{"id":"https://openalex.org/W7140324895","doi":"https://doi.org/10.48550/arxiv.2603.22612","title":"BioShield: A Context-Aware Firewall for Securing Bio-LLMs","display_name":"BioShield: A Context-Aware Firewall for Securing Bio-LLMs","publication_year":2026,"publication_date":"2026-03-23","ids":{"openalex":"https://openalex.org/W7140324895","doi":"https://doi.org/10.48550/arxiv.2603.22612"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.22612","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.22612","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.22612","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5130617254","display_name":"Protiva Das","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Das, Protiva","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103049423","display_name":"Sovon Chakraborty","orcid":"https://orcid.org/0000-0003-0765-1060"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chakraborty, Sovon","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5117435685","display_name":"Sidhant Narula","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Narula, Sidhant","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130568624","display_name":"Lucas Potter","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Potter, Lucas","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001266997","display_name":"Xavier\u2010Lewis Palmer","orcid":"https://orcid.org/0000-0002-1289-5302"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Palmer, Xavier-Lewis","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018203536","display_name":"Pratip Rana","orcid":"https://orcid.org/0000-0001-9199-2479"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rana, Pratip","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002423453","display_name":"Daniel Takabi","orcid":"https://orcid.org/0000-0003-0447-3641"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Takabi, Daniel","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5056801967","display_name":"Mohammad GhasemiGol","orcid":"https://orcid.org/0000-0001-6661-0942"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ghasemigol, Mohammad","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.17180000245571136,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.17180000245571136,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.1655000001192093,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11710","display_name":"Biomedical Text Mining and Ontologies","score":0.093299999833107,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/firewall","display_name":"Firewall (physics)","score":0.772599995136261},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.5889000296592712},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.4968999922275543},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.3709999918937683},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.3467999994754791}],"concepts":[{"id":"https://openalex.org/C77714075","wikidata":"https://www.wikidata.org/wiki/Q5452017","display_name":"Firewall (physics)","level":5,"score":0.772599995136261},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7386000156402588},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6855000257492065},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.5889000296592712},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.5029000043869019},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.4968999922275543},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3709999918937683},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.3467999994754791},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2824000120162964},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.27410000562667847},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.2685999870300293},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.26589998602867126},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.25870001316070557}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.22612","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.22612","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.22612","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.22612","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.5688344240188599,"id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0,115],"rapid":[1],"advancement":[2],"of":[3,52,100,112],"Large":[4],"Language":[5],"Models":[6],"(LLMs)":[7],"in":[8,230],"biological":[9,47,74,124,184,243],"research":[10,54,141],"has":[11],"significantly":[12],"lowered":[13],"the":[14,50,98,154,162,192],"barrier":[15],"to":[16,44,90,123,129,134,166],"accessing":[17],"complex":[18],"bioinformatics":[19],"knowledge,":[20],"ex":[21,144],"perimental":[22],"design":[23],"strategies,":[24],"and":[25,63,76,232],"analytical":[26],"workflows.":[27],"While":[28],"these":[29],"capabilities":[30],"accelerate":[31],"innovation,":[32],"they":[33],"also":[34],"introduce":[35],"serious":[36],"dual-use":[37,95,125,227],"risks,":[38],"as":[39,59],"Bio-LLMs":[40,231],"can":[41],"be":[42],"exploited":[43],"generate":[45],"harmful":[46,119],"insights":[48],"under":[49,197],"guise":[51],"legitimate":[53],"queries.":[55,114],"Existing":[56],"safeguards,":[57],"such":[58],"static":[60],"prompt":[61,105,204],"filtering":[62],"policy-based":[64],"restrictions,":[65],"are":[66,70,150],"insufficient":[67],"when":[68],"LLMs":[69,93],"embedded":[71],"within":[72,138],"dynamic":[73],"workflows":[75],"application-layer":[77],"systems.":[78],"In":[79,164],"this":[80],"paper,":[81],"we":[82],"present":[83],"BioShield,":[84],"a":[85,103,118,146,171,211,234],"context-aware":[86],"application-level":[87],"firewall":[88],"designed":[89,216],"secure":[91],"Bio":[92],"against":[94],"attacks.":[96],"At":[97],"core":[99],"BioShield":[101,169,209],"is":[102,190],"domain-specific":[104],"scanner":[106,116],"that":[107,132,176],"performs":[108],"contextual":[109,203],"risk":[110,148],"analysis":[111],"incoming":[113],"leverages":[117],"scoring":[120],"mechanism":[121],"tailored":[122],"threat":[126,228],"cat":[127],"egories":[128],"identify":[130],"prompts":[131],"attempt":[133],"conceal":[135],"malicious":[136],"intent":[137],"seemingly":[139],"benign":[140],"requests.":[142],"Queries":[143],"ceeding":[145],"predefined":[147],"threshold":[149],"blocked":[151],"before":[152],"reaching":[153],"model,":[155],"effectively":[156],"preventing":[157],"unsafe":[158,188],"knowledge":[159],"generation":[160],"at":[161],"source.":[163],"addition":[165],"pre-generation":[167],"protection,":[168],"deploys":[170],"post-generation":[172],"output":[173],"verification":[174],"module":[175],"inspects":[177],"model":[178],"responses":[179],"for":[180,217,238],"actionable":[181],"or":[182],"weaponizable":[183],"content.":[185],"If":[186],"an":[187],"response":[189],"detected,":[191],"system":[193],"triggers":[194],"controlled":[195],"regeneration":[196],"strengthened":[198],"safety":[199],"constraints.":[200],"By":[201],"combining":[202],"scanning":[205],"with":[206],"response-level":[207],"validation,":[208],"provides":[210],"layered":[212],"defense":[213],"framework":[214,222],"specifically":[215],"bio-domain":[218],"LLM":[219],"deployments.":[220],"Our":[221],"advances":[223],"cyberbiosecurity":[224],"by":[225],"formalizing":[226],"detection":[229],"proposing":[233],"structured":[235],"mitigation":[236],"strategy":[237],"secure,":[239],"responsible":[240],"AI":[241],"driven":[242],"research.":[244]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-03-26T00:00:00"}