{"meta": {"count": 1000, "db_response_time_ms": 52, "page": 1, "per_page": 100, "groups_count": null, "x_query": {"oql": "get works where retracted is (false)\n  and year is (2025)\n  and title-abstract has ((stemmed \"adversarial attack\" OR stemmed \"adversarial example\" OR stemmed \"adversarial robustness\" OR stemmed \"data poisoning\" OR stemmed \"jailbreak\" OR stemmed \"model backdoor\" OR stemmed \"prompt injection\") AND (stemmed \"artificial intelligence\" OR stemmed \"deep learning\" OR stemmed \"language model\" OR stemmed \"large language model\" OR stemmed \"machine learning\" OR stemmed \"neural network\" OR stemmed \"vision language model\"))\n  and type is (article or preprint or review);\nthen sample (1000) of those works with seed (42)", "oqo": {"get_rows": "works", "filter_rows": [{"column_id": "is_retracted", "value": false}, {"column_id": "publication_year", "value": 2025}, {"join": "or", "filters": [{"column_id": "title_and_abstract.search", "value": "\"adversarial attack\"", "operator": "has"}, {"column_id": "title_and_abstract.search", "value": "\"adversarial example\"", "operator": "has"}, {"column_id": "title_and_abstract.search", "value": "\"adversarial robustness\"", "operator": "has"}, {"column_id": "title_and_abstract.search", "value": "\"data poisoning\"", "operator": "has"}, {"column_id": "title_and_abstract.search", "value": "\"jailbreak\"", "operator": "has"}, {"column_id": "title_and_abstract.search", "value": "\"model backdoor\"", "operator": "has"}, {"column_id": "title_and_abstract.search", "value": "\"prompt injection\"", "operator": "has"}]}, {"join": "or", "filters": [{"column_id": "title_and_abstract.search", "value": "\"artificial intelligence\"", "operator": "has"}, {"column_id": "title_and_abstract.search", "value": "\"deep learning\"", "operator": "has"}, {"column_id": "title_and_abstract.search", "value": "\"language model\"", "operator": "has"}, {"column_id": "title_and_abstract.search", "value": "\"large language model\"", "operator": "has"}, {"column_id": "title_and_abstract.search", "value": "\"machine learning\"", "operator": "has"}, {"column_id": "title_and_abstract.search", "value": "\"neural network\"", "operator": "has"}, {"column_id": "title_and_abstract.search", "value": "\"vision language model\"", "operator": "has"}]}, {"join": "or", "filters": [{"column_id": "type", "value": "article"}, {"column_id": "type", "value": "preprint"}, {"column_id": "type", "value": "review"}]}], "sample": 1000, "seed": "42"}, "url": "/works?filter=is_retracted:false,publication_year:2025,title_and_abstract.search:%22adversarial attack%22|%22adversarial example%22|%22adversarial robustness%22|%22data poisoning%22|%22jailbreak%22|%22model backdoor%22|%22prompt injection%22,title_and_abstract.search:%22artificial intelligence%22|%22deep learning%22|%22language model%22|%22large language model%22|%22machine learning%22|%22neural network%22|%22vision language model%22,type:article|preprint|review&sample=1000&seed=42&per_page=100&page=1"}, "cost_usd": 0.001}, "results": [{"id": "https://openalex.org/W4411277261", "doi": "https://doi.org/10.3390/electronics14122422", "title": "A Survey on Reinforcement Learning-Driven Adversarial Sample Generation for PE Malware", "publication_year": 2025, "publication_date": "2025-06-13", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5100767817", "display_name": "Tong Yu", "orcid": "https://orcid.org/0000-0002-5991-2050", "observed_orcids": ["https://orcid.org/0000-0002-5991-2050"]}, "institutions": [{"id": "https://openalex.org/I169689159", "display_name": "PLA Information Engineering University", "ror": "https://ror.org/00mm1qk40", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I169689159"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Yu Tong", "raw_affiliation_strings": ["Information Technology Research Institute, Information Engineering University, Zhengzhou 450002, China", "Key Laboratory of Cyberspace Security, Ministry of Education of China, Zhengzhou 450002, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Information Technology Research Institute, Information Engineering University, Zhengzhou 450002, China", "institution_ids": ["https://openalex.org/I169689159"]}, {"raw_affiliation_string": "Key Laboratory of Cyberspace Security, Ministry of Education of China, Zhengzhou 450002, China", "institution_ids": []}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5101459887", "display_name": "Hao Liang", "orcid": "https://orcid.org/0000-0002-1051-6129", "observed_orcids": ["https://orcid.org/0000-0002-1051-6129", "https://orcid.org/0000-0003-1891-8453"]}, "institutions": [{"id": "https://openalex.org/I169689159", "display_name": "PLA Information Engineering University", "ror": "https://ror.org/00mm1qk40", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I169689159"]}], "countries": ["CN"], "is_corresponding": true, "raw_author_name": "Hao Liang", "raw_affiliation_strings": ["Information Technology Research Institute, Information Engineering University, Zhengzhou 450002, China", "Key Laboratory of Cyberspace Security, Ministry of Education of China, Zhengzhou 450002, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Information Technology Research Institute, Information Engineering University, Zhengzhou 450002, China", "institution_ids": ["https://openalex.org/I169689159"]}, {"raw_affiliation_string": "Key Laboratory of Cyberspace Security, Ministry of Education of China, Zhengzhou 450002, China", "institution_ids": []}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5000964762", "display_name": "Hailong Ma", "orcid": "https://orcid.org/0000-0003-2497-366X", "observed_orcids": ["https://orcid.org/0000-0003-2497-366X"]}, "institutions": [{"id": "https://openalex.org/I169689159", "display_name": "PLA Information Engineering University", "ror": "https://ror.org/00mm1qk40", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I169689159"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Hailong Ma", "raw_affiliation_strings": ["Information Technology Research Institute, Information Engineering University, Zhengzhou 450002, China", "Key Laboratory of Cyberspace Security, Ministry of Education of China, Zhengzhou 450002, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Information Technology Research Institute, Information Engineering University, Zhengzhou 450002, China", "institution_ids": ["https://openalex.org/I169689159"]}, {"raw_affiliation_string": "Key Laboratory of Cyberspace Security, Ministry of Education of China, Zhengzhou 450002, China", "institution_ids": []}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5100328947", "display_name": "Shuai Zhang", "orcid": "https://orcid.org/0000-0003-4291-8170", "observed_orcids": ["https://orcid.org/0000-0003-4291-8170"]}, "institutions": [{"id": "https://openalex.org/I169689159", "display_name": "PLA Information Engineering University", "ror": "https://ror.org/00mm1qk40", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I169689159"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Shuai Zhang", "raw_affiliation_strings": ["Information Technology Research Institute, Information Engineering University, Zhengzhou 450002, China", "Key Laboratory of Cyberspace Security, Ministry of Education of China, Zhengzhou 450002, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Information Technology Research Institute, Information Engineering University, Zhengzhou 450002, China", "institution_ids": ["https://openalex.org/I169689159"]}, {"raw_affiliation_string": "Key Laboratory of Cyberspace Security, Ministry of Education of China, Zhengzhou 450002, China", "institution_ids": []}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5074239524", "display_name": "Xiaohan Yang", "orcid": "https://orcid.org/0009-0006-7133-1319", "observed_orcids": ["https://orcid.org/0009-0006-7133-1319"]}, "institutions": [{"id": "https://openalex.org/I169689159", "display_name": "PLA Information Engineering University", "ror": "https://ror.org/00mm1qk40", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I169689159"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Xiaohan Yang", "raw_affiliation_strings": ["Information Technology Research Institute, Information Engineering University, Zhengzhou 450002, China", "Key Laboratory of Cyberspace Security, Ministry of Education of China, Zhengzhou 450002, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Information Technology Research Institute, Information Engineering University, Zhengzhou 450002, China", "institution_ids": ["https://openalex.org/I169689159"]}, {"raw_affiliation_string": "Key Laboratory of Cyberspace Security, Ministry of Education of China, Zhengzhou 450002, China", "institution_ids": []}]}], "abstract_inverted_index": {"Malware": [0], "remains": [1], "a": [2, 41, 65, 77, 106, 222, 272], "central": [3], "tool": [4], "in": [5, 18, 35, 204, 243, 261], "cyberattacks,": [6], "and": [7, 21, 75, 100, 109, 144, 158, 182, 231, 250, 255, 275, 282], "systematic": [8, 78], "research": [9, 241], "into": [10, 46], "adversarial": [11, 72, 154, 247], "attack": [12], "techniques": [13], "targeting": [14], "malware": [15, 73, 215, 248], "is": [16, 39, 268], "crucial": [17], "advancing": [19], "detection": [20, 175, 285], "defense": [22], "systems": [23], "that": [24], "can": [25, 163], "evolve": [26], "over": [27], "time.": [28], "Although": [29], "numerous": [30], "review": [31, 108], "articles": [32], "already": [33], "exist": [34], "this": [36, 61, 237], "area,": [37], "there": [38], "still": [40], "lack": [42], "of": [43, 86, 111, 123, 151, 184, 227, 246], "comprehensive": [44, 107], "exploration": [45], "emerging": [47], "artificial": [48], "intelligence": [49], "technologies": [50], "such": [51, 135, 264], "as": [52, 136], "reinforcement": [53, 67], "learning": [54, 68], "from": [55, 105, 173], "the": [56, 83, 112, 124, 129, 137, 149, 152, 166, 180, 193, 201, 209, 225, 244, 252], "attacker\u2019s": [57], "perspective.": [58], "To": [59], "address": [60], "gap,": [62], "we": [63, 115], "propose": [64], "foundational": [66], "(RL)-based": [69], "framework": [70], "for": [71, 165, 278], "generation": [74, 216, 249], "develop": [76], "evaluation": [79], "methodology": [80], "to": [81, 214, 263, 269], "dissect": [82], "internal": [84], "mechanisms": [85], "generative": [87], "models": [88], "across": [89], "multiple": [90], "key": [91], "dimensions,": [92], "including": [93], "action": [94, 125, 138, 229], "space": [95, 98, 126], "design,": [96], "state": [97, 160, 233], "representation,": [99], "reward": [101, 189], "function": [102], "construction.": [103], "Drawing": [104], "synthesis": [110], "existing": [113], "literature,": [114], "identify": [116], "several": [117], "core": [118], "findings.": [119], "(1)": [120], "The": [121], "scale": [122], "directly": [127], "affects": [128], "model": [130], "training": [131], "efficiency.": [132], "Meanwhile,": [133], "factors": [134], "diversity,": [139], "operation": [140], "determinism,": [141], "execution": [142], "order,": [143], "modification": [145], "ratio": [146], "indirectly": [147], "influence": [148], "quality": [150], "generated": [153], "samples.": [155], "(2)": [156], "Comprehensive": [157], "sensitive": [159], "feature": [161], "representations": [162], "compensate": [164], "information": [167], "loss": [168], "caused": [169], "by": [170, 259], "binary": [171], "feedback": [172], "real-world": [174], "engines,": [176], "thereby": [177], "enhancing": [178], "both": [179, 271], "effectiveness": [181], "stability": [183], "attacks.": [185], "(3)": [186], "A": [187], "multi-dimensional": [188], "signal": [190], "effectively": [191], "mitigates": [192], "policy": [194], "fragility": [195], "associated": [196], "with": [197], "single-metric": [198], "rewards,": [199], "improving": [200], "agent\u2019s": [202], "adaptability": [203], "complex": [205], "environments.": [206], "(4)": [207], "While": [208], "current": [210], "RL": [211], "frameworks": [212], "applied": [213], "exhibit": [217], "diverse": [218], "architectures,": [219], "they": [220], "share": [221], "common": [223], "core:": [224], "modeling": [226], "discrete": [228], "spaces": [230], "continuous": [232], "spaces.": [234], "In": [235], "addition,": [236], "work": [238], "explores": [239], "future": [240], "directions": [242], "area": [245], "outlines": [251], "open": [253], "challenges": [254], "critical": [256], "issues": [257], "faced": [258], "defenders": [260], "responding": [262], "threats.": [265], "Our": [266], "goal": [267], "provide": [270], "theoretical": [273], "foundation": [274], "practical": [276], "guidance": [277], "building": [279], "more": [280], "robust": [281], "adaptive": [283], "security": [284], "mechanisms.": [286]}, "primary_topic": {"id": "https://openalex.org/T11241", "display_name": "Advanced Malware Detection Techniques", "score": 0.9711999893188477, "subfield": {"id": "https://openalex.org/subfields/1711", "display_name": "Signal Processing"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11241", "display_name": "Advanced Malware Detection Techniques", "score": 0.9711999893188477, "subfield": {"id": "https://openalex.org/subfields/1711", "display_name": "Signal Processing"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.025800000876188278, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0020000000949949026, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.3390/electronics14122422", "is_oa": true, "landing_page_url": "https://doi.org/10.3390/electronics14122422", "pdf_url": "https://www.mdpi.com/2079-9292/14/12/2422/pdf?version=1749821988", "source": {"id": "https://openalex.org/S4210202905", "display_name": "Electronics", "issn_l": "2079-9292", "issn": ["2079-9292"], "is_oa": true, "is_in_doaj": false, "is_core": true, "listed_in": ["cwts-core", "norway-1"], "host_organization": "https://openalex.org/P4310310987", "host_organization_name": "Multidisciplinary Digital Publishing Institute", "host_organization_lineage": ["https://openalex.org/P4310310987"], "host_organization_lineage_names": ["Multidisciplinary Digital Publishing Institute"], "type": "journal"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Electronics", "raw_type": "journal-article"}, "cited_by_count": 7, "is_retracted": false}, {"id": "https://openalex.org/W4411330912", "doi": "https://doi.org/10.1016/j.eswa.2025.128541", "title": "Diffusion-based adversarial attack method against person re-identification", "publication_year": 2025, "publication_date": "2025-06-16", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5034796703", "display_name": "Kejia Zhang", "orcid": "https://orcid.org/0000-0002-7303-1428", "observed_orcids": ["https://orcid.org/0000-0002-7303-1428"]}, "institutions": [{"id": "https://openalex.org/I151727225", "display_name": "Harbin Engineering University", "ror": "https://ror.org/03x80pn82", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I151727225"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Kejia Zhang", "raw_affiliation_strings": ["The College of Computer Science and Technology, Harbin Engineering University, No.145 Nan Tong Street, Harbin, 150001, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "The College of Computer Science and Technology, Harbin Engineering University, No.145 Nan Tong Street, Harbin, 150001, China", "institution_ids": ["https://openalex.org/I151727225"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5101240041", "display_name": "Yingxin Qin", "orcid": "https://orcid.org/0009-0008-2569-7349", "observed_orcids": ["https://orcid.org/0009-0008-2569-7349"]}, "institutions": [{"id": "https://openalex.org/I151727225", "display_name": "Harbin Engineering University", "ror": "https://ror.org/03x80pn82", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I151727225"]}], "countries": ["CN"], "is_corresponding": true, "raw_author_name": "Yingxin Qin", "raw_affiliation_strings": ["The College of Computer Science and Technology, Harbin Engineering University, No.145 Nan Tong Street, Harbin, 150001, China"], "raw_orcid": "https://orcid.org/0009-0008-2569-7349", "affiliations": [{"raw_affiliation_string": "The College of Computer Science and Technology, Harbin Engineering University, No.145 Nan Tong Street, Harbin, 150001, China", "institution_ids": ["https://openalex.org/I151727225"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5013527762", "display_name": "Haiwei Pan", "orcid": "https://orcid.org/0000-0001-9297-5662", "observed_orcids": ["https://orcid.org/0000-0001-9297-5662"]}, "institutions": [{"id": "https://openalex.org/I151727225", "display_name": "Harbin Engineering University", "ror": "https://ror.org/03x80pn82", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I151727225"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Haiwei Pan", "raw_affiliation_strings": ["The College of Computer Science and Technology, Harbin Engineering University, No.145 Nan Tong Street, Harbin, 150001, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "The College of Computer Science and Technology, Harbin Engineering University, No.145 Nan Tong Street, Harbin, 150001, China", "institution_ids": ["https://openalex.org/I151727225"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5019508109", "display_name": "Baoying Ma", "orcid": "https://orcid.org/0000-0002-7369-9559", "observed_orcids": ["https://orcid.org/0000-0002-7369-9559"]}, "institutions": [{"id": "https://openalex.org/I4210093324", "display_name": "Mudanjiang Medical University", "ror": "https://ror.org/00mc5wj35", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I4210093324"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Baoying Ma", "raw_affiliation_strings": ["The College of Health Administration, Mudanjiang Medical University, Mudanjiang, 157011, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "The College of Health Administration, Mudanjiang Medical University, Mudanjiang, 157011, China", "institution_ids": ["https://openalex.org/I4210093324"]}]}], "abstract_inverted_index": null, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9916999936103821, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9916999936103821, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 0.003700000001117587, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10331", "display_name": "Video Surveillance and Tracking Methods", "score": 0.0010999999940395355, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.1016/j.eswa.2025.128541", "is_oa": false, "landing_page_url": "https://doi.org/10.1016/j.eswa.2025.128541", "pdf_url": null, "source": {"id": "https://openalex.org/S13144211", "display_name": "Expert Systems with Applications", "issn_l": "0957-4174", "issn": ["0957-4174", "1873-6793"], "is_oa": false, "is_in_doaj": false, "is_core": true, "listed_in": ["cwts-core", "doyens", "jufo-2", "ki-jl-2", "norway-2"], "host_organization": "https://openalex.org/P4310320990", "host_organization_name": "Elsevier BV", "host_organization_lineage": ["https://openalex.org/P4310320990"], "host_organization_lineage_names": ["Elsevier BV"], "type": "journal"}, "license": null, "license_id": null, "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Expert Systems with Applications", "raw_type": "journal-article"}, "cited_by_count": 5, "is_retracted": false}, {"id": "https://openalex.org/W7113897665", "doi": "https://doi.org/10.1016/j.apenergy.2025.127196", "title": "QSTAformer: A quantum-enhanced Transformer for robust short-term voltage stability assessment against adversarial attacks", "publication_year": 2025, "publication_date": "2025-12-10", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Yang Li", "orcid": "https://orcid.org/0000-0002-6515-4567", "observed_orcids": ["https://orcid.org/0000-0002-6515-4567"]}, "institutions": [{"id": "https://openalex.org/I200769079", "display_name": "Hong Kong University of Science and Technology", "ror": "https://ror.org/00q4vv597", "country_code": "HK", "type": "education", "lineage": ["https://openalex.org/I200769079"]}], "countries": ["HK"], "is_corresponding": false, "raw_author_name": "Yang Li", "raw_affiliation_strings": ["Department of Civil and Environmental Engineering, The Hong Kong University of Science and Technology, Hong Kong"], "raw_orcid": "https://orcid.org/0000-0002-6515-4567", "affiliations": [{"raw_affiliation_string": "Department of Civil and Environmental Engineering, The Hong Kong University of Science and Technology, Hong Kong", "institution_ids": ["https://openalex.org/I200769079"]}]}, {"author_position": "middle", "author": {"id": null, "display_name": "Yang Li", "orcid": "https://orcid.org/0000-0002-6515-4567", "observed_orcids": ["https://orcid.org/0000-0002-6515-4567"]}, "institutions": [{"id": "https://openalex.org/I200769079", "display_name": "Hong Kong University of Science and Technology", "ror": "https://ror.org/00q4vv597", "country_code": "HK", "type": "education", "lineage": ["https://openalex.org/I200769079"]}], "countries": ["HK"], "is_corresponding": true, "raw_author_name": "Yang Li", "raw_affiliation_strings": ["Department of Civil and Environmental Engineering, The Hong Kong University of Science and Technology, Hong Kong"], "raw_orcid": "https://orcid.org/0000-0002-6515-4567", "affiliations": [{"raw_affiliation_string": "Department of Civil and Environmental Engineering, The Hong Kong University of Science and Technology, Hong Kong", "institution_ids": ["https://openalex.org/I200769079"]}]}, {"author_position": "middle", "author": {"id": null, "display_name": "Chong Ma", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I17442442", "display_name": "State Grid Corporation of China (China)", "ror": "https://ror.org/05twwhs70", "country_code": "CN", "type": "company", "lineage": ["https://openalex.org/I17442442"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Chong Ma", "raw_affiliation_strings": ["State Grid Jiaozhou Power Supply Company, Qingdao 266000, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "State Grid Jiaozhou Power Supply Company, Qingdao 266000, China", "institution_ids": ["https://openalex.org/I17442442"]}]}, {"author_position": "middle", "author": {"id": null, "display_name": "Yuanzheng Li", "orcid": "https://orcid.org/0000-0001-8052-1233", "observed_orcids": ["https://orcid.org/0000-0001-8052-1233"]}, "institutions": [{"id": "https://openalex.org/I200769079", "display_name": "Hong Kong University of Science and Technology", "ror": "https://ror.org/00q4vv597", "country_code": "HK", "type": "education", "lineage": ["https://openalex.org/I200769079"]}], "countries": ["HK"], "is_corresponding": false, "raw_author_name": "Yuanzheng Li", "raw_affiliation_strings": ["Department of Civil and Environmental Engineering, The Hong Kong University of Science and Technology, Hong Kong"], "raw_orcid": "https://orcid.org/0000-0001-8052-1233", "affiliations": [{"raw_affiliation_string": "Department of Civil and Environmental Engineering, The Hong Kong University of Science and Technology, Hong Kong", "institution_ids": ["https://openalex.org/I200769079"]}]}, {"author_position": "middle", "author": {"id": null, "display_name": "Yuanzheng Li", "orcid": "https://orcid.org/0000-0001-8052-1233", "observed_orcids": ["https://orcid.org/0000-0001-8052-1233"]}, "institutions": [{"id": "https://openalex.org/I200769079", "display_name": "Hong Kong University of Science and Technology", "ror": "https://ror.org/00q4vv597", "country_code": "HK", "type": "education", "lineage": ["https://openalex.org/I200769079"]}], "countries": ["HK"], "is_corresponding": true, "raw_author_name": "Yuanzheng Li", "raw_affiliation_strings": ["Department of Civil and Environmental Engineering, The Hong Kong University of Science and Technology, Hong Kong"], "raw_orcid": "https://orcid.org/0000-0001-8052-1233", "affiliations": [{"raw_affiliation_string": "Department of Civil and Environmental Engineering, The Hong Kong University of Science and Technology, Hong Kong", "institution_ids": ["https://openalex.org/I200769079"]}]}, {"author_position": "middle", "author": {"id": null, "display_name": "Sen Li", "orcid": "https://orcid.org/0000-0003-4974-4177", "observed_orcids": ["https://orcid.org/0000-0003-4974-4177"]}, "institutions": [{"id": "https://openalex.org/I200769079", "display_name": "Hong Kong University of Science and Technology", "ror": "https://ror.org/00q4vv597", "country_code": "HK", "type": "education", "lineage": ["https://openalex.org/I200769079"]}], "countries": ["HK"], "is_corresponding": false, "raw_author_name": "Sen Li", "raw_affiliation_strings": ["Department of Civil and Environmental Engineering, The Hong Kong University of Science and Technology, Hong Kong"], "raw_orcid": "https://orcid.org/0000-0003-4974-4177", "affiliations": [{"raw_affiliation_string": "Department of Civil and Environmental Engineering, The Hong Kong University of Science and Technology, Hong Kong", "institution_ids": ["https://openalex.org/I200769079"]}]}, {"author_position": "middle", "author": {"id": null, "display_name": "Yanbo Chen", "orcid": "https://orcid.org/0000-0001-5588-2010", "observed_orcids": ["https://orcid.org/0000-0001-5588-2010"]}, "institutions": [{"id": "https://openalex.org/I153473198", "display_name": "North China Electric Power University", "ror": "https://ror.org/04qr5t414", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I153473198"]}, {"id": "https://openalex.org/I4391767892", "display_name": "State Key Laboratory of Alternate Electrical Power System with Renewable Energy Sources", "ror": "https://ror.org/045hfth47", "country_code": null, "type": "facility", "lineage": ["https://openalex.org/I153473198", "https://openalex.org/I4391767892"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Yanbo Chen", "raw_affiliation_strings": ["State Key Laboratory of Alternate Electrical Power System with Renewable Energy Sources, School of Electrical & Electronic Engineering, North China Electric Power University, Beijing 102206, China"], "raw_orcid": "https://orcid.org/0000-0001-5588-2010", "affiliations": [{"raw_affiliation_string": "State Key Laboratory of Alternate Electrical Power System with Renewable Energy Sources, School of Electrical & Electronic Engineering, North China Electric Power University, Beijing 102206, China", "institution_ids": ["https://openalex.org/I153473198", "https://openalex.org/I4391767892"]}]}, {"author_position": "last", "author": {"id": null, "display_name": "Zhaoyang Dong", "orcid": "https://orcid.org/0000-0001-9659-0858", "observed_orcids": ["https://orcid.org/0000-0001-9659-0858"]}, "institutions": [{"id": "https://openalex.org/I168719708", "display_name": "City University of Hong Kong", "ror": "https://ror.org/03q8dnn23", "country_code": "HK", "type": "education", "lineage": ["https://openalex.org/I168719708"]}], "countries": ["HK"], "is_corresponding": false, "raw_author_name": "Zhaoyang Dong", "raw_affiliation_strings": ["Department of Electrical Engineering, City University of Hong Kong, Kowloon, Hong Kong"], "raw_orcid": "https://orcid.org/0000-0001-9659-0858", "affiliations": [{"raw_affiliation_string": "Department of Electrical Engineering, City University of Hong Kong, Kowloon, Hong Kong", "institution_ids": ["https://openalex.org/I168719708"]}]}], "abstract_inverted_index": null, "primary_topic": {"id": "https://openalex.org/T10305", "display_name": "Power System Optimization and Stability", "score": 0.9560999870300293, "subfield": {"id": "https://openalex.org/subfields/2208", "display_name": "Electrical and Electronic Engineering"}, "field": {"id": "https://openalex.org/fields/22", "display_name": "Engineering"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T10305", "display_name": "Power System Optimization and Stability", "score": 0.9560999870300293, "subfield": {"id": "https://openalex.org/subfields/2208", "display_name": "Electrical and Electronic Engineering"}, "field": {"id": "https://openalex.org/fields/22", "display_name": "Engineering"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10917", "display_name": "Smart Grid Security and Resilience", "score": 0.031199999153614044, "subfield": {"id": "https://openalex.org/subfields/2207", "display_name": "Control and Systems Engineering"}, "field": {"id": "https://openalex.org/fields/22", "display_name": "Engineering"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.005900000222027302, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.1016/j.apenergy.2025.127196", "is_oa": false, "landing_page_url": "https://doi.org/10.1016/j.apenergy.2025.127196", "pdf_url": null, "source": {"id": "https://openalex.org/S109565702", "display_name": "Applied Energy", "issn_l": "0306-2619", "issn": ["0306-2619", "1872-9118"], "is_oa": false, "is_in_doaj": false, "is_core": true, "listed_in": ["abdc-a", "cwts-core", "jufo-3", "ki-jl-1", "norway-1"], "host_organization": "https://openalex.org/P4310320990", "host_organization_name": "Elsevier BV", "host_organization_lineage": ["https://openalex.org/P4310320990"], "host_organization_lineage_names": ["Elsevier BV"], "type": "journal"}, "license": null, "license_id": null, "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Applied Energy", "raw_type": "journal-article"}, "cited_by_count": 7, "is_retracted": false}, {"id": "https://openalex.org/W4407256196", "doi": "https://doi.org/10.2139/ssrn.5128143", "title": "Lock and Decode: Obfuscated Prompt Cryptography as a Mechanism for Circumventing Large Language Model Security Paradigms", "publication_year": 2025, "publication_date": "2025-01-01", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5116191624", "display_name": "Suhaas Yadavalli", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I164861460", "display_name": "Manipal Academy of Higher Education", "ror": "https://ror.org/02xzytt36", "country_code": "IN", "type": "education", "lineage": ["https://openalex.org/I164861460"]}], "countries": ["IN"], "is_corresponding": false, "raw_author_name": "Suhaas Yadavalli", "raw_affiliation_strings": ["Manipal Institute of Technology Bengaluru, Manipal Academy of Higher Education, India"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Manipal Institute of Technology Bengaluru, Manipal Academy of Higher Education, India", "institution_ids": ["https://openalex.org/I164861460"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5116191625", "display_name": "Arpitha Shivaswaroopa", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I164861460", "display_name": "Manipal Academy of Higher Education", "ror": "https://ror.org/02xzytt36", "country_code": "IN", "type": "education", "lineage": ["https://openalex.org/I164861460"]}], "countries": ["IN"], "is_corresponding": false, "raw_author_name": "Arpitha Shivaswaroopa", "raw_affiliation_strings": ["Manipal Institute of Technology Bengaluru, Manipal Academy of Higher Education, India"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Manipal Institute of Technology Bengaluru, Manipal Academy of Higher Education, India", "institution_ids": ["https://openalex.org/I164861460"]}]}, {"author_position": "middle", "author": {"id": null, "display_name": "Mann Raval", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I164861460", "display_name": "Manipal Academy of Higher Education", "ror": "https://ror.org/02xzytt36", "country_code": "IN", "type": "education", "lineage": ["https://openalex.org/I164861460"]}], "countries": ["IN"], "is_corresponding": false, "raw_author_name": "Mann Raval", "raw_affiliation_strings": ["Manipal Institute of Technology Bengaluru, Manipal Academy of Higher Education, India"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Manipal Institute of Technology Bengaluru, Manipal Academy of Higher Education, India", "institution_ids": ["https://openalex.org/I164861460"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5116191626", "display_name": "Anshul Bhowmik", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I164861460", "display_name": "Manipal Academy of Higher Education", "ror": "https://ror.org/02xzytt36", "country_code": "IN", "type": "education", "lineage": ["https://openalex.org/I164861460"]}], "countries": ["IN"], "is_corresponding": false, "raw_author_name": "Anshul Bhowmik", "raw_affiliation_strings": ["Manipal Institute of Technology Bengaluru, Manipal Academy of Higher Education, India"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Manipal Institute of Technology Bengaluru, Manipal Academy of Higher Education, India", "institution_ids": ["https://openalex.org/I164861460"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5103711168", "display_name": "A.R. Rizwana Shaikh", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I164861460", "display_name": "Manipal Academy of Higher Education", "ror": "https://ror.org/02xzytt36", "country_code": "IN", "type": "education", "lineage": ["https://openalex.org/I164861460"]}], "countries": ["IN"], "is_corresponding": false, "raw_author_name": "Aadish Shaikh", "raw_affiliation_strings": ["Manipal Institute of Technology Bengaluru, Manipal Academy of Higher Education, India"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Manipal Institute of Technology Bengaluru, Manipal Academy of Higher Education, India", "institution_ids": ["https://openalex.org/I164861460"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5034796502", "display_name": "Megha P. Arakeri", "orcid": "https://orcid.org/0000-0003-0340-5794", "observed_orcids": ["https://orcid.org/0000-0003-0340-5794"]}, "institutions": [{"id": "https://openalex.org/I164861460", "display_name": "Manipal