{"id":"https://openalex.org/W7161711838","doi":"https://doi.org/10.48550/arxiv.2605.17406","title":"Rethinking Side-Channel Analysis: Automated Discovery and Analysis of Side-Channel Leakage with LLM-Assisted Agents","display_name":"Rethinking Side-Channel Analysis: Automated Discovery and Analysis of Side-Channel Leakage with LLM-Assisted Agents","publication_year":2026,"publication_date":"2026-05-17","ids":{"openalex":"https://openalex.org/W7161711838","doi":"https://doi.org/10.48550/arxiv.2605.17406"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.17406","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17406","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.17406","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136497939","display_name":"Zhen Xu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xu, Zhen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136503742","display_name":"Zihao Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Zihao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136455910","display_name":"Yuhua Sun","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sun, Yuhua","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136490915","display_name":"XiaoFeng Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, XiaoFeng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.6807000041007996,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.6807000041007996,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.18289999663829803,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.09359999746084213,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7268000245094299},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.6026999950408936},{"id":"https://openalex.org/keywords/bespoke","display_name":"Bespoke","score":0.5565999746322632},{"id":"https://openalex.org/keywords/leakage","display_name":"Leakage (economics)","score":0.4165000021457672},{"id":"https://openalex.org/keywords/repurposing","display_name":"Repurposing","score":0.36970001459121704},{"id":"https://openalex.org/keywords/knowledge-base","display_name":"Knowledge base","score":0.3601999878883362},{"id":"https://openalex.org/keywords/modular-design","display_name":"Modular design","score":0.3596999943256378},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.3589000105857849},{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.3564000129699707}],"concepts":[{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7268000245094299},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6881999969482422},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.6026999950408936},{"id":"https://openalex.org/C44210515","wikidata":"https://www.wikidata.org/wiki/Q16968978","display_name":"Bespoke","level":2,"score":0.5565999746322632},{"id":"https://openalex.org/C2777042071","wikidata":"https://www.wikidata.org/wiki/Q6509304","display_name":"Leakage (economics)","level":2,"score":0.4165000021457672},{"id":"https://openalex.org/C519536355","wikidata":"https://www.wikidata.org/wiki/Q21021151","display_name":"Repurposing","level":2,"score":0.36970001459121704},{"id":"https://openalex.org/C4554734","wikidata":"https://www.wikidata.org/wiki/Q593744","display_name":"Knowledge base","level":2,"score":0.3601999878883362},{"id":"https://openalex.org/C101468663","wikidata":"https://www.wikidata.org/wiki/Q1620158","display_name":"Modular design","level":2,"score":0.3596999943256378},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.3589000105857849},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.3564000129699707},{"id":"https://openalex.org/C56666940","wikidata":"https://www.wikidata.org/wiki/Q788790","display_name":"Documentation","level":2,"score":0.3560999929904938},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.34529998898506165},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3366999924182892},{"id":"https://openalex.org/C100776233","wikidata":"https://www.wikidata.org/wiki/Q2532492","display_name":"Bridge (graph theory)","level":2,"score":0.3260999917984009},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.2939000129699707},{"id":"https://openalex.org/C126042441","wikidata":"https://www.wikidata.org/wiki/Q1324888","display_name":"Frame (networking)","level":2,"score":0.2921000123023987},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.28929999470710754},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2851000130176544},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.27410000562667847},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.27390000224113464},{"id":"https://openalex.org/C2776240099","wikidata":"https://www.wikidata.org/wiki/Q327018","display_name":"Interrogation","level":2,"score":0.27379998564720154},{"id":"https://openalex.org/C132964779","wikidata":"https://www.wikidata.org/wiki/Q2110223","display_name":"Raw