Scale Expert Evaluation and Adversarial Benchmark of Large Language Models in Mental Health Counseling

  Yahan Li, Jifan Yao, John Bosco S. Bunyi, Adam C. Frank, Angel Hwang, Ruishan Liu

• AdversariaL attacK sAfety aLIgnment(ALKALI): Safeguarding LLMs through GRACE: Geometric Representation-Aware Contrastive Enhancement- Introducing Adversarial Vulnerability Quality Index (AVQI)

  Danush Khanna, Krishna Kumar, Basab Ghosh, Vinija Jain, Vasu Sharma, Aman Chadha, Amitava Das

• Towards Class-wise Fair Adversarial Training via Anti-Bias Soft Label Distillation

  Shiji Zhao, Chi Chen, Ranjie Duan, Xizhe Wang, Xingxing Wei

• Boosting Gradient Leakage Attacks: Data Reconstruction in Realistic FL Settings

  Mingyuan Fan, Fuyi Wang, Cen Chen, Jianying Zhou

• DiffGradCAM: A Universal Class Activation Map Resistant to Adversarial Training

  Jacob Piland, Chris Sweet, Adam Czakja

• Design Patterns for Securing LLM Agents against Prompt Injections

  Luca Beurer-Kellner, Beat Buesser Ana-Maria Creţu, Edoardo Debenedetti, Daniel Dobos, Daniel Fabian, Marc Fischer, David Froelicher, Kathrin Grosse, Daniel Naeff, Ezinwanne Ozoani, Andrew Paverd, Florian Tramèr, Václav Volhejn

• GPS Spoofing Attacks on AI-based Navigation Systems with Obstacle Avoidance in UAV

  Ji Hyuk Jung, Mi Yeon Hong, Ji Won Yoon

• One Patch to Rule Them All: Transforming Static Patches into Dynamic Attacks in the Physical World

  Xingshuo Han, Chen Ling, Shiyi Yao, Haozhao Wang, Hangcheng Liu, Yutong Wu, Shengmin Xu, Changhai Ou, Xinyi Huang, Tianwei Zhang

• Adversarial Text Generation with Dynamic Contextual Perturbation

  Hetvi Waghela, Jaydip Sen, Sneha Rakshit, Subhasis Dasgupta

• PatchGuard: Adversarially Robust Anomaly Detection and Localization through Vision Transformers and Pseudo Anomalies

  Mojtaba Nafez, Amirhossein Koochakian, Arad Maleki, Jafar Habibi, Mohammad Hossein Rohban

• ASRJam: Human-Friendly AI Speech Jamming to Prevent Automated Phone Scams

  Freddie Grabovski, Gilad Gressel, Yisroel Mirsky

• Evaluation empirique de la sécurisation et de l'alignement de ChatGPT et Gemini: analyse comparative des vulnérabilités par expérimentations de jailbreaks

  Rafaël Nouailles

• Towards Cross-Subject EMG Pattern Recognition via Dual-Branch Adversarial Feature Disentanglement

  Xinyue Niu, Akira Furui

• Does Multimodal Large Language Model Truly Unlearn? Stealthy MLLM Unlearning Attack

  Xianren Zhang, Hui Liu, Delvin Ce Zhang, Xianfeng Tang, Qi He, Dongwon Lee, Suhang Wang

2025-06-09

• HeTa: Relation-wise Heterogeneous Graph Foundation Attack Model

  Yuling Wang, Zihui Chen, Pengfei Jiao, Xiao Wang

• RSafe: Incentivizing proactive reasoning to build robust and adaptive LLM safeguards

  Jingnan Zheng, Xiangtian Ji, Yijun Lu, Chenhang Cui, Weixiang Zhao, Gelei Deng, Zhenkai Liang, An Zhang, Tat-Seng Chua

• JavelinGuard: Low-Cost Transformer Architectures for LLM Security

  Yash Datta, Sharath Rajasekar

• MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems

  Peiru Yang, Jinhua Yin, Haoran Zheng, Xueying Bai, Huili Wang, Yufei Sun, Xintian Li, Shangguang Wang, Yongfeng Huang, Tao Qi

• When Style Breaks Safety: Defending Language Models Against Superficial Style Alignment

  Yuxin Xiao, Sana Tonekaboni, Walter Gerych, Vinith Suriyakumar, Marzyeh Ghassemi

• Enhancing Adversarial Robustness with Conformal Prediction: A Framework for Guaranteed Model Reliability

  Jie Bao, Chuangyin Dang, Rui Luo, Hanwei Zhang, Zhixin Zhou

• Evaluating LLMs Robustness in Less Resourced Languages with Proxy Models

  Maciej Chrabąszcz, Katarzyna Lorenc, Karolina Seweryn

• Beyond Jailbreaks: Revealing Stealthier and Broader LLM Security Risks Stemming from Alignment Failures

