{"id":"https://openalex.org/W4414693446","doi":"https://doi.org/10.1109/tdsc.2025.3616288","title":"Toward a Secure Framework for Regulating Artificial Intelligence Systems","display_name":"Toward a Secure Framework for Regulating Artificial Intelligence Systems","publication_year":2025,"publication_date":"2025-10-01","ids":{"openalex":"https://openalex.org/W4414693446","doi":"https://doi.org/10.1109/tdsc.2025.3616288"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2025.3616288","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3616288","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5019308050","display_name":"Haroon Elahi","orcid":"https://orcid.org/0000-0001-9097-2484"},"institutions":[{"id":"https://openalex.org/I66862912","display_name":"Chalmers University of Technology","ror":"https://ror.org/040wg7k59","country_code":"SE","type":"education","lineage":["https://openalex.org/I66862912"]},{"id":"https://openalex.org/I881427289","display_name":"University of Gothenburg","ror":"https://ror.org/01tm6cn81","country_code":"SE","type":"education","lineage":["https://openalex.org/I881427289"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Haroon Elahi","raw_affiliation_strings":["Department of Computer Science and Engineering, Chalmers University of Technology, Göteborg, Sweden","Department of Computer Science and Engineering, Chalmers University of Technology and the University of Gothenburg, Sweden"],"raw_orcid":"https://orcid.org/0000-0001-9097-2484","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Chalmers University of Technology, Göteborg, Sweden","institution_ids":["https://openalex.org/I66862912"]},{"raw_affiliation_string":"Department of Computer Science and Engineering, Chalmers University of Technology and the University of Gothenburg, Sweden","institution_ids":["https://openalex.org/I66862912","https://openalex.org/I881427289"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Nian Liu","orcid":"https://orcid.org/0009-0002-4481-9395"},"institutions":[{"id":"https://openalex.org/I3045169105","display_name":"Southern University of Science and Technology","ror":"https://ror.org/049tv2d57","country_code":"CN","type":"education","lineage":["https://openalex.org/I3045169105"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Nian Liu","raw_affiliation_strings":["Department of Computer Science and Engineering, Southern University of Science and Technology, Shenzhen, China"],"raw_orcid":"https://orcid.org/0009-0002-4481-9395","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Southern University of Science and Technology, Shenzhen, China","institution_ids":["https://openalex.org/I3045169105"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jiatong Chen","orcid":"https://orcid.org/0009-0008-8402-8583"},"institutions":[{"id":"https://openalex.org/I3045169105","display_name":"Southern University of Science and Technology","ror":"https://ror.org/049tv2d57","country_code":"CN","type":"education","lineage":["https://openalex.org/I3045169105"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiatong Chen","raw_affiliation_strings":["Department of Computer Science and Engineering, Southern University of Science and Technology, Shenzhen, China"],"raw_orcid":"https://orcid.org/0009-0008-8402-8583","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Southern University of Science and Technology, Shenzhen, China","institution_ids":["https://openalex.org/I3045169105"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101886601","display_name":"Fengwei Zhang","orcid":"https://orcid.org/0000-0003-3365-2526"},"institutions":[{"id":"https://openalex.org/I3045169105","display_name":"Southern University of Science and Technology","ror":"https://ror.org/049tv2d57","country_code":"CN","type":"education","lineage":["https://openalex.org/I3045169105"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fengwei Zhang","raw_affiliation_strings":["Department of Computer Science and Engineering, Southern University of Science and Technology, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0003-3365-2526","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Southern University of Science and Technology, Shenzhen, China","institution_ids":["https://openalex.org/I3045169105"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.3237,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.85344852,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"23","issue":"1","first_page":"1373","last_page":"1389"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.8833000063896179,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.8833000063896179,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T13851","display_name":"Law, AI, and Intellectual Property","score":0.838100016117096,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.6661999821662903},{"id":"https://openalex.org/keywords/flexibility","display_name":"Flexibility (engineering)","score":0.5986999869346619},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5364000201225281},{"id":"https://openalex.org/keywords/certification","display_name":"Certification","score":0.4560999870300293},{"id":"https://openalex.org/keywords/orchestration","display_name":"Orchestration","score":0.3846000134944916},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.38040000200271606}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7634999752044678},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.6661999821662903},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.5986999869346619},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5364000201225281},{"id":"https://openalex.org/C46304622","wikidata":"https://www.wikidata.org/wiki/Q374814","display_name":"Certification","level":2,"score":0.4560999870300293},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4510999917984009},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.41920000314712524},{"id":"https://openalex.org/C199168358","wikidata":"https://www.wikidata.org/wiki/Q3367000","display_name":"Orchestration","level":3,"score":0.3846000134944916},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.38040000200271606},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3513999879360199},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2989000082015991},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.28110000491142273},{"id":"https://openalex.org/C78780964","wikidata":"https://www.wikidata.org/wiki/Q7233193","display_name":"Position paper","level":2,"score":0.26570001244544983},{"id":"https://openalex.org/C2780795517","wikidata":"https://www.wikidata.org/wiki/Q6030997","display_name":"Information assurance","level":3,"score":0.2565999925136566},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.25609999895095825},{"id":"https://openalex.org/C2779033394","wikidata":"https://www.wikidata.org/wiki/Q5186733","display_name":"Critical infrastructure protection","level":3,"score":0.25519999861717224}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3616288","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3616288","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G637702150","display_name":null,"funder_award_id":"62372218","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7261537663","display_name":null,"funder_award_id":"U24A6009","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W4471378","https://openalex.org/W2001771035","https://openalex.org/W2041713059","https://openalex.org/W2146950091","https://openalex.org/W2200922230","https://openalex.org/W2216871743","https://openalex.org/W2511953903","https://openalex.org/W2888307014","https://openalex.org/W2922234936","https://openalex.org/W3007157104","https://openalex.org/W3048592926","https://openalex.org/W3104128335","https://openalex.org/W3156113199","https://openalex.org/W3161274233","https://openalex.org/W3166449174","https://openalex.org/W3169839597","https://openalex.org/W3183963725","https://openalex.org/W3204683301","https://openalex.org/W3211982349","https://openalex.org/W3214376792","https://openalex.org/W3216644311","https://openalex.org/W4284974349","https://openalex.org/W4304142408","https://openalex.org/W4318344098","https://openalex.org/W4379620283","https://openalex.org/W4391724817","https://openalex.org/W4392414346","https://openalex.org/W4392609567"],"related_works":[],"abstract_inverted_index":{"Regulating":[0],"high-risk":[1,255],"artificial":[2],"intelligence":[3],"(AI)":[4],"systems":[5],"is":[6],"an":[7,130,253],"urgent":[8],"issue,":[9],"yet":[10],"technical":[11,32],"infrastructure":[12],"for":[13,34,70,90,117,123,181,211],"their":[14],"effective":[15],"regulation":[16,37,183],"remains":[17],"scarce.":[18],"In":[19,49,108],"this":[20,24,50],"paper,":[21],"we":[22,52,110,175,189,259],"address":[23,46],"gap":[25],"by":[26,230],"identifying":[27],"key":[28],"challenges":[29],"in":[30,155,170,238],"developing":[31],"frameworks":[33],"AI":[35,118,182,243,256],"systems'":[36],"and":[38,42,60,94,112,126,134,144,161,195,224,241,246],"proposing":[39],"conceptual,":[40],"methodological,":[41],"practical":[43,226],"solutions":[44],"to":[45,67,73,157,163,172,198,234],"these":[47],"challenges.":[48],"regard,":[51],"introduce":[53,95,176],"the":[54,62,75,96,141,164,173,186,217,220,225,261],"concept":[55],"of":[56,104,129,136,148,219,228,248,264],"AI's":[57,76,82,105,131],"operational":[58,77,83,87,97,132],"qualification":[59,84,98,133,244],"propose":[61,80],"temporal":[63,221],"self-replacement":[64,222],"test,":[65],"akin":[66],"certification":[68],"tests":[69],"human":[71],"operators,":[72],"examine":[74],"qualification.":[78],"We":[79,202,215],"measuring":[81],"across":[85],"its":[86,91,137,151,232,249],"properties":[88],"critical":[89],"regulatory":[92,106,138,152,159,236,250],"fitness":[93,251],"score":[99],"as":[100],"a":[101,114,121,177],"pragmatic":[102],"measure":[103],"fitness.":[107],"addition,":[109],"design":[111],"develop":[113],"Secure":[115,206],"Framework":[116],"Regulation":[119],"(SFAIR),":[120],"tool":[122],"automatic,":[124],"recurrent,":[125,240],"secure":[127,199,242],"examination":[128,245],"attestation":[135,247],"fitness,":[139],"leveraging":[140],"proposed":[142],"test":[143,223],"measure.":[145],"Key":[146],"strengths":[147],"SFAIR":[149,200,229,265],"include":[150],"focus,":[153],"flexibility":[154],"adapting":[156],"evolving":[158],"requirements,":[160],"conformity":[162],"secure-by-design":[165],"principle.":[166],"To":[167],"achieve":[168],"this,":[169],"addition":[171],"aforementioned,":[174],"novel":[178],"threat":[179],"model":[180],"frameworks.":[184],"Considering":[185],"identified":[187],"threats,":[188],"leverage":[190,204],"randomization,":[191],"masking,":[192],"encryption-based":[193],"schemes,":[194],"real-time":[196],"monitoring":[197],"operations.":[201],"also":[203],"AMD's":[205],"Encrypted":[207],"Virtualization-Encrypted":[208],"State":[209],"(SEV-ES)":[210],"enhanced":[212],"system":[213],"security.":[214],"validate":[216],"efficacy":[218],"utility":[227],"demonstrating":[231],"capability":[233],"support":[235],"authorities":[237],"automated,":[239],"using":[252],"open-source,":[254],"system.":[257],"Finally,":[258],"make":[260],"source":[262],"code":[263],"publicly":[266],"available.":[267]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-01-19T04:01:09.351973","created_date":"2025-10-10T00:00:00"}