Academy of Higher Education", "ror": "https://ror.org/02xzytt36", "country_code": "IN", "type": "education", "lineage": ["https://openalex.org/I164861460"]}], "countries": ["IN"], "is_corresponding": true, "raw_author_name": "Megha Arakeri", "raw_affiliation_strings": ["Manipal Institute of Technology Bengaluru, Manipal Academy of Higher Education, India"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Manipal Institute of Technology Bengaluru, Manipal Academy of Higher Education, India", "institution_ids": ["https://openalex.org/I164861460"]}]}], "abstract_inverted_index": null, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9922000169754028, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9922000169754028, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0015999999595806003, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10764", "display_name": "Privacy-Preserving Technologies in Data", "score": 0.001500000013038516, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.2139/ssrn.5128143", "is_oa": true, "landing_page_url": "https://doi.org/10.2139/ssrn.5128143", "pdf_url": null, "source": {"id": "https://openalex.org/S4210172589", "display_name": "SSRN Electronic Journal", "issn_l": "1556-5068", "issn": ["1556-5068"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I1318003438", "host_organization_name": "RELX Group (Netherlands)", "host_organization_lineage": ["https://openalex.org/I1318003438"], "host_organization_lineage_names": [], "type": "repository"}, "license": null, "license_id": null, "version": "acceptedVersion", "is_accepted": true, "is_published": false, "raw_source_name": null, "raw_type": "posted-content"}, "cited_by_count": 1, "is_retracted": false}, {"id": "https://openalex.org/W7116814560", "doi": null, "title": "Artificial Intelligence in Zero Trust Architecture for 5G and 6G Networks: a systematic literature review", "publication_year": 2025, "publication_date": "2025-01-01", "type": "review", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5005199882", "display_name": "Syed Muhammad Muneeb Ali", "orcid": "https://orcid.org/0009-0002-7023-1253", "observed_orcids": ["https://orcid.org/0009-0002-7023-1253"]}, "institutions": [], "countries": [], "is_corresponding": true, "raw_author_name": "Ali, Syed Muhammad Muneeb", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}], "abstract_inverted_index": {"The": [0, 27], "transition": [1], "to": [2, 30, 55, 88, 144], "5G": [3], "and": [4, 104, 123, 167], "6G": [5, 93], "networks": [6], "has": [7], "introduced": [8], "a": [9, 68, 77, 110, 154], "hyper-connected,": [10], "virtualized": [11], "environment": [12], "where": [13], "traditional": [14], "perimeter-based": [15], "security": [16, 121, 160], "models": [17, 122], "were": [18], "rendered": [19], "obsolete": [20], "by": [21], "the": [22, 32, 90, 116, 124, 129, 135, 162], "dissolution": [23], "of": [24, 34, 92, 119, 128], "physical": [25], "boundaries.": [26], "objective": [28], "was": [29, 53, 81, 113, 132], "evaluate": [31], "necessity": [33], "Artificial": [35], "Intelligence": [36], "(AI)": [37], "in": [38], "operationalizing": [39], "Zero": [40], "Trust": [41], "Architecture": [42], "(ZTA)": [43], "within": [44], "these": [45, 120], "next-generation": [46], "networks.": [47], "A": [48], "Systematic": [49], "Literature": [50], "Review": [51], "(SLR)": [52], "implemented": [54], "synthesize": [56], "findings": [57], "from": [58], "thirty-five": [59], "primary": [60], "studies,": [61], "focusing": [62], "on": [63], "how": [64], "AI": [65, 149], "functions": [66], "as": [67, 153], "mandatory": [69], "enabler": [70], "for": [71, 157], "dynamic": [72], "policy": [73], "enforcement": [74], "rather": [75], "than": [76], "simple": [78], "enhancement.": [79], "It": [80, 131], "found": [82], "that": [83, 134], "static": [84], "rule-based": [85], "systems": [86], "failed": [87], "handle": [89], "velocity": [91], "data,": [94], "whereas": [95], "AI-driven": [96], "trust": [97], "algorithms": [98], "successfully": [99], "reduced": [100], "false": [101], "positive": [102], "rates": [103], "enabled": [105], "necessary": [106], "behavioural": [107], "biometrics.": [108], "However,": [109], "critical": [111], "trade-off": [112], "identified": [114], "between": [115], "computational": [117], "overhead": [118], "ultra-low": [125], "latency": [126], "requirements": [127], "network.": [130], "concluded": [133], "\"never": [136], "trust,": [137], "always": [138], "verify\"": [139], "principle": [140], "is": [141], "effectively": [142], "impossible": [143], "implement": [145], "at": [146], "scale": [147], "without": [148], "automation,": [150], "establishing": [151], "it": [152], "foundational": [155], "requirement": [156], "future": [158], "telecommunications": [159], "despite": [161], "ongoing": [163], "challenges": [164], "regarding": [165], "scalability": [166], "adversarial": [168], "robustness.": [169]}, "primary_topic": {"id": "https://openalex.org/T10927", "display_name": "Access Control and Trust", "score": 0.29249998927116394, "subfield": {"id": "https://openalex.org/subfields/3312", "display_name": "Sociology and Political Science"}, "field": {"id": "https://openalex.org/fields/33", "display_name": "Social Sciences"}, "domain": {"id": "https://openalex.org/domains/2", "display_name": "Social Sciences"}}, "topics": [{"id": "https://openalex.org/T10927", "display_name": "Access Control and Trust", "score": 0.29249998927116394, "subfield": {"id": "https://openalex.org/subfields/3312", "display_name": "Sociology and Political Science"}, "field": {"id": "https://openalex.org/fields/33", "display_name": "Social Sciences"}, "domain": {"id": "https://openalex.org/domains/2", "display_name": "Social Sciences"}}, {"id": "https://openalex.org/T10400", "display_name": "Network Security and Intrusion Detection", "score": 0.27079999446868896, "subfield": {"id": "https://openalex.org/subfields/1705", "display_name": "Computer Networks and Communications"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T13983", "display_name": "Cybersecurity and Information Systems", "score": 0.2222999930381775, "subfield": {"id": "https://openalex.org/subfields/1705", "display_name": "Computer Networks and Communications"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "pmh:oai:www.theseus.fi:10024/908381", "is_oa": true, "landing_page_url": "http://www.theseus.fi/handle/10024/908381", "pdf_url": "http://www.theseus.fi/bitstream/10024/908381/2/Ali_Syed_Muhammad_Muneeb.pdf", "source": {"id": "https://openalex.org/S4306400928", "display_name": "Theseus (Ammattikorkeakoulujen)", "issn_l": null, "issn": null, "is_oa": false, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": null, "host_organization_name": null, "host_organization_lineage": [], "host_organization_lineage_names": [], "type": "repository"}, "license": null, "license_id": null, "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "fi=AMK-opinn\u00e4ytety\u00f6|sv=YH-examensarbete|en=Bachelor's thesis|"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4414739941", "doi": "https://doi.org/10.1080/03772063.2025.2561713", "title": "Performance Analysis of Visualization-Based Malware Classification Using CNN", "publication_year": 2025, "publication_date": "2025-10-01", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5103379603", "display_name": "Krishna Kumar", "orcid": "https://orcid.org/0000-0002-2103-2023", "observed_orcids": ["https://orcid.org/0000-0002-2103-2023"]}, "institutions": [{"id": "https://openalex.org/I252758333", "display_name": "Govind Ballabh Pant University of Agriculture and Technology", "ror": "https://ror.org/02msjvh03", "country_code": "IN", "type": "education", "lineage": ["https://openalex.org/I252758333"]}], "countries": ["IN"], "is_corresponding": true, "raw_author_name": "Krishna Kumar", "raw_affiliation_strings": ["G. B. Pant University of Agriculture and Technology"], "raw_orcid": "https://orcid.org/0000-0002-2103-2023", "affiliations": [{"raw_affiliation_string": "G. B. Pant University of Agriculture and Technology", "institution_ids": ["https://openalex.org/I252758333"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5026379120", "display_name": "Hardwari Lal Mandoria", "orcid": "https://orcid.org/0000-0003-2125-8521", "observed_orcids": ["https://orcid.org/0000-0003-2125-8521"]}, "institutions": [{"id": "https://openalex.org/I252758333", "display_name": "Govind Ballabh Pant University of Agriculture and Technology", "ror": "https://ror.org/02msjvh03", "country_code": "IN", "type": "education", "lineage": ["https://openalex.org/I252758333"]}], "countries": ["IN"], "is_corresponding": false, "raw_author_name": "Hardwari Lal Mandoria", "raw_affiliation_strings": ["G. B. Pant University of Agriculture and Technology"], "raw_orcid": "https://orcid.org/0000-0003-2125-8521", "affiliations": [{"raw_affiliation_string": "G. B. Pant University of Agriculture and Technology", "institution_ids": ["https://openalex.org/I252758333"]}]}], "abstract_inverted_index": {"With": [0], "the": [1, 5, 76, 91, 95, 146], "rapid": [2], "expansion": [3], "of": [4, 9, 67, 78, 135], "cyber": [6], "world,": [7], "incidents": [8], "cyberattacks": [10], "and": [11, 19, 33, 49, 63, 86, 94, 109, 116, 127, 156], "malware": [12, 35, 69], "threats": [13], "such": [14], "as": [15], "viruses,": [16], "worms,": [17], "trojans": [18], "ransomware": [20], "have": [21], "increased": [22], "significantly.": [23], "Traditional": [24], "signature-based": [25], "intrusion": [26, 39], "detection": [27, 40], "system": [28, 41], "struggles": [29], "to": [30, 61, 137], "detect": [31, 62], "novel": [32, 68], "unknown": [34], "variants.": [36], "Anomaly-based": [37], "network": [38], "often": [42], "fails": [43], "against": [44], "adversarial": [45, 65, 83], "attacks": [46], "involving": [47], "fragmented": [48], "encrypted": [50], "malicious": [51], "data": [52], "packets.": [53], "A": [54], "deep-learning-based": [55], "one-dimensional": [56], "CNN": [57], "(1D-CNN)": [58], "is": [59], "employed": [60], "classify": [64], "variants": [66], "using": [70], "visualization": [71], "techniques.": [72], "This": [73], "study": [74], "evaluates": [75], "effectiveness": [77], "1D-CNN,": [79], "transfer": [80, 122], "learning,": [81], "generative": [82], "networks": [84], "(GANs)": [85], "ensemble": [87, 129], "learning": [88, 123], "techniques": [89, 152], "on": [90, 104], "Malimg": [92], "dataset": [93], "IEEEDataPort": [96], "binary-class": [97], "dataset.": [98], "Deep-learning": [99], "models": [100, 113], "are": [101], "assessed": [102], "based": [103], "classification": [105, 133], "accuracy,": [106], "training": [107], "time": [108], "computational": [110, 157], "cost.": [111, 158], "The": [112], "include": [114], "custom": [115], "classical": [117], "1D-CNN": [118], "architectures,": [119], "enhanced": [120], "EfficientNet-based": [121], "models,": [124], "conditional": [125], "GANs": [126], "stacked": [128], "techniques,": [130], "achieving": [131], "a": [132], "accuracy": [134, 155], "up": [136], "99.25%.": [138], "Performance": [139], "comparisons": [140], "with": [141], "state-of-the-art": [142], "research": [143], "demonstrate": [144], "that": [145], "proposed": [147], "methods": [148], "outperform": [149], "many": [150], "existing": [151], "in": [153], "efficiency,": [154]}, "primary_topic": {"id": "https://openalex.org/T11241", "display_name": "Advanced Malware Detection Techniques", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1711", "display_name": "Signal Processing"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11241", "display_name": "Advanced Malware Detection Techniques", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1711", "display_name": "Signal Processing"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10400", "display_name": "Network Security and Intrusion Detection", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1705", "display_name": "Computer Networks and Communications"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.1080/03772063.2025.2561713", "is_oa": false, "landing_page_url": "https://doi.org/10.1080/03772063.2025.2561713", "pdf_url": null, "source": {"id": "https://openalex.org/S158263287", "display_name": "IETE Journal of Research", "issn_l": "0377-2063", "issn": ["0377-2063", "0974-780X"], "is_oa": false, "is_in_doaj": false, "is_core": true, "listed_in": ["cwts-core", "jufo-1", "norway-1"], "host_organization": "https://openalex.org/P4310320547", "host_organization_name": "Taylor & Francis", "host_organization_lineage": ["https://openalex.org/P4310320547", "https://openalex.org/P4310320449"], "host_organization_lineage_names": ["Taylor & Francis", "Informa"], "type": "journal"}, "license": null, "license_id": null, "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "IETE Journal of Research", "raw_type": "journal-article"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4413328135", "doi": "https://doi.org/10.1007/s10586-025-05637-x", "title": "Quantum neural computing enhanced five-dimensional hyperchaotic framework for secured and reliable communication on the Internet of Things systems", "publication_year": 2025, "publication_date": "2025-08-19", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5101482298", "display_name": "Mu Chen", "orcid": "https://orcid.org/0000-0003-2743-1014", "observed_orcids": ["https://orcid.org/0000-0003-2743-1014"]}, "institutions": [{"id": "https://openalex.org/I191208505", "display_name": "Xiamen University", "ror": "https://ror.org/00mcjh785", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I191208505"]}, {"id": "https://openalex.org/I4392738113", "display_name": "China Electric Power Research Institute", "ror": "https://ror.org/05ehpzy81", "country_code": null, "type": "facility", "lineage": ["https://openalex.org/I17442442", "https://openalex.org/I4392738113"]}], "countries": ["CN"], "is_corresponding": true, "raw_author_name": "Mu Chen", "raw_affiliation_strings": ["China Electric Power Research Institute Ltd., 210003, Nanjing, China", "Department of Informatics and Communication Engineering, Xiamen University, 361005, Xiamen, China", "State Grid Laboratory of Power Cyber-Security Protection and Monitoring Technology, 210003, Nanjing, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "China Electric Power Research Institute Ltd., 210003, Nanjing, China", "institution_ids": ["https://openalex.org/I4392738113"]}, {"raw_affiliation_string": "Department of Informatics and Communication Engineering, Xiamen University, 361005, Xiamen, China", "institution_ids": ["https://openalex.org/I191208505"]}, {"raw_affiliation_string": "State Grid Laboratory of Power Cyber-Security Protection and Monitoring Technology, 210003, Nanjing, China", "institution_ids": []}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5079767726", "display_name": "Sarbajit Manna", "orcid": "https://orcid.org/0000-0001-7669-9311", "observed_orcids": ["https://orcid.org/0000-0001-7669-9311"]}, "institutions": [{"id": "https://openalex.org/I2799306724", "display_name": "Ramakrishna Mission Vidyamandira", "ror": "https://ror.org/019wbnq12", "country_code": "IN", "type": "other", "lineage": ["https://openalex.org/I2799306724"]}], "countries": ["IN"], "is_corresponding": true, "raw_author_name": "Sarbajit Manna", "raw_affiliation_strings": ["Department of Computer Science and Electronics, Ramakrishna Mission Vidyamandira, Belur Math, Howrah, 711202, West Bengal, India"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Computer Science and Electronics, Ramakrishna Mission Vidyamandira, Belur Math, Howrah, 711202, West Bengal, India", "institution_ids": ["https://openalex.org/I2799306724"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5070332153", "display_name": "Arindam Sarkar", "orcid": "https://orcid.org/0000-0002-4951-4729", "observed_orcids": ["https://orcid.org/0000-0002-4951-4729"]}, "institutions": [{"id": "https://openalex.org/I2799306724", "display_name": "Ramakrishna Mission Vidyamandira", "ror": "https://ror.org/019wbnq12", "country_code": "IN", "type": "other", "lineage": ["https://openalex.org/I2799306724"]}], "countries": ["IN"], "is_corresponding": true, "raw_author_name": "Arindam Sarkar", "raw_affiliation_strings": ["Department of Computer Science and Electronics, Ramakrishna Mission Vidyamandira, Belur Math, Howrah, 711202, West Bengal, India"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Computer Science and Electronics, Ramakrishna Mission Vidyamandira, Belur Math, Howrah, 711202, West Bengal, India", "institution_ids": ["https://openalex.org/I2799306724"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5003497675", "display_name": "Abdulfattah Noorwali", "orcid": "https://orcid.org/0000-0001-9942-2526", "observed_orcids": ["https://orcid.org/0000-0001-9942-2526"]}, "institutions": [{"id": "https://openalex.org/I199693650", "display_name": "Umm al-Qura University", "ror": "https://ror.org/01xjqrm90", "country_code": "SA", "type": "education", "lineage": ["https://openalex.org/I199693650"]}], "countries": ["SA"], "is_corresponding": true, "raw_author_name": "Abdulfattah Noorwali", "raw_affiliation_strings": ["Department of Electrical Engineering, Umm Al-Qura University, Makkah, Saudi Arabia"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Electrical Engineering, Umm Al-Qura University, Makkah, Saudi Arabia", "institution_ids": ["https://openalex.org/I199693650"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5016210029", "display_name": "Kamal Mohammed Othman", "orcid": "https://orcid.org/0000-0003-0217-0751", "observed_orcids": ["https://orcid.org/0000-0003-0217-0751"]}, "institutions": [{"id": "https://openalex.org/I199693650", "display_name": "Umm al-Qura University", "ror": "https://ror.org/01xjqrm90", "country_code": "SA", "type": "education", "lineage": ["https://openalex.org/I199693650"]}], "countries": ["SA"], "is_corresponding": true, "raw_author_name": "Kamal M. Othman", "raw_affiliation_strings": ["Department of Electrical Engineering, College of Engineering and Architecture, Umm Al-Qura University, Makkah, Saudi Arabia"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Electrical Engineering, College of Engineering and Architecture, Umm Al-Qura University, Makkah, Saudi Arabia", "institution_ids": ["https://openalex.org/I199693650"]}]}], "abstract_inverted_index": null, "primary_topic": {"id": "https://openalex.org/T11017", "display_name": "Chaos-based Image/Signal Encryption", "score": 0.7480000257492065, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11017", "display_name": "Chaos-based Image/Signal Encryption", "score": 0.7480000257492065, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T13038", "display_name": "Internet of Things and AI", "score": 0.07940000295639038, "subfield": {"id": "https://openalex.org/subfields/1710", "display_name": "Information Systems"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10273", "display_name": "IoT and Edge/Fog Computing", "score": 0.04969999939203262, "subfield": {"id": "https://openalex.org/subfields/1705", "display_name": "Computer Networks and Communications"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.1007/s10586-025-05637-x", "is_oa": false, "landing_page_url": "https://doi.org/10.1007/s10586-025-05637-x", "pdf_url": null, "source": {"id": "https://openalex.org/S106148199", "display_name": "Cluster Computing", "issn_l": "1386-7857", "issn": ["1386-7857", "1573-7543"], "is_oa": false, "is_in_doaj": false, "is_core": true, "listed_in": ["cwts-core", "jufo-1", "norway-1"], "host_organization": "https://openalex.org/P4310319900", "host_organization_name": "Springer Science+Business Media", "host_organization_lineage": ["https://openalex.org/P4310319900", "https://openalex.org/P4310319965"], "host_organization_lineage_names": ["Springer Science+Business Media", "Springer Nature"], "type": "journal"}, "license": null, "license_id": null, "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Cluster Computing", "raw_type": "journal-article"}, "cited_by_count": 3, "is_retracted": false}, {"id": "https://openalex.org/W4413078816", "doi": "https://doi.org/10.3390/fi17070310", "title": "Toward Generative AI-Based Intrusion Detection Systems for the Internet of Vehicles (IoV)", "publication_year": 2025, "publication_date": "2025-07-17", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5070467512", "display_name": "I Mahmoudi", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I4405256489", "display_name": "Higher National School of Renewable Energies, Environment & Sustainable Development", "ror": "https://ror.org/047fp3543", "country_code": "DZ", "type": "education", "lineage": ["https://openalex.org/I4405256489"]}], "countries": ["DZ"], "is_corresponding": false, "raw_author_name": "Isra Mahmoudi", "raw_affiliation_strings": ["LEREESI Laboratory, HNS-RE2SD, Batna 05000, Algeria"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "LEREESI Laboratory, HNS-RE2SD, Batna 05000, Algeria", "institution_ids": ["https://openalex.org/I4405256489"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5071850143", "display_name": "Djallel Eddine Boubiche", "orcid": "https://orcid.org/0000-0002-1566-3005", "observed_orcids": ["https://orcid.org/0000-0002-1566-3005"]}, "institutions": [{"id": "https://openalex.org/I4405256489", "display_name": "Higher National School of Renewable Energies, Environment & Sustainable Development", "ror": "https://ror.org/047fp3543", "country_code": "DZ", "type": "education", "lineage": ["https://openalex.org/I4405256489"]}], "countries": ["DZ"], "is_corresponding": true, "raw_author_name": "Djallel Eddine Boubiche", "raw_affiliation_strings": ["LEREESI Laboratory, HNS-RE2SD, Batna 05000, Algeria"], "raw_orcid": "https://orcid.org/0000-0002-1566-3005", "affiliations": [{"raw_affiliation_string": "LEREESI Laboratory, HNS-RE2SD, Batna 05000, Algeria", "institution_ids": ["https://openalex.org/I4405256489"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5069351381", "display_name": "Samir Athmani", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I4405256489", "display_name": "Higher National School of Renewable Energies, Environment & Sustainable Development", "ror": "https://ror.org/047fp3543", "country_code": "DZ", "type": "education", "lineage": ["https://openalex.org/I4405256489"]}], "countries": ["DZ"], "is_corresponding": false, "raw_author_name": "Samir Athmani", "raw_affiliation_strings": ["LEREESI Laboratory, HNS-RE2SD, Batna 05000, Algeria"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "LEREESI Laboratory, HNS-RE2SD, Batna 05000, Algeria", "institution_ids": ["https://openalex.org/I4405256489"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5107929631", "display_name": "Homero Toral-Cruz", "orcid": "https://orcid.org/0000-0002-4421-3775", "observed_orcids": ["https://orcid.org/0000-0002-4421-3775"]}, "institutions": [{"id": "https://openalex.org/I154691954", "display_name": "University of Quintana Roo", "ror": "https://ror.org/029w3ge75", "country_code": "MX", "type": "education", "lineage": ["https://openalex.org/I154691954"]}], "countries": ["MX"], "is_corresponding": true, "raw_author_name": "Homero Toral-Cruz", "raw_affiliation_strings": ["Department of Sciences and Engineering, University of Quintana Roo, Chetumal 77019, Mexico"], "raw_orcid": "https://orcid.org/0000-0002-4421-3775", "affiliations": [{"raw_affiliation_string": "Department of Sciences and Engineering, University of Quintana Roo, Chetumal 77019, Mexico", "institution_ids": ["https://openalex.org/I154691954"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5114730884", "display_name": "Freddy I. Chan-Puc", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I154691954", "display_name": "University of Quintana Roo", "ror": "https://ror.org/029w3ge75", "country_code": "MX", "type": "education", "lineage": ["https://openalex.org/I154691954"]}], "countries": ["MX"], "is_corresponding": false, "raw_author_name": "Freddy I. Chan-Puc", "raw_affiliation_strings": ["Department of Sciences and Engineering, University of Quintana Roo, Chetumal 77019, Mexico"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Sciences and Engineering, University of Quintana Roo, Chetumal 77019, Mexico", "institution_ids": ["https://openalex.org/I154691954"]}]}], "abstract_inverted_index": {"The": [0], "increasing": [1], "complexity": [2], "and": [3, 30, 39, 47, 59, 70, 92, 117, 132, 148, 174, 184], "scale": [4], "of": [5, 7, 18, 89, 144, 158], "Internet": [6], "Vehicles": [8], "(IoV)": [9], "networks": [10], "pose": [11], "significant": [12], "security": [13], "challenges,": [14, 103, 173], "necessitating": [15], "the": [16, 71, 155, 167, 171, 188], "development": [17], "advanced": [19], "intrusion": [20], "detection": [21, 134], "systems": [22], "(IDS).": [23], "Traditional": [24], "IDS": [25, 63, 150, 186], "approaches,": [26], "such": [27, 108], "as": [28, 109, 120], "rule-based": [29], "signature-based": [31], "methods,": [32], "are": [33], "often": [34], "inadequate": [35], "in": [36, 161], "detecting": [37], "novel": [38], "sophisticated": [40], "attacks": [41], "due": [42], "to": [43, 73, 96, 101], "their": [44], "limited": [45], "adaptability": [46], "dependency": [48], "on": [49, 154], "predefined": [50], "patterns.": [51], "To": [52], "overcome": [53], "these": [54, 78, 102], "limitations,": [55], "machine": [56], "learning": [57, 61], "(ML)": [58], "deep": [60], "(DL)-based": [62], "have": [64], "been": [65], "introduced,": [66], "offering": [67], "better": [68], "generalization": [69], "ability": [72], "learn": [74], "from": [75], "data.": [76], "However,": [77], "models": [79, 107], "can": [80], "still": [81], "struggle": [82], "with": [83], "zero-day": [84], "attacks,": [85], "require": [86], "large": [87], "volumes": [88], "labeled": [90], "data,": [91], "may": [93], "be": [94], "vulnerable": [95], "adversarial": [97], "examples.": [98], "In": [99], "response": [100], "Generative": [104, 110, 159], "AI-based": [105], "IDS\u2014leveraging": [106], "Adversarial": [111], "Networks": [112], "(GANs),": [113], "Variational": [114], "Autoencoders": [115], "(VAEs),": [116], "Transformers\u2014have": [118], "emerged": [119], "promising": [121], "solutions": [122], "that": [123], "offer": [124], "enhanced": [125], "adaptability,": [126], "synthetic": [127], "data": [128], "generation": [129], "for": [130, 136, 187], "training,": [131], "improved": [133], "capabilities": [135], "evolving": [137], "threats.": [138], "This": [139], "survey": [140], "provides": [141], "an": [142], "overview": [143], "IoV": [145, 163, 189], "architecture,": [146], "vulnerabilities,": [147], "classical": [149], "techniques": [151], "while": [152], "focusing": [153], "growing": [156], "role": [157], "AI": [160], "strengthening": [162], "security.": [164], "It": [165], "discusses": [166], "current": [168], "landscape,": [169], "highlights": [170], "key": [172], "outlines": [175], "future": [176], "research": [177], "directions": [178], "aimed": [179], "at": [180], "building": [181], "more": [182], "resilient": [183], "intelligent": [185], "ecosystem.": [190]}, "primary_topic": {"id": "https://openalex.org/T10400", "display_name": "Network Security and Intrusion Detection", "score": 0.9976000189781189, "subfield": {"id": "https://openalex.org/subfields/1705", "display_name": "Computer Networks and Communications"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T10400", "display_name": "Network Security and Intrusion Detection", "score": 0.9976000189781189, "subfield": {"id": "https://openalex.org/subfields/1705", "display_name": "Computer Networks and Communications"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.0006000000284984708, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12391", "display_name": "Artificial Immune Systems Applications", "score": 0.00019999999494757503, "subfield": {"id": "https://openalex.org/subfields/2204", "display_name": "Biomedical Engineering"}, "field": {"id": "https://openalex.org/fields/22", "display_name": "Engineering"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.3390/fi17070310", "is_oa": true, "landing_page_url": "https://doi.org/10.3390/fi17070310", "pdf_url": "https://www.mdpi.com/1999-5903/17/7/310/pdf?version=1752756254", "source": {"id": "https://openalex.org/S34838331", "display_name": "Future Internet", "issn_l": "1999-5903", "issn": ["1999-5903"], "is_oa": true, "is_in_doaj": true, "is_core": true, "listed_in": ["cwts-core", "doaj", "norway-1"], "host_organization": "https://openalex.org/P4310310987", "host_organization_name": "Multidisciplinary Digital Publishing Institute", "host_organization_lineage": ["https://openalex.org/P4310310987"], "host_organization_lineage_names": ["Multidisciplinary Digital Publishing Institute"], "type": "journal"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Future Internet", "raw_type": "journal-article"}, "cited_by_count": 12, "is_retracted": false}, {"id": "https://openalex.org/W4409608429", "doi": "https://doi.org/10.1002/ail2.121", "title": "Evaluating Adversarial Attacks Against Artificial Intelligence Systems in Application Deployments", "publication_year": 2025, "publication_date": "2025-04-01", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5035399891", "display_name": "Lera Leonteva", "orcid": "https://orcid.org/0009-0002-8422-7992", "observed_orcids": ["https://orcid.org/0009-0002-8422-7992"]}, "institutions": [], "countries": [], "is_corresponding": true, "raw_author_name": "Lera Leonteva", "raw_affiliation_strings": ["Leo AI  London UK"], "raw_orcid": "https://orcid.org/0009-0002-8422-7992", "affiliations": [{"raw_affiliation_string": "Leo AI  London UK", "institution_ids": []}]}], "abstract_inverted_index": {"ABSTRACT": [0], "Businesses": [1], "have": [2], "invested": [3], "billions": [4], "into": [5, 26], "artificial": [6], "intelligence": [7], "(AI)": [8], "applications,": [9], "leading": [10], "to": [11, 23, 30, 63, 94, 106, 126, 179], "a": [12, 37, 96, 119, 154, 165], "sharp": [13], "rise": [14], "in": [15, 70, 76, 92, 185], "the": [16, 56, 65, 140, 170, 180, 186], "number": [17], "of": [18, 40, 67, 122, 136, 142, 172, 182, 188], "AI": [19, 111, 159, 174], "applications": [20], "being": [21, 48], "released": [22], "customers.": [24], "Taking": [25], "account": [27], "previous": [28], "approaches": [29], "attacking": [31], "machine": [32], "learning": [33], "models,": [34, 151], "we": [35], "conduct": [36], "comparative": [38], "analysis": [39], "adversarial": [41, 83, 123, 183], "attacks,": [42], "contrasting": [43], "large": [44], "language": [45, 190], "models": [46, 62, 129, 146, 192], "(LLMs)": [47], "deployed": [49, 61, 193], "through": [50, 113], "application": [51], "programming": [52], "interfaces": [53], "(APIs)": [54], "with": [55, 147], "same": [57], "attacks": [58, 84, 124, 138, 143, 184], "against": [59], "locally": [60], "evaluate": [64], "significance": [66], "security": [68, 104, 171], "controls": [69, 108], "production": [71, 195], "deployments": [72], "on": [73, 130, 144, 149], "attack": [74], "success": [75], "black\u2010box": [77], "environments.": [78], "The": [79], "article": [80], "puts": [81], "forward": [82], "that": [85, 99], "are": [86], "adapted": [87, 125], "for": [88, 156, 168], "remote": [89, 128, 137, 145, 173], "model": [90, 98], "endpoints": [91], "order": [93], "create": [95], "threat": [97], "can": [100], "be": [101], "used": [102], "by": [103, 194], "organizations": [105], "prioritize": [107], "when": [109], "deploying": [110], "systems": [112], "APIs.": [114], "This": [115], "paper": [116], "contributes:": [117], "(1)": [118], "public": [120], "repository": [121], "handle": [127], "https://github.com/l3ra/adversarial\u2010ai": [131], ",": [132], "(2)": [133], "benchmarking": [134, 169], "results": [135], "comparing": [139], "effectiveness": [141], "those": [148], "local": [150], "and": [152], "(3)": [153], "framework": [155, 167], "assessing": [157], "future": [158], "system": [160], "deployment": [161], "controls.": [162], "By": [163], "providing": [164], "practical": [166], "systems,": [175], "this": [176], "study": [177], "contributes": [178], "understanding": [181], "context": [187], "natural": [189], "processing": [191], "applications.": [196]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10743", "display_name": "Software Testing and Debugging Techniques", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1712", "display_name": "Software"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.1002/ail2.121", "is_oa": true, "landing_page_url": "https://doi.org/10.1002/ail2.121", "pdf_url": "https://onlinelibrary.wiley.com/doi/pdfdirect/10.1002/ail2.121", "source": {"id": "https://openalex.org/S4210202348", "display_name": "Applied AI Letters", "issn_l": "2689-5595", "issn": ["2689-5595"], "is_oa": true, "is_in_doaj": true, "is_core": true, "listed_in": ["cwts-core", "doaj", "jufo-1", "norway-1"], "host_organization": "https://openalex.org/P4310320595", "host_organization_name": "Wiley", "host_organization_lineage": ["https://openalex.org/P4310320595"], "host_organization_lineage_names": ["Wiley"], "type": "journal"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Applied AI Letters", "raw_type": "journal-article"}, "cited_by_count": 1, "is_retracted": false}, {"id": "https://openalex.org/W4409469929", "doi": "https://doi.org/10.21203/rs.3.rs-5934018/v1", "title": "Mobile