data","level":2,"score":0.2712000012397766},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.259799987077713},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.2547000050544739},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.25110000371932983},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.25049999356269836},{"id":"https://openalex.org/C170130773","wikidata":"https://www.wikidata.org/wiki/Q216378","display_name":"Usability","level":2,"score":0.25029999017715454},{"id":"https://openalex.org/C2780264999","wikidata":"https://www.wikidata.org/wiki/Q7445032","display_name":"Security domain","level":2,"score":0.2500999867916107}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.17406","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17406","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.17406","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17406","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.7431096434593201,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Side-channel":[0],"attacks":[1],"exploit":[2],"unintended":[3],"information":[4],"leakage":[5,81],"from":[6],"system":[7,57,120,142],"behavior":[8],"and":[9,28,35,44,78,91,144,154,194,238],"continue":[10],"to":[11,148,177],"pose":[12],"serious":[13],"privacy":[14],"risks":[15],"in":[16,61,249],"modern":[17],"platforms.":[18],"Despite":[19],"extensive":[20],"prior":[21],"work,":[22],"side-channel":[23,106,192],"analysis":[24,160],"remains":[25],"largely":[26],"manual":[27,76],"fragmented,":[29],"typically":[30],"assuming":[31],"predefined":[32],"target":[33],"events":[34,58,69],"a":[36,166,201,217],"fixed":[37],"set":[38],"of":[39,136],"known":[40],"channels.":[41],"As":[42],"systems":[43],"applications":[45],"grow":[46],"increasingly":[47],"complex,":[48],"several":[49],"fundamental":[50],"questions":[51],"remain":[52],"unanswered:":[53],"which":[54],"user":[55],"or":[56],"are":[59],"sensitive":[60,111,246],"practice,":[62],"how":[63,79],"side":[64,130,223],"channels":[65,131,224],"associated":[66],"with":[67],"these":[68,97],"can":[70,82],"be":[71,83],"systematically":[72,128],"discovered":[73],"without":[74,87],"exhaustive":[75],"effort,":[77],"their":[80],"analyzed":[84],"at":[85],"scale":[86],"prohibitive":[88],"data":[89],"collection":[90],"model":[92],"training":[93],"costs.":[94],"To":[95,109,127,157,185],"address":[96],"questions,":[98],"we":[99],"present":[100],"SCAgent,":[101],"an":[102],"automated":[103],"framework":[104],"for":[105,181],"risk":[107,135],"analysis.":[108,210],"identify":[110],"targets":[112],"beyond":[113],"manually":[114],"specified":[115],"events,":[116],"SCAgent":[117,164,198,213],"performs":[118],"agent-driven":[119],"exploration":[121],"guided":[122],"by":[123,226],"LLM-based":[124],"semantic":[125,150],"reasoning.":[126],"discover":[129],"while":[132],"mitigating":[133],"the":[134,175,187],"LLM":[137],"hallucination,":[138],"it":[139],"reasons":[140],"over":[141],"documentation":[143],"incorporates":[145],"explicit":[146],"verification":[147],"enforce":[149],"consistency,":[151],"threat-model":[152],"feasibility,":[153],"per-channel":[155],"usability.":[156],"enable":[158],"scalable":[159],"under":[161],"limited":[162],"data,":[163],"adopts":[165],"few-shot":[167],"learning":[168],"paradigm":[169],"based":[170],"on":[171,214,221],"foundation":[172,196],"models,":[173,197],"avoiding":[174],"need":[176],"train":[178],"bespoke":[179],"models":[180],"each":[182],"channel--event":[183],"pair.":[184],"bridge":[186],"gap":[188],"between":[189],"raw":[190],"time-series":[191],"signals":[193],"tabular":[195],"further":[199],"introduces":[200],"time-shift--robust":[202],"feature":[203],"extraction":[204],"layer":[205],"that":[206],"enables":[207],"effective":[208],"downstream":[209],"We":[211],"instantiate":[212],"iOS":[215],"as":[216,235,241,243],"first":[218],"step,":[219],"focusing":[220],"OS-level":[222],"observable":[225],"unprivileged":[227],"applications.":[228,251],"Our":[229],"evaluation":[230],"spans":[231],"standard":[232],"benchmarks":[233],"such":[234],"foreground":[236],"app":[237],"website":[239],"fingerprinting,":[240],"well":[242],"newly":[244],"identified":[245],"in-app":[247],"activities":[248],"popular":[250]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-20T00:00:00"}