  Yukai Zhou, Sibei Yang, Wenjie Wang

• Chasing Moving Targets with Online Self-Play Reinforcement Learning for Safer Language Models

  Mickel Liu, Liwei Jiang, Yancheng Liang, Simon Shaolei Du, Yejin Choi, Tim Althoff, Natasha Jaques

• Explore the vulnerability of black-box models via diffusion models

  Jiacheng Shi, Yanfu Zhang, Huajie Shao, Ashley Gao

• Circumventing Backdoor Space via Weight Symmetry

  Jie Peng, Hongwei Yang, Jing Zhao, Hengji Dong, Hui He, Weizhe Zhang, Haoyu He

• TwinBreak: Jailbreaking LLM Security Alignments based on Twin Prompts

  Torsten Krauß, Hamid Dashtbani, Alexandra Dmitrienko

• ProARD: progressive adversarial robustness distillation: provide wide range of robust students

  Seyedhamidreza Mousavi, Seyedali Mousavi, Masoud Daneshtalab

• TokenBreak: Bypassing Text Classification Models Through Token Manipulation

  Kasimir Schulz, Kenneth Yeung, Kieran Evans

• TimberStrike: Dataset Reconstruction Attack Revealing Privacy Leakage in Federated Tree-Based Systems

  Marco Di Gennaro, Giovanni De Lucia, Stefano Longari, Stefano Zanero, Michele Carminati

• SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark

  Rui Wen, Yiyong Liu, Michael Backes, Yang Zhang

• Secure Distributed Learning for CAVs: Defending Against Gradient Leakage with Leveled Homomorphic Encryption

  Muhammad Ali Najjar, Ren-Yi Huang, Dumindu Samaraweera, Prashant Shekhar

• Surgeon Style Fingerprinting and Privacy Risk Quantification via Discrete Diffusion Models in a Vision-Language-Action Framework

  Huixin Zhan, Jason H. Moore

• SHIELD: Secure Hypernetworks for Incremental Expansion Learning Defense

  Patryk Krukowski, Łukasz Gorczyca, Piotr Helm, Kamil Książek, Przemysław Spurek

• GradEscape: A Gradient-Based Evader Against AI-Generated Text Detectors

  Wenlong Meng, Shuguo Fan, Chengkun Wei, Min Chen, Yuwei Li, Yuanchao Zhang, Zhikun Zhang, Wenzhi Chen

• LLMs Caught in the Crossfire: Malware Requests and Jailbreak Challenges

  Haoyang Li, Huan Gao, Zhiyuan Zhao, Zhiyu Lin, Junyu Gao, Xuelong Li

• Private Memorization Editing: Turning Memorization into a Defense to Strengthen Data Privacy in Large Language Models

  Elena Sofia Ruzzetti, Giancarlo A. Xompero, Davide Venditti, Fabio Massimo Zanzotto

• TimberStrike: Dataset Reconstruction Attack Revealing Privacy Leakage in Federated Tree-Based Systems

  Marco Di Gennaro, Giovanni De Lucia, Stefano Longari, Stefano Zanero, Michele Carminati

• QA-LIGN: Aligning LLMs through Constitutionally Decomposed QA

  Jacob Dineen, Aswin RRV, Qin Liu, Zhikun Xu, Xiao Ye, Ming Shen, Zhaonan Li, Shijie Lu, Chitta Baral, Muhao Chen, Ben Zhou

• InverseScope: Scalable Activation Inversion for Interpreting Large Language Models

  Yifan Luo, Zhennan Zhou, Bin Dong

• Safety-Aligned Weights Are Not Enough: Refusal-Teacher-Guided Finetuning Enhances Safety and Downstream Performance under Harmful Finetuning Attacks

  Seokil Ham, Yubin Choi, Yujin Yang, Seungju Cho, Younghun Kim, Changick Kim

• TAI3: Testing Agent Integrity in Interpreting User Intent

  Shiwei Feng, Xiangzhe Xu, Xuan Chen, Kaiyuan Zhang, Syed Yusuf Ahmed, Zian Su, Mingwei Zheng, Xiangyu Zhang

• GradEscape: A Gradient-Based Evader Against AI-Generated Text Detectors

  Wenlong Meng, Shuguo Fan, Chengkun Wei, Min Chen, Yuwei Li, Yuanchao Zhang, Zhikun Zhang, Wenzhi Chen

2025-06-08

• Auditing Black-Box LLM APIs with a Rank-Based Uniformity Test

  Xiaoyuan Zhu, Yaowen Ye, Tianyi Qiu, Hanlin Zhu, Sijun Tan, Ajraf Mannan, Jonathan Michala, Raluca Ada Popa, Willie Neiswanger

• AlphaSteer: Learning Refusal Steering with Principled Null-Space Constraint

  Leheng Sheng, Changshuo Shen, Weixiang Zhao, Junfeng Fang, Xiaohao Liu, Zhenkai Liang, Xiang Wang, An Zhang, Tat-Seng Chua