applications for skin cancer detection are vulnerable to physical camera-based adversarial attacks", "publication_year": 2025, "publication_date": "2025-04-15", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Junsei Oda", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I207014233", "display_name": "Kyushu Institute of Technology", "ror": "https://ror.org/02278tr80", "country_code": "JP", "type": "education", "lineage": ["https://openalex.org/I207014233"]}], "countries": ["JP"], "is_corresponding": false, "raw_author_name": "Junsei Oda", "raw_affiliation_strings": ["Kyushu Institute of Technology"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Kyushu Institute of Technology", "institution_ids": ["https://openalex.org/I207014233"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5013426338", "display_name": "Kazuhiro Takemoto", "orcid": "https://orcid.org/0000-0002-6355-1366", "observed_orcids": ["https://orcid.org/0000-0002-6355-1366"]}, "institutions": [{"id": "https://openalex.org/I207014233", "display_name": "Kyushu Institute of Technology", "ror": "https://ror.org/02278tr80", "country_code": "JP", "type": "education", "lineage": ["https://openalex.org/I207014233"]}], "countries": ["JP"], "is_corresponding": false, "raw_author_name": "Kazuhiro Takemoto", "raw_affiliation_strings": ["Kyushu Institute of Technology"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Kyushu Institute of Technology", "institution_ids": ["https://openalex.org/I207014233"]}]}], "abstract_inverted_index": {"Abstract": [0], "Skin": [1], "cancer": [2, 46], "is": [3, 14, 209], "one": [4], "of": [5, 23, 40, 73, 92, 205, 213, 238], "the": [6, 21, 38, 90, 203, 210, 236], "most": [7], "prevalent": [8], "malignant": [9], "tumors,": [10], "and": [11], "early": [12], "detection": [13], "crucial": [15], "for": [16, 43, 171], "patient": [17], "prognosis,": [18], "leading": [19], "to": [20, 57, 60, 78, 98, 156, 195], "development": [22], "mobile": [24, 76, 96, 157, 220], "applications": [25, 42, 77, 97, 182, 244], "as": [26], "screening": [27], "tools.": [28], "Recent": [29], "advances": [30], "in": [31, 217, 241, 245], "deep": [32], "neural": [33], "networks": [34], "(DNNs)": [35], "have": [36, 50], "accelerated": [37], "deployment": [39], "DNN-based": [41, 94], "automated": [44], "skin": [45, 127], "detection.": [47], "While": [48], "DNNs": [49], "demonstrated": [51], "remarkable": [52], "capabilities,": [53], "they": [54], "are": [55, 113], "known": [56], "be": [58], "vulnerable": [59], "adversarial": [61, 100, 135, 215], "attacks,": [62], "where": [63, 109, 226], "carefully": [64], "crafted": [65], "perturbations": [66], "can": [67, 137], "manipulate": [68, 167], "model": [69, 111], "predictions.": [70], "The": [71], "vulnerability": [72, 193], "deployed": [74, 218], "medical": [75, 95, 219], "such": [79, 243], "attacks": [80, 101, 150, 165], "remains": [81], "largely": [82], "unexplored": [83], "under": [84, 106], "real-world": [85, 214], "conditions.": [86], "Here,": [87], "we": [88, 130, 147], "investigate": [89], "susceptibility": [91], "three": [93], "physical": [99, 149], "using": [102], "transparent": [103, 154], "camera": [104], "stickers": [105, 155], "black-box": [107], "conditions": [108], "internal": [110], "architectures": [112, 121], "inaccessible.": [114], "Through": [115], "digital": [116], "experiments": [117], "with": [118, 174], "various": [119], "DNN": [120], "trained": [122], "on": [123], "a": [124], "publicly": [125], "available": [126], "lesion": [128], "dataset,": [129], "first": [131, 211], "demonstrate": [132], "that": [133, 163], "camera-based": [134], "patterns": [136], "achieve": [138], "high": [139], "transferability": [140], "across": [141, 180, 198], "different": [142], "models.": [143], "Using": [144], "these": [145, 164], "findings,": [146], "implement": [148], "by": [151], "attaching": [152], "optimized": [153], "device": [158], "cameras.": [159], "Our": [160, 233], "results": [161], "show": [162], "successfully": [166], "application": [168], "predictions,": [169], "particularly": [170], "melanoma": [172, 188], "images,": [173], "attack": [175], "success": [176], "rates": [177], "reaching": [178], "50--80%": [179], "all": [181, 199], "while": [183], "maintaining": [184], "visual": [185], "imperceptibility.": [186], "Notably,": [187], "images": [189, 197], "showed": [190], "consistently": [191], "higher": [192], "compared": [194], "nevus": [196], "tested": [200], "applications.": [201], "To": [202], "best": [204], "our": [206], "knowledge,": [207], "this": [208], "demonstration": [212], "vulnerabilities": [216], "applications,": [221], "revealing": [222], "significant": [223], "security": [224, 239], "concerns": [225], "prediction": [227], "manipulation": [228], "could": [229], "affect": [230], "diagnostic": [231], "processes.": [232], "study": [234], "demonstrates": [235], "importance": [237], "evaluation": [240], "deploying": [242], "clinical": [246], "settings.": [247]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9984999895095825, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9984999895095825, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 0.0007999999797903001, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10392", "display_name": "Cutaneous Melanoma Detection and Management", "score": 0.00019999999494757503, "subfield": {"id": "https://openalex.org/subfields/2730", "display_name": "Oncology"}, "field": {"id": "https://openalex.org/fields/27", "display_name": "Medicine"}, "domain": {"id": "https://openalex.org/domains/4", "display_name": "Health Sciences"}}], "primary_location": {"id": "doi:10.21203/rs.3.rs-5934018/v1", "is_oa": true, "landing_page_url": "https://doi.org/10.21203/rs.3.rs-5934018/v1", "pdf_url": "https://www.researchsquare.com/article/rs-5934018/latest.pdf", "source": {"id": "https://openalex.org/S4306525896", "display_name": "Research Square", "issn_l": null, "issn": null, "is_oa": false, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": null, "host_organization_name": null, "host_organization_lineage": [], "host_organization_lineage_names": [], "type": "repository"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "acceptedVersion", "is_accepted": true, "is_published": false, "raw_source_name": "Research Square", "raw_type": "posted-content"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4414943556", "doi": "https://doi.org/10.2139/ssrn.5579871", "title": "A Comprehensive Survey of Moving Target Defense: Perspectives and Applications in Malware Mitigation", "publication_year": 2025, "publication_date": "2025-01-01", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Thomsy William", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": true, "raw_author_name": "Thomsy William", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "last", "author": {"id": "https://openalex.org/A5118330313", "display_name": "Silambarasan ElkanaEbinazer", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Silambarasan ElkanaEbinazer", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}], "abstract_inverted_index": null, "primary_topic": {"id": "https://openalex.org/T11241", "display_name": "Advanced Malware Detection Techniques", "score": 0.9336000084877014, "subfield": {"id": "https://openalex.org/subfields/1711", "display_name": "Signal Processing"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11241", "display_name": "Advanced Malware Detection Techniques", "score": 0.9336000084877014, "subfield": {"id": "https://openalex.org/subfields/1711", "display_name": "Signal Processing"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.06260000169277191, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0024999999441206455, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.2139/ssrn.5579871", "is_oa": true, "landing_page_url": "https://doi.org/10.2139/ssrn.5579871", "pdf_url": null, "source": {"id": "https://openalex.org/S4210172589", "display_name": "SSRN Electronic Journal", "issn_l": "1556-5068", "issn": ["1556-5068"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I1318003438", "host_organization_name": "RELX Group (Netherlands)", "host_organization_lineage": ["https://openalex.org/I1318003438"], "host_organization_lineage_names": [], "type": "repository"}, "license": null, "license_id": null, "version": "acceptedVersion", "is_accepted": true, "is_published": false, "raw_source_name": null, "raw_type": "posted-content"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4417302269", "doi": "https://doi.org/10.48550/arxiv.2505.12871", "title": "Does Low Rank Adaptation Lead to Lower Robustness against Training-Time Attacks?", "publication_year": 2025, "publication_date": "2025-05-19", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5104035702", "display_name": "Zi Liang", "orcid": "https://orcid.org/0009-0003-1418-9537", "observed_orcids": ["https://orcid.org/0009-0003-1418-9537", "https://orcid.org/0009-0001-2265-5388"]}, "institutions": [{"id": "https://openalex.org/I14243506", "display_name": "Hong Kong Polytechnic University", "ror": "https://ror.org/0030zas98", "country_code": "HK", "type": "education", "lineage": ["https://openalex.org/I14243506"]}], "countries": ["HK"], "is_corresponding": false, "raw_author_name": "Liang, Zi", "raw_affiliation_strings": ["The Hong Kong Polytechnic University , Hong Kong , China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "The Hong Kong Polytechnic University , Hong Kong , China", "institution_ids": ["https://openalex.org/I14243506"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5051088560", "display_name": "Haibo Hu", "orcid": "https://orcid.org/0000-0002-9008-2112", "observed_orcids": ["https://orcid.org/0000-0002-9008-2112"]}, "institutions": [{"id": "https://openalex.org/I14243506", "display_name": "Hong Kong Polytechnic University", "ror": "https://ror.org/0030zas98", "country_code": "HK", "type": "education", "lineage": ["https://openalex.org/I14243506"]}], "countries": ["HK"], "is_corresponding": false, "raw_author_name": "Hu, Haibo", "raw_affiliation_strings": ["The Hong Kong Polytechnic University , Hong Kong , China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "The Hong Kong Polytechnic University , Hong Kong , China", "institution_ids": ["https://openalex.org/I14243506"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5026389260", "display_name": "Qingqing Ye", "orcid": "https://orcid.org/0000-0003-1547-2847", "observed_orcids": ["https://orcid.org/0000-0003-1547-2847"]}, "institutions": [{"id": "https://openalex.org/I14243506", "display_name": "Hong Kong Polytechnic University", "ror": "https://ror.org/0030zas98", "country_code": "HK", "type": "education", "lineage": ["https://openalex.org/I14243506"]}], "countries": ["HK"], "is_corresponding": false, "raw_author_name": "Ye, Qingqing", "raw_affiliation_strings": ["The Hong Kong Polytechnic University , Hong Kong , China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "The Hong Kong Polytechnic University , Hong Kong , China", "institution_ids": ["https://openalex.org/I14243506"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5109796060", "display_name": "Yaxin Xiao", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I14243506", "display_name": "Hong Kong Polytechnic University", "ror": "https://ror.org/0030zas98", "country_code": "HK", "type": "education", "lineage": ["https://openalex.org/I14243506"]}], "countries": ["HK"], "is_corresponding": false, "raw_author_name": "Xiao, Yaxin", "raw_affiliation_strings": ["The Hong Kong Polytechnic University , Hong Kong , China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "The Hong Kong Polytechnic University , Hong Kong , China", "institution_ids": ["https://openalex.org/I14243506"]}]}, {"author_position": "last", "author": {"id": null, "display_name": "Li, Ronghua", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I14243506", "display_name": "Hong Kong Polytechnic University", "ror": "https://ror.org/0030zas98", "country_code": "HK", "type": "education", "lineage": ["https://openalex.org/I14243506"]}], "countries": ["HK"], "is_corresponding": false, "raw_author_name": "Li, Ronghua", "raw_affiliation_strings": ["The Hong Kong Polytechnic University , Hong Kong , China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "The Hong Kong Polytechnic University , Hong Kong , China", "institution_ids": ["https://openalex.org/I14243506"]}]}], "abstract_inverted_index": {"Low": [0], "rank": [1, 108], "adaptation": [2], "(LoRA)": [3], "has": [4], "emerged": [5], "as": [6], "a": [7], "prominent": [8], "technique": [9], "for": [10], "fine-tuning": [11], "large": [12], "language": [13], "models": [14, 81], "(LLMs)": [15], "thanks": [16], "to": [17, 90, 102, 124, 134, 139], "its": [18, 37, 67, 111, 140], "superb": [19], "efficiency": [20], "gains": [21], "over": [22], "previous": [23], "methods.": [24], "While": [25], "extensive": [26], "studies": [27], "have": [28, 147], "examined": [29], "the": [30, 54, 64, 86, 92, 95], "performance": [31], "and": [32, 72, 98, 110], "structural": [33], "properties": [34], "of": [35, 57, 66, 94], "LoRA,": [36], "behavior": [38], "upon": [39], "training-time": [40, 114], "attacks": [41, 126], "remain": [42], "underexplored,": [43], "posing": [44], "significant": [45], "security": [46, 55], "risks.": [47], "In": [48], "this": [49], "paper,": [50], "we": [51], "theoretically": [52], "investigate": [53], "implications": [56], "LoRA's": [58, 82, 106], "low-rank": [59], "structure": [60, 109], "during": [61], "fine-tuning,": [62, 129], "in": [63], "context": [65], "robustness": [68, 123], "against": [69, 113], "data": [70, 136], "poisoning": [71, 137], "backdoor": [73, 125], "attacks.": [74, 115], "We": [75], "propose": [76], "an": [77], "analytical": [78], "framework": [79], "that": [80, 119], "training": [83, 96], "dynamics,": [84], "employs": [85], "neural": [87], "tangent": [88], "kernel": [89], "simplify": [91], "analysis": [93, 117], "process,": [97], "applies": [99], "information": [100, 142], "theory": [101], "establish": [103], "connections": [104], "between": [105], "low": [107], "vulnerability": [112], "Our": [116], "indicates": [118], "LoRA": [120], "exhibits": [121], "better": [122], "than": [127], "full": [128], "while": [130], "becomes": [131], "more": [132], "vulnerable": [133], "untargeted": [135], "due": [138], "over-simplified": [141], "geometry.": [143], "Extensive": [144], "experimental": [145], "evaluations": [146], "corroborated": [148], "our": [149], "theoretical": [150], "findings.": [151]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10764", "display_name": "Privacy-Preserving Technologies in Data", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "pmh:oai:arXiv.org:2505.12871", "is_oa": true, "landing_page_url": "http://arxiv.org/abs/2505.12871", "pdf_url": "https://arxiv.org/pdf/2505.12871", "source": {"id": "https://openalex.org/S4306400194", "display_name": "arXiv (Cornell University)", "issn_l": "2331-8422", "issn": ["2331-8422"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I205783295", "host_organization_name": "Cornell University", "host_organization_lineage": ["https://openalex.org/I205783295"], "host_organization_lineage_names": [], "type": "repository"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "text"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4408741960", "doi": "https://doi.org/10.1016/j.media.2025.103553", "title": "Revisiting medical image retrieval via knowledge consolidation", "publication_year": 2025, "publication_date": "2025-03-23", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5100680991", "display_name": "Nan Yang", "orcid": "https://orcid.org/0000-0002-4542-3336", "observed_orcids": ["https://orcid.org/0000-0002-4542-3336"]}, "institutions": [{"id": "https://openalex.org/I47508984", "display_name": "Imperial College London", "ror": "https://ror.org/041kmwe10", "country_code": "GB", "type": "education", "lineage": ["https://openalex.org/I47508984"]}], "countries": ["GB"], "is_corresponding": false, "raw_author_name": "Yang Nan", "raw_affiliation_strings": ["Bioengineering Department and Imperial-X, Imperial College, London, UK. Electronic address: y.nan20@imperial.ac.uk"], "raw_orcid": "https://orcid.org/0000-0002-4542-3336", "affiliations": [{"raw_affiliation_string": "Bioengineering Department and Imperial-X, Imperial College, London, UK. Electronic address: y.nan20@imperial.ac.uk", "institution_ids": ["https://openalex.org/I47508984"]}]}, {"author_position": "middle", "author": {"id": null, "display_name": "Huichi Zhou", "orcid": "https://orcid.org/0009-0005-5312-6699", "observed_orcids": ["https://orcid.org/0009-0005-5312-6699"]}, "institutions": [{"id": "https://openalex.org/I47508984", "display_name": "Imperial College London", "ror": "https://ror.org/041kmwe10", "country_code": "GB", "type": "education", "lineage": ["https://openalex.org/I47508984"]}], "countries": ["GB"], "is_corresponding": false, "raw_author_name": "Huichi Zhou", "raw_affiliation_strings": ["Bioengineering Department and Imperial-X, Imperial College, London, UK"], "raw_orcid": "https://orcid.org/0009-0005-5312-6699", "affiliations": [{"raw_affiliation_string": "Bioengineering Department and Imperial-X, Imperial College, London, UK", "institution_ids": ["https://openalex.org/I47508984"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5043070120", "display_name": "Xiaodan Xing", "orcid": "https://orcid.org/0000-0002-2468-9266", "observed_orcids": ["https://orcid.org/0000-0002-2468-9266"]}, "institutions": [{"id": "https://openalex.org/I47508984", "display_name": "Imperial College London", "ror": "https://ror.org/041kmwe10", "country_code": "GB", "type": "education", "lineage": ["https://openalex.org/I47508984"]}], "countries": ["GB"], "is_corresponding": false, "raw_author_name": "Xiaodan Xing", "raw_affiliation_strings": ["Bioengineering Department and Imperial-X, Imperial College, London, UK"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Bioengineering Department and Imperial-X, Imperial College, London, UK", "institution_ids": ["https://openalex.org/I47508984"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5040046846", "display_name": "Giorgos Papanastasiou", "orcid": "https://orcid.org/0000-0002-1939-296X", "observed_orcids": ["https://orcid.org/0000-0002-1939-296X"]}, "institutions": [{"id": "https://openalex.org/I4210156054", "display_name": "Athena Research and Innovation Center In Information Communication & Knowledge Technologies", "ror": "https://ror.org/0576by029", "country_code": "GR", "type": "facility", "lineage": ["https://openalex.org/I4210156054"]}], "countries": ["GR"], "is_corresponding": false, "raw_author_name": "Giorgos Papanastasiou", "raw_affiliation_strings": ["Archimedes Unit, Athena Research Centre, Athens, 15125, Greece"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Archimedes Unit, Athena Research Centre, Athens, 15125, Greece", "institution_ids": ["https://openalex.org/I4210156054"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5113171597", "display_name": "Lei Zhu", "orcid": "https://orcid.org/0009-0006-4893-2909", "observed_orcids": ["https://orcid.org/0009-0006-4893-2909"]}, "institutions": [{"id": "https://openalex.org/I200769079", "display_name": "Hong Kong University of Science and Technology", "ror": "https://ror.org/00q4vv597", "country_code": "HK", "type": "education", "lineage": ["https://openalex.org/I200769079"]}], "countries": ["HK"], "is_corresponding": false, "raw_author_name": "Lei Zhu", "raw_affiliation_strings": ["Hong Kong University of Science and Technology, Hong Kong Special Administrative Region of China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Hong Kong University of Science and Technology, Hong Kong Special Administrative Region of China", "institution_ids": ["https://openalex.org/I200769079"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5049053722", "display_name": "Zhifan Gao", "orcid": "https://orcid.org/0000-0002-1576-4439", "observed_orcids": ["https://orcid.org/0000-0002-1576-4439"]}, "institutions": [{"id": "https://openalex.org/I157773358", "display_name": "Sun Yat-sen University", "ror": "https://ror.org/0064kty71", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I157773358"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Zhifan Gao", "raw_affiliation_strings": ["Sun Yat-Sen University, Guangdong, China"], "raw_orcid": "https://orcid.org/0000-0002-1576-4439", "affiliations": [{"raw_affiliation_string": "Sun Yat-Sen University, Guangdong, China", "institution_ids": ["https://openalex.org/I157773358"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5049192404", "display_name": "Alejandro Federico Frangi", "orcid": "https://orcid.org/0000-0002-2675-528X", "observed_orcids": ["https://orcid.org/0000-0002-2675-528X"]}, "institutions": [{"id": "https://openalex.org/I28407311", "display_name": "University of Manchester", "ror": "https://ror.org/027m9bs27", "country_code": "GB", "type": "education", "lineage": ["https://openalex.org/I28407311"]}, {"id": "https://openalex.org/I4210128584", "display_name": "The Alan Turing Institute", "ror": "https://ror.org/035dkdb55", "country_code": "GB", "type": "facility", "lineage": ["https://openalex.org/I4210128584"]}, {"id": "https://openalex.org/I4210159460", "display_name": "NIHR Manchester Biomedical Research Centre", "ror": "https://ror.org/05njkjr15", "country_code": "GB", "type": "facility", "lineage": ["https://openalex.org/I34931013", "https://openalex.org/I4210159460"]}], "countries": ["GB"], "is_corresponding": false, "raw_author_name": "Alejandro F. Frangi", "raw_affiliation_strings": ["CIMIM, Alan Turing Institute, London, UK; NIHR Manchester Biomedical Research Centre, University of Manchester, Manchester, UK"], "raw_orcid": "https://orcid.org/0000-0002-2675-528X", "affiliations": [{"raw_affiliation_string": "CIMIM, Alan Turing Institute, London, UK; NIHR Manchester Biomedical Research Centre, University of Manchester, Manchester, UK", "institution_ids": ["https://openalex.org/I28407311", "https://openalex.org/I4210128584", "https://openalex.org/I4210159460"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5100436460", "display_name": "Guang Zhong Yang", "orcid": "https://orcid.org/0000-0001-7344-7733", "observed_orcids": ["https://orcid.org/0000-0001-7344-7733", "https://orcid.org/0009-0001-4447-2523", "https://orcid.org/0000-0003-1655-5548"]}, "institutions": [{"id": "https://openalex.org/I183935753", "display_name": "King's College London", "ror": "https://ror.org/0220mzb33", "country_code": "GB", "type": "education", "lineage": ["https://openalex.org/I124357947", "https://openalex.org/I183935753"]}, {"id": "https://openalex.org/I4210096640", "display_name": "Royal Brompton Hospital", "ror": "https://ror.org/00cv4n034", "country_code": "GB", "type": "healthcare", "lineage": ["https://openalex.org/I2800036501", "https://openalex.org/I4210096640"]}, {"id": "https://openalex.org/I47508984", "display_name": "Imperial College London", "ror": "https://ror.org/041kmwe10", "country_code": "GB", "type": "education", "lineage": ["https://openalex.org/I47508984"]}], "countries": ["GB"], "is_corresponding": true, "raw_author_name": "Guang Yang", "raw_affiliation_strings": ["Bioengineering Department and Imperial-X, Imperial College, London, UK; National Heart and Lung Institute, Imperial College London, London, UK; Cardiovascular Research Centre, Royal Brompton Hospital, London, UK; School of Biomedical Engineering and Imaging Sciences, King's College London, UK. Electronic address: g.yang@imperial.ac.uk"], "raw_orcid": "https://orcid.org/0000-0001-7344-7733", "affiliations": [{"raw_affiliation_string": "Bioengineering Department and Imperial-X, Imperial College, London, UK; National Heart and Lung Institute, Imperial College London, London, UK; Cardiovascular Research Centre, Royal Brompton Hospital, London, UK; School of Biomedical Engineering and Imaging Sciences, King's College London, UK. Electronic address: g.yang@imperial.ac.uk", "institution_ids": ["https://openalex.org/I183935753", "https://openalex.org/I4210096640", "https://openalex.org/I47508984"]}]}], "abstract_inverted_index": {"As": [0], "artificial": [1], "intelligence": [2], "and": [3, 19, 42, 122, 136, 145, 151, 170, 190, 208, 288], "digital": [4], "medicine": [5], "increasingly": [6], "permeate": [7], "healthcare": [8, 178], "systems,": [9], "robust": [10, 287], "governance": [11], "frameworks": [12], "are": [13], "essential": [14], "to": [15, 57, 85, 93, 116, 156, 174, 186, 246, 254], "ensure": [16], "ethical,": [17], "secure,": [18], "effective": [20], "implementation.": [21], "In": [22, 108, 223], "this": [23, 109], "context,": [24], "medical": [25, 214], "image": [26, 76, 154, 215, 244, 279], "retrieval": [27, 77, 193, 216], "becomes": [28], "a": [29, 37, 79, 113, 175, 183, 228], "critical": [30], "component": [31], "of": [32, 119, 160, 192], "clinical": [33], "data": [34], "management,": [35], "playing": [36], "vital": [38], "role": [39], "in": [40, 213, 231], "decision-making": [41], "safeguarding": [43], "patient": [44], "information.": [45], "Existing": [46], "methods": [47, 91], "usually": [48], "learn": [49], "hash": [50, 60], "functions": [51], "using": [52, 82, 243], "bottleneck": [53], "features,": [54, 150], "which": [55], "fail": [56, 92], "produce": [58], "representative": [59], "codes": [61], "from": [62], "blended": [63, 149, 164], "embeddings.": [64], "Although": [65], "contrastive": [66], "hashing": [67], "has": [68], "shown": [69], "superior": [70], "performance,": [71], "current": [72], "approaches": [73, 212], "often": [74], "treat": [75], "as": [78], "classification": [80], "task,": [81], "category": [83], "labels": [84], "create": [86], "positive/negative": [87, 161], "pairs.": [88], "Moreover,": [89, 180], "many": [90], "address": [94, 247], "the": [95, 127, 158, 188, 200, 236], "out-of-distribution": [96], "(OOD)": [97], "issue": [98], "when": [99], "models": [100], "encounter": [101], "external": [102], "OOD": [103, 168, 206, 274], "queries": [104], "or": [105], "adversarial": [106], "attacks.": [107], "work,": [110], "we": [111, 181], "propose": [112], "novel": [114, 252], "method": [115, 202, 226], "consolidate": [117, 255], "knowledge": [118, 128], "hierarchical": [120, 256], "features": [121, 165], "optimization": [123], "functions.": [124], "We": [125], "formulate": [126], "consolidation": [129], "by": [130, 267, 277], "introducing": [131], "Depth-aware": [132], "Representation": [133], "Fusion": [134], "(DaRF)": [135], "Structure-aware": [137, 241], "Contrastive": [138], "Hashing": [139], "(SCH).": [140], "DaRF": [141], "adaptively": [142], "integrates": [143], "shallow": [144], "deep": [146], "representations": [147], "into": [148], "SCH": [152], "incorporates": [153], "fingerprints": [155, 245], "enhance": [157], "adaptability": [159], "pairings.": [162], "These": [163], "further": [166], "facilitate": [167], "detection": [169, 275], "content-based": [171], "recommendation,": [172], "contributing": [173], "secure": [176], "AI-driven": [177], "environment.": [179], "present": [182], "content-guided": [184], "ranking": [185, 284], "improve": [187], "robustness": [189], "reproducibility": [191], "results.": [194], "Our": [195], "comprehensive": [196], "assessments": [197], "demonstrate": [198], "that": [199], "proposed": [201], "could": [203], "effectively": [204], "recognize": [205], "samples": [207], "significantly": [209], "outperform": [210], "existing": [211], "(p": [217], "<": [218], "0": [219], ".": [220], "05": [221], ").": [222], "particular,": [224], "our": [225], "achieves": [227], "5.6\u201338.9%": [229], "improvement": [230], "mean": [232], "Average": [233], "Precision": [234], "on": [235], "anatomical": [237], "radiology": [238], "dataset.": [239], "\u2022": [240, 250, 261, 271, 282], "pairing": [242], "over-centralized": [248], "issues.": [249], "A": [251, 272], "model": [253], "embeddings": [257], "for": [258, 286], "representation": [259], "learning.": [260], "Addressing": [262], "ill-posed": [263], "gradient": [264], "issues": [265], "introduced": [266], "relaxed": [268], "Hamming": [269], "distance.": [270], "self-supervised": [273], "module": [276], "evaluating": [278], "reconstruction": [280], "disparity.": [281], "Content-guided": [283], "mechanism": [285], "precise": [289], "retrieval.": [290]}, "primary_topic": {"id": "https://openalex.org/T10824", "display_name": "Image Retrieval and Classification Techniques", "score": 0.7645999789237976, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T10824", "display_name": "Image Retrieval and Classification Techniques", "score": 0.7645999789237976, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10627", "display_name": "Advanced Image and Video Retrieval Techniques", "score": 0.21549999713897705, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11636", "display_name": "Artificial Intelligence in Healthcare and Education", "score": 0.004699999932199717, "subfield": {"id": "https://openalex.org/subfields/2718", "display_name": "Health Informatics"}, "field": {"id": "https://openalex.org/fields/27", "display_name": "Medicine"}, "domain": {"id": "https://openalex.org/domains/4", "display_name": "Health Sciences"}}], "primary_location": {"id": "doi:10.1016/j.media.2025.103553", "is_oa": true, "landing_page_url": "https://doi.org/10.1016/j.media.2025.103553", "pdf_url": null, "source": {"id": "https://openalex.org/S116571295", "display_name": "Medical Image Analysis", "issn_l": "1361-8415", "issn": ["1361-8415", "1361-8423", "1361-8431"], "is_oa": false, "is_in_doaj": false, "is_core": true, "listed_in": ["cwts-core", "doyens", "jufo-3", "ki-jl-3", "medline", "norway-1"], "host_organization": "https://openalex.org/P4310320990", "host_organization_name": "Elsevier BV", "host_organization_lineage": ["https://openalex.org/P4310320990"], "host_organization_lineage_names": ["Elsevier BV"], "type": "journal"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Medical Image Analysis", "raw_type": "journal-article"}, "cited_by_count": 8, "is_retracted": false}, {"id": "https://openalex.org/W4413129190", "doi": "https://doi.org/10.3897/jucs.165358", "title": "DAI-TIRS: An AI-Powered Threat Intelligence and Response System for Securing the Metaverse", "publication_year": 2025, "publication_date": "2025-08-12", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5058306961", "display_name": "Mohini Sharma", "orcid": "https://orcid.org/0009-0007-9182-9939", "observed_orcids": ["https://orcid.org/0009-0007-9182-9939"]}, "institutions": [{"id": "https://openalex.org/I244572783", "display_name": "Symbiosis International University", "ror": "https://ror.org/005r2ww51", "country_code": "IN", "type": "education", "lineage": ["https://openalex.org/I244572783"]}], "countries": ["IN"], "is_corresponding": true, "raw_author_name": "Mohini Sharma", "raw_affiliation_strings": ["Symbiosis International University, Pune, India"], "raw_orcid": "https://orcid.org/0009-0007-9182-9939", "affiliations": [{"raw_affiliation_string": "Symbiosis International University, Pune, India", "institution_ids": ["https://openalex.org/I244572783"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5027307578", "display_name": "Raghav Sandhane", "orcid": "https://orcid.org/0000-0002-8952-1042", "observed_orcids": ["https://orcid.org/0000-0002-8952-1042"]}, "institutions": [{"id": "https://openalex.org/I244572783", "display_name": "Symbiosis International University", "ror": "https://ror.org/005r2ww51", "country_code": "IN", "type": "education", "lineage": ["https://openalex.org/I244572783"]}], "countries": ["IN"], "is_corresponding": false, "raw_author_name": "Raghav Sandhane", "raw_affiliation_strings": ["Symbiosis International University, Pune, India"], "raw_orcid": "https://orcid.org/0000-0002-8952-1042", "affiliations": [{"raw_affiliation_string": "Symbiosis International University, Pune, India", "institution_ids": ["https://openalex.org/I244572783"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5119276366", "display_name": "Jaydeep Rajeshkumar Katariya", "orcid": "https://orcid.org/0009-0002-9860-6555", "observed_orcids": ["https://orcid.org/0009-0002-9860-6555"]}, "institutions": [{"id": "https://openalex.org/I244572783", "display_name": "Symbiosis International University", "ror": "https://ror.org/005r2ww51", "country_code": "IN", "type": "education", "lineage": ["https://openalex.org/I244572783"]}], "countries": ["IN"], "is_corresponding": false, "raw_author_name": "Jaydeep Rajeshkumar Katariya", "raw_affiliation_strings": ["Symbiosis International University, Pune, India"], "raw_orcid": "https://orcid.org/0009-0002-9860-6555", "affiliations": [{"raw_affiliation_string": "Symbiosis International University, Pune, India", "institution_ids": ["https://openalex.org/I244572783"]}]}], "abstract_inverted_index": {"The": [0, 39, 139, 227], "metaverse": [1, 43, 145, 202], "seamlessly": [2], "integrates": [3], "physical": [4], "and": [5, 16, 35, 52, 99, 106, 116, 130, 162, 199, 218], "digital": [6], "spaces,": [7], "enabling": [8], "AI-driven": [9, 36, 108, 222], "innovations": [10], "in": [11, 61, 110, 153, 158, 179, 220], "virtual": [12, 62], "interactions,": [13], "autonomous": [14], "avatars,": [15], "real-time": [17], "experiences.": [18], "However,": [19], "increased": [20], "reliance": [21], "on": [22, 234], "AI": [23, 56, 136], "brings": [24], "sweeping": [25], "cybersecurity": [26, 65, 191, 211], "challenges,": [27], "such": [28], "as": [29, 177, 208], "adversarial": [30, 135], "attacks,": [31], "deep": [32], "fake": [33], "impersonation,": [34], "phishing": [37], "campaigns.": [38], "security": [40, 80], "of": [41, 49, 92, 174, 201], "the": [42, 47, 86, 90, 117, 134, 160, 171, 180, 185, 196], "is": [44, 89, 232], "vital": [45], "for": [46, 188, 230], "sustainability": [48], "user": [50], "trust": [51], "system": [53], "integrity.": [54], "As": [55], "assumes": [57], "a": [58, 78, 143, 163], "larger": [59], "role": [60], "environments,": [63], "proactive": [64], "measures": [66], "must": [67], "be": [68], "taken": [69], "to": [70, 83], "counter": [71], "emerging": [72, 124], "threats.": [73], "This": [74, 204], "paper": [75], "introduces": [76], "DAI-TIRS,": [77], "holistic": [79], "framework": [81, 212], "designed": [82], "proactively": [84], "secure": [85], "metaverse.": [87], "DAI-TIRS": [88, 149, 207, 231], "integration": [91], "machine": [93], "learning-based": [94], "anomaly": [95], "detection,": [96, 155], "dynamic": [97], "honeypots,": [98], "predictive": [100], "threat": [101, 154, 166], "modeling": [102], "that": [103, 148, 193, 213], "detect,": [104], "classify,": [105], "mitigate": [107], "threats": [109, 125, 223], "real-time.": [111], "By": [112], "utilizing": [113], "MITRE": [114], "ATT&CK": [115], "PyTM": [118], "framework,": [119], "it": [120], "constantly": [121], "learns": [122], "new": [123], "through": [126], "advanced": [127, 210], "behavioral": [128], "analytics": [129], "keeps": [131], "pace": [132], "with": [133], "model\u2019s": [137], "evolution.": [138], "experimental": [140], "results": [141], "from": [142], "simulated": [144], "environment": [146], "demonstrate": [147], "achieves": [150], "93%": [151], "accuracy": [152], "90%": [156], "precision": [157], "classifying": [159], "severity,": [161], "36.9%": [164], "faster": [165], "mitigation": [167], "response": [168], "time": [169], "than": [170], "average": [172], "performance": [173], "baseline": [175], "models,": [176], "detailed": [178], "paper.": [181], "These": [182], "findings": [183], "underscore": [184], "critical": [186], "need": [187], "adaptive": [189], "AI-based": [190], "solutions": [192], "will": [194], "enhance": [195], "resilience,": [197], "trust,": [198], "integrity": [200], "ecosystems.": [203], "research": [205], "establishes": [206], "an": [209], "has": [214], "demonstrated": [215], "its": [216], "adaptability": [217], "effectiveness": [219], "countering": [221], "across": [224], "multiple": [225], "sectors.": [226], "source": [228], "code": [229], "available": [233], "GitHub:": [235], "[https://github.com/sharmamohini762/DAI-TIRS-Code]": [236]}, "primary_topic": {"id": "https://openalex.org/T10400", "display_name": "Network Security and Intrusion Detection", "score": 0.9589999914169312, "subfield": {"id": "https://openalex.org/subfields/1705", "display_name": "Computer Networks and Communications"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T10400", "display_name": "Network Security and Intrusion Detection", "score": 0.9589999914169312, "subfield": {"id": "https://openalex.org/subfields/1705", "display_name": "Computer Networks and Communications"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.01720000058412552, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10734", "display_name": "Information and Cyber Security", "score": 0.008299999870359898, "subfield": {"id": "https://openalex.org/subfields/1710", "display_name": "Information Systems"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.3897/jucs.165358", "is_oa": true, "landing_page_url": "https://doi.org/10.3897/jucs.165358", "pdf_url": "https://lib.jucs.org/article/165358/download/pdf/", "source": {"id": "https://openalex.org/S58563349", "display_name": "JUCS - Journal of Universal Computer Science", "issn_l": "0948-695X", "issn": ["0948-695X", "0948-6968"], "is_oa": true, "is_in_doaj": true, "is_core": true, "listed_in": ["cwts-core", "doaj", "jufo-1", "norway-1"], "host_organization": "https://openalex.org/P4310317875", "host_organization_name": "Verlag der Technischen Universit\u00e4t Graz", "host_organization_lineage": ["https://openalex.org/P4310317875"], "host_organization_lineage_names": ["Verlag der Technischen Universit\u00e4t Graz"], "type": "journal"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "JUCS - Journal of Universal Computer Science", "raw_type": "journal-article"}, "cited_by_count": 2, "is_retracted": false}, {"id": "https://openalex.org/W7114783496", "doi": "https://doi.org/10.22271/allresearch.2025.v11.i11sa.13209", "title": "AI-powered incident response for modern cybersecurity operations", "publication_year": 2025, "publication_date": "2025-01-01", "type": "article", "language": null, "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Iram Zehra", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I2802584695", "display_name": "Government of Karnataka", "ror": "https://ror.org/00maf9573", "country_code": "IN", "type": "government", "lineage": ["https://openalex.org/I2802584695"]}], "countries": ["IN"], "is_corresponding": true, "raw_author_name": "Iram Zehra", "raw_affiliation_strings": ["Department of Computer Science , L.B.S. Government First Grade College , Bengaluru , Karnataka , India"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Computer Science , L.B.S. Government First Grade College , Bengaluru , Karnataka , India", "institution_ids": ["https://openalex.org/I2802584695"]}]}], "abstract_inverted_index": {"Modern": [0], "cyber-attacks": [1], "evolve": [2], "rapidly,": [3], "exploiting": [4], "automation,": [5, 317], "adaptive": [6, 240], "tactics,": [7], "and": [8, 15, 29, 55, 74, 86, 107, 117, 128, 138, 159, 182, 198, 206, 227, 236, 253, 267, 273, 291, 320, 328], "large": [9], "attack": [10], "surfaces": [11], "spanning": [12], "cloud,": [13], "IoT,": [14], "enterprise": [16], "systems.": [17], "Traditional": [18], "incident": [19, 47, 121, 275, 311], "response": [20, 48, 77, 122, 209, 244, 312], "processes": [21], "heavily": [22], "reliant": [23], "on": [24, 65, 247], "manual": [25], "triage,": [26], "static": [27], "rules,": [28], "human-led": [30], "playbooks": [31], "are": [32], "no": [33], "longer": [34], "sufficient": [35], "to": [36, 79, 186, 201, 283, 288], "keep": [37], "pace": [38], "with": [39, 261], "advanced": [40, 215], "adversaries.": [41], "This": [42, 161, 305], "research": [43, 92], "proposes": [44], "an": [45, 164, 336], "AI-powered": [46, 165], "framework": [49, 169, 220], "capable": [50], "of": [51, 99, 104, 140, 147, 310], "autonomously": [52], "detecting,": [53], "contextualizing,": [54], "mitigating": [56], "cyber": [57, 132, 141, 303], "threats": [58, 142], "in": [59, 211, 335], "real": [60, 212], "time.": [61, 213], "The": [62, 91, 110, 134, 190, 256], "work": [63, 306], "focuses": [64], "developing": [66], "explainable": [67], "machine": [68, 178], "learning": [69, 242], "models,": [70], "graph-based": [71], "threat": [72, 194], "reasoning,": [73, 181], "reinforcement": [75, 241], "learning-driven": [76], "automation": [78], "improve": [80], "detection": [81], "fidelity,": [82], "reduce": [83], "mean-time-to-detect": [84], "(MTTD),": [85, 285], "significantly": [87, 232], "accelerate": [88], "mean-time-to-respond": [89], "(MTTR).": [90], "will": [93], "address": [94], "key": [95], "challenges,": [96], "including": [97], "heterogeneity": [98], "telemetry,": [100, 266], "adversarial": [101, 338], "robustness,": [102], "transparency": [103], "automated": [105, 180, 199, 228], "decisions,": [106], "human-machine": [108], "trust.": [109], "proposed": [111, 191], "outcome": [112], "is": [113], "a": [114, 152, 298, 330], "scalable,": [115], "trustworthy,": [116], "operationally": [118], "viable": [119], "AI-driven": [120], "system": [123, 192], "that": [124], "enhances": [125], "SOC": [126, 293], "productivity": [127], "resilience": [129], "against": [130], "evolving": [131], "threats.": [133], "accelerating": [135], "complexity,": [136], "scale,": [137], "velocity": [139], "have": [143], "outpaced": [144], "the": [145, 219, 308], "capabilities": [146], "traditional": [148], "security": [149], "operations,": [150], "demanding": [151], "new": [153], "paradigm": [154], "for": [155, 171, 301], "rapid": [156], "detection,": [157], "analysis,": [158], "response.": [160], "paper": [162], "presents": [163], "Incident": [166], "Response": [167], "(IR)": [168], "designed": [170], "modern": [172], "cybersecurity": [173, 333], "operations": [174], "centres": [175], "(SOCs),": [176], "integrating": [177], "learning,": [179], "large-scale": [183], "data": [184], "orchestration": [185], "enhance": [187], "operational": [188], "resilience.": [189], "unifies": [193], "intelligence,": [195], "behavioural": [196], "analytics,": [197, 319], "decision-making": [200], "identify": [202], "anomalies,": [203], "prioritize": [204], "alerts,": [205], "initiate": [207], "context-aware": [208], "actions": [210], "Leveraging": [214], "natural": [216], "language": [217], "processing,": [218], "enables": [221], "dynamic": [222], "playbook": [223], "generation,": [224], "analyst-machine": [225], "collaboration,": [226], "root-cause": [229], "analysis": [230], "while": [231], "reducing": [233], "investigation": [234], "time": [235, 282, 287], "false-positive": [237], "rates.": [238], "Additionally,": [239], "optimizes": [243], "strategies": [245], "based": [246], "historical": [248], "outcomes,": [249], "attacker": [250], "behaviour": [251], "evolution,": [252], "environmental": [254], "changes.": [255], "architecture": [257], "supports": [258], "seamless": [259], "integration": [260], "SIEM,": [262], "SOAR,": [263], "EDR,": [264], "cloud-native": [265], "threat-hunting": [268], "pipelines,": [269], "enabling": [270], "proactive": [271], "defence": [272], "continuous": [274], "readiness.": [276], "Experimental": [277], "evaluations": [278], "demonstrate": [279], "improved": [280], "mean": [281, 286], "detect": [284], "respond": [289], "(MTTR),": [290], "overall": [292], "efficiency,": [294], "highlighting": [295], "AI": [296], "as": [297], "transformative": [299], "enabler": [300], "next-generation": [302], "defense.": [304], "advances": [307], "state": [309], "by": [313], "showcasing": [314], "how": [315], "intelligent": [316], "scalable": [318], "autonomous": [321], "decision": [322], "support": [323], "can": [324], "augment": [325], "human": [326], "expertise": [327], "build": [329], "more": [331], "resilient": [332], "posture": [334], "increasingly": [337], "digital": [339], "landscape.": [340]}, "primary_topic": {"id": "https://openalex.org/T10400", "display_name": "Network Security and Intrusion Detection", "score": 0.9907000064849854, "subfield": {"id": "https://openalex.org/subfields/1705", "display_name": "Computer Networks and Communications"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T10400", "display_name": "Network Security and Intrusion Detection", "score": 0.9907000064849854, "subfield": {"id": "https://openalex.org/subfields/1705", "display_name": "Computer Networks and Communications"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10734", "display_name": "Information and Cyber Security", "score": 0.006200000178068876, "subfield": {"id": "https://openalex.org/subfields/1710", "display_name": "Information Systems"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12034", "display_name": "Digital and Cyber Forensics", "score": 0.0007999999797903001, "subfield": {"id": "https://openalex.org/subfields/1710", "display_name": "Information Systems"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.22271/allresearch.2025.v11.i11sa.13209", "is_oa": true, "landing_page_url": "https://doi.org/10.22271/allresearch.2025.v11.i11sa.13209", "pdf_url": "https://www.allresearchjournal.com/archives/2025/vol11issue11S/PartA/11-12-42-692.pdf", "source": {"id": "https://openalex.org/S2764689006", "display_name": "International journal of applied research", "issn_l": "2394-5869", "issn": ["2394-5869", "2394-7500"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/P4322614584", "host_organization_name": "AkiNik Publications", "host_organization_lineage": ["https://openalex.org/P4322614584"], "host_organization_lineage_names": ["AkiNik Publications"], "type": "journal"}, "license": null, "license_id": null, "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "International Journal of Applied Research", "raw_type": "journal-article"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4410129516", "doi": "https://doi.org/10.54254/2755-2721/2025.tj22524", "title": "Vision-Language Model Security in Autonomous Driving: A Survey", "publication_year": 2025, "publication_date": "2025-05-06", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Junyi Wang", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I24185976", "display_name": "Sichuan University", "ror": "https://ror.org/011ashp19", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I24185976"]}], "countries": ["CN"], "is_corresponding": true, "raw_author_name": "Junyi Wang", "raw_affiliation_strings": ["School of Cyber Science and Engineering, Sichuan University, Chengdu, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "School of Cyber Science and Engineering, Sichuan University, Chengdu, China", "institution_ids": ["https://openalex.org/I24185976"]}]}], "abstract_inverted_index": {"With": [0], "the": [1, 46, 65, 126, 147], "rapid": [2], "advancement": [3], "of": [4, 34, 48, 68, 86, 130, 149], "Vision-Language": [5], "Models": [6], "(VLMs),": [7], "their": [8, 35, 44, 155], "remarkable": [9], "capabilities": [10], "in": [11, 20, 92, 132, 157], "multimodal": [12, 69], "perception": [13], "and": [14, 40, 83, 107, 118, 128], "decision-making": [15], "have": [16], "garnered": [17], "significant": [18], "attention": [19], "autonomous": [21, 26, 93, 133, 151], "driving.": [22, 134], "By": [23, 135], "integrating": [24], "VLMs,": [25], "driving": [27, 152], "systems": [28], "can": [29], "achieve": [30], "a": [31, 81], "deeper": [32], "understanding": [33], "environment,": [36], "thereby": [37], "enhancing": [38], "safety": [39], "efficiency.": [41], "However,": [42], "despite": [43], "advantages,": [45], "deployment": [47], "VLMs": [49, 72, 91, 131], "also": [50], "introduces": [51], "potential": [52], "security": [53, 129], "vulnerabilities": [54], "that": [55, 141], "pose": [56], "critical": [57], "challenges": [58], "to": [59, 74, 124, 146], "real-world": [60], "applications.": [61], "They": [62], "stem": [63], "from": [64], "complex": [66], "nature": [67], "processing,": [70], "making": [71], "susceptible": [73], "various": [75, 87], "adversarial": [76, 96], "manipulations.": [77], "This": [78], "paper": [79], "presents": [80], "comprehensive": [82], "systematic": [84], "review": [85], "attack": [88, 116], "vectors": [89], "targeting": [90], "driving,": [94], "including": [95], "attacks,": [97, 99, 101, 104, 106], "backdoor": [98], "jailbreak": [100], "prompt": [102], "injection": [103], "zero-shot": [105], "hallucinations.": [108], "Furthermore,": [109], "we": [110, 139], "analyze": [111], "defensive": [112], "mechanisms": [113], "against": [114], "each": [115], "type": [117], "discuss": [119], "promising": [120], "future": [121], "research": [122], "directions": [123], "bolster": [125], "robustness": [127], "addressing": [136], "these": [137], "challenges,": [138], "believe": [140], "our": [142], "survey": [143], "provides": [144], "insights": [145], "development": [148], "safer": [150], "systems,": [153], "ensuring": [154], "reliability": [156], "practical": [158], "deployments.": [159]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11099", "display_name": "Autonomous Vehicle Technology and Safety", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/2203", "display_name": "Automotive Engineering"}, "field": {"id": "https://openalex.org/fields/22", "display_name": "Engineering"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.54254/2755-2721/2025.tj22524", "is_oa": true, "landing_page_url": "https://doi.org/10.54254/2755-2721/2025.tj22524", "pdf_url": "https://www.ewadirect.com/proceedings/ace/article/view/22524/pdf", "source": {"id": "https://openalex.org/S4387281889", "display_name": "Applied and Computational Engineering", "issn_l": "2755-2721", "issn": ["2755-2721", "2755-273X"], "is_oa": false, "is_in_doaj": false, "is_core": true, "listed_in": ["cwts-core"], "host_organization": null, "host_organization_name": null, "host_organization_lineage": [], "host_organization_lineage_names": [], "type": "journal"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Applied and Computational Engineering", "raw_type": "journal-article"}, "cited_by_count": 3, "is_retracted": false}, {"id": "https://openalex.org/W4408612676", "doi": "https://doi.org/10.1101/2025.03.18.25324184", "title": "Large Language Models Are Highly Vulnerable to Adversarial Hallucination Attacks in Clinical Decision Support: A Multi-Model Assurance Analysis", "publication_year": 2025, "publication_date": "2025-03-19", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5044457381", "display_name": "Mahmud Omar", "orcid": "https://orcid.org/0009-0001-0438-0827", "observed_orcids": ["https://orcid.org/0009-0001-0438-0827"]}, "institutions": [{"id": "https://openalex.org/I1324220072", "display_name": "Mount Sinai Hospital", "ror": "https://ror.org/01zkyz108", "country_code": "US", "type": "healthcare", "lineage": ["https://openalex.org/I1320796813", "https://openalex.org/I1324220072"]}, {"id": "https://openalex.org/I98704320", "display_name": "Icahn School of Medicine at Mount Sinai", "ror": "https://ror.org/04a9tmd77", "country_code": "US", "type": "education", "lineage": ["https://openalex.org/I1320796813", "https://openalex.org/I98704320"]}], "countries": ["US"], "is_corresponding": false, "raw_author_name": "Mahmud Omar", "raw_affiliation_strings": ["The Division of Data-Driven and Digital Medicine (D3M), Icahn School of Medicine at Mount Sinai, New York, NY, USA", "The Hasso Plattner Institute of Digital Health, Icahn School of Medicine at Mount Sinai, New York, NY, USA", "The Windreich Department of Artificial Intelligence and Human Health, Mount Sinai Medical Center, NY, USA"], "raw_orcid": "https://orcid.org/0009-0001-0438-0827", "affiliations": [{"raw_affiliation_string": "The Division of Data-Driven and Digital Medicine (D3M), Icahn School of Medicine at Mount Sinai, New York, NY, USA", "institution_ids": ["https://openalex.org/I98704320"]}, {"raw_affiliation_string": "The Hasso Plattner Institute of Digital Health, Icahn School of Medicine at Mount Sinai, New York, NY, USA", "institution_ids": ["https://openalex.org/I98704320"]}, {"raw_affiliation_string": "The Windreich Department of Artificial Intelligence and Human Health, Mount Sinai Medical Center, NY, USA", "institution_ids": ["https://openalex.org/I1324220072"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5005460981", "display_name": "Vera Sorin", "orcid": "https://orcid.org/0000-0003-0509-4686", "observed_orcids": ["https://orcid.org/0000-0003-0509-4686"]}, "institutions": [{"id": "https://openalex.org/I1330342723", "display_name": "Mayo Clinic", "ror": "https://ror.org/02qp3tb03", "country_code": "US", "type": "healthcare", "lineage": ["https://openalex.org/I1330342723"]}], "countries": ["US"], "is_corresponding": false, "raw_author_name": "Vera Sorin", "raw_affiliation_strings": ["Diagnostic Radiology, Mayo Clinic, Rochester, MN, USA"], "raw_orcid": "https://orcid.org/0000-0003-0509-4686", "affiliations": [{"raw_affiliation_string": "Diagnostic Radiology, Mayo Clinic, Rochester, MN, USA", "institution_ids": ["https://openalex.org/I1330342723"]}]}, {"author_position": "middle", "author": {"id": null, "display_name": "Jeremy D. Collins", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I1330342723", "display_name": "Mayo Clinic", "ror": "https://ror.org/02qp3tb03", "country_code": "US", "type": "healthcare", "lineage": ["https://openalex.org/I1330342723"]}], "countries": ["US"], "is_corresponding": false, "raw_author_name": "Jeremy D. Collins", "raw_affiliation_strings": ["Diagnostic Radiology, Mayo Clinic, Rochester, MN, USA"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Diagnostic Radiology, Mayo Clinic, Rochester, MN, USA", "institution_ids": ["https://openalex.org/I1330342723"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5011819951", "display_name": "David Emil Reich", "orcid": "https://orcid.org/0000-0002-7037-5292", "observed_orcids": ["https://orcid.org/0000-0002-7037-5292"]}, "institutions": [{"id": "https://openalex.org/I98704320", "display_name": "Icahn School of Medicine at Mount Sinai", "ror": "https://ror.org/04a9tmd77", "country_code": "US", "type": "education", "lineage": ["https://openalex.org/I1320796813", "https://openalex.org/I98704320"]}], "countries": ["US"], "is_corresponding": false, "raw_author_name": "David Reich", "raw_affiliation_strings": ["Department of Anesthesiology, Perioperative and Pain Medicine, Icahn School of Medicine at Mount Sinai, New York, NY 10029, USA"], "raw_orcid": "https://orcid.org/0000-0002-7037-5292", "affiliations": [{"raw_affiliation_string": "Department of Anesthesiology, Perioperative and Pain Medicine, Icahn School of Medicine at Mount Sinai, New York, NY 10029, USA", "institution_ids": ["https://openalex.org/I98704320"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5070462882", "display_name": "Robert M. Freeman", "orcid": "https://orcid.org/0000-0003-4946-6533", "observed_orcids": ["https://orcid.org/0000-0003-4946-6533"]}, "institutions": [{"id": "https://openalex.org/I98704320", "display_name": "Icahn School of Medicine at Mount Sinai", "ror": "https://ror.org/04a9tmd77", "country_code": "US", "type": "education", "lineage": ["https://openalex.org/I1320796813", "https://openalex.org/I98704320"]}], "countries": ["US"], "is_corresponding": false, "raw_author_name": "Robert Freeman", "raw_affiliation_strings": ["Institute for Healthcare Delivery Science, Icahn School of Medicine at Mount Sinai, New York, NY 10029, USA"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Institute for Healthcare Delivery Science, Icahn School of Medicine at Mount Sinai, New York, NY 10029, USA", "institution_ids": ["https://openalex.org/I98704320"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5034858614", "display_name": "Nicholas P. Gavin", "orcid": "https://orcid.org/0000-0001-6900-3953", "observed_orcids": ["https://orcid.org/0000-0001-6900-3953"]}, "institutions": [{"id": "https://openalex.org/I98704320", "display_name": "Icahn School of Medicine at Mount Sinai", "ror": "https://ror.org/04a9tmd77", "country_code": "US", "type": "education", "lineage": ["https://openalex.org/I1320796813", "https://openalex.org/I98704320"]}], "countries": ["US"], "is_corresponding": false, "raw_author_name": "Nicholas Gavin", "raw_affiliation_strings": ["Department of Emergency Medicine, Icahn School of Medicine at Mount Sinai, 1468 Madison Ave., New York, NY 10029, USA"], "raw_orcid": "https://orcid.org/0000-0001-6900-3953", "affiliations": [{"raw_affiliation_string": "Department of Emergency Medicine, Icahn School of Medicine at Mount Sinai, 1468 Madison Ave., New York, NY 10029, USA", "institution_ids": ["https://openalex.org/I98704320"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5091224898", "display_name": "Alexander W. Charney", "orcid": "https://orcid.org/0000-0001-8135-6858", "observed_orcids": ["https://orcid.org/0000-0001-8135-6858"]}, "institutions": [{"id": "https://openalex.org/I1324220072", "display_name": "Mount Sinai Hospital", "ror": "https://ror.org/01zkyz108", "country_code": "US", "type": "healthcare", "lineage": ["https://openalex.org/I1320796813", "https://openalex.org/I1324220072"]}, {"id": "https://openalex.org/I98704320", "display_name": "Icahn School of Medicine at Mount Sinai", "ror": "https://ror.org/04a9tmd77", "country_code": "US", "type": "education", "lineage": ["https://openalex.org/I1320796813", "https://openalex.org/I98704320"]}], "countries": ["US"], "is_corresponding": false, "raw_author_name": "Alexander Charney", "raw_affiliation_strings": ["The Division of Data-Driven and Digital Medicine (D3M), Icahn School of Medicine at Mount Sinai, New York, NY, USA", "The Hasso Plattner Institute of Digital Health, Icahn School of Medicine at Mount Sinai, New York, NY, USA", "The Windreich Department of Artificial Intelligence and Human Health, Mount Sinai Medical Center, NY, USA"], "raw_orcid": "https://orcid.org/0000-0001-8135-6858", "affiliations": [{"raw_affiliation_string": "The Division of Data-Driven and Digital Medicine (D3M), Icahn School of Medicine at Mount Sinai, New York, NY, USA", "institution_ids": ["https://openalex.org/I98704320"]}, {"raw_affiliation_string": "The Hasso Plattner Institute of Digital Health, Icahn School of Medicine at Mount Sinai, New York, NY, USA", "institution_ids": ["https://openalex.org/I98704320"]}, {"raw_affiliation_string": "The Windreich Department of Artificial Intelligence and Human Health, Mount Sinai Medical Center, NY, USA", "institution_ids": ["https://openalex.org/I1324220072"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5116698296", "display_name": "Lisa S. Stump", "orcid": "https://orcid.org/0000-0002-1327-4110", "observed_orcids": ["https://orcid.org/0000-0002-1327-4110"]}, "institutions": [{"id": "https://openalex.org/I98704320", "display_name": "Icahn School of Medicine at Mount Sinai", "ror": "https://ror.org/04a9tmd77", "country_code": "US", "type": "education", "lineage": ["https://openalex.org/I1320796813", "https://openalex.org/I98704320"]}], "countries": ["US"], "is_corresponding": false, "raw_author_name": "Lisa Stump", "raw_affiliation_strings": ["Institute for Healthcare Delivery Science, Icahn School of Medicine at Mount Sinai, New York, NY 10029, USA"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Institute for Healthcare Delivery Science, Icahn School of Medicine at Mount Sinai, New York, NY 10029, USA", "institution_ids": ["https://openalex.org/I98704320"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5063716572", "display_name": "Nicola Luigi Bragazzi", "orcid": "https://orcid.org/0000-0001-8409-868X", "observed_orcids": ["https://orcid.org/0000-0001-8409-868X"]}, "institutions": [{"id": "https://openalex.org/I4405259612", "display_name": "Institut f\u00fcr Schlaganfall- und Demenzforschung", "ror": "https://ror.org/02fa5cb34", "country_code": "DE", "type": "education", "lineage": ["https://openalex.org/I3018771216", "https://openalex.org/I4405259612", "https://openalex.org/I8204097"]}, {"id": "https://openalex.org/I8204097", "display_name": "Ludwig-Maximilians-Universit\u00e4t M\u00fcnchen", "ror": "https://ror.org/05591te55", "country_code": "DE", "type": "education", "lineage": ["https://openalex.org/I8204097"]}], "countries": ["DE"], "is_corresponding": false, "raw_author_name": "Nicola Luigi Bragazzi", "raw_affiliation_strings": ["Institute for Stroke and Dementia Research (ISD), University Hospital, Ludwig-Maximilians-University (LMU) Munich, Munich, Germany"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Institute for Stroke and Dementia Research (ISD), University Hospital, Ludwig-Maximilians-University (LMU) Munich, Munich, Germany", "institution_ids": ["https://openalex.org/I4405259612", "https://openalex.org/I8204097"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5047405500", "display_name": "Girish N. Nadkarni", "orcid": "https://orcid.org/0000-0001-6319-4314", "observed_orcids": ["https://orcid.org/0000-0001-6319-4314"]}, "institutions": [{"id": "https://openalex.org/I1324220072", "display_name": "Mount Sinai Hospital", "ror": "https://ror.org/01zkyz108", "country_code": "US", "type": "healthcare", "lineage": ["https://openalex.org/I1320796813", "https://openalex.org/I1324220072"]}, {"id": "https://openalex.org/I98704320", "display_name": "Icahn School of Medicine at Mount Sinai", "ror": "https://ror.org/04a9tmd77", "country_code": "US", "type": "education", "lineage": ["https://openalex.org/I1320796813", "https://openalex.org/I98704320"]}], "countries": ["US"], "is_corresponding": true, "raw_author_name": "Girish N Nadkarni", "raw_affiliation_strings": ["The Division of Data-Driven and Digital Medicine (D3M), Icahn School of Medicine at Mount Sinai, New York, NY, USA", "The Hasso Plattner Institute of Digital Health, Icahn School of Medicine at Mount Sinai, New York, NY, USA", "The Windreich Department of Artificial Intelligence and Human Health, Mount Sinai Medical Center, NY, USA"], "raw_orcid": "https://orcid.org/0000-0001-6319-4314", "affiliations": [{"raw_affiliation_string": "The Division of Data-Driven and Digital Medicine (D3M), Icahn School of Medicine at Mount Sinai, New York, NY, USA", "institution_ids": ["https://openalex.org/I98704320"]}, {"raw_affiliation_string": "The Hasso Plattner Institute of Digital Health, Icahn School of Medicine at Mount Sinai, New York, NY, USA", "institution_ids": ["https://openalex.org/I98704320"]}, {"raw_affiliation_string": "The Windreich Department of Artificial Intelligence and Human Health, Mount Sinai Medical Center, NY, USA", "institution_ids": ["https://openalex.org/I1324220072"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5039899830", "display_name": "Eyal Klang", "orcid": "https://orcid.org/0000-0002-4567-3108", "observed_orcids": ["https://orcid.org/0000-0002-4567-3108"]}, "institutions": [{"id": "https://openalex.org/I1324220072", "display_name": "Mount Sinai Hospital", "ror": "https://ror.org/01zkyz108", "country_code": "US", "type": "healthcare", "lineage": ["https://openalex.org/I1320796813", "https://openalex.org/I1324220072"]}, {"id": "https://openalex.org/I98704320", "display_name": "Icahn School of Medicine at Mount Sinai", "ror": "https://ror.org/04a9tmd77", "country_code": "US", "type": "education", "lineage": ["https://openalex.org/I1320796813", "https://openalex.org/I98704320"]}], "countries": ["US"], "is_corresponding": true, "raw_author_name": "Eyal Klang", "raw_affiliation_strings": ["The Division of Data-Driven and Digital Medicine (D3M), Icahn School of Medicine at Mount Sinai, New York, NY, USA", "The Hasso Plattner Institute of Digital Health, Icahn School of Medicine at Mount Sinai, New York, NY, USA", "The Windreich Department of Artificial Intelligence and Human Health, Mount Sinai Medical Center, NY, USA"], "raw_orcid": "https://orcid.org/0000-0002-4567-3108", "affiliations": [{"raw_affiliation_string": "The Division of Data-Driven and Digital Medicine (D3M), Icahn School of Medicine at Mount Sinai, New York, NY, USA", "institution_ids": ["https://openalex.org/I98704320"]}, {"raw_affiliation_string": "The Hasso Plattner Institute of Digital Health, Icahn School of Medicine at Mount Sinai, New York, NY, USA", "institution_ids": ["https://openalex.org/I98704320"]}, {"raw_affiliation_string": "The Windreich Department of Artificial Intelligence and Human Health, Mount Sinai Medical Center, NY, USA", "institution_ids": ["https://openalex.org/I1324220072"]}]}], "abstract_inverted_index": {"Abstract": [0], "Background": [1], "Large": [2], "language": [3, 63], "models": [4, 183], "(LLMs)": [5], "show": [6], "promise": [7], "in": [8, 30, 35, 52, 60, 115, 123, 128], "clinical": [9, 53, 241], "contexts": [10], "but": [11, 126], "can": [12], "generate": [13], "false": [14, 46, 72, 240], "facts": [15], "(often": [16], "referred": [17], "to": [18, 40, 55, 144, 180, 198, 212, 234], "as": [19, 171], "\u201challucinations\u201d).": [20], "One": [21], "subset": [22], "of": [23, 227], "these": [24], "errors": [25], "arises": [26], "from": [27, 178, 196, 210], "adversarial": [28, 57, 235], "attacks,": [29, 237], "which": [31], "fabricated": [32, 50, 97, 165], "details": [33, 73, 242], "embedded": [34, 49], "prompts": [36, 54], "lead": [37], "the": [38, 45, 164, 167, 202], "model": [39, 161], "produce": [41], "or": [42, 81, 104, 107], "elaborate": [43], "on": [44, 71, 163], "information.": [47], "We": [48, 65, 88, 131], "content": [51], "elicit": [56], "hallucination": [58, 236], "attacks": [59], "multiple": [61], "large": [62], "models.": [64], "quantified": [66], "how": [67], "often": [68], "they": [69], "elaborated": [70, 162], "and": [74, 117, 147, 184], "tested": [75, 132], "whether": [76], "a": [77, 102, 108, 160, 172], "specialized": [78], "mitigation": [79, 188], "prompt": [80, 142, 251], "altered": [82], "temperature": [83, 148], "settings": [84], "reduced": [85], "errors.": [86], "Methods": [87], "created": [89], "300": [90], "physician-validated": [91], "simulated": [92], "vignettes,": [93], "each": [94], "containing": [95], "one": [96], "detail": [98], "(a": [99], "laboratory": [100], "test,": [101], "physical": [103], "radiological": [105], "sign,": [106], "medical": [109, 129], "condition).": [110], "Each": [111], "vignette": [112], "was": [113, 169], "presented": [114], "short": [116], "long": [118], "versions": [119], "-": [120], "differing": [121], "only": [122], "word": [124], "count": [125], "identical": [127], "content.": [130], "six": [133], "LLMs": [134, 230], "under": [135], "three": [136], "conditions:": [137], "default": [138], "(standard": [139], "settings),": [140], "mitigating": [141], "(designed": [143], "reduce": [145], "hallucinations),": [146], "0": [149], "(deterministic": [150], "output": [151], "with": [152], "maximum": [153], "response": [154], "certainty),": [155], "generating": [156, 