• HauntAttack: When Attack Follows Reasoning as a Shadow

  Jingyuan Ma, Rui Li, Zheng Li, Junfeng Liu, Lei Sha, Zhifang Sui

• Quality-Diversity Red-Teaming: Automated Generation of High-Quality and Diverse Attackers for Large Language Models

  Ren-Jian Wang, Ke Xue, Zeyu Qin, Ziniu Li, Sheng Tang, Hao-Tian Li, Shengcai Liu, Chao Qian

• Break-The-Chain: Reasoning Failures in LLMs via Adversarial Prompting in Code Generation

  Jaechul Roh, Varun Gandhi, Shivani Anilkumar, Arin Garg

• Adversarial Paraphrasing: A Universal Attack for Humanizing AI-Generated Text

  Yize Cheng, Vinu Sankar Sadasivan, Mehrdad Saberi, Shoumik Saha, Soheil Feizi

• Boosting Adversarial Transferability via Commonality-Oriented Gradient Optimization

  Yanting Gao, Yepeng Liu, Junming Liu, Qi Zhang, Hongyun Zhang, Duoqian Miao, Cairong Zhao

• D2R: dual regularization loss with collaborative adversarial generation for model robustness

  Zhenyu Liu, Huizhi Liang, Rajiv Ranjan, Zhanxing Zhu, Vaclav Snasel, Varun Ojha

• UCOD-DPL: Unsupervised Camouflaged Object Detection via Dynamic Pseudo-label Learning

  Weiqi Yan, Lvhai Chen, Huaijia Kou, Shengchuan Zhang, Yan Zhang, Liujuan Cao

• Backdoor Attack on Vision Language Models with Stealthy Semantic Manipulation

  Zhiyuan Zhong, Zhen Sun, Yepang Liu, Xinlei He, Guanhong Tao

• PASS: Private Attributes Protection with Stochastic Data Substitution

  Yizhuo Chen, Chun-Fu (Richard)Chen, Hsiang Hsu, Shaohan Hu, Tarek Abdelzaher

• Enhancing the Safety of Medical Vision-Language Models by Synthetic Demonstrations

  Zhiyu Xue, Reza Abbasi-Asl, Ramtin Pedarsani

• Evaluating and Improving Robustness in Large Language Models: A Survey and Future Directions

  Kun Zhang, Le Wu, Kui Yu, Guangyi Lv, Dacao Zhang

• Breaking the Reviewer: Assessing the Vulnerability of Large Language Models in Automated Peer Review Under Textual Adversarial Attacks

  Tzu-Ling Lin, Wei-Chih Chen, Teng-Fang Hsiao, Hou-I Liu, Ya-Hsin Yeh, Yu Kai Chan, Wen-Sheng Lien, Po-Yen Kuo, Philip S. Yu, Hong-Han Shuai

• Chain-of-Code Collapse: Reasoning Failures in LLMs via Adversarial Prompting in Code Generation

  Jaechul Roh, Varun Gandhi, Shivani Anilkumar, Arin Garg

• Towards Interpretable Adversarial Examples via Sparse Adversarial Attack

  Fudong Lin, Jiadong Lou, Hao Wang, Brian Jalaian, Xu Yuan

• Breaking the Reviewer: Assessing the Vulnerability of Large Language Models in Automated Peer Review Under Textual Adversarial Attacks

  Tzu-Ling Lin, Wei-Chih Chen, Teng-Fang Hsiao, Hou-I Liu, Ya-Hsin Yeh, Yu Kai Chan, Wen-Sheng Lien, Po-Yen Kuo, Philip S. Yu, Hong-Han Shuai

• Boosting Adversarial Transferability via Commonality-Oriented Gradient Optimization

  Yanting Gao, Yepeng Liu, Junming Liu, Qi Zhang, Hongyun Zhang, Duoqian Miao, Cairong Zhao

• Adversarial Paraphrasing: A Universal Attack for Humanizing AI-Generated Text

  Yize Cheng, Vinu Sankar Sadasivan, Mehrdad Saberi, Shoumik Saha, Soheil Feizi

2025-06-07

• Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry

  Mahdi Salmani, Alireza Abdollahpoorrostam, Seyed-Mohsen Moosavi-Dezfooli

• KNN-Defense: Defense against 3D Adversarial Point Clouds using Nearest-Neighbor Search

  Nima Jamali, Matina Mahdizadeh Sani, Hanieh Naderi, Shohreh Kasaei

• FREE: Fast and Robust Vision Language Models with Early Exits

  Divya Jyoti Bajpai, Manjesh Kumar Hanawal

• Rescaled Influence Functions: Accurate Data Attribution in High Dimension

  Ittai Rubinstein, Samuel B. Hopkins

• Can In-Context Reinforcement Learning Recover From Reward Poisoning Attacks?

  Paulius Sasnauskas, Yiğit Yalın, Goran Radanović

• Robust Learnability of Sample-Compressible Distributions under Noisy or Adversarial Perturbations

  Arefe Boushehrian, Amir Najafi

• Stochastic Training for Side-Channel Resilient AI

  Anuj Dubey, Aydin Aysu

• LADSG: Label-Anonymized Distillation and Similar Gradient Substitution for Label Privacy in Vertical Federated Learning

  Zeyu Yan, Yifei Yao, Xuanbing Wen, Juli Zhang, Kai Fan

• From Threat to Tool: Leveraging Refusal-Aware Injection Attacks for Safety Alignment

  Kyubyung Chae, Hyunbin Jin, Taesup Kim

• Neural Spectral Band Generation for Audio Coding

  Woongjib Choi, Byeong Hyeon Kim, Hyungseob Lim, Inseon Jang, Hong-Goo Kang

2025-06-06

• To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt

  Zhilong Wang, Neha Nagaraja, Lan Zhang, Hayretdin Bahsi, Pawan Patil, Peng Liu

• When Better Features Mean Greater Risks: The Performance-Privacy Trade-Off in Contrastive Learning

  Ruining Sun, Hongsheng Hu, Wei Luo, Zhaoxi Zhang, Yanjun Zhang, Haizhuan Yuan, Leo Yu Zhang

• DeepFake Doctor: Diagnosing and Treating Audio-Video Fake Detection

  Marcel Klemt, Carlotta Segna, Anna Rohrbach

• Quantifying Adversarial Uncertainty in Evidential Deep Learning using Conflict Resolution

  Charmaine Barker, Daniel Bethell, Simos Gerasimou

• Hey, That's My Data! Label-Only Dataset Inference in Large Language Models

  Chen Xiong, Zihao Wang, Rui Zhu, Tsung-Yi Ho, Pin-Yu Chen, Jingwei Xiong, Haixu Tang, Lucila Ohno-Machado

• Simple Yet Effective: Extracting Private Data Across Clients in Federated Fine-Tuning of Large Language Models

  Yingqi Hu, Zhuo Zhang, Jingyuan Zhang, Lizhen Qu, Zenglin Xu

• Towards Lifecycle Unlearning Commitment Management: Measuring Sample-level Unlearning Completeness

  Cheng-Long Wang, Qi Li, Zihang Xiang, Yinzhi Cao, Di Wang

• Joint-GCG: Unified Gradient-Based Poisoning Attacks on Retrieval-Augmented Generation Systems

  Haowei Wang, Rupeng Zhang, Junjie Wang, Mingyang Li, Yuekai Huang, Dandan Wang, Qing Wang

• AdvSumm: Adversarial Training for Bias Mitigation in Text Summarization

  Mukur Gupta, Nikhil Reddy Varimalla, Nicholas Deas, Melanie Subbiah, Kathleen McKeown

• MCA-Bench: A Multimodal Benchmark for Evaluating CAPTCHA Robustness Against VLM-based Attacks

  Zonglin Wu, Yule Xue, Xin Wei, Yiren Song

• Sample-Specific Noise Injection For Diffusion-Based Adversarial Purification

  Yuhao Sun, Jiacheng Zhang, Zesheng Ye, Chaowei Xiao, Feng Liu

• What Really is a Member? Discrediting Membership Inference via Poisoning

  Neal Mangaokar, Ashish Hooda, Zhuohang Li, Bradley A. Malin, Kassem Fawaz, Somesh Jha, Atul Prakash, Amrita Roy Chowdhury

• Synthetic Tabular Data: Methods, Attacks and Defenses

  Graham Cormode, Samuel Maddock, Enayat Ullah, Shripad Gade

• Stealix: Model Stealing via Prompt Evolution

  Zhixiong Zhuang, Hui-Po Wang, Maria-Irina Nicolae, Mario Fritz

• FedShield-LLM: A Secure and Scalable Federated Fine-Tuned Large Language Model

  Md Jueal Mia, M. Hadi Amini

• SATversary: Adversarial Attacks on Satellite Fingerprinting

  Joshua Smailes, Sebastian Köhler, Simon Birnbach, Martin Strohmeier, Ivan Martinovic

• Benchmarking Misuse Mitigation Against Covert Adversaries

  Davis Brown, Mahdi Sabbaghi, Luze Sun, Alexander Robey, George J. Pappas, Eric Wong, Hamed Hassani

• Securing Traffic Sign Recognition Systems in Autonomous Vehicles

  Thushari Hapuarachchi, Long Dang, Kaiqi Xiong

• Membership Inference Attacks for Unseen Classes

  Pratiksha Thaker, Neil Kale, Zhiwei Steven Wu, Virginia Smith

• SDN-Based False Data Detection With Its Mitigation and Machine Learning Robustness for In-Vehicle Networks