239], "5,400": [157], "outputs.": [158], "If": [159], "detail,": [166], "case": [168], "classified": [170], "\u201challucination\u201d.": [173], "Results": [174], "Hallucination": [175], "rates": [176, 208], "ranged": [177], "50%": [179], "82%": [181], "across": [182, 193], "prompting": [185], "methods.": [186], "Prompt-based": [187], "lowered": [189], "overall": [190, 204], "hallucinations": [191], "(mean": [192], "all": [194], "models)": [195], "66%": [197], "44%": [199], "(p<0.001).": [200, 214], "For": [201], "best": [203], "performing": [205], "model,": [206], "GPT-4o,": [207], "declined": [209], "53%": [211], "23%": [213], "Temperature": [215], "adjustments": [216], "offered": [217], "no": [218], "significant": [219], "improvement.": [220], "Short": [221], "vignettes": [222], "showed": [223], "slightly": [224], "higher": [225], "odds": [226], "hallucination.": [228], "Conclusions": [229], "are": [231], "highly": [232], "susceptible": [233], "frequently": [238], "that": [243], "pose": [244], "risks": [245], "when": [246], "used": [247], "without": [248], "safeguards.": [249], "While": [250], "engineering": [252], "reduces": [253], "errors,": [254], "it": [255], "does": [256], "not": [257], "eliminate": [258], "them.": [259]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.7851999998092651, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.7851999998092651, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11636", "display_name": "Artificial Intelligence in Healthcare and Education", "score": 0.19910000264644623, "subfield": {"id": "https://openalex.org/subfields/2718", "display_name": "Health Informatics"}, "field": {"id": "https://openalex.org/fields/27", "display_name": "Medicine"}, "domain": {"id": "https://openalex.org/domains/4", "display_name": "Health Sciences"}}, {"id": "https://openalex.org/T12026", "display_name": "Explainable Artificial Intelligence (XAI)", "score": 0.0027000000700354576, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.1101/2025.03.18.25324184", "is_oa": true, "landing_page_url": "https://doi.org/10.1101/2025.03.18.25324184", "pdf_url": "https://www.medrxiv.org/content/medrxiv/early/2025/03/19/2025.03.18.25324184.full.pdf", "source": {"id": "https://openalex.org/S3005729997", "display_name": "medRxiv", "issn_l": null, "issn": null, "is_oa": false, "is_in_doaj": false, "is_core": true, "listed_in": ["cwts-core"], "host_organization": null, "host_organization_name": null, "host_organization_lineage": ["https://openalex.org/P4310315909"], "host_organization_lineage_names": ["Cold Spring Harbor Laboratory Press"], "type": "repository"}, "license": "cc-by-nc", "license_id": "https://openalex.org/licenses/cc-by-nc", "version": "acceptedVersion", "is_accepted": true, "is_published": false, "raw_source_name": "medRxiv", "raw_type": "posted-content"}, "cited_by_count": 13, "is_retracted": false}, {"id": "https://openalex.org/W4412430514", "doi": "https://doi.org/10.1016/j.knosys.2025.114079", "title": "Improving adversarial transferability via adaptive ensemble attack with post-optimization", "publication_year": 2025, "publication_date": "2025-07-15", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Yun Zhang", "orcid": "https://orcid.org/0009-0000-7111-5946", "observed_orcids": ["https://orcid.org/0009-0000-7111-5946"]}, "institutions": [{"id": "https://openalex.org/I90610280", "display_name": "South China University of Technology", "ror": "https://ror.org/0530pts50", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I90610280"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Yun Zhang", "raw_affiliation_strings": ["School of Computer Science and Engineering, South China University of Technology, Guangzhou, China"], "raw_orcid": "https://orcid.org/0009-0000-7111-5946", "affiliations": [{"raw_affiliation_string": "School of Computer Science and Engineering, South China University of Technology, Guangzhou, China", "institution_ids": ["https://openalex.org/I90610280"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5101412180", "display_name": "Yan Wo", "orcid": "https://orcid.org/0000-0003-1001-4425", "observed_orcids": ["https://orcid.org/0000-0003-1001-4425"]}, "institutions": [{"id": "https://openalex.org/I90610280", "display_name": "South China University of Technology", "ror": "https://ror.org/0530pts50", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I90610280"]}], "countries": ["CN"], "is_corresponding": true, "raw_author_name": "Yan Wo", "raw_affiliation_strings": ["School of Computer Science and Engineering, South China University of Technology, Guangzhou, China"], "raw_orcid": "https://orcid.org/0000-0003-1001-4425", "affiliations": [{"raw_affiliation_string": "School of Computer Science and Engineering, South China University of Technology, Guangzhou, China", "institution_ids": ["https://openalex.org/I90610280"]}]}], "abstract_inverted_index": null, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.1016/j.knosys.2025.114079", "is_oa": false, "landing_page_url": "https://doi.org/10.1016/j.knosys.2025.114079", "pdf_url": null, "source": {"id": "https://openalex.org/S10169007", "display_name": "Knowledge-Based Systems", "issn_l": "0950-7051", "issn": ["0950-7051", "1872-7409"], "is_oa": false, "is_in_doaj": false, "is_core": true, "listed_in": ["cwts-core", "jufo-2", "norway-2"], "host_organization": "https://openalex.org/P4310320990", "host_organization_name": "Elsevier BV", "host_organization_lineage": ["https://openalex.org/P4310320990"], "host_organization_lineage_names": ["Elsevier BV"], "type": "journal"}, "license": null, "license_id": null, "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Knowledge-Based Systems", "raw_type": "journal-article"}, "cited_by_count": 2, "is_retracted": false}, {"id": "https://openalex.org/W4417347415", "doi": "https://doi.org/10.48550/arxiv.2506.10020", "title": "From Threat to Tool: Leveraging Refusal-Aware Injection Attacks for Safety Alignment", "publication_year": 2025, "publication_date": "2025-06-07", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Chae, Kyubyung", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Chae, Kyubyung", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Jin, Hyunbin", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Jin, Hyunbin", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "last", "author": {"id": null, "display_name": "Kim, Taesup", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Kim, Taesup", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}], "abstract_inverted_index": {"Safely": [0], "aligning": [1], "large": [2], "language": [3], "models": [4], "(LLMs)": [5], "often": [6], "demands": [7], "extensive": [8], "human-labeled": [9], "preference": [10], "data,": [11], "a": [12, 23, 46, 88], "process": [13], "that's": [14], "both": [15], "costly": [16], "and": [17, 49, 64, 126, 143], "time-consuming.": [18], "While": [19], "synthetic": [20, 106], "data": [21, 107], "offers": [22], "promising": [24], "alternative,": [25], "current": [26], "methods": [27], "frequently": [28], "rely": [29], "on": [30, 96, 121], "complex": [31], "iterative": [32], "prompting": [33], "or": [34], "auxiliary": [35], "models.": [36], "To": [37], "address": [38], "this,": [39], "we": [40], "introduce": [41], "Refusal-Aware": [42], "Adaptive": [43], "Injection": [44], "(RAAI),": [45], "straightforward,": [47], "training-free,": [48], "model-agnostic": [50], "framework": [51], "that": [52], "repurposes": [53], "LLM": [54, 132], "attack": [55, 133], "techniques.": [56], "RAAI": [57, 78, 110], "works": [58], "by": [59, 109], "detecting": [60], "internal": [61], "refusal": [62], "signals": [63], "adaptively": [65], "injecting": [66], "predefined": [67], "phrases": [68], "to": [69, 92, 94], "elicit": [70], "harmful,": [71], "yet": [72], "fluent,": [73], "completions.": [74], "Our": [75], "experiments": [76], "show": [77], "effectively": [79], "jailbreaks": [80], "LLMs,": [81], "increasing": [82], "the": [83, 105], "harmful": [84, 115], "response": [85], "rate": [86], "from": [87], "baseline": [89], "of": [90], "2.15%": [91], "up": [93], "61.04%": [95], "average": [97], "across": [98], "four": [99], "benchmarks.": [100], "Crucially,": [101], "fine-tuning": [102], "LLMs": [103], "with": [104], "generated": [108], "improves": [111], "model": [112], "robustness": [113], "against": [114], "prompts": [116], "while": [117], "preserving": [118], "general": [119], "capabilities": [120], "standard": [122], "tasks": [123], "like": [124], "MMLU": [125], "ARC.": [127], "This": [128], "work": [129], "highlights": [130], "how": [131], "methodologies": [134], "can": [135], "be": [136], "reframed": [137], "as": [138], "practical": [139], "tools": [140], "for": [141], "scalable": [142], "controllable": [144], "safety": [145], "alignment.": [146]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9961000084877014, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9961000084877014, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10181", "display_name": "Natural Language Processing Techniques", "score": 0.000699999975040555, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10028", "display_name": "Topic Modeling", "score": 0.000699999975040555, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "pmh:oai:arXiv.org:2506.10020", "is_oa": true, "landing_page_url": "http://arxiv.org/abs/2506.10020", "pdf_url": "https://arxiv.org/pdf/2506.10020", "source": {"id": "https://openalex.org/S4306400194", "display_name": "arXiv (Cornell University)", "issn_l": "2331-8422", "issn": ["2331-8422"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I205783295", "host_organization_name": "Cornell University", "host_organization_lineage": ["https://openalex.org/I205783295"], "host_organization_lineage_names": [], "type": "repository"}, "license": null, "license_id": null, "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "text"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4406009187", "doi": "https://doi.org/10.1007/s40747-024-01748-x", "title": "APDL: an adaptive step size method for white-box adversarial attacks", "publication_year": 2025, "publication_date": "2025-01-01", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5034405559", "display_name": "Jiale Hu", "orcid": "https://orcid.org/0009-0001-1664-2935", "observed_orcids": ["https://orcid.org/0009-0001-1664-2935"]}, "institutions": [{"id": "https://openalex.org/I102208913", "display_name": "Shihezi University", "ror": "https://ror.org/04x0kvm78", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I102208913"]}, {"id": "https://openalex.org/I2801312332", "display_name": "Xinjiang Production and Construction Corps", "ror": "https://ror.org/03hcmxw73", "country_code": "CN", "type": "nonprofit", "lineage": ["https://openalex.org/I2801312332"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Jiale Hu", "raw_affiliation_strings": ["College of Information Science and Technology, Shihezi University, Shihezi, 832003, Xinjiang, China", "The Key Laboratory of Computational Intelligence and Network Information Security, Xinjiang Production and Construction Corps, Shihezi, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "College of Information Science and Technology, Shihezi University, Shihezi, 832003, Xinjiang, China", "institution_ids": ["https://openalex.org/I102208913"]}, {"raw_affiliation_string": "The Key Laboratory of Computational Intelligence and Network Information Security, Xinjiang Production and Construction Corps, Shihezi, China", "institution_ids": ["https://openalex.org/I2801312332"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5100394767", "display_name": "Xiang Li", "orcid": "https://orcid.org/0000-0002-0761-0931", "observed_orcids": ["https://orcid.org/0000-0002-0761-0931"]}, "institutions": [{"id": "https://openalex.org/I102208913", "display_name": "Shihezi University", "ror": "https://ror.org/04x0kvm78", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I102208913"]}, {"id": "https://openalex.org/I2801312332", "display_name": "Xinjiang Production and Construction Corps", "ror": "https://ror.org/03hcmxw73", "country_code": "CN", "type": "nonprofit", "lineage": ["https://openalex.org/I2801312332"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Xiang Li", "raw_affiliation_strings": ["College of Information Science and Technology, Shihezi University, Shihezi, 832003, Xinjiang, China", "The Key Laboratory of Computational Intelligence and Network Information Security, Xinjiang Production and Construction Corps, Shihezi, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "College of Information Science and Technology, Shihezi University, Shihezi, 832003, Xinjiang, China", "institution_ids": ["https://openalex.org/I102208913"]}, {"raw_affiliation_string": "The Key Laboratory of Computational Intelligence and Network Information Security, Xinjiang Production and Construction Corps, Shihezi, China", "institution_ids": ["https://openalex.org/I2801312332"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5054028325", "display_name": "Changzheng Liu", "orcid": "https://orcid.org/0000-0002-1901-4838", "observed_orcids": ["https://orcid.org/0000-0002-1901-4838"]}, "institutions": [{"id": "https://openalex.org/I102208913", "display_name": "Shihezi University", "ror": "https://ror.org/04x0kvm78", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I102208913"]}, {"id": "https://openalex.org/I2801312332", "display_name": "Xinjiang Production and Construction Corps", "ror": "https://ror.org/03hcmxw73", "country_code": "CN", "type": "nonprofit", "lineage": ["https://openalex.org/I2801312332"]}], "countries": ["CN"], "is_corresponding": true, "raw_author_name": "Changzheng Liu", "raw_affiliation_strings": ["College of Information Science and Technology, Shihezi University, Shihezi, 832003, Xinjiang, China", "The Key Laboratory of Computational Intelligence and Network Information Security, Xinjiang Production and Construction Corps, Shihezi, China"], "raw_orcid": "https://orcid.org/0000-0002-1901-4838", "affiliations": [{"raw_affiliation_string": "College of Information Science and Technology, Shihezi University, Shihezi, 832003, Xinjiang, China", "institution_ids": ["https://openalex.org/I102208913"]}, {"raw_affiliation_string": "The Key Laboratory of Computational Intelligence and Network Information Security, Xinjiang Production and Construction Corps, Shihezi, China", "institution_ids": ["https://openalex.org/I2801312332"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5100739604", "display_name": "Ronghua Zhang", "orcid": "https://orcid.org/0000-0002-6323-6171", "observed_orcids": ["https://orcid.org/0000-0002-6323-6171"]}, "institutions": [{"id": "https://openalex.org/I102208913", "display_name": "Shihezi University", "ror": "https://ror.org/04x0kvm78", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I102208913"]}, {"id": "https://openalex.org/I2801312332", "display_name": "Xinjiang Production and Construction Corps", "ror": "https://ror.org/03hcmxw73", "country_code": "CN", "type": "nonprofit", "lineage": ["https://openalex.org/I2801312332"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Ronghua Zhang", "raw_affiliation_strings": ["College of Information Science and Technology, Shihezi University, Shihezi, 832003, Xinjiang, China", "The Key Laboratory of Computational Intelligence and Network Information Security, Xinjiang Production and Construction Corps, Shihezi, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "College of Information Science and Technology, Shihezi University, Shihezi, 832003, Xinjiang, China", "institution_ids": ["https://openalex.org/I102208913"]}, {"raw_affiliation_string": "The Key Laboratory of Computational Intelligence and Network Information Security, Xinjiang Production and Construction Corps, Shihezi, China", "institution_ids": ["https://openalex.org/I2801312332"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5083061249", "display_name": "Junwei Tang", "orcid": "https://orcid.org/0000-0002-1627-3244", "observed_orcids": ["https://orcid.org/0000-0002-1627-3244"]}, "institutions": [{"id": "https://openalex.org/I4210119942", "display_name": "Wuhan Textile University", "ror": "https://ror.org/02jgsf398", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I4210119942"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Junwei Tang", "raw_affiliation_strings": ["School of Computer Science and Artificial Intelligence, Wuhan Textile University, Wuhan, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "School of Computer Science and Artificial Intelligence, Wuhan Textile University, Wuhan, China", "institution_ids": ["https://openalex.org/I4210119942"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5101937658", "display_name": "Yi Sun", "orcid": "https://orcid.org/0000-0002-7211-4686", "observed_orcids": ["https://orcid.org/0000-0002-7211-4686"]}, "institutions": [{"id": "https://openalex.org/I102208913", "display_name": "Shihezi University", "ror": "https://ror.org/04x0kvm78", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I102208913"]}, {"id": "https://openalex.org/I2801312332", "display_name": "Xinjiang Production and Construction Corps", "ror": "https://ror.org/03hcmxw73", "country_code": "CN", "type": "nonprofit", "lineage": ["https://openalex.org/I2801312332"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Yi Sun", "raw_affiliation_strings": ["College of Information Science and Technology, Shihezi University, Shihezi, 832003, Xinjiang, China", "The Key Laboratory of Computational Intelligence and Network Information Security, Xinjiang Production and Construction Corps, Shihezi, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "College of Information Science and Technology, Shihezi University, Shihezi, 832003, Xinjiang, China", "institution_ids": ["https://openalex.org/I102208913"]}, {"raw_affiliation_string": "The Key Laboratory of Computational Intelligence and Network Information Security, Xinjiang Production and Construction Corps, Shihezi, China", "institution_ids": ["https://openalex.org/I2801312332"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5036224267", "display_name": "Yuedong Wang", "orcid": "https://orcid.org/0000-0001-9202-6723", "observed_orcids": ["https://orcid.org/0000-0001-9202-6723"]}, "institutions": [{"id": "https://openalex.org/I102208913", "display_name": "Shihezi University", "ror": "https://ror.org/04x0kvm78", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I102208913"]}, {"id": "https://openalex.org/I2801312332", "display_name": "Xinjiang Production and Construction Corps", "ror": "https://ror.org/03hcmxw73", "country_code": "CN", "type": "nonprofit", "lineage": ["https://openalex.org/I2801312332"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Yuedong Wang", "raw_affiliation_strings": ["College of Information Science and Technology, Shihezi University, Shihezi, 832003, Xinjiang, China", "The Key Laboratory of Computational Intelligence and Network Information Security, Xinjiang Production and Construction Corps, Shihezi, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "College of Information Science and Technology, Shihezi University, Shihezi, 832003, Xinjiang, China", "institution_ids": ["https://openalex.org/I102208913"]}, {"raw_affiliation_string": "The Key Laboratory of Computational Intelligence and Network Information Security, Xinjiang Production and Construction Corps, Shihezi, China", "institution_ids": ["https://openalex.org/I2801312332"]}]}], "abstract_inverted_index": {"Recent": [0], "research": [1], "has": [2], "shown": [3], "that": [4, 166], "deep": [5], "learning": [6], "models": [7, 118], "are": [8], "vulnerable": [9], "to": [10, 19, 33, 106], "adversarial": [11], "attacks,": [12, 15], "including": [13], "gradient": [14, 24, 56, 111, 150], "which": [16], "can": [17], "lead": [18], "incorrect": [20], "outputs.": [21], "The": [22], "existing": [23], "attack": [25, 36, 57, 99], "methods": [26, 94], "typically": [27], "rely": [28], "on": [29, 72, 125, 162], "repetitive": [30], "multistep": [31], "strategies": [32], "improve": [34], "their": [35], "success": [37, 100], "rates,": [38], "resulting": [39], "in": [40, 85, 138], "longer": [41], "training": [42, 127], "times": [43], "and": [44, 95, 119, 156], "severe": [45], "overfitting.": [46], "To": [47], "address": [48], "these": [49], "issues,": [50], "we": [51, 129], "propose": [52], "an": [53, 73], "adaptive": [54], "perturbation-based": [55], "method": [58, 64, 136, 180], "with": [59, 102, 149], "dual-loss": [60], "optimization": [61], "(APDL).": [62], "This": [63, 142], "adaptively": [65], "adjusts": [66], "the": [67, 79, 91, 108, 121, 126, 145, 154, 172, 178], "single-step": [68], "perturbation": [69], "magnitude": [70], "based": [71], "exponential": [74], "distance": [75], "function,": [76], "thereby": [77], "accelerating": [78], "convergence": [80, 84], "process.": [81], "APDL": [82, 115, 167], "achieves": [83], "fewer": [86, 103], "than": [87, 171], "10": [88], "iterations,": [89], "outperforming": [90], "traditional": [92], "nonadaptive": [93, 175], "achieving": [96], "a": [97, 131], "high": [98], "rate": [101], "iterations.": [104], "Furthermore,": [105], "increase": [107], "transferability": [109], "of": [110, 123, 158], "attacks": [112, 151], "such": [113], "as": [114], "across": [116], "different": [117], "reduce": [120], "effects": [122, 147], "overfitting": [124], "model,": [128], "introduce": [130], "triple-differential": [132], "logit": [133], "fusion": [134], "(TDLF)": [135], "grounded": [137], "knowledge": [139], "distillation": [140], "principles.": [141], "approach": [143], "mitigates": [144], "edge": [146], "associated": [148], "by": [152], "adjusting": [153], "hardness": [155], "softness": [157], "labels.": [159], "Experiments": [160], "conducted": [161], "ImageNet-compatible": [163], "datasets": [164], "demonstrate": [165], "is": [168], "significantly": [169], "faster": [170], "commonly": [173], "used": [174], "methods,": [176], "whereas": [177], "TDLF": [179], "exhibits": [181], "strong": [182], "transferability.": [183]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10743", "display_name": "Software Testing and Debugging Techniques", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1712", "display_name": "Software"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.1007/s40747-024-01748-x", "is_oa": true, "landing_page_url": "https://doi.org/10.1007/s40747-024-01748-x", "pdf_url": "https://link.springer.com/content/pdf/10.1007/s40747-024-01748-x.pdf", "source": {"id": "https://openalex.org/S3035462843", "display_name": "Complex & Intelligent Systems", "issn_l": "2198-6053", "issn": ["2198-6053", "2199-4536"], "is_oa": true, "is_in_doaj": true, "is_core": true, "listed_in": ["cwts-core", "doaj", "jufo-1", "norway-1"], "host_organization": "https://openalex.org/P4310319900", "host_organization_name": "Springer Science+Business Media", "host_organization_lineage": ["https://openalex.org/P4310319900", "https://openalex.org/P4310319965"], "host_organization_lineage_names": ["Springer Science+Business Media", "Springer Nature"], "type": "journal"}, "license": "cc-by-nc-nd", "license_id": "https://openalex.org/licenses/cc-by-nc-nd", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Complex &amp; Intelligent Systems", "raw_type": "journal-article"}, "cited_by_count": 8, "is_retracted": false}, {"id": "https://openalex.org/W4407385256", "doi": "https://doi.org/10.48550/arxiv.2502.05727", "title": "Impact of Data Poisoning Attacks on Feasibility and Optimality of Neural Power System Optimizers", "publication_year": 2025, "publication_date": "2025-02-09", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5082756125", "display_name": "Nora Agah", "orcid": "https://orcid.org/0000-0003-0271-1204", "observed_orcids": ["https://orcid.org/0000-0003-0271-1204"]}, "institutions": [{"id": "https://openalex.org/I86519309", "display_name": "The University of Texas at Austin", "ror": "https://ror.org/00hj54h04", "country_code": "US", "type": "education", "lineage": ["https://openalex.org/I86519309"]}], "countries": ["US"], "is_corresponding": false, "raw_author_name": "Agah, Nora", "raw_affiliation_strings": ["The University of Texas at Austin Austin , Texas , USA"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "The University of Texas at Austin Austin , Texas , USA", "institution_ids": ["https://openalex.org/I86519309"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5101616576", "display_name": "Meiyi Li", "orcid": "https://orcid.org/0000-0002-0178-7883", "observed_orcids": ["https://orcid.org/0000-0002-0178-7883"]}, "institutions": [{"id": "https://openalex.org/I86519309", "display_name": "The University of Texas at Austin", "ror": "https://ror.org/00hj54h04", "country_code": "US", "type": "education", "lineage": ["https://openalex.org/I86519309"]}], "countries": ["US"], "is_corresponding": false, "raw_author_name": "Li, Meiyi", "raw_affiliation_strings": ["The University of Texas at Austin Austin , Texas , USA"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "The University of Texas at Austin Austin , Texas , USA", "institution_ids": ["https://openalex.org/I86519309"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5101880125", "display_name": "Javad Mohammadi", "orcid": "https://orcid.org/0000-0001-9151-5242", "observed_orcids": ["https://orcid.org/0000-0001-9151-5242"]}, "institutions": [{"id": "https://openalex.org/I86519309", "display_name": "The University of Texas at Austin", "ror": "https://ror.org/00hj54h04", "country_code": "US", "type": "education", "lineage": ["https://openalex.org/I86519309"]}], "countries": ["US"], "is_corresponding": false, "raw_author_name": "Mohammadi, Javad", "raw_affiliation_strings": ["The University of Texas at Austin Austin , Texas , USA"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "The University of Texas at Austin Austin , Texas , USA", "institution_ids": ["https://openalex.org/I86519309"]}]}], "abstract_inverted_index": {"The": [0, 80, 164], "increased": [1], "integration": [2], "of": [3, 13, 22, 33, 53, 62, 82, 107, 131, 148, 158, 166, 177], "clean": [4], "yet": [5], "stochastic": [6], "energy": [7], "resources": [8], "and": [9, 140, 156], "the": [10, 19, 50, 54, 105, 120, 129, 145, 154, 175], "growing": [11], "number": [12], "extreme": [14], "weather": [15], "events": [16], "are": [17, 57, 116], "narrowing": [18], "decision-making": [20], "window": [21], "power": [23, 87, 179], "grid": [24], "operators.": [25], "This": [26], "time": [27], "constraint": [28], "is": [29, 48, 65], "fueling": [30], "a": [31, 45, 97, 137, 141, 171], "plethora": [32], "research": [34], "on": [35, 85, 111], "Machine": [36], "Learning-,": [37], "or": [38], "ML-,": [39], "based": [40], "optimization": [41, 113], "proxies.": [42], "While": [43], "finding": [44], "fast": [46], "solution": [47], "appealing,": [49], "inherent": [51], "vulnerabilities": [52, 64], "learning-based": [55, 86], "methods": [56], "hindering": [58], "their": [59], "adoption.": [60], "One": [61], "these": [63, 159], "data": [66, 108], "poisoning": [67, 83, 109, 149], "attacks,": [68], "which": [69, 95], "adds": [70], "perturbations": [71], "to": [72, 77, 118], "ML": [73], "training": [74], "data,": [75], "leading": [76], "incorrect": [78], "decisions.": [79], "impact": [81, 106], "attacks": [84, 110], "system": [88, 180], "optimizers": [89], "have": [90], "not": [91], "been": [92], "thoroughly": [93], "studied,": [94], "creates": [96], "critical": [98], "vulnerability.": [99], "In": [100], "this": [101, 167], "paper,": [102], "we": [103, 127], "examine": [104], "ML-based": [112], "proxies": [114, 160], "that": [115], "used": [117], "solve": [119], "DC": [121], "Optimal": [122], "Power": [123], "Flow": [124], "problem.": [125], "Specifically,": [126], "compare": [128], "resilience": [130, 176], "three": [132], "different": [133], "methods-a": [134], "penalty-based": [135], "method,": [136], "post-repair": [138], "approach,": [139], "direct": [142], "mapping": [143], "approach-against": [144], "adverse": [146], "effects": [147], "attacks.": [150], "We": [151], "will": [152, 169], "use": [153], "optimality": [155], "feasibility": [157], "as": [161], "performance": [162], "metrics.": [163], "insights": [165], "work": [168], "establish": [170], "foundation": [172], "for": [173], "enhancing": [174], "neural": [178], "optimizers.": [181]}, "primary_topic": {"id": "https://openalex.org/T10917", "display_name": "Smart Grid Security and Resilience", "score": 0.9384999871253967, "subfield": {"id": "https://openalex.org/subfields/2207", "display_name": "Control and Systems Engineering"}, "field": {"id": "https://openalex.org/fields/22", "display_name": "Engineering"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T10917", "display_name": "Smart Grid Security and Resilience", "score": 0.9384999871253967, "subfield": {"id": "https://openalex.org/subfields/2207", "display_name": "Control and Systems Engineering"}, "field": {"id": "https://openalex.org/fields/22", "display_name": "Engineering"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.05480000004172325, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10454", "display_name": "Optimal Power Flow Distribution", "score": 0.0031999999191612005, "subfield": {"id": "https://openalex.org/subfields/2208", "display_name": "Electrical and Electronic Engineering"}, "field": {"id": "https://openalex.org/fields/22", "display_name": "Engineering"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "pmh:oai:arXiv.org:2502.05727", "is_oa": true, "landing_page_url": "http://arxiv.org/abs/2502.05727", "pdf_url": "https://arxiv.org/pdf/2502.05727", "source": {"id": "https://openalex.org/S4306400194", "display_name": "arXiv (Cornell University)", "issn_l": "2331-8422", "issn": ["2331-8422"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I205783295", "host_organization_name": "Cornell University", "host_organization_lineage": ["https://openalex.org/I205783295"], "host_organization_lineage_names": [], "type": "repository"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "text"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4416157654", "doi": "https://doi.org/10.48550/arxiv.2511.06495", "title": "Probably Approximately Global Robustness Certification", "publication_year": 2025, "publication_date": "2025-11-09", "type": "preprint", "language": null, "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Blohm, Peter", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Blohm, Peter", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5123879228", "display_name": "Patrick Indri", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Indri, Patrick", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "G\u00e4rtner, Thomas", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "G\u00e4rtner, Thomas", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "last", "author": {"id": "https://openalex.org/A5086702765", "display_name": "Sagar Malhotra", "orcid": "https://orcid.org/0000-0002-5509-0168", "observed_orcids": ["https://orcid.org/0000-0002-5509-0168"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Malhotra, Sagar", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}], "abstract_inverted_index": {"We": [0], "propose": [1], "and": [2, 22, 50, 83, 120], "investigate": [3], "probabilistic": [4, 38], "guarantees": [5, 72], "for": [6, 18], "the": [7, 57, 60, 63, 76, 79, 84, 102], "adversarial": [8], "robustness": [9, 19, 54, 71, 114], "of": [10, 40, 62, 75, 81, 104], "classification": [11], "algorithms.": [12], "While": [13], "traditional": [14, 105], "formal": [15, 28, 106, 124], "verification": [16], "approaches": [17, 24, 119], "are": [20, 100], "intractable": [21], "sampling-based": [23, 118], "do": [25], "not": [26], "provide": [27], "guarantees,": [29], "our": [30], "approach": [31, 89], "is": [32, 45, 73], "able": [33], "to": [34, 46, 66, 95], "efficiently": [35], "certify": [36], "a": [37, 52], "relaxation": [39], "robustness.": [41], "The": [42], "key": [43], "idea": [44], "sample": [47, 64], "an": [48], "$\u03b5$-net": [49], "invoke": [51], "local": [53], "oracle": [55], "on": [56], "sample.": [58], "Remarkably,": [59], "size": [61], "needed": [65], "achieve": [67], "probably": [68], "approximately": [69], "global": [70], "independent": [74], "input": [77], "dimensionality,": [78], "number": [80], "classes,": [82], "learning": [85], "algorithm": [86], "itself.": [87], "Our": [88], "can,": [90], "therefore,": [91], "be": [92], "applied": [93], "even": [94], "large": [96], "neural": [97], "networks": [98], "that": [99, 111], "beyond": [101], "scope": [103], "verification.": [107], "Experiments": [108], "empirically": [109], "confirm": [110], "it": [112], "characterizes": [113], "better": [115, 122], "than": [116, 123], "state-of-the-art": [117], "scales": [121], "methods.": [125]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9926999807357788, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9926999807357788, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10142", "display_name": "Formal Methods in Verification", "score": 0.003800000064074993, "subfield": {"id": "https://openalex.org/subfields/1703", "display_name": "Computational Theory and