  Long Dang, Thushari Hapuarachchi, Kaiqi Xiong, Yi Li

• A Systematic Review of Poisoning Attacks Against Large Language Models

  Neil Fendley, Edward W. Staley, Joshua Carney, William Redman, Marie Chau, Nathan Drenkow

• Adapting Under Fire: Multi-Agent Reinforcement Learning for Adversarial Drift in Network Security

  Emilia Rivas, Sabrina Saika, Ahtesham Bakht, Aritran Piplai, Nathaniel D. Bastian, Ankit Shah

• A Certified Unlearning Approach without Access to Source Data

  Umit Yigit Basaran, Sk Miraj Ahmed, Amit Roy-Chowdhury, Basak Guler

• The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs

  Songyang Liu, Chaozhuo Li, Jiameng Qiu, Xi Zhang, Feiran Huang, Litian Zhang, Yiming Hei, Philip S. Yu

2025-06-05

• Control Tax: The Price of Keeping AI in Check

  Mikhail Terekhov, Zhen Ning David Liu, Caglar Gulcehre, Samuel Albanie

• BESA: Boosting Encoder Stealing Attack with Perturbation Recovery

  Xuhao Ren, Haotian Liang, Yajie Wang, Chuan Zhang, Zehui Xiong, Liehuang Zhu

• SUCEA: Reasoning-Intensive Retrieval for Adversarial Fact-checking through Claim Decomposition and Editing

  Hongjun Liu, Yilun Zhao, Arman Cohan, Chen Zhao

• Influence Functions for Edge Edits in Non-Convex Graph Neural Networks

  Jaeseung Heo, Kyeongheung Yun, Seokwon Yoon, MoonJeong Park, Jungseul Ok, Dongwoo Kim

• Robustness as Architecture: Designing IQA Models to Withstand Adversarial Perturbations

  Igor Meleshin, Anna Chistyakova, Anastasia Antsiferova, Dmitriy Vatolin

• Identifying and Understanding Cross-Class Features in Adversarial Training

  Zeming Wei, Yiwen Guo, Yisen Wang

• Normative Conflicts and Shallow AI Alignment

  Raphaël Millière

• Evaluating the Effectiveness of Linguistic Knowledge in Pretrained Language Models: A Case Study of Universal Dependencies

  Wenxi Li

• Why LLM Safety Guardrails Collapse After Fine-tuning: A Similarity Analysis Between Alignment and Fine-tuning Datasets

  Lei Hsiung, Tianyu Pang, Yung-Chen Tang, Linyue Song, Tsung-Yi Ho, Pin-Yu Chen, Yaoqing Yang

• SRD: Reinforcement-Learned Semantic Perturbation for Backdoor Defense in VLMs

  Shuhan Xu, Siyuan Liang, Hongling Zheng, Yong Luo, Aishan Liu, Dacheng Tao

• Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors

  Svetlana Pavlitska, Jamie Robb, Nikolai Polley, Melih Yazgan, J. Marius Zöllner

• Invisible Backdoor Triggers in Image Editing Model via Deep Watermarking

  Yu-Feng Chen, Tzuhsuan Huang, Pin-Yen Chiu, Jun-Cheng Chen

• Privacy Amplification Through Synthetic Data: Insights from Linear Regression

  Clément Pierquin, Aurélien Bellet, Marc Tommasi, Matthieu Boussard

• Membership Inference Attacks on Sequence Models

  Lorenzo Rossi, Michael Aerni, Jie Zhang, Florian Tramèr

• Coordinated Robustness Evaluation Framework for Vision-Language Models

  Ashwin Ramesh Babu, Sajad Mousavi, Vineet Gundecha, Sahand Ghorbanpour, Avisek Naug, Antonio Guillen, Ricardo Luna Gutierrez, Soumyendu Sarkar

• Explainer-guided Targeted Adversarial Attacks against Binary Code Similarity Detection Models

  Mingjie Chen, Tiancheng Zhu, Mingxue Zhang, Yiling He, Minghao Lin, Penghui Li, Kui Ren

• Robustness Evaluation for Video Models with Reinforcement Learning

  Ashwin Ramesh Babu, Sajad Mousavi, Vineet Gundecha, Sahand Ghorbanpour, Avisek Naug, Antonio Guillen, Ricardo Luna Gutierrez, Soumyendu Sarkar

• Efficient Robust Conformal Prediction via Lipschitz-Bounded Networks

  Thomas Massena, Léo andéol, Thibaut Boissin, Franck Mamalet, Corentin Friedrich, Mathieu Serrurier, Sébastien Gerchinovitz

• Sentinel: SOTA model to protect against prompt injections

  Dror Ivry, Oran Nahum

• SoK: Are Watermarks in LLMs Ready for Deployment?