Mathematics"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0006000000284984708, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "pmh:oai:arXiv.org:2511.06495", "is_oa": true, "landing_page_url": "http://arxiv.org/abs/2511.06495", "pdf_url": "https://arxiv.org/pdf/2511.06495", "source": {"id": "https://openalex.org/S4306400194", "display_name": "arXiv (Cornell University)", "issn_l": "2331-8422", "issn": ["2331-8422"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I205783295", "host_organization_name": "Cornell University", "host_organization_lineage": ["https://openalex.org/I205783295"], "host_organization_lineage_names": [], "type": "repository"}, "license": null, "license_id": null, "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "text"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4416069231", "doi": "https://doi.org/10.48550/arxiv.2509.08729", "title": "X-Teaming Evolutionary M2S: Automated Discovery of Multi-turn to Single-turn Jailbreak Templates", "publication_year": 2025, "publication_date": "2025-09-10", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5100737623", "display_name": "Hyunjun Kim", "orcid": "https://orcid.org/0000-0003-3886-0586", "observed_orcids": ["https://orcid.org/0000-0003-3886-0586"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Kim, Hyunjun", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Ha, Junwoo", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Ha, Junwoo", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Yu, Sangyoon", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Yu, Sangyoon", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "last", "author": {"id": "https://openalex.org/A5104956003", "display_name": "Haon Park", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Park, Haon", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}], "abstract_inverted_index": {"Multi-turn-to-single-turn": [0], "(M2S)": [1], "compresses": [2], "iterative": [3], "red-teaming": [4], "into": [5], "one": [6], "structured": [7], "prompt,": [8], "but": [9, 97], "prior": [10], "work": [11], "relied": [12], "on": [13, 81], "a": [14, 112, 130], "handful": [15], "of": [16, 87, 141], "manually": [17], "written": [18], "templates.": [19], "We": [20, 109], "present": [21], "X-Teaming": [22], "Evolutionary": [23], "M2S,": [24], "an": [25, 46], "automated": [26], "framework": [27], "that": [28, 93, 126], "discovers": [29], "and": [30, 51, 76, 118, 137, 144, 149], "optimizes": [31], "M2S": [32], "templates": [33], "through": [34], "language-model-guided": [35], "evolution.": [36], "The": [37], "system": [38], "pairs": [39], "smart": [40], "sampling": [41], "from": [42], "12": [43], "sources": [44], "with": [45], "LLM-as-judge": [47], "inspired": [48], "by": [49, 59, 99], "StrongREJECT": [50], "records": [52], "fully": [53], "auditable": [54], "logs.": [55], "Maintaining": [56], "selection": [57], "pressure": [58], "setting": [60], "the": [61, 106, 139], "success": [62, 79], "threshold": [63, 142], "to": [64, 133], "$\u03b8=": [65], "0.70$,": [66], "we": [67], "obtain": [68], "five": [69], "evolutionary": [70], "generations,": [71], "two": [72, 101], "new": [73], "template": [74], "families,": [75], "44.8%": [77], "overall": [78], "(103/230)": [80], "GPT-4.1.": [82], "A": [83], "balanced": [84], "cross-model": [85, 145], "panel": [86], "2,500": [88], "trials": [89], "(judge": [90], "fixed)": [91], "shows": [92], "structural": [94], "gains": [95], "transfer": [96], "vary": [98], "target;": [100], "models": [102], "score": [103], "zero": [104], "at": [105, 153], "same": [107], "threshold.": [108], "also": [110], "find": [111], "positive": [113], "coupling": [114], "between": [115], "prompt": [116], "length": [117], "score,": [119], "motivating": [120], "length-aware": [121], "judging.": [122], "Our": [123], "results": [124], "demonstrate": [125], "structure-level": [127], "search": [128], "is": [129], "reproducible": [131], "route": [132], "stronger": [134], "single-turn": [135], "probes": [136], "underscore": [138], "importance": [140], "calibration": [143], "evaluation.": [146], "Code,": [147], "configurations,": [148], "artifacts": [150], "are": [151], "available": [152], "https://github.com/hyunjun1121/M2S-x-teaming.": [154]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9932000041007996, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9932000041007996, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0015999999595806003, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10743", "display_name": "Software Testing and Debugging Techniques", "score": 0.000699999975040555, "subfield": {"id": "https://openalex.org/subfields/1712", "display_name": "Software"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "pmh:oai:arXiv.org:2509.08729", "is_oa": true, "landing_page_url": "http://arxiv.org/abs/2509.08729", "pdf_url": "https://arxiv.org/pdf/2509.08729", "source": {"id": "https://openalex.org/S4306400194", "display_name": "arXiv (Cornell University)", "issn_l": "2331-8422", "issn": ["2331-8422"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I205783295", "host_organization_name": "Cornell University", "host_organization_lineage": ["https://openalex.org/I205783295"], "host_organization_lineage_names": [], "type": "repository"}, "license": null, "license_id": null, "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "text"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4409014324", "doi": "https://doi.org/10.1109/tcss.2025.3551886", "title": "Efficient Defense Against Adversarial Attacks on Multimodal Emotion AI Models", "publication_year": 2025, "publication_date": "2025-03-31", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5054815691", "display_name": "Hsin\u2010Hung Cho", "orcid": "https://orcid.org/0000-0001-7163-6928", "observed_orcids": ["https://orcid.org/0000-0001-7163-6928"]}, "institutions": [{"id": "https://openalex.org/I75430998", "display_name": "National Ilan University", "ror": "https://ror.org/01npf0s58", "country_code": "TW", "type": "education", "lineage": ["https://openalex.org/I75430998"]}], "countries": ["TW"], "is_corresponding": false, "raw_author_name": "Hsin-Hung Cho", "raw_affiliation_strings": ["Department of Computer Science and Information Engineering, National Ilan University, Ilan, Taiwan"], "raw_orcid": "https://orcid.org/0000-0001-7163-6928", "affiliations": [{"raw_affiliation_string": "Department of Computer Science and Information Engineering, National Ilan University, Ilan, Taiwan", "institution_ids": ["https://openalex.org/I75430998"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5028150352", "display_name": "Jiang\u2010Yi Zeng", "orcid": "https://orcid.org/0000-0002-7653-0118", "observed_orcids": ["https://orcid.org/0000-0002-7653-0118"]}, "institutions": [{"id": "https://openalex.org/I75430998", "display_name": "National Ilan University", "ror": "https://ror.org/01npf0s58", "country_code": "TW", "type": "education", "lineage": ["https://openalex.org/I75430998"]}], "countries": ["TW"], "is_corresponding": false, "raw_author_name": "Jiang-Yi Zeng", "raw_affiliation_strings": ["Department of Computer Science and Information Engineering, National Ilan University, Ilan, Taiwan"], "raw_orcid": "https://orcid.org/0000-0002-7653-0118", "affiliations": [{"raw_affiliation_string": "Department of Computer Science and Information Engineering, National Ilan University, Ilan, Taiwan", "institution_ids": ["https://openalex.org/I75430998"]}]}, {"author_position": "last", "author": {"id": null, "display_name": "Min-Yan Tsai", "orcid": "https://orcid.org/0000-0001-9001-1288", "observed_orcids": ["https://orcid.org/0000-0001-9001-1288"]}, "institutions": [{"id": "https://openalex.org/I148366613", "display_name": "National Yang Ming Chiao Tung University", "ror": "https://ror.org/00se2k293", "country_code": "TW", "type": "education", "lineage": ["https://openalex.org/I148366613"]}], "countries": ["TW"], "is_corresponding": false, "raw_author_name": "Min-Yan Tsai", "raw_affiliation_strings": ["Department of Information Management and Finance, National Yang Ming Chiao Tung University, Hsinchu, Taiwan"], "raw_orcid": "https://orcid.org/0000-0001-9001-1288", "affiliations": [{"raw_affiliation_string": "Department of Information Management and Finance, National Yang Ming Chiao Tung University, Hsinchu, Taiwan", "institution_ids": ["https://openalex.org/I148366613"]}]}], "abstract_inverted_index": {"Among": [0], "these": [1, 101], "applications,": [2], "emotion": [3, 188], "AI": [4, 189], "has": [5], "emerged": [6], "as": [7], "a": [8, 151, 158], "transformative": [9], "tool": [10], "in": [11, 84, 131, 191, 211], "the": [12, 119, 125, 230], "educational": [13], "sector,": [14], "enabling": [15], "personalized": [16], "learning": [17, 55, 93, 201], "experiences": [18], "by": [19, 79, 109], "adapting": [20], "content": [21], "and": [22, 39, 45, 95, 112, 124, 135, 175, 198, 218], "teaching": [23], "methods": [24], "based": [25], "on": [26], "students\u2019": [27, 48], "emotional": [28, 88], "states.": [29], "This": [30, 155], "often": [31, 141], "involves": [32], "integrating": [33], "multimodal": [34, 195, 212], "data,": [35], "including": [36], "text,": [37, 216], "speech,": [38, 217], "facial": [40, 219], "expressions,": [41], "to": [42, 47, 60, 74, 149, 164, 186], "accurately": [43], "interpret": [44], "respond": [46], "needs.": [49], "However,": [50], "despite": [51], "its": [52, 222], "potential,": [53], "deep": [54], "models": [56], "are": [57, 81], "highly": [58], "vulnerable": [59], "adversarial": [61, 173, 181], "example": [62], "attacks": [63, 108, 174], "(AE).": [64], "These": [65], "malicious": [66], "inputs": [67], "cause": [68], "incorrect": [69], "decisions": [70], "while": [71], "remaining": [72], "imperceptible": [73], "humans.": [75], "The": [76], "risks": [77], "posed": [78], "AEs": [80, 140], "particularly": [82], "concerning": [83], "education,": [85, 192], "where": [86], "misinterpreting": [87], "cues": [89], "may": [90], "disrupt": [91], "adaptive": [92, 200], "processes": [94], "hinder": [96], "student": [97], "engagement.": [98], "Effectively": [99], "addressing": [100], "challenges": [102], "is": [103], "essential.": [104], "Existing": [105], "research": [106], "detects": [107], "comparing": [110], "normal": [111, 122], "AEs,": [113], "but": [114], "this": [115, 183], "method": [116, 160, 184, 208], "struggles": [117], "with": [118], "variability": [120], "of": [121, 127], "data": [123, 196, 213], "complexity": [126], "high-dimensional": [128], "features,": [129], "resulting": [130], "low": [132], "detection": [133, 153], "accuracy": [134], "high": [136], "computational": [137], "costs.": [138], "Furthermore,": [139], "exhibit": [142], "unique": [143], "morphological": [144], "characteristics,": [145], "making": [146], "it": [147], "difficult": [148], "develop": [150], "universal": [152], "mechanism.": [154], "article": [156], "proposes": [157], "novel": [159], "using": [161], "Poisson": [162], "distribution": [163], "analyze": [165], "neuron": [166], "output": [167], "differences,": [168], "enhancing": [169], "model": [170], "robustness": [171], "against": [172], "ensuring": [176, 193], "cross-model": [177], "generality.": [178], "By": [179], "improving": [180], "robustness,": [182], "aims": [185], "protect": [187], "applications": [190], "accurate": [194], "interpretation": [197], "supporting": [199], "systems.": [202], "Experimental": [203], "results": [204], "show": [205], "that": [206], "our": [207], "performs": [209], "robustly": [210], "processing,": [214], "encompassing": [215], "expressions.": [220], "Additionally,": [221], "strong": [223], "performance": [224], "across": [225], "various": [226], "attack": [227], "scenarios": [228], "highlights": [229], "propose": [231], "method\u2019s": [232], "generalization": [233], "capabilities.": [234]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.1109/tcss.2025.3551886", "is_oa": false, "landing_page_url": "https://doi.org/10.1109/tcss.2025.3551886", "pdf_url": null, "source": {"id": "https://openalex.org/S2490693980", "display_name": "IEEE Transactions on Computational Social Systems", "issn_l": "2329-924X", "issn": ["2329-924X", "2373-7476"], "is_oa": false, "is_in_doaj": false, "is_core": true, "listed_in": ["cwts-core", "jufo-1", "ki-jl-1", "norway-1"], "host_organization": "https://openalex.org/P4310319808", "host_organization_name": "Institute of Electrical and Electronics Engineers", "host_organization_lineage": ["https://openalex.org/P4310319808"], "host_organization_lineage_names": ["Institute of Electrical and Electronics Engineers"], "type": "journal"}, "license": null, "license_id": null, "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "IEEE Transactions on Computational Social Systems", "raw_type": "journal-article"}, "cited_by_count": 7, "is_retracted": false}, {"id": "https://openalex.org/W4410082229", "doi": "https://doi.org/10.20944/preprints202505.0179.v1", "title": "Comprehensive Evaluation of Machine Learning Algorithms for Intrusion Detection: A Focus on Binary Logistic Regression", "publication_year": 2025, "publication_date": "2025-05-05", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5117510902", "display_name": "Owen Graham", "orcid": "https://orcid.org/0009-0002-8805-4734", "observed_orcids": ["https://orcid.org/0009-0002-8805-4734"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Owen Graham", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "last", "author": {"id": null, "display_name": "Max Mckenzie", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": true, "raw_author_name": "Max Mckenzie", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}], "abstract_inverted_index": {"Intrusion": [0], "Detection": [1], "Systems": [2], "(IDS)": [3], "are": [4, 29, 266], "crucial": [5], "in": [6, 183, 203, 248, 260], "safeguarding": [7], "network": [8], "infrastructures": [9], "against": [10], "unauthorized": [11], "access": [12], "and": [13, 20, 110, 132, 147, 165, 187, 196, 224, 276], "malicious": [14], "activities.": [15], "With": [16], "the": [17, 46, 77, 85, 153, 210, 219, 233, 271, 277], "increasing": [18], "complexity": [19], "volume": [21], "of": [22, 48, 56, 80, 88, 99, 126, 138, 155, 185, 212, 221, 236, 273, 279], "cyber": [23], "threats,": [24], "traditional": [25], "signature-based": [26], "detection": [27, 82, 250], "methods": [28, 167, 275], "often": [30], "inadequate.": [31], "Consequently,": [32], "there": [33], "has": [34], "been": [35], "a": [36, 53, 66, 97, 116, 123, 135, 240], "significant": [37], "shift": [38], "toward": [39], "utilizing": [40, 161], "machine": [41, 58, 89, 245], "learning": [42, 59, 90, 246], "algorithms": [43, 60, 191, 247], "to": [44, 62, 168, 232, 268], "enhance": [45], "effectiveness": [47], "IDS.": [49], "This": [50, 94, 227], "study": [51, 228], "presents": [52], "comprehensive": [54], "evaluation": [55], "various": [57], "applied": [61], "intrusion": [63, 81, 249], "detection,": [64], "with": [65], "particular": [67], "focus": [68], "on": [69, 282], "Binary": [70, 176], "Logistic": [71, 177], "Regression": [72, 178], "(BLR).We": [73], "begin": [74], "by": [75, 238], "reviewing": [76], "current": [78], "landscape": [79], "techniques,": [83], "highlighting": [84], "distinct": [86], "advantages": [87], "over": [91], "conventional": [92], "methods.": [93], "review": [95], "encompasses": [96], "selection": [98, 125, 223], "established": [100], "algorithms,": [101], "including": [102, 128], "Decision": [103], "Trees,": [104], "Support": [105], "Vector": [106], "Machines,": [107], "Random": [108, 194], "Forests,": [109], "Neural": [111, 197], "Networks,": [112], "positioning": [113], "BLR": [114], "as": [115, 142, 193], "benchmark": [117], "for": [118, 215, 243, 256], "comparison.": [119], "The": [120, 171], "methodology": [121], "involves": [122], "rigorous": [124], "datasets,": [127], "KDD": [129], "Cup": [130], "1999": [131], "CICIDS,": [133], "ensuring": [134], "robust": [136], "analysis": [137], "performance": [139, 154], "metrics": [140], "such": [141, 192], "accuracy,": [143], "precision,": [144], "recall,": [145], "F1-score,": [146], "ROC-AUC.Through": [148], "systematic": [149], "experimentation,": [150], "we": [151], "assess": [152], "each": [156], "algorithm": [157], "under": [158], "controlled": [159], "conditions,": [160], "data": [162], "preprocessing": [163], "techniques": [164], "cross-validation": [166], "ensure": [169], "reliability.": [170], "results": [172], "reveal": [173], "that": [174], "while": [175], "demonstrates": [179], "competitive": [180], "performance,": [181], "particularly": [182], "terms": [184], "interpretability": [186], "computational": [188], "efficiency,": [189], "other": [190], "Forests": [195], "Networks": [198], "may": [199], "offer": [200], "superior": [201], "accuracy": [202], "complex": [204], "scenarios.The": [205], "discussion": [206], "section": [207], "delves": [208], "into": [209], "implications": [211], "these": [213, 258], "findings": [214], "IDS": [216, 283], "design,": [217], "emphasizing": [218], "importance": [220], "feature": [222], "algorithmic": [225], "transparency.": [226], "not": [229], "only": [230], "contributes": [231], "existing": [234], "body": [235], "knowledge": [237], "providing": [239], "comparative": [241], "framework": [242], "evaluating": [244], "but": [251], "also": [252], "offers": [253], "practical": [254], "recommendations": [255], "deploying": [257], "models": [259], "real-world": [261], "applications.": [262], "Future": [263], "research": [264], "directions": [265], "proposed": [267], "further": [269], "explore": [270], "integration": [272], "ensemble": [274], "impact": [278], "adversarial": [280], "attacks": [281], "performance.": [284]}, "primary_topic": {"id": "https://openalex.org/T10400", "display_name": "Network Security and Intrusion Detection", "score": 0.9994999766349792, "subfield": {"id": "https://openalex.org/subfields/1705", "display_name": "Computer Networks and Communications"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T10400", "display_name": "Network Security and Intrusion Detection", "score": 0.9994999766349792, "subfield": {"id": "https://openalex.org/subfields/1705", "display_name": "Computer Networks and Communications"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12326", "display_name": "Network Packet Processing and Optimization", "score": 0.00019999999494757503, "subfield": {"id": "https://openalex.org/subfields/1708", "display_name": "Hardware and Architecture"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12391", "display_name": "Artificial Immune Systems Applications", "score": 9.999999747378752e-05, "subfield": {"id": "https://openalex.org/subfields/2204", "display_name": "Biomedical Engineering"}, "field": {"id": "https://openalex.org/fields/22", "display_name": "Engineering"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.20944/preprints202505.0179.v1", "is_oa": true, "landing_page_url": "https://doi.org/10.20944/preprints202505.0179.v1", "pdf_url": "https://www.preprints.org/frontend/manuscript/1f78b8e42745ba92619e6d77627599d5/download_pub", "source": {"id": "https://openalex.org/S6309402219", "display_name": "Preprints.org", "issn_l": null, "issn": null, "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": null, "host_organization_name": null, "host_organization_lineage": ["https://openalex.org/P4310310987"], "host_organization_lineage_names": ["Multidisciplinary Digital Publishing Institute"], "type": "repository"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "acceptedVersion", "is_accepted": true, "is_published": false, "raw_source_name": null, "raw_type": "posted-content"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4411152895", "doi": "https://doi.org/10.1007/s11227-025-07480-8", "title": "FastMS-CDA: speeding up adversarial sample generation with multistage diffusion model", "publication_year": 2025, "publication_date": "2025-06-09", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Linying Zhu", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I34949971", "display_name": "University of Jinan", "ror": "https://ror.org/02mjz6f26", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I34949971"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Linying Zhu", "raw_affiliation_strings": ["School of Information Science and Engineering, University of Jinan, Jinan, Shandong, China", "Shandong Key Laboratory of Ubiquitous Intelligent Computing, University of Jinan, Jinan, Shandong, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "School of Information Science and Engineering, University of Jinan, Jinan, Shandong, China", "institution_ids": ["https://openalex.org/I34949971"]}, {"raw_affiliation_string": "Shandong Key Laboratory of Ubiquitous Intelligent Computing, University of Jinan, Jinan, Shandong, China", "institution_ids": ["https://openalex.org/I34949971"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5100406239", "display_name": "Shanshan Wang", "orcid": "https://orcid.org/0000-0002-1281-2343", "observed_orcids": ["https://orcid.org/0000-0002-1281-2343"]}, "institutions": [{"id": "https://openalex.org/I34949971", "display_name": "University of Jinan", "ror": "https://ror.org/02mjz6f26", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I34949971"]}], "countries": ["CN"], "is_corresponding": true, "raw_author_name": "Shanshan Wang", "raw_affiliation_strings": ["School of Information Science and Engineering, University of Jinan, Jinan, Shandong, China", "Shandong Key Laboratory of Ubiquitous Intelligent Computing, University of Jinan, Jinan, Shandong, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "School of Information Science and Engineering, University of Jinan, Jinan, Shandong, China", "institution_ids": ["https://openalex.org/I34949971"]}, {"raw_affiliation_string": "Shandong Key Laboratory of Ubiquitous Intelligent Computing, University of Jinan, Jinan, Shandong, China", "institution_ids": ["https://openalex.org/I34949971"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5013341598", "display_name": "Zhenxiang Chen", "orcid": "https://orcid.org/0000-0002-4948-3803", "observed_orcids": ["https://orcid.org/0000-0002-4948-3803"]}, "institutions": [{"id": "https://openalex.org/I34949971", "display_name": "University of Jinan", "ror": "https://ror.org/02mjz6f26", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I34949971"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Zhenxiang Chen", "raw_affiliation_strings": ["School of Information Science and Engineering, University of Jinan, Jinan, Shandong, China", "Shandong Key Laboratory of Ubiquitous Intelligent Computing, University of Jinan, Jinan, Shandong, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "School of Information Science and Engineering, University of Jinan, Jinan, Shandong, China", "institution_ids": ["https://openalex.org/I34949971"]}, {"raw_affiliation_string": "Shandong Key Laboratory of Ubiquitous Intelligent Computing, University of Jinan, Jinan, Shandong, China", "institution_ids": ["https://openalex.org/I34949971"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5115603611", "display_name": "Yi Zhang", "orcid": "https://orcid.org/0000-0001-6223-4724", "observed_orcids": ["https://orcid.org/0000-0001-6223-4724", "https://orcid.org/0000-0002-8702-6005", "https://orcid.org/0000-0002-8660-6710"]}, "institutions": [{"id": "https://openalex.org/I34949971", "display_name": "University of Jinan", "ror": "https://ror.org/02mjz6f26", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I34949971"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Yi Zhang", "raw_affiliation_strings": ["School of Information Science and Engineering, University of Jinan, Jinan, Shandong, China", "Shandong Key Laboratory of Ubiquitous Intelligent Computing, University of Jinan, Jinan, Shandong, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "School of Information Science and Engineering, University of Jinan, Jinan, Shandong, China", "institution_ids": ["https://openalex.org/I34949971"]}, {"raw_affiliation_string": "Shandong Key Laboratory of Ubiquitous Intelligent Computing, University of Jinan, Jinan, Shandong, China", "institution_ids": ["https://openalex.org/I34949971"]}]}], "abstract_inverted_index": null, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.1007/s11227-025-07480-8", "is_oa": false, "landing_page_url": "https://doi.org/10.1007/s11227-025-07480-8", "pdf_url": null, "source": {"id": "https://openalex.org/S32326811", "display_name": "The Journal of Supercomputing", "issn_l": "0920-8542", "issn": ["0920-8542", "1573-0484"], "is_oa": false, "is_in_doaj": false, "is_core": true, "listed_in": ["cwts-core", "jufo-1"], "host_organization": "https://openalex.org/P4310319900", "host_organization_name": "Springer Science+Business Media", "host_organization_lineage": ["https://openalex.org/P4310319900", "https://openalex.org/P4310319965"], "host_organization_lineage_names": ["Springer Science+Business Media", "Springer Nature"], "type": "journal"}, "license": null, "license_id": null, "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "The Journal of Supercomputing", "raw_type": "journal-article"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4411667841", "doi": "https://doi.org/10.37745/ejcsit.2013/vol13n448495", "title": "Data Privacy and Security in AI-Driven Customer Platforms: A Cloud Computing Perspective", "publication_year": 2025, "publication_date": "2025-05-15", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Amaan Javed", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": true, "raw_author_name": "Amaan Javed", "raw_affiliation_strings": ["Independent Researcher , USA"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Independent Researcher , USA", "institution_ids": []}]}], "abstract_inverted_index": {"AI-driven": [0], "customer": [1, 32], "experience": [2], "platforms": [3], "have": [4], "transformed": [5], "enterprise": [6], "engagement": [7], "strategies": [8], "by": [9], "leveraging": [10], "large": [11], "language": [12], "models": [13], "and": [14, 68, 91, 116, 122, 139, 144], "cloud-native": [15], "infrastructure": [16], "to": [17, 163], "deliver": [18], "personalized": [19], "interactions": [20], "across": [21, 34, 156], "multiple": [22, 157], "channels.": [23], "These": [24], "sophisticated": [25], "systems": [26], "process": [27], "substantial": [28], "volumes": [29], "of": [30, 48], "sensitive": [31], "information": [33], "distributed": [35], "cloud": [36, 51], "environments,": [37], "introducing": [38], "multifaceted": [39], "security": [40, 102, 121, 137, 152], "challenges": [41, 73], "beyond": [42], "conventional": [43], "cybersecurity": [44], "frameworks.": [45], "The": [46, 95], "integration": [47], "AI": [49, 170], "with": [50, 110, 133, 150], "computing": [52], "creates": [53], "unique": [54], "vulnerabilities,": [55], "including": [56], "prompt": [57, 111], "injection,": [58, 112], "data": [59, 83], "privacy": [60], "concerns,": [61], "content": [62], "safety": [63], "risks,": [64], "technical": [65, 131], "exploitation": [66], "vectors,": [67], "regulatory": [69], "complexity.": [70], "Addressing": [71], "these": [72], "requires": [74], "comprehensive": [75], "architectural": [76], "approaches": [77], "spanning": [78], "zero": [79], "trust": [80], "principles,": [81], "proactive": [82], "protection": [84, 125], "strategies,": [85], "secure": [86], "MLOps": [87], "pipelines,": [88], "confidential": [89], "computing,": [90], "robust": [92, 151], "output": [93], "monitoring.": [94], "CYBERSECEVAL": [96], "benchmark": [97], "provides": [98], "valuable": [99], "insights": [100], "into": [101], "vulnerabilities": [103], "even": [104], "among": [105], "advanced": [106], "systems,": [107], "highlighting": [108], "concerns": [109], "code": [113], "generation": [114], "capabilities,": [115], "the": [117, 164], "fundamental": [118], "tradeoff": [119], "between": [120], "functionality.": [123], "Effective": [124], "demands": [126], "a": [127], "holistic": [128], "strategy": [129], "combining": [130], "controls": [132], "governance": [134], "frameworks,": [135], "ongoing": [136], "evaluation,": [138], "organizational": [140], "awareness.": [141], "Financial": [142], "institutions": [143], "other": [145], "enterprises": [146], "must": [147], "balance": [148], "innovation": [149], "while": [153], "maintaining": [154], "compliance": [155], "jurisdictions,": [158], "ultimately": [159], "requiring": [160], "continuous": [161], "adaptation": [162], "rapidly": [165], "evolving": [166], "threat": [167], "landscape": [168], "in": [169], "security.": [171]}, "primary_topic": {"id": "https://openalex.org/T11614", "display_name": "Cloud Data Security Solutions", "score": 0.5562000274658203, "subfield": {"id": "https://openalex.org/subfields/1710", "display_name": "Information Systems"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11614", "display_name": "Cloud Data Security Solutions", "score": 0.5562000274658203, "subfield": {"id": "https://openalex.org/subfields/1710", "display_name": "Information Systems"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.3411000072956085, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10764", "display_name": "Privacy-Preserving Technologies in Data", "score": 0.01640000008046627, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.37745/ejcsit.2013/vol13n448495", "is_oa": true, "landing_page_url": "https://doi.org/10.37745/ejcsit.2013/vol13n448495", "pdf_url": "https://eajournals.org/ejcsit/wp-content/uploads/sites/21/2025/06/Data-Privacy.pdf", "source": {"id": "https://openalex.org/S4210168180", "display_name": "European Journal of Computer Science and Information Technology", "issn_l": "2054-0957", "issn": ["2054-0957", "2054-0965"], "is_oa": false, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": null, "host_organization_name": null, "host_organization_lineage": [], "host_organization_lineage_names": [], "type": "journal"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "European Journal of Computer Science and Information Technology", "raw_type": "journal-article"}, "cited_by_count": 2, "is_retracted": false}, {"id": "https://openalex.org/W7162418775", "doi": "https://doi.org/10.65521/ijasret.v9i11.1399", "title": "AI- DRIVEN CYBERSECURITY: THREAT DETECTION AND PREVENTION", "publication_year": 2025, "publication_date": "2025-11-30", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5137011885", "display_name": "Dr. R.D. Bhoyar", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I150513749", "display_name": "Sant Gadge Baba Amravati University", "ror": "https://ror.org/05s8p6g93", "country_code": "IN", "type": "education", "lineage": ["https://openalex.org/I150513749"]}], "countries": ["IN"], "is_corresponding": true, "raw_author_name": "Dr. R.D. Bhoyar", "raw_affiliation_strings": ["Assistant Professor, Department of Computer Science , Sant Gadge Baba Amravati University , Amravati"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Assistant Professor, Department of Computer Science , Sant Gadge Baba Amravati University , Amravati", "institution_ids": ["https://openalex.org/I150513749"]}]}], "abstract_inverted_index": {"As": [0], "cyber": [1], "threats": [2], "grow": [3], "increasingly": [4], "sophisticated,": [5], "traditional": [6], "security": [7], "measures": [8], "struggle": [9], "to": [10], "keep": [11], "pace.": [12], "Artificial": [13], "Intelligence(AI)offers": [14], "powerful": [15], "tools": [16], "for": [17, 76, 85], "real-time": [18], "threat": [19, 52], "detection,": [20, 48], "prevention,": [21], "and": [22, 41, 54, 64, 73, 81], "automated": [23, 55], "response.": [24], "This": [25], "paper": [26], "explores": [27], "theuseofAIincybersecurity,": [28], "focusing": [29], "on": [30], "techniques": [31], "such": [32, 57], "as": [33, 58], "machine": [34], "learning,": [35, 37], "deep": [36], "natural": [38], "language": [39], "processing,": [40], "behavioral": [42], "analytics.Wediscuss": [43], "their": [44], "application": [45], "in": [46], "anomaly": [47], "intrusion": [49], "prevention": [50], "systems,": [51], "intelligence,": [53], "defensemechanisms.Challenges": [56], "adversarial": [59], "attacks,": [60], "interpretability,": [61], "data": [62], "limitations,": [63], "ethical": [65], "concerns": [66], "are": [67], "also": [68], "examined.": [69], "Finally,": [70], "wehighlightemerging": [71], "trends": [72], "propose": [74], "directions": [75], "future": [77], "research,": [78], "emphasizing": [79], "explainable": [80], "lightweight": [82], "AI": [83], "solutions": [84], "securenetworks.": [86]}, "primary_topic": {"id": "https://openalex.org/T10400", "display_name": "Network Security and Intrusion Detection", "score": 0.9980000257492065, "subfield": {"id": "https://openalex.org/subfields/1705", "display_name": "Computer Networks and Communications"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T10400", "display_name": "Network Security and Intrusion Detection", "score": 0.9980000257492065, "subfield": {"id": "https://openalex.org/subfields/1705", "display_name": "Computer Networks and Communications"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.000699999975040555, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12326", "display_name": "Network Packet Processing and Optimization", "score": 0.0003000000142492354, "subfield": {"id": "https://openalex.org/subfields/1708", "display_name": "Hardware and Architecture"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.65521/ijasret.v9i11.1399", "is_oa": true, "landing_page_url": "https://doi.org/10.65521/ijasret.v9i11.1399", "pdf_url": "https://journals.mriindia.com/index.php/ijasret/article/download/1399/1351", "source": {"id": "https://openalex.org/S4210201136", "display_name": "International Journal of Advance Scientific Research and Engineering Trends", "issn_l": "2456-0774", "issn": ["2456-0774"], "is_oa": false, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": null, "host_organization_name": null, "host_organization_lineage": [], "host_organization_lineage_names": [], "type": "journal"}, "license": null, "license_id": null, "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "International Journal of Advanced Scientific Research and Engineering Trends", "raw_type": "journal-article"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4411896087", "doi": "https://doi.org/10.51983/ijiss-2025.ijiss.15.2.54", "title": "Vulnerabilities and Defenses: A Monograph on Comprehensive Analysis of Security Attacks on Large Language Models", "publication_year": 2025, "publication_date": "2025-06-25", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5042809211", "display_name": "P. A. Balakrishnan", "orcid": "https://orcid.org/0000-0001-8139-9161", "observed_orcids": ["https://orcid.org/0000-0001-8139-9161"]}, "institutions": [{"id": "https://openalex.org/I876193797", "display_name": "Vellore Institute of Technology University", "ror": "https://ror.org/00qzypv28", "country_code": "IN", "type": "education", "lineage": ["https://openalex.org/I876193797"]}], "countries": ["IN"], "is_corresponding": false, "raw_author_name": "P. Balakrishnan", "raw_affiliation_strings": ["School of Computer Science and Engineering , Vellore Institute of Technology , Vellore , India"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "School of Computer Science and Engineering , Vellore Institute of Technology , Vellore , India", "institution_ids": ["https://openalex.org/I876193797"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5060475303", "display_name": "A. Anny Leema", "orcid": "https://orcid.org/0000-0002-0704-2794", "observed_orcids": ["https://orcid.org/0000-0002-0704-2794"]}, "institutions": [{"id": "https://openalex.org/I876193797", "display_name": "Vellore Institute of Technology University", "ror": "https://ror.org/00qzypv28", "country_code": "IN", "type": "education", "lineage": ["https://openalex.org/I876193797"]}], "countries": ["IN"], "is_corresponding": false, "raw_author_name": "A. Anny Leema", "raw_affiliation_strings": ["School of Computer Science and Engineering , Vellore Institute of Technology , Vellore , India"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "School of Computer Science and Engineering , Vellore Institute of Technology , Vellore , India", "institution_ids": ["https://openalex.org/I876193797"]}]}], "abstract_inverted_index": {"This": [0, 35], "research": [1], "mainly": [2], "focused": [3], "on": [4], "highly": [5], "developednatural": [6], "language": [7], "processing": [8], "capabilities,": [9], "such": [10], "as": [11], "large": [12], "languagemodels": [13], "(LLMs),": [14], "which": [15], "can": [16], "generate": [17], "code": [18], "and": [19, 48, 94, 116], "power": [20], "chatbots,among": [21], "many": [22, 32], "other": [23], "uses.": [24], "Their": [25], "growing": [26], "use,": [27], "though,": [28], "has": [29], "putthem": [30], "under": [31], "security": [33, 81], "risks.": [34], "work": [36], "thoroughlyinvestigates": [37], "LLM": [38], "vulnerabilities,": [39], "including": [40], "adversarial": [41], "attacks,data": [42], "poisoning,": [43], "prompt": [44], "injection,": [45], "privacy": [46], "leaking,": [47], "modelexploitation": [49], "via": [50], "jailbreak.": [51], "Though": [52], "there": [53], "is": [54], "an": [55], "increasing": [56], "corpusof": [57], "defensive": [58], "tactics,": [59], "most": [60], "still": [61], "have": [62], "limited": [63], "reach,": [64], "potency,": [65], "oradaptability.": [66], "The": [67], "paper": [68], "lists": [69], "ideas": [70], "for": [71, 78, 96], "the": [72, 76, 102], "following": [73], "studies": [74], "andemphasizes": [75], "requirement": [77], "strong,": [79], "generalizable,explainable": [80], "solutions.": [82], "Creating": [83], "uniform": [84], "evaluationstandards,": [85], "adaptive": [86], "defense": [87], "mechanisms,": [88], "more": [89], "transparentmodels,": [90], "automated": [91], "threat": [92], "detection,": [93], "frameworks": [95], "ethicalintegration": [97], "are": [98], "all": [99], "part": [100], "of": [101], "approach.": [103], "Ensuring": [104], "LLMs": [105], "callsfor": [106], "a": [107, 112], "multidisciplinary": [108], "strategy": [109], "that": [110], "strikes": [111], "compromisebetween": [113], "responsible": [114], "government": [115], "technology": [117], "innovation.": [118]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10028", "display_name": "Topic Modeling", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.51983/ijiss-2025.ijiss.15.2.54", "is_oa": true, "landing_page_url": "https://doi.org/10.51983/ijiss-2025.ijiss.15.2.54", "pdf_url": "https://ojs.trp.org.in/index.php/ijiss/article/download/5054/7797", "source": {"id": "https://openalex.org/S4210215300", "display_name": "Indian Journal of Information Sources and Services", "issn_l": "2231-6094", "issn": ["2231-6094"], "is_oa": false, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": null, "host_organization_name": null, "host_organization_lineage": [], "host_organization_lineage_names": [], "type": "journal"}, "license": "cc-by-nc-nd", "license_id": "https://openalex.org/licenses/cc-by-nc-nd", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Indian Journal of Information Sources and Services", "raw_type": "journal-article"}, "cited_by_count": 2, "is_retracted": false}, {"id": "https://openalex.org/W4407571814", "doi": "https://doi.org/10.48550/arxiv.2502.09110", "title": "Pulling Back the Curtain: Unsupervised Adversarial Detection via Contrastive Auxiliary Networks", "publication_year": 2025, "publication_date": "2025-02-13", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Mizrahi, Eylon", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I124227911", "display_name": "Ben-Gurion University of the Negev", "ror": "https://ror.org/05tkyf982", "country_code": "IL", "type": "education", "lineage": ["https://openalex.org/I124227911"]}], "countries": ["IL"], "is_corresponding": false, "raw_author_name": "Mizrahi, Eylon", "raw_affiliation_strings": ["Ben-Gurion University Beer-Sheva , 8410501 , Israel"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Ben-Gurion University Beer-Sheva , 8410501 , Israel", "institution_ids": ["https://openalex.org/I124227911"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5054480906", "display_name": "Raz Lapid", "orcid": "https://orcid.org/0000-0002-4818-9338", "observed_orcids": ["https://orcid.org/0000-0002-4818-9338"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Lapid, Raz", "raw_affiliation_strings": ["DeepKeep Tel- Aviv , Israel"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "DeepKeep Tel- Aviv , Israel", "institution_ids": []}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5004983635", "display_name": "Moshe Sipper", "orcid": "https://orcid.org/0000-0003-1811-472X", "observed_orcids": ["https://orcid.org/0000-0003-1811-472X"]}, "institutions": [{"id": "https://openalex.org/I124227911", "display_name": "Ben-Gurion University of the Negev", "ror": "https://ror.org/05tkyf982", "country_code": "IL", "type": "education", "lineage": ["https://openalex.org/I124227911"]}], "countries": ["IL"], "is_corresponding": false, "raw_author_name": "Sipper, Moshe", "raw_affiliation_strings": ["Ben-Gurion University Beer-Sheva , 8410501 , Israel"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Ben-Gurion University Beer-Sheva , 8410501 , Israel", "institution_ids": ["https://openalex.org/I124227911"]}]}], "abstract_inverted_index": {"Deep": [0], "learning": [1, 154], "models": [2], "are": [3], "widely": [4], "employed": [5], "in": [6], "safety-critical": [7], "applications": [8], "yet": [9], "remain": [10], "susceptible": [11], "to": [12, 53, 91], "adversarial": [13, 36, 46, 55, 65, 98, 125], "attacks": [14], "--": [15], "imperceptible": [16], "perturbations": [17], "that": [18, 119], "can": [19], "significantly": [20], "degrade": [21], "model": [22, 32], "performance.": [23], "Conventional": [24], "defense": [25], "mechanisms": [26], "predominantly": [27], "focus": [28], "on": [29], "either": [30], "enhancing": [31, 147], "robustness": [33], "or": [34], "detecting": [35], "inputs": [37], "independently.": [38], "In": [39], "this": [40], "work,": [41], "we": [42], "propose": [43], "an": [44], "Unsupervised": [45], "detection": [47, 126], "via": [48], "Contrastive": [49], "Auxiliary": [50], "Networks": [51], "(U-CAN)": [52], "uncover": [54], "behavior": [56], "within": [57, 70], "auxiliary": [58, 79], "feature": [59, 89], "representations,": [60], "without": [61], "the": [62, 75, 148], "need": [63], "for": [64, 146], "examples.": [66], "U-CAN": [67], "is": [68], "embedded": [69], "selected": [71], "intermediate": [72], "layers": [73, 83], "of": [74, 110, 152], "target": [76], "model.": [77], "These": [78], "networks,": [80], "comprising": [81], "projection": [82], "and": [84, 97, 107, 112, 116, 143, 150], "ArcFace-based": [85], "linear": [86], "layers,": [87], "refine": [88], "representations": [90], "more": [92], "effectively": [93], "distinguish": [94], "between": [95], "benign": [96], "inputs.": [99], "Comprehensive": [100], "experiments": [101], "across": [102], "multiple": [103], "datasets": [104], "(CIFAR-10,": [105], "Mammals,": [106], "a": [108, 141], "subset": [109], "ImageNet)": [111], "architectures": [113], "(ResNet-50,": [114], "VGG-16,": [115], "ViT)": [117], "demonstrate": [118], "our": [120], "method": [121], "surpasses": [122], "existing": [123], "unsupervised": [124], "techniques,": [127], "achieving": [128], "superior": [129], "F1": [130], "scores": [131], "against": [132], "four": [133], "distinct": [134], "attack": [135], "methods.": [136], "The": [137], "proposed": [138], "framework": [139], "provides": [140], "scalable": [142], "effective": [144], "solution": [145], "security": [149], "reliability": [151], "deep": [153], "systems.": [155]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "pmh:oai:arXiv.org:2502.09110", "is_oa": true, "landing_page_url": "http://arxiv.org/abs/2502.09110", "pdf_url": "https://arxiv.org/pdf/2502.09110", "source": {"id": "https://openalex.org/S4306400194", "display_name": "arXiv (Cornell University)", "issn_l": "2331-8422", "issn": ["2331-8422"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I205783295", "host_organization_name": "Cornell University", "host_organization_lineage": ["https://openalex.org/I205783295"], "host_organization_lineage_names": [], "type": "repository"}, "license": null, "license_id": null, "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "text"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W7116951788", "doi": "https://doi.org/10.35467/cal/215566", "title": "Taxonomy of Contemporary Attacks on Machine Learning Models", "publication_year": 2025, "publication_date": "2025-12-23", "type": "article", "language": null, "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5120706832", "display_name": "Kacper Zdrojewski", "orcid": "https://orcid.org/0009-0007-5255-0441", "observed_orcids": ["https://orcid.org/0009-0007-5255-0441"]}, "institutions": [{"id": "https://openalex.org/I4210150966", "display_name": "War Studies Academy", "ror": "https://ror.org/05113d564", "country_code": "PL", "type": "education", "lineage": ["https://openalex.org/I4210150966"]}], "countries": ["PL"], "is_corresponding": true, "raw_author_name": "Kacper Zdrojewski", "raw_affiliation_strings": ["Akademia Sztuki Wojennej"], "raw_orcid": "https://orcid.org/0009-0007-5255-0441", "affiliations": [{"raw_affiliation_string": "Akademia Sztuki Wojennej", "institution_ids": ["https://openalex.org/I4210150966"]}]}], "abstract_inverted_index": {"This": [0], "paper": [1], "analyzes": [2], "security": [3], "threats": [4], "to": [5, 164], "artificial": [6], "intelligence": [7], "(AI)": [8], "systems,": [9], "focusing": [10], "on": [11, 31], "the": [12, 53, 61, 152], "classification": [13], "of": [14, 23, 35, 41, 55, 60, 101, 129], "technical": [15], "attacks": [16, 94, 106], "that": [17, 92, 118], "target": [18], "confidentiality,": [19], "integrity,": [20], "and": [21, 38, 49, 64, 87, 98, 112, 135, 147, 161, 167], "availability": [22], "machine": [24, 158], "learning": [25, 159], "(ML)": [26], "models.The": [27], "study": [28], "is": [29], "based": [30], "a": [32, 123], "systematic": [33], "review": [34], "scientific": [36], "literature": [37], "an": [39], "examination": [40], "established": [42], "taxonomies,": [43], "including": [44], "those": [45], "by": [46], "NIST,": [47], "ENISA,": [48], "MITRE": [50], "ATLAS,": [51], "enabling": [52], "integration": [54], "attack": [56], "types": [57], "across": [58], "stages": [59], "ML": [62, 120], "lifecycle": [63], "attacker": [65], "knowledge": [66], "levels.The": [67], "work": [68], "identifies": [69], "major": [70], "threat": [71], "vectors": [72], "such": [73, 141], "as": [74, 142], "adversarial": [75, 145], "examples,": [76], "data": [77], "poisoning,": [78], "backdoor": [79], "insertion,": [80], "model": [81, 85, 102, 133], "theft,": [82], "membership": [83], "inference,": [84], "overloading,": [86], "prompt": [88], "manipulation.The": [89], "results": [90], "show": [91], "white-box": [93], "allow": [95], "highly": [96], "precise": [97], "covert": [99], "manipulations": [100], "behavior,": [103], "while": [104], "black-box": [105], "dominate": [107], "production": [108], "environments,": [109], "leveraging": [110], "transferability": [111], "prediction-based": [113], "analysis.The": [114], "proposed": [115], "taxonomy": [116], "demonstrates": [117], "securing": [119, 136], "systems": [121], "requires": [122], "multilayered": [124], "defensive": [125], "approach,": [126], "encompassing": [127], "protection": [128], "training": [130], "data,": [131], "strengthening": [132], "robustness,": [134], "API": [137], "interfaces": [138], "using": [139], "techniques": [140], "differential": [143], "privacy,": [144], "training,": [146], "rate": [148], "limiting.The": [149], "findings": [150], "highlight": [151], "need": [153], "for": [154], "close": [155], "collaboration": [156], "between": [157], "engineers": [160], "cybersecurity": [162], "practitioners": [163], "ensure": [165], "resilient": [166], "trustworthy": [168], "AI": [169], "systems.": [170]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10764", "display_name": "Privacy-Preserving Technologies in Data", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.35467/cal/215566", "is_oa": true, "landing_page_url": "https://doi.org/10.35467/cal/215566", "pdf_url": "https://czasopismocybersecurityandlaw.pl/pdf-215566-133680?filename=Taxonomy-of-Contemporary-.pdf", "source": {"id": "https://openalex.org/S4387280106", "display_name": "Cybersecurity and Law", "issn_l": "2658-1493", "issn": ["2658-1493"], "is_oa": false, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": null, "host_organization_name": null, "host_organization_lineage": [], "host_organization_lineage_names": [], "type": "journal"}, "license": "cc-by-sa", "license_id": "https://openalex.org/licenses/cc-by-sa", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Cybersecurity and Law", "raw_type": "journal-article"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4408509239", "doi": "https://doi.org/10.1016/j.knosys.2025.113325", "title": "Improving the transferability of adversarial examples through semantic-mixup inputs", "publication_year": 2025, "publication_date": "2025-03-17", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Fuquan Gan", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I90610280", "display_name": "South China University of Technology", "ror": "https://ror.org/0530pts50", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I90610280"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Fuquan Gan", "raw_affiliation_strings": ["School of Computer Science and Engineering, South China University of Technology, Guangzhou, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "School of Computer Science and Engineering, South China University of Technology, Guangzhou, China", "institution_ids": ["https://openalex.org/I90610280"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5101412180", "display_name": "Yan Wo", "orcid": "https://orcid.org/0000-0003-1001-4425", "observed_orcids": ["https://orcid.org/0000-0003-1001-4425"]}, "institutions": [{"id": "https://openalex.org/I90610280", "display_name": "South China University of Technology", "ror": "https://ror.org/0530pts50", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I90610280"]}], "countries": ["CN"], "is_corresponding": true, "raw_author_name": "Yan Wo", "raw_affiliation_strings": ["School of Computer Science and Engineering, South China University of Technology, Guangzhou, China"], "raw_orcid": "https://orcid.org/0000-0003-1001-4425", "affiliations": [{"raw_affiliation_string": "School of Computer Science and Engineering, South China University of Technology, Guangzhou, China", "institution_ids": ["https://openalex.org/I90610280"]}]}], "abstract_inverted_index": null, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.1016/j.knosys.2025.113325", "is_oa": false, "landing_page_url": "https://doi.org/10.1016/j.knosys.2025.113325", "pdf_url": null, "source": {"id": "https://openalex.org/S10169007", "display_name": "Knowledge-Based Systems", "issn_l": "0950-7051", "issn": ["0950-7051", "1872-7409"], "is_oa": false, "is_in_doaj": false, "is_core": true, "listed_in": ["cwts-core", "jufo-2", "norway-2"], "host_organization": "https://openalex.org/P4310320990", "host_organization_name": "Elsevier BV", "host_organization_lineage": ["https://openalex.org/P4310320990"], "host_organization_lineage_names": ["Elsevier BV"], "type": "journal"}, "license": null, "license_id": null, "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Knowledge-Based Systems", "raw_type": "journal-article"}, "cited_by_count": 4, "is_retracted": false}, {"id": "https://openalex.org/W4413822103", "doi": "https://doi.org/10.1109/tcsvt.2025.3604033", "title": "FPAD: Fuzzy-Prototype-Guided Adversarial Attack and Defense for Deep Cross-Modal Hashing", "publication_year": 2025, "publication_date": "2025-08-29", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5101100510", "display_name": "Zhongqing Yu", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I119045251", "display_name": "Huaqiao University", "ror": "https://ror.org/03frdh605", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I119045251"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Zhongqing Yu", "raw_affiliation_strings": ["Department of Computer Science, Huaqiao University, Xiamen, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Computer Science, Huaqiao University, Xiamen, China", "institution_ids": ["https://openalex.org/I119045251"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5100352180", "display_name": "Xin Liu", "orcid": "https://orcid.org/0000-0002-0011-6260", "observed_orcids": ["https://orcid.org/0000-0002-0011-6260", "https://orcid.org/0000-0001-8503-7125"]}, "institutions": [{"id": "https://openalex.org/I119045251", "display_name": "Huaqiao University", "ror": "https://ror.org/03frdh605", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I119045251"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Xin Liu", "raw_affiliation_strings": ["Department of Computer Science, Huaqiao University, Xiamen, China"], "raw_orcid": "https://orcid.org/0000-0002-0011-6260", "affiliations": [{"raw_affiliation_string": "Department of Computer Science, Huaqiao University, Xiamen, China", "institution_ids": ["https://openalex.org/I119045251"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5038516431", "display_name": "Yiu\u2010ming Cheung", "orcid": "https://orcid.org/0000-0001-7629-4648", "observed_orcids": ["https://orcid.org/0000-0001-7629-4648"]}, "institutions": [{"id": "https://openalex.org/I141568987", "display_name": "Hong Kong Baptist University", "ror": "https://ror.org/0145fw131", "country_code": "HK", "type": "education", "lineage": ["https://openalex.org/I141568987"]}], "countries": ["HK"], "is_corresponding": false, "raw_author_name": "Yiu-Ming Cheung", "raw_affiliation_strings": ["Department of Computer Science, Hong Kong Baptist University, Hong Kong, SAR, China"], "raw_orcid": "https://orcid.org/0000-0001-7629-4648", "affiliations": [{"raw_affiliation_string": "Department of Computer Science, Hong Kong Baptist University, Hong Kong, SAR, China", "institution_ids": ["https://openalex.org/I141568987"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5108048954", "display_name": "Lei Zhu", "orcid": "https://orcid.org/0000-0002-2993-7142", "observed_orcids": ["https://orcid.org/0000-0002-2993-7142"]}, "institutions": [{"id": "https://openalex.org/I116953780", "display_name": "Tongji University", "ror": "https://ror.org/03rc6as71", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I116953780"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Lei Zhu", "raw_affiliation_strings": ["School of Computer Science and Technology, Tongji University, Shanghai, China"], "raw_orcid": "https://orcid.org/0000-0002-2993-7142", "affiliations": [{"raw_affiliation_string": "School of Computer Science and Technology, Tongji University, Shanghai, China", "institution_ids": ["https://openalex.org/I116953780"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5009074046", "display_name": "Xing Xu", "orcid": "https://orcid.org/0000-0001-5685-3123", "observed_orcids": ["https://orcid.org/0000-0001-5685-3123"]}, "institutions": [{"id": "https://openalex.org/I116953780", "display_name": "Tongji University", "ror": "https://ror.org/03rc6as71", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I116953780"]}, {"id": "https://openalex.org/I141568987", "display_name": "Hong Kong Baptist University", "ror": "https://ror.org/0145fw131", "country_code": "HK", "type": "education", "lineage": ["https://openalex.org/I141568987"]}], "countries": ["CN", "HK"], "is_corresponding": false, "raw_author_name": "Xing Xu", "raw_affiliation_strings": ["Department of Computer Science, Hong Kong Baptist University, Hong Kong, SAR, China", "School of Computer Science and Technology, Tongji University, Shanghai, China"], "raw_orcid": "https://orcid.org/0000-0001-5685-3123", "affiliations": [{"raw_affiliation_string": "Department of Computer Science, Hong Kong Baptist University, Hong Kong, SAR, China", "institution_ids": ["https://openalex.org/I141568987"]}, {"raw_affiliation_string": "School of Computer Science and Technology, Tongji University, Shanghai, China", "institution_ids": ["https://openalex.org/I116953780"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5042507268", "display_name": "Nannan Wang", "orcid": "https://orcid.org/0000-0002-4695-6134", "observed_orcids": ["https://orcid.org/0000-0002-4695-6134", "https://orcid.org/0000-0003-1435-489X"]}, "institutions": [{"id": "https://openalex.org/I149594827", "display_name": "Xidian University", "ror": "https://ror.org/05s92vm98", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I149594827"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Nannan Wang", "raw_affiliation_strings": ["State Key Laboratory of Integrated Services Networks, Xidian University, Xi&#x2019;an, China"], "raw_orcid": "https://orcid.org/0000-0002-4695-6134", "affiliations": [{"raw_affiliation_string": "State Key Laboratory of Integrated Services Networks, Xidian University, Xi&#x2019;an, China", "institution_ids": ["https://openalex.org/I149594827"]}]}], "abstract_inverted_index": {"Deep": [0], "cross-modal": [1, 66, 89, 193, 209, 247], "hashing": [2, 41, 90, 210, 248], "models": [3], "generally": [4], "inherit": [5], "the": [6, 40, 44, 60, 84, 111, 116, 136, 152, 157, 164, 168, 173, 186, 220, 232], "vulnerabilities": [7], "of": [8, 54, 87, 106, 115, 138], "deep": [9, 65, 88], "neural": [10], "networks,": [11], "making": [12], "them": [13], "susceptible": [14], "to": [15, 82, 102, 109, 134, 150, 184, 230, 244], "adversarial": [16, 29, 85, 140, 158, 165, 179, 188, 198, 228, 233, 241], "attacks": [17, 204], "and": [18, 43, 48, 62, 78, 122, 159, 190, 205], "thus": [19], "posing": [20], "a": [21, 36, 52, 74, 104, 143], "serious": [22], "security": [23], "risk": [24], "during": [25], "real-world": [26], "deployment.": [27], "Current": [28], "attack": [30, 61], "or": [31], "defense": [32, 63, 199, 242], "strategies": [33], "often": [34], "establish": [35], "weak": [37], "correlation": [38], "between": [39, 156], "codes": [42, 130, 195], "targeted": [45], "semantic": [46, 113, 154], "representations,": [47], "there": [49], "is": [50, 99, 147, 182, 252], "still": [51], "lack": [53], "related": [55], "works": [56], "that": [57, 219], "simultaneously": [58, 148], "consider": [59], "for": [64], "hashing.": [67], "To": [68], "alleviate": [69], "these": [70, 126], "concerns,": [71], "we": [72], "propose": [73], "Fuzzy-Prototype-guided": [75], "Adversarial": [76], "Attack": [77], "Defense": [79], "(FPAD)": [80], "framework": [81, 181, 223], "enhance": [83, 231], "robustness": [86], "models.": [91], "First,": [92], "an": [93, 176], "adaptive": [94], "fuzzy-prototype": [95, 144], "learning": [96, 180], "network": [97], "(FpNet)": [98], "efficiently": [100], "presented": [101], "extract": [103], "set": [105], "fuzzy-prototypes,": [107], "aiming": [108], "encode": [110], "underlying": [112], "structure": [114], "heterogeneous": [117], "modalities": [118], "in": [119], "both": [120], "feature": [121], "Hamming": [123], "spaces.": [124], "Then,": [125], "derived": [127], "prototypical": [128], "hash": [129, 194], "are": [131], "heuristically": [132], "employed": [133], "supervise": [135], "generation": [137], "high-quality": [139, 227], "examples,": [141], "while": [142], "rectification": [145], "scheme": [146], "designed": [149], "preserve": [151], "latent": [153], "consistency": [155], "benign": [160], "examples.": [161], "By": [162], "mixing": [163], "samples": [166, 171, 229], "with": [167, 196], "original": [169], "training": [170, 189, 234], "as": [172], "augmented": [174], "inputs,": [175], "efficient": [177], "fuzzy-prototype-guided": [178], "proposed": [183, 221], "execute": [185], "collaborative": [187], "generate": [191], "robust": [192], "high": [197, 240], "capabilities,": [200], "therefore": [201], "resisting": [202], "various": [203, 207, 246], "benefiting": [206], "challenging": [208], "tasks.": [211, 249], "Extensive": [212], "experiments": [213], "evaluated": [214], "on": [215], "benchmark": [216], "datasets": [217], "show": [218], "FPAD": [222], "not": [224], "only": [225], "produces": [226], "process,": [235], "but": [236], "also": [237], "shows": [238], "its": [239], "capability": [243], "benefit": [245], "The": [250], "code": [251], "available": [253], "at:": [254], "https://github.com/yzq131/FPAD.": [255]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9761000275611877, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9761000275611877, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10627", "display_name": "Advanced Image and Video Retrieval Techniques", "score": 0.005499999970197678, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 0.0017000000225380063, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.1109/tcsvt.2025.3604033", "is_oa": false, "landing_page_url": "https://doi.org/10.1109/tcsvt.2025.3604033", "pdf_url": null, "source": {"id": "https://openalex.org/S115173108", "display_name": "IEEE Transactions on Circuits and Systems for Video Technology", "issn_l": "1051-8215", "issn": ["1051-8215", "1558-2205"], "is_oa": false, "is_in_doaj": false, "is_core": true, "listed_in": ["cwts-core", "jufo-2", "norway-2"], "host_organization": "https://openalex.org/P4310319808", "host_organization_name": "Institute of Electrical and Electronics Engineers", "host_organization_lineage": ["https://openalex.org/P4310319808"], "host_organization_lineage_names": ["Institute of Electrical and Electronics Engineers"], "type": "journal"}, "license": null, "license_id": null, "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "IEEE Transactions on Circuits and Systems for Video Technology", "raw_type": "journal-article"}, "cited_by_count": 2, "is_retracted": false}, {"id": "https://openalex.org/W4417302169", "doi": "https://doi.org/10.48550/arxiv.2505.12681", "title": "On the Mechanisms of Adversarial Data Augmentation for Robust and Adaptive Transfer Learning", "publication_year": 2025, "publication_date": "2025-05-19", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5077862470", "display_name": "Hana Satou", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Satou, Hana", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "last", "author": {"id": "https://openalex.org/A5115003346", "display_name": "Alan Mitkiy", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Mitkiy, Alan", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}], "abstract_inverted_index": {"Transfer": [0], "learning": [1, 17, 66], "across": [2, 109], "domains": [3], "with": [4, 100], "distribution": [5], "shift": [6], "remains": [7], "a": [8, 94, 139, 148, 152], "fundamental": [9], "challenge": [10], "in": [11, 58, 64], "building": [12], "robust": [13], "and": [14, 62, 85, 103, 117, 131], "adaptable": [15], "machine": [16], "systems.": [18], "While": [19], "adversarial": [20, 54, 71, 143], "perturbations": [21], "are": [22], "traditionally": [23], "viewed": [24], "as": [25, 39], "threats": [26], "that": [27, 34, 97, 121], "expose": [28], "model": [29], "vulnerabilities,": [30], "recent": [31], "studies": [32], "suggest": [33], "they": [35], "can": [36], "also": [37], "serve": [38], "constructive": [40, 140], "tools": [41], "for": [42, 155], "data": [43, 55], "augmentation.": [44], "In": [45], "this": [46], "work,": [47], "we": [48], "systematically": [49], "investigate": [50], "the": [51], "role": [52], "of": [53, 142], "augmentation": [56], "(ADA)": [57], "enhancing": [59], "both": [60, 129], "robustness": [61], "adaptivity": [63], "transfer": [65], "settings.": [67, 135], "We": [68, 91], "analyze": [69], "how": [70], "examples,": [72], "when": [73], "used": [74], "strategically": [75], "during": [76], "training,": [77], "improve": [78], "domain": [79, 133], "generalization": [80], "by": [81], "enriching": [82], "decision": [83], "boundaries": [84], "reducing": [86], "overfitting": [87], "to": [88], "source-domain-specific": [89], "features.": [90], "further": [92], "propose": [93], "unified": [95], "framework": [96], "integrates": [98], "ADA": [99], "consistency": [101], "regularization": [102], "domain-invariant": [104], "representation": [105], "learning.": [106], "Extensive": [107], "experiments": [108], "multiple": [110], "benchmark": [111], "datasets": [112], "--": [113, 119], "including": [114], "VisDA,": [115], "DomainNet,": [116], "Office-Home": [118], "demonstrate": [120], "our": [122], "method": [123], "consistently": [124], "improves": [125], "target-domain": [126], "performance": [127], "under": [128], "unsupervised": [130], "few-shot": [132], "adaptation": [134], "Our": [136], "results": [137], "highlight": [138], "perspective": [141], "learning,": [144], "transforming": [145], "perturbation": [146], "from": [147], "destructive": [149], "attack": [150], "into": [151], "regularizing": [153], "force": [154], "cross-domain": [156], "transferability.": [157]}, "primary_topic": {"id": "https://openalex.org/T11307", "display_name": "Domain Adaptation and Few-Shot Learning", "score": 0.9994999766349792, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11307", "display_name": "Domain Adaptation and Few-Shot Learning", "score": 0.9994999766349792, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.0006000000284984708, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10775", "display_name": "Generative Adversarial Networks and Image Synthesis", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "pmh:oai:arXiv.org:2505.12681", "is_oa": true, "landing_page_url": "http://arxiv.org/abs/2505.12681", "pdf_url": "https://arxiv.org/pdf/2505.12681", "source": {"id": "https://openalex.org/S4306400194", "display_name": "arXiv (Cornell University)", "issn_l": "2331-8422", "issn": ["2331-8422"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I205783295", "host_organization_name": "Cornell University", "host_organization_lineage": ["https://openalex.org/I205783295"], "host_organization_lineage_names": [], "type": "repository"}, "license": "cc-by-nc-nd", "license_id": "https://openalex.org/licenses/cc-by-nc-nd", "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "text"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4414823914", "doi": "https://doi.org/10.48550/arxiv.2510.02194", "title": "UpSafe$^\\circ$C: Upcycling for Controllable Safety in Large Language Models", "publication_year": 2025, "publication_date": "2025-10-02", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5055842287", "display_name": "Yuhao Sun", "orcid": "https://orcid.org/0000-0001-6987-3721", "observed_orcids": ["https://orcid.org/0000-0001-6987-3721"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Sun, Yuhao", "raw_affiliation_strings": ["University of