  Kieu Dang, Phung Lai, NhatHai Phan, Yelong Shen, Ruoming Jin, Abdallah Khreishah, My Thai

• SocialDF: Benchmark Dataset and Detection Model for Mitigating Harmful Deepfake Content on Social Media Platforms

  Arnesh Batra, Anushk Kumar, Jashn Khemani, Arush Gumber, Arhan Jain, Somil Gupta

• TRIDENT -- A Three-Tier Privacy-Preserving Propaganda Detection Model in Mobile Networks using Transformers, Adversarial Learning, and Differential Privacy

  Al Nahian Bin Emran, Dhiman Goswami, Md Hasan Ullah Sadi, Sanchari Das

• Breaking Anonymity at Scale: Re-identifying the Trajectories of 100K Real Users in Japan

  Abhishek Kumar Mishra, Mathieu Cunche, Heber H. Arcolezi

• Detection Method for Prompt Injection by Integrating Pre-trained Model and Heuristic Feature Engineering

  Yi Ji, Runzhi Li, Baolei Mao

• Exploring Adversarial Watermarking in Transformer-Based Models: Transferability and Robustness Against Defense Mechanism for Medical Images

  Rifat Sadik, Tanvir Rahman, Arpan Bhattacharjee, Bikash Chandra Halder, Ismail Hossain

• TRIDENT -- A Three-Tier Privacy-Preserving Propaganda Detection Model in Mobile Networks using Transformers, Adversarial Learning, and Differential Privacy

  Al Nahian Bin Emran, Dhiman Goswami, Md Hasan Ullah Sadi, Sanchari Das

• RIVAL: Reinforcement Learning with Iterative and Adversarial Optimization for Machine Translation

  Tianjiao Li, Mengran Yu, Chenyu Shi, Yanjun Zhao, Xiaojing Liu, Qiang Zhang, Qi Zhang, Xuanjing Huang, Jiayin Wang

• Towards Better Generalization via Distributional Input Projection Network

  Yifan Hao, Yanxin Lu, Hanning Zhang, Xinwei Shen, Tong Zhang

• Beyond Per-Querier Budgets: Rigorous and Resilient Global Privacy Enforcement for the W3C Attribution API

  Pierre Tholoniat, Alison Caulfield, Giorgio Cavicchioli, Mark Chen, Nikos Goutzoulias, Benjamin Case, Asaf Cidon, Roxana Geambasu, Mathias Lécuyer, Martin Thomson

• A Smooth Sea Never Made a Skilled SAILOR: Robust Imitation via Learning to Search

  Arnav Kumar Jain, Vibhakar Mohta, Subin Kim, Atiksh Bhardwaj, Juntao Ren, Yunhai Feng, Sanjiban Choudhury, Gokul Swamy

• HoliSafe: Holistic Safety Benchmarking and Modeling for Vision-Language Model

  Youngwan Lee, Kangsan Kim, Kwanyong Park, Ilcahe Jung, Soojin Jang, Seanie Lee, Yong-Ju Lee, Sung Ju Hwang

2025-06-04

• VLMs Can Aggregate Scattered Training Patches

  Zhanhui Zhou, Lingjie Chen, Chao Yang, Chaochao Lu

• Robustness of Prompting: Enhancing Robustness of Large Language Models Against Prompting Attacks

  Lin Mu, Guowei Chu, Li Ni, Lei Sang, Zhize Wu, Peiquan Jin, Yiwen Zhang

• DiffCAP: Diffusion-based Cumulative Adversarial Purification for Vision Language Models

  Jia Fu, Yongtao Wu, Yihang Chen, Kunyu Peng, Xiao Zhang, Volkan Cevher, Sepideh Pashami, Anders Holst

• Privacy and Security Threat for OpenAI GPTs

  Wei Wenying, Zhao Kaifa, Xue Lei, Fan Ming

• RAID: A Dataset for Testing the Adversarial Robustness of AI-Generated Image Detectors

  Hicham Eddoubi, Jonas Ricker, Federico Cocchi, Lorenzo Baraldi, Angelo Sotgiu, Maura Pintor, Marcella Cornia, Lorenzo Baraldi, Asja Fischer, Rita Cucchiara, Battista Biggio

• Vulnerability-Aware Alignment: Mitigating Uneven Forgetting in Harmful Fine-Tuning

  Liang Chen, Xueting Han, Li Shen, Jing Bai, Kam-Fai Wong

• Evaluating Apple Intelligence's Writing Tools for Privacy Against Large Language Model-Based Inference Attacks: Insights from Early Datasets

  Mohd. Farhan Israk Soumik, Syed Mhamudul Hasan, Abdur R. Shahid

• Prediction Inconsistency Helps Achieve Generalizable Detection of Adversarial Examples

  Sicong Han, Chenhao Lin, Zhengyu Zhao, Xiyuan Wang, Xinlei He, Qian Li, Cong Wang, Qian Wang, Chao Shen

• Through the Stealth Lens: Rethinking Attacks and Defenses in RAG

  Sarthak Choudhary, Nils Palumbo, Ashish Hooda, Krishnamurthy Dj Dvijotham, Somesh Jha

• Is Perturbation-Based Image Protection Disruptive to Image Editing?

  Qiuyu Tang, Bonor Ayambem, Mooi Choo Chuah, Aparna Bharati

• Gradient Inversion Attacks on Parameter-Efficient Fine-Tuning

  Hasin Us Sami, Swapneel Sen, Amit K. Roy-Chowdhury, Srikanth V. Krishnamurthy, Basak Guler

• Robust Anti-Backdoor Instruction Tuning in LVLMs

  Yuan Xun, Siyuan Liang, Xiaojun Jia, Xinwei Liu, Xiaochun Cao

• Sylva: Tailoring Personalized Adversarial Defense in Pre-trained Models via Collaborative Fine-tuning

  Tianyu Qi, Lei Xue, Yufeng Zhan, Xiaobo Ma

• Poisoning Behavioral-based Worker Selection in Mobile Crowdsensing using Generative Adversarial Networks

  Ruba Nasser, Ahmed Alagha, Shakti Singh, Rabeb Mizouni, Hadi Otrok, Jamal Bentahar

• RedDebate: Safer Responses through Multi-Agent Red Teaming Debates

  Ali Asad, Stephen Obadinma, Radin Shayanfar, Xiaodan Zhu

• TRiSM for Agentic AI: A Review of Trust, Risk, and Security Management in LLM-based Agentic Multi-Agent Systems

  Shaina Raza, Ranjan Sapkota, Manoj Karkee, Christos Emmanouilidis

• macOSWorld: A Multilingual Interactive Benchmark for GUI Agents

  Pei Yang, Hai Ci, Mike Zheng Shou

• Higher-Order Singular-Value Derivatives of Rectangular Real Matrices

  Róisín Luo, James McDermott, Colm O'Riordan

2025-06-03

• VPI-Bench: Visual Prompt Injection Attacks for Computer-Use Agents

  Tri Cao, Bennett Lim, Yue Liu, Yuan Sui, Yuexin Li, Shumin Deng, Lin Lu, Nay Oo, Shuicheng Yan, Bryan Hooi

• Shaking to Reveal: Perturbation-Based Detection of LLM Hallucinations

  Jinyuan Luo, Zhen Fang, Yixuan Li, Seongheon Park, Ling Chen

• MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models

  Xueqi Cheng, Minxing Zheng, Shixiang Zhu, Yushun Dong

• ATAG: AI-Agent Application Threat Assessment with Attack Graphs

  Parth Atulbhai Gandhi, Akansha Shukla, David Tayouri, Beni Ifland, Yuval Elovici, Rami Puzis, Asaf Shabtai

• How Explanations Leak the Decision Logic: Stealing Graph Neural Networks via Explanation Alignment

  Bin Ma, Yuyuan Feng, Minhua Lin, Enyan Dai

• Should LLM Safety Be More Than Refusing Harmful Instructions?

  Utsav Maskey, Mark Dras, Usman Naseem

• BitBypass: A New Direction in Jailbreaking Aligned Large Language Models with Bitstream Camouflage

  Kalyan Nakka, Nitesh Saxena

• Synthetic Iris Image Databases and Identity Leakage: Risks and Mitigation Strategies

  Ada Sawilska, Mateusz Trokielewicz

• Explicitly Modeling Subcortical Vision with a Neuro-Inspired Front-End Improves CNN Robustness

  Lucas Piper, Arlindo L. Oliveira, Tiago Marques

• On the Robustness of Tabular Foundation Models: Test-Time Attacks and In-Context Defenses

  Mohamed Djilani, Thibault Simonetto, Karim Tit, Florian Tambon, Paul Récamier, Salah Ghamizi, Maxime Cordy, Mike Papadakis

• Agnostic Learning under Targeted Poisoning: Optimal Rates and the Role of Randomness

  Bogdan Chornomaz, Yonatan Koren, Shay Moran, Tom Waknine

• On the Benefits of Accelerated Optimization in Robust and Private Estimation

  Laurentiu Andrei Marchis, Po-Ling Loh

• Tarallo: Evading Behavioral Malware Detectors in the Problem Space

  Gabriele Digregorio, Salvatore Maccarrone, Mario D'Onghia, Luigi Gallo, Michele Carminati, Mario Polino, Stefano Zanero

• Poster: FedBlockParadox -- A Framework for Simulating and Securing Decentralized Federated Learning

  Gabriele Digregorio, Francesco Bleggi, Federico Caroli, Michele Carminati, Stefano Zanero, Stefano Longari

• Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack

  Jing Xue, Zhishen Sun, Haishan Ye, Luo Luo, Xiangyu Chang, Ivor Tsang, Guang Dai

• Helpful Agent Meets Deceptive Judge: Understanding Vulnerabilities in Agentic Workflows

  Yifei Ming, Zixuan Ke, Xuan-Phi Nguyen, Jiayu Wang, Shafiq Joty

• BadReward: Clean-Label Poisoning of Reward Models in Text-to-Image RLHF

  Kaiwen Duan, Hongwei Yao, Yufei Chen, Ziyun Li, Tong Qiao, Zhan Qin, Cong Wang

• Adversarial Attacks on Robotic Vision Language Action Models

  Eliot Krzysztof Jones, Alexander Robey, Andy Zou, Zachary Ravichandran, George J. Pappas, Hamed Hassani, Matt Fredrikson, J. Zico Kolter

• Robustness in Both Domains: CLIP Needs a Robust Text Encoder

  Elias Abad Rocamora, Christian Schlarmann, Naman Deep Singh, Yongtao Wu, Matthias Hein, Volkan Cevher

• Dynamic Epsilon Scheduling: A Multi-Factor Adaptive Perturbation Budget for Adversarial Training

  Alan Mitkiy, James Smith, Hana Satou, Hiroshi Tanaka, Emily Johnson, F Monkey

• How stealthy is stealthy? Studying the Efficacy of Black-Box Adversarial Attacks in the Real World

  Francesco Panebianco, Mario D'Onghia, Stefano Zanero aand Michele Carminati

• Attacking Attention of Foundation Models Disrupts Downstream Tasks

  Hondamunige Prasanna Silva, Federico Becattini, Lorenzo Seidenari

2025-06-02

• Unlearning's Blind Spots: Over-Unlearning and Prototypical Relearning Attack

  SeungBum Ha, Saerom Park, Sung Whan Yoon

• ReconXF: Graph Reconstruction Attack via Public Feature Explanations on Privatized Node Features and Labels

  Rishi Raj Sahoo, Rucha Bhalchandra Joshi, Subhankar Mishra

• Mitigating Data Poisoning Attacks to Local Differential Privacy

  Xiaolin Li, Ninghui Li, Boyang Wang, Wenhai Sun

• Fingerprinting Deep Learning Models via Network Traffic Patterns in Federated Learning

  Md Nahid Hasan Shuvo, Moinul Hossain

• Dirty and Clean-Label attack detection using GAN discriminators

  John W. Smutny

• Comprehensive Vulnerability Analysis is Necessary for Trustworthy LLM-MAS

  Pengfei He, Yue Xing, Shen Dong, Juanhui Li, Zhenwei Dai, Xianfeng Tang, Hui Liu, Han Xu, Zhen Xiang, Charu C. Aggarwal, Hui Liu

• Variance-Based Defense Against Blended Backdoor Attacks

  Sujeevan Aseervatham, Achraf Kerzazi, Younès Bennani

• MMD-Flagger: Leveraging Maximum Mean Discrepancy to Detect Hallucinations

  Kensuke Mitsuzawa, Damien Garreau

• Self-Refining Language Model Anonymizers via Adversarial Distillation

  Kyuyoung Kim, Hyunjun Jeon, Jinwoo Shin

• Learning of Population Dynamics: Inverse Optimization Meets JKO Scheme

  Mikhail Persiianov, Jiawei Chen, Petr Mokrov, Alexander Tyurin, Evgeny Burnaev, Alexander Korotin

2025-06-01

• CoP: Agentic Red-teaming for Large Language Models using Composition of Principles

  Chen Xiong, Pin-Yu Chen, Tsung-Yi Ho

• Jailbreak-R1: Exploring the Jailbreak Capabilities of LLMs via Reinforcement Learning

  Weiyang Guo, Zesheng Shi, Zhuo Li, Yequan Wang, Xuebo Liu, Wenya Wang, Fangming Liu, Min Zhang, Jing Li

• Unlearning Inversion Attacks for Graph Neural Networks

  Jiahao Zhang, Yilong Wang, Zhiwei Zhang, Xiaorui Liu, Suhang Wang

• SafeGenes: Evaluating the Adversarial Robustness of Genomic Foundation Models

  Huixin Zhan, Jason H. Moore

• Understanding and Mitigating Cross-lingual Privacy Leakage via Language-specific and Universal Privacy Neurons

  Wenshuo Dong, Qingsong Yang, Shu Yang, Lijie Hu, Meng Ding, Wanyu Lin, Tianhang Zheng, Di Wang

• CAPAA: Classifier-Agnostic Projector-Based Adversarial Attack

  Zhan Li, Mingyu Zhao, Xin Dong, Haibin Ling, Bingyao Huang

• Fighting Fire with Fire (F3): A Training-free and Efficient Visual Adversarial Example Purification Method in LVLMs

  Yudong Zhang, Ruobing Xie, Yiqi