Science and Technology of China , Independent researcher"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "University of Science and Technology of China , Independent researcher", "institution_ids": []}]}, {"author_position": "middle", "author": {"id": null, "display_name": "Xu, Zhuoer", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Xu, Zhuoer", "raw_affiliation_strings": ["University of Science and Technology of China , Independent researcher"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "University of Science and Technology of China , Independent researcher", "institution_ids": []}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5039364160", "display_name": "Shiwen Cui", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Cui, Shiwen", "raw_affiliation_strings": ["University of Science and Technology of China , Independent researcher"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "University of Science and Technology of China , Independent researcher", "institution_ids": []}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5051206362", "display_name": "Kun Yang", "orcid": "https://orcid.org/0000-0001-7908-2675", "observed_orcids": ["https://orcid.org/0000-0001-7908-2675"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Yang, Kun", "raw_affiliation_strings": ["University of Science and Technology of China , Independent researcher"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "University of Science and Technology of China , Independent researcher", "institution_ids": []}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5089799495", "display_name": "Lingyun Yu", "orcid": "https://orcid.org/0000-0001-6403-761X", "observed_orcids": ["https://orcid.org/0000-0001-6403-761X"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Yu, Lingyun", "raw_affiliation_strings": ["University of Science and Technology of China , Independent researcher"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "University of Science and Technology of China , Independent researcher", "institution_ids": []}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5119846710", "display_name": "Yongdong Zhang", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Zhang, Yongdong", "raw_affiliation_strings": ["University of Science and Technology of China , Independent researcher"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "University of Science and Technology of China , Independent researcher", "institution_ids": []}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5019450768", "display_name": "Hongtao Xie", "orcid": "https://orcid.org/0000-0001-6969-4897", "observed_orcids": ["https://orcid.org/0000-0001-6969-4897"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Xie, Hongtao", "raw_affiliation_strings": ["University of Science and Technology of China , Independent researcher"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "University of Science and Technology of China , Independent researcher", "institution_ids": []}]}], "abstract_inverted_index": {"Large": [0], "Language": [1], "Models": [2], "(LLMs)": [3], "have": [4], "achieved": [5], "remarkable": [6], "progress": [7], "across": [8, 137], "a": [9, 56, 76, 86, 101, 122, 186], "wide": [10], "range": [11], "of": [12, 129], "tasks,": [13], "but": [14], "remain": [15], "vulnerable": [16], "to": [17, 105], "safety": [18, 29, 62, 96, 107, 123, 133, 150, 168], "risks": [19], "such": [20], "as": [21, 85], "harmful": [22, 153], "content": [23], "generation": [24], "and": [25, 37, 48, 72, 94, 134, 142, 154, 181, 199], "jailbreak": [26, 155], "attacks.": [27], "Existing": [28], "techniques": [30], "--": [31, 40], "including": [32], "external": [33], "guardrails,": [34], "inference-time": [35, 172], "guidance,": [36], "post-training": [38], "alignment": [39, 195], "each": [41], "face": [42], "limitations": [43], "in": [44], "balancing": [45], "safety,": [46], "utility,": [47], "controllability.": [49], "In": [50], "this": [51], "work,": [52], "we": [53, 120], "propose": [54], "UpSafe$^\\circ$C,": [55], "unified": [57], "framework": [58], "for": [59, 189], "enhancing": [60], "LLM": [61, 190], "through": [63], "safety-aware": [64], "upcycling.": [65], "Our": [66, 183], "approach": [67], "first": [68], "identifies": [69], "safety-critical": [70], "layers": [71], "upcycles": [73], "them": [74], "into": [75], "sparse": [77], "Mixture-of-Experts": [78], "(MoE)": [79], "structure,": [80], "where": [81], "the": [82, 130, 176], "router": [83], "acts": [84], "soft": [87], "guardrail": [88], "that": [89, 146, 167, 174], "selectively": [90], "activates": [91], "original": [92], "MLPs": [93], "added": [95], "experts.": [97], "We": [98], "further": [99], "introduce": [100, 121], "two-stage": [102], "SFT": [103], "strategy": [104], "strengthen": [106], "discrimination": [108], "while": [109, 157], "preserving": [110], "general": [111, 162], "capabilities.": [112], "To": [113], "enable": [114], "flexible": [115], "control": [116, 173], "at": [117], "inference": [118], "time,": [119], "temperature": [124, 169], "mechanism,": [125], "allowing": [126], "dynamic": [127], "adjustment": [128], "trade-off": [131], "between": [132, 179], "utility.": [135], "Experiments": [136], "multiple": [138], "benchmarks,": [139], "base": [140], "model,": [141], "model": [143], "scales": [144], "demonstrate": [145], "UpSafe$^\\circ$C": [147], "achieves": [148, 175], "robust": [149], "improvements": [151], "against": [152], "inputs,": [156], "maintaining": [158], "competitive": [159], "performance": [160], "on": [161], "tasks.": [163], "Moreover,": [164], "analysis": [165], "shows": [166], "provides": [170], "fine-grained": [171], "Pareto-optimal": [177], "frontier": [178], "utility": [180], "safety.": [182], "results": [184], "highlight": [185], "new": [187], "direction": [188], "safety:": [191], "moving": [192], "from": [193], "static": [194], "toward": [196], "dynamic,": [197], "modular,": [198], "inference-aware": [200], "control.": [201]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.986299991607666, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.986299991607666, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10028", "display_name": "Topic Modeling", "score": 0.0038999998942017555, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10883", "display_name": "Ethics and Social Impacts of AI", "score": 0.0032999999821186066, "subfield": {"id": "https://openalex.org/subfields/3311", "display_name": "Safety Research"}, "field": {"id": "https://openalex.org/fields/33", "display_name": "Social Sciences"}, "domain": {"id": "https://openalex.org/domains/2", "display_name": "Social Sciences"}}], "primary_location": {"id": "pmh:oai:arXiv.org:2510.02194", "is_oa": true, "landing_page_url": "http://arxiv.org/abs/2510.02194", "pdf_url": "https://arxiv.org/pdf/2510.02194", "source": {"id": "https://openalex.org/S4306400194", "display_name": "arXiv (Cornell University)", "issn_l": "2331-8422", "issn": ["2331-8422"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I205783295", "host_organization_name": "Cornell University", "host_organization_lineage": ["https://openalex.org/I205783295"], "host_organization_lineage_names": [], "type": "repository"}, "license": null, "license_id": null, "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "text"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4412095489", "doi": "https://doi.org/10.20944/preprints202507.0497.v1", "title": "Federated Quantum Machine Learning for Distributed Cybersecurity in Multi-Agent Energy Systems", "publication_year": 2025, "publication_date": "2025-07-07", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5115819870", "display_name": "Kwabena Addo", "orcid": "https://orcid.org/0000-0001-9564-1625", "observed_orcids": ["https://orcid.org/0000-0001-9564-1625"]}, "institutions": [{"id": "https://openalex.org/I177181097", "display_name": "Durban University of Technology", "ror": "https://ror.org/0303y7a51", "country_code": "ZA", "type": "education", "lineage": ["https://openalex.org/I177181097"]}], "countries": ["ZA"], "is_corresponding": true, "raw_author_name": "Kwabena Addo", "raw_affiliation_strings": ["Department of Electrical Power Engineering , Durban University of Technology , Durban 4001 , South Africa;"], "raw_orcid": "https://orcid.org/0000-0001-9564-1625", "affiliations": [{"raw_affiliation_string": "Department of Electrical Power Engineering , Durban University of Technology , Durban 4001 , South Africa;", "institution_ids": ["https://openalex.org/I177181097"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5038092265", "display_name": "Musasa Kabeya", "orcid": "https://orcid.org/0000-0003-0086-8187", "observed_orcids": ["https://orcid.org/0000-0003-0086-8187"]}, "institutions": [{"id": "https://openalex.org/I177181097", "display_name": "Durban University of Technology", "ror": "https://ror.org/0303y7a51", "country_code": "ZA", "type": "education", "lineage": ["https://openalex.org/I177181097"]}], "countries": ["ZA"], "is_corresponding": false, "raw_author_name": "Musasa Kabeya", "raw_affiliation_strings": ["Department of Electrical Power Engineering , Durban University of Technology , Durban 4001 , South Africa"], "raw_orcid": "https://orcid.org/0000-0003-0086-8187", "affiliations": [{"raw_affiliation_string": "Department of Electrical Power Engineering , Durban University of Technology , Durban 4001 , South Africa", "institution_ids": ["https://openalex.org/I177181097"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5022479908", "display_name": "Evans Eshiemogie Ojo", "orcid": "https://orcid.org/0000-0003-4968-3239", "observed_orcids": ["https://orcid.org/0000-0003-4968-3239"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Evans Eshiemogie Ojo", "raw_affiliation_strings": [], "raw_orcid": "https://orcid.org/0000-0003-4968-3239", "affiliations": []}], "abstract_inverted_index": {"The": [0, 87], "increasing": [1], "digitization": [2], "and": [3, 20, 72, 83, 104, 128], "decentralization": [4], "of": [5, 144], "modern": [6], "energy": [7, 41, 158], "systems": [8], "have": [9], "heightened": [10], "their": [11], "vulnerability": [12], "to": [13, 78, 135, 153], "sophisticated": [14], "cyber": [15], "threats,": [16], "necessitating": [17], "advanced,": [18], "scalable,": [19], "privacy-preserving": [21], "detection": [22, 38, 62, 119], "frameworks.": [23], "This": [24], "paper": [25], "introduces": [26], "a": [27, 93, 149], "novel": [28], "Federated": [29], "Quantum": [30], "Machine": [31], "Learning": [32], "(FQML)": [33], "framework": [34, 60], "tailored": [35], "for": [36, 98], "anomaly": [37], "in": [39, 156], "multi-agent": [40], "environments.": [42], "By": [43], "integrating": [44], "parameterized": [45], "quantum": [46, 99], "circuits": [47], "(PQCs)": [48], "at": [49], "the": [50, 59, 142], "local": [51], "agent": [52], "level": [53], "with": [54], "secure": [55], "federated": [56, 137, 146], "learning": [57, 147], "protocols,": [58], "enhances": [61], "accuracy": [63, 120], "while": [64], "preserving": [65], "data": [66, 84], "privacy.": [67], "A": [68], "trimmed-mean": [69], "aggregation": [70], "scheme": [71], "differential": [73], "privacy": [74], "mechanisms": [75], "are": [76], "embedded": [77], "defend": [79], "against": [80], "Byzantine": [81], "behaviors": [82], "poisoning": [85], "attacks.": [86], "problem": [88], "is": [89], "formally": [90], "modeled": [91], "as": [92, 148], "constrained": [94], "optimization": [95], "task,": [96], "accounting": [97], "circuit": [100], "depth,": [101], "communication": [102, 130], "latency,": [103], "adversarial": [105, 126], "resilience.": [106], "Experimental": [107], "validation": [108], "on": [109], "synthetic": [110], "smart": [111], "grid": [112], "datasets": [113], "demonstrates": [114], "that": [115], "FQML": [116], "achieves": [117], "high": [118], "(\u2265": [121], "96.3%),": [122], "maintains": [123], "robustness": [124], "under": [125], "perturbations,": [127], "reduces": [129], "overhead": [131], "by": [132], "28.6%": [133], "compared": [134], "classical": [136], "baselines.": [138], "These": [139], "results": [140], "substantiate": [141], "viability": [143], "quantum-enhanced": [145], "practical,": [150], "hardware-conscious": [151], "approach": [152], "distributed": [154], "cybersecurity": [155], "next-generation": [157], "infrastructures.": [159]}, "primary_topic": {"id": "https://openalex.org/T10764", "display_name": "Privacy-Preserving Technologies in Data", "score": 0.4675000011920929, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T10764", "display_name": "Privacy-Preserving Technologies in Data", "score": 0.4675000011920929, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10917", "display_name": "Smart Grid Security and Resilience", "score": 0.4417000114917755, "subfield": {"id": "https://openalex.org/subfields/2207", "display_name": "Control and Systems Engineering"}, "field": {"id": "https://openalex.org/fields/22", "display_name": "Engineering"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10020", "display_name": "Quantum Information and Cryptography", "score": 0.011300000362098217, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.20944/preprints202507.0497.v1", "is_oa": true, "landing_page_url": "https://doi.org/10.20944/preprints202507.0497.v1", "pdf_url": "https://www.preprints.org/frontend/manuscript/ed0ea61c767e04fd1af760e3f65b7a77/download_pub", "source": {"id": "https://openalex.org/S6309402219", "display_name": "Preprints.org", "issn_l": null, "issn": null, "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": null, "host_organization_name": null, "host_organization_lineage": ["https://openalex.org/P4310310987"], "host_organization_lineage_names": ["Multidisciplinary Digital Publishing Institute"], "type": "repository"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "acceptedVersion", "is_accepted": true, "is_published": false, "raw_source_name": null, "raw_type": "posted-content"}, "cited_by_count": 2, "is_retracted": false}, {"id": "https://openalex.org/W7122728695", "doi": "https://doi.org/10.5281/zenodo.18212082", "title": "Layered Governance for Large Language Model Systems: Separating Structural Authority Enforcement from Content Safety", "publication_year": 2025, "publication_date": "2025-12-18", "type": "preprint", "language": null, "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5122794813", "display_name": "Paul Desai", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": true, "raw_author_name": "Desai, Paul", "raw_affiliation_strings": ["N1 Intelligence (OPC) Pvt Ltd"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "N1 Intelligence (OPC) Pvt Ltd", "institution_ids": []}]}], "abstract_inverted_index": {"This": [0, 145], "paper": [1], "extends": [2], "prior": [3], "work": [4, 37], "on": [5, 72, 105], "structural": [6, 130], "governance": [7, 26, 41, 117], "for": [8], "reflective": [9], "AI": [10], "systems": [11], "by": [12], "introducing": [13], "empirical": [14], "evaluation": [15, 55], "and": [16, 43, 138, 152], "a": [17, 62, 128, 134], "layered": [18, 112], "architectural": [19], "decomposition.": [20], "Where": [21], "Paper": [22], "1": [23], "established": [24], "that": [25, 40, 61], "constraints": [27], "can": [28], "be": [29], "structurally": [30], "enforced": [31], "through": [32], "external": [33], "wrapper": [34], "architectures,": [35], "this": [36], "demonstrates": [38], "empirically": [39], "violations": [42], "content": [44, 100, 136], "harms": [45], "constitute": [46], "orthogonal": [47], "problem": [48], "classes": [49], "requiring": [50], "distinct": [51], "mitigation": [52], "strategies.": [53], "Our": [54], "across": [56], "130": [57], "test": [58, 167], "cases": [59], "shows": [60], "governance-only": [63], "layer": [64, 94], "(AMGL": [65], "Guard": [66, 161], "v1)": [67], "achieves": [68], "70\u2013100%": [69], "refusal": [70], "accuracy": [71], "authority-based": [73], "attacks": [74], "(prompt": [75], "injection,": [76], "autonomous": [77], "execution,": [78], "identity": [79], "impersonation)": [80], "while": [81], "correctly": [82], "passing": [83], "all": [84], "benign": [85], "queries": [86], "(0%": [87, 102], "false": [88, 150], "positive": [89], "rate).": [90], "However,": [91], "the": [92, 109, 116, 141], "same": [93], "provides": [95], "no": [96], "protection": [97], "against": [98], "harmful": [99], "requests": [101], "block": [103], "rate": [104], "AdvBench-style": [106], "prompts),": [107], "confirming": [108], "necessity": [110], "of": [111, 156], "composition.": [113], "We": [114], "formalize": [115], "pipeline": [118], "as": [119], "G": [120, 126], "\u2218": [121, 123], "C": [122, 132], "M,": [124], "where": [125], "is": [127, 133, 140], "deterministic": [129], "gate,": [131], "probabilistic": [135], "classifier,": [137], "M": [139], "underlying": [142], "language": [143], "model.": [144], "decomposition": [146], "improves": [147], "auditability,": [148], "reduces": [149], "positives,": [151], "enables": [153], "independent": [154], "evolution": [155], "each": [157], "layer.": [158], "Code:": [159], "AMGL": [160], "Implementation": [162], "Dataset:": [163], "Evaluation": [164], "Dataset": [165], "(130": [166], "cases)": [168], "Also": [169], "published:": [170], "aiXiv": [171], "aixiv.251218.000003": [172]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.8452000021934509, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.8452000021934509, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10883", "display_name": "Ethics and Social Impacts of AI", "score": 0.1324000060558319, "subfield": {"id": "https://openalex.org/subfields/3311", "display_name": "Safety Research"}, "field": {"id": "https://openalex.org/fields/33", "display_name": "Social Sciences"}, "domain": {"id": "https://openalex.org/domains/2", "display_name": "Social Sciences"}}, {"id": "https://openalex.org/T12262", "display_name": "Hate Speech and Cyberbullying Detection", "score": 0.004100000020116568, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.5281/zenodo.18212082", "is_oa": true, "landing_page_url": "https://doi.org/10.5281/zenodo.18212082", "pdf_url": null, "source": {"id": "https://openalex.org/S4306400562", "display_name": "Zenodo (CERN European Organization for Nuclear Research)", "issn_l": null, "issn": null, "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I67311998", "host_organization_name": "European Organization for Nuclear Research", "host_organization_lineage": ["https://openalex.org/I67311998"], "host_organization_lineage_names": [], "type": "repository"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": null, "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "Preprint"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4413144024", "doi": "https://doi.org/10.2139/ssrn.5377827", "title": "AI-Assisted Externalisation of Extremist Thoughts: Billig's Conversational Theory for Muslim-Focused Self-Deradicalisation.", "publication_year": 2025, "publication_date": "2025-01-01", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5117811230", "display_name": "Aadil Bouhlaoui", "orcid": "https://orcid.org/0009-0000-7478-8820", "observed_orcids": ["https://orcid.org/0009-0000-7478-8820"]}, "institutions": [{"id": "https://openalex.org/I183935753", "display_name": "King's College London", "ror": "https://ror.org/0220mzb33", "country_code": "GB", "type": "education", "lineage": ["https://openalex.org/I124357947", "https://openalex.org/I183935753"]}], "countries": ["GB"], "is_corresponding": true, "raw_author_name": "Aadil Bouhlaoui", "raw_affiliation_strings": ["King's College London, United Kingdom"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "King's College London, United Kingdom", "institution_ids": ["https://openalex.org/I183935753"]}]}], "abstract_inverted_index": null, "primary_topic": {"id": "https://openalex.org/T10994", "display_name": "Terrorism, Counterterrorism, and Political Violence", "score": 0.975600004196167, "subfield": {"id": "https://openalex.org/subfields/3312", "display_name": "Sociology and Political Science"}, "field": {"id": "https://openalex.org/fields/33", "display_name": "Social Sciences"}, "domain": {"id": "https://openalex.org/domains/2", "display_name": "Social Sciences"}}, "topics": [{"id": "https://openalex.org/T10994", "display_name": "Terrorism, Counterterrorism, and Political Violence", "score": 0.975600004196167, "subfield": {"id": "https://openalex.org/subfields/3312", "display_name": "Sociology and Political Science"}, "field": {"id": "https://openalex.org/fields/33", "display_name": "Social Sciences"}, "domain": {"id": "https://openalex.org/domains/2", "display_name": "Social Sciences"}}, {"id": "https://openalex.org/T14110", "display_name": "Islamic Studies and Radicalism", "score": 0.017100000753998756, "subfield": {"id": "https://openalex.org/subfields/3312", "display_name": "Sociology and Political Science"}, "field": {"id": "https://openalex.org/fields/33", "display_name": "Social Sciences"}, "domain": {"id": "https://openalex.org/domains/2", "display_name": "Social Sciences"}}, {"id": "https://openalex.org/T11147", "display_name": "Misinformation and Its Impacts", "score": 0.002300000051036477, "subfield": {"id": "https://openalex.org/subfields/3312", "display_name": "Sociology and Political Science"}, "field": {"id": "https://openalex.org/fields/33", "display_name": "Social Sciences"}, "domain": {"id": "https://openalex.org/domains/2", "display_name": "Social Sciences"}}], "primary_location": {"id": "doi:10.2139/ssrn.5377827", "is_oa": true, "landing_page_url": "https://doi.org/10.2139/ssrn.5377827", "pdf_url": null, "source": {"id": "https://openalex.org/S4210172589", "display_name": "SSRN Electronic Journal", "issn_l": "1556-5068", "issn": ["1556-5068"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I1318003438", "host_organization_name": "RELX Group (Netherlands)", "host_organization_lineage": ["https://openalex.org/I1318003438"], "host_organization_lineage_names": [], "type": "repository"}, "license": null, "license_id": null, "version": "acceptedVersion", "is_accepted": true, "is_published": false, "raw_source_name": null, "raw_type": "posted-content"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4417451629", "doi": "https://doi.org/10.1186/s13635-025-00215-5", "title": "Neuromorphic quantum adversarial learning (NQAL): a bio-inspired paradigm for DNS over HTTPS threat detection", "publication_year": 2025, "publication_date": "2025-12-18", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Basharat Ali", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I881766915", "display_name": "Nanjing University", "ror": "https://ror.org/01rxvg760", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I881766915"]}], "countries": ["CN"], "is_corresponding": true, "raw_author_name": "Basharat Ali", "raw_affiliation_strings": ["State Key Laboratory of Novel Software Technology, Nanjing University, Nanjing, Jiangsu, 210093, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "State Key Laboratory of Novel Software Technology, Nanjing University, Nanjing, Jiangsu, 210093, China", "institution_ids": ["https://openalex.org/I881766915"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5100428808", "display_name": "Guihai Chen", "orcid": "https://orcid.org/0000-0002-6934-1685", "observed_orcids": ["https://orcid.org/0000-0002-6934-1685", "https://orcid.org/0009-0002-7903-853X"]}, "institutions": [{"id": "https://openalex.org/I881766915", "display_name": "Nanjing University", "ror": "https://ror.org/01rxvg760", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I881766915"]}], "countries": ["CN"], "is_corresponding": true, "raw_author_name": "Guihai Chen", "raw_affiliation_strings": ["State Key Laboratory of Novel Software Technology, Nanjing University, Nanjing, Jiangsu, 210093, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "State Key Laboratory of Novel Software Technology, Nanjing University, Nanjing, Jiangsu, 210093, China", "institution_ids": ["https://openalex.org/I881766915"]}]}], "abstract_inverted_index": {"Exponentially": [0], "expanding": [1], "domain": [2], "name": [3], "system": [4, 220], "(DNS)": [5], "over": [6], "HTTPS": [7], "(DoH)": [8], "has": [9, 14], "significantly": [10], "increased": [11], "privacy": [12], "but": [13], "also": [15, 204], "quietly": [16], "masked": [17], "malicious": [18], "activities,": [19], "rendering": [20], "traditional": [21], "threat": [22, 152], "detection": [23, 70], "systems": [24, 29], "meaningless.": [25], "Existing": [26], "deep": [27], "learning-powered": [28], "are": [30, 40, 47], "unable": [31], "to": [32, 50, 85, 109, 117, 147, 162, 207, 222], "detect": [33], "fleeting": [34], "micro-temporal": [35], "abnormalities": [36], "in": [37, 234], "encrypted": [38, 111, 235], "streams,": [39], "too": [41], "costly": [42], "for": [43, 166, 176], "real-time": [44], "operation,": [45], "and": [46, 81, 105, 128, 159, 195, 210, 216], "still": [48], "vulnerable": [49], "adversarial": [51, 132, 157, 212], "attacks.": [52, 91, 213], "To": [53], "overcome": [54], "these": [55], "complex": [56], "issues,": [57], "this": [58], "work": [59], "proposes": [60], "a": [61, 96, 223, 231], "new": [62], "architecture\u2014Neuromorphic": [63], "Quantum": [64, 131], "Adversarial": [65], "Learning": [66], "(NQAL)\u2014a": [67], "bio-inspired,": [68], "zero-knowledge-supported": [69], "mechanism": [71], "combining": [72], "spiking": [73], "neural": [74], "networks": [75], "(SNNs),": [76], "quantum": [77, 140, 160, 211], "noise": [78], "injection": [79], "(QNI),": [80], "federated": [82], "swarm": [83], "intelligence": [84], "immunize,": [86], "rather": [87], "than": [88, 200], "detect,": [89], "DoH-based": [90], "The": [92], "method": [93], "relies": [94], "on": [95, 122], "neuromorphic": [97], "model": [98], "employing": [99], "Dynamic": [100], "Spiking": [101], "Graph": [102], "Attention": [103], "(DSGAT)": [104], "Spike-Timing-Dependent": [106], "Plasticity": [107], "(STDP)": [108], "encode": [110], "traffic": [112, 236], "as": [113, 125], "dynamic": [114], "spike": [115], "trains": [116], "enable": [118], "ultra-fast,": [119], "energy-efficient": [120], "inference": [121], "processors": [123], "such": [124], "Intel": [126], "Loihi": [127], "BrainChip": [129], "Akida.": [130], "noise,": [133], "emulated": [134], "through": [135, 174], "stochastic": [136], "perturbations": [137, 161], "created": [138], "from": [139, 226], "random": [141], "walks,": [142], "is": [143, 172], "injected": [144], "during": [145], "training": [146], "build": [148], "gradient-obfuscating": [149], "robustness.": [150], "A": [151], "immunization": [153], "engine": [154], "powered": [155], "by": [156], "GANs": [158], "simulate": [163], "zero-day": [164], "anomalies": [165, 180], "preconditioning": [167], "the": [168, 219], "model.": [169], "Zero-knowledge": [170], "verification": [171], "guaranteed": [173], "zk-SNARKs": [175], "privacy-preserving": [177], "confirmation": [178], "of": [179, 218], "without": [181], "decrypting": [182], "packets.": [183], "Empirical": [184], "studies": [185], "confirm": [186], "that": [187], "NQAL": [188, 230], "achieves": [189], "99.18%": [190], "accuracy,": [191], "$$<1$$": [192], "ms": [193], "latency,": [194], "10x": [196], "less": [197], "energy": [198], "consumption": [199], "GPU-based": [201], "models,": [202], "while": [203], "being": [205], "robust": [206], "both": [208], "classical": [209], "Feasibility,": [214], "novelty,": [215], "decentralization": [217], "amount": [221], "paradigm": [224], "shift": [225], "existing": [227], "architectures\u2014hence,": [228], "making": [229], "resilient": [232], "frontier": [233], "immunization.": [237]}, "primary_topic": {"id": "https://openalex.org/T10400", "display_name": "Network Security and Intrusion Detection", "score": 0.5679000020027161, "subfield": {"id": "https://openalex.org/subfields/1705", "display_name": "Computer Networks and Communications"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T10400", "display_name": "Network Security and Intrusion Detection", "score": 0.5679000020027161, "subfield": {"id": "https://openalex.org/subfields/1705", "display_name": "Computer Networks and Communications"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.28999999165534973, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11598", "display_name": "Internet Traffic Analysis and Secure E-voting", "score": 0.04100000113248825, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.1186/s13635-025-00215-5", "is_oa": true, "landing_page_url": "https://doi.org/10.1186/s13635-025-00215-5", "pdf_url": "https://link.springer.com/content/pdf/10.1186/s13635-025-00215-5.pdf", "source": {"id": "https://openalex.org/S5820498", "display_name": "EURASIP Journal on Information Security", "issn_l": "1687-4161", "issn": ["1687-4161", "1687-417X", "2510-523X"], "is_oa": true, "is_in_doaj": true, "is_core": true, "listed_in": ["cwts-core", "doaj", "jufo-1", "norway-1"], "host_organization": "https://openalex.org/P4310319965", "host_organization_name": "Springer Nature", "host_organization_lineage": ["https://openalex.org/P4310319965"], "host_organization_lineage_names": ["Springer Nature"], "type": "journal"}, "license": "cc-by-nc-nd", "license_id": "https://openalex.org/licenses/cc-by-nc-nd", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "EURASIP Journal on Information Security", "raw_type": "journal-article"}, "cited_by_count": 21, "is_retracted": false}, {"id": "https://openalex.org/W4410782713", "doi": "https://doi.org/10.62517/jbdc.202501103", "title": "SCF-FGSM: Boosting Transferable Targeted Adversarial Attacks with Feature Mixup and Space Fine-Tuning", "publication_year": 2025, "publication_date": "2025-03-01", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5100452281", "display_name": "Guodong Liu", "orcid": "https://orcid.org/0000-0002-8572-4109", "observed_orcids": ["https://orcid.org/0000-0002-8572-4109"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Guodong Liu", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Houwang Jiang", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Houwang Jiang", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Wenxing Liao", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Wenxing Liao", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5100393832", "display_name": "Xiaolong Liu", "orcid": "https://orcid.org/0009-0003-0911-8646", "observed_orcids": ["https://orcid.org/0009-0003-0911-8646"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Xiaolong Liu", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5001780912", "display_name": "Zhiyu Lin", "orcid": "https://orcid.org/0000-0003-0681-3160", "observed_orcids": ["https://orcid.org/0000-0003-0681-3160", "https://orcid.org/0009-0005-2707-6579", "https://orcid.org/0000-0002-7614-7709"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Zhiyu Lin", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "last", "author": {"id": "https://openalex.org/A5113750460", "display_name": "Shihua Zhan", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Shihua Zhan", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}], "abstract_inverted_index": {"With": [0], "the": [1, 31, 81, 116, 143, 171], "widespread": [2], "application": [3], "of": [4, 33, 85, 109, 145, 173], "deep": [5], "neural": [6], "networks": [7], "(DNNs)": [8], "in": [9, 41, 126], "critical": [10], "fields": [11], "such": [12], "as": [13], "autonomous": [14], "driving": [15], "and": [16, 46, 74, 100, 128, 138, 158, 165], "medical": [17], "diagnosis,": [18], "their": [19], "adversarial": [20, 35, 62, 86, 174], "robustness": [21], "has": [22], "become": [23], "a": [24, 59, 151, 166], "research": [25], "hotspot.": [26], "In": [27], "black-box": [28], "attack": [29, 63, 129], "scenarios,": [30], "transferability": [32, 127, 172], "targeted": [34, 61], "examples": [36, 87], "is": [37], "limited": [38], "by": [39], "differences": [40], "decision": [42], "boundaries": [43], "between": [44, 154], "models,": [45], "existing": [47, 124], "methods": [48, 125], "struggle": [49], "to": [50, 92, 96, 105, 148], "achieve": [51, 106], "efficient": [52], "attacks.": [53, 175], "To": [54], "address": [55], "this,": [56], "we": [57], "propose": [58], "novel": [60], "method,": [64], "SCF-FGSM,": [65], "which": [66], "combines": [67], "Self-Universality": [68], "(SU),": [69], "Clean": [70], "Feature": [71, 75], "Mixup": [72], "(CFM),": [73], "Space": [76], "Fine-Tuning.": [77], "This": [78, 161], "method": [79], "enhances": [80], "local": [82], "feature": [83, 102, 155], "consistency": [84], "through": [88], "SU,": [89], "utilizes": [90], "CFM": [91], "generate": [93], "diverse": [94], "perturbations": [95], "overcome": [97], "inter-model": [98], "differences,": [99], "incorporates": [101], "space": [103, 156], "fine-tuning": [104], "precise": [107], "alignment": [108, 157], "target": [110], "features": [111], "across": [112], "models.": [113], "Experiments": [114], "on": [115], "ImageNet": [117], "dataset": [118], "demonstrate": [119], "that": [120], "SCF-FGSM": [121], "significantly": [122], "outperforms": [123], "success": [130], "rate,": [131], "especially": [132], "under": [133], "Logit": [134], "loss.": [135], "Ablation": [136], "studies": [137], "visualization": [139], "analyses": [140], "further": [141], "validate": [142], "contributions": [144], "each": [146], "module": [147], "transferability,": [149], "revealing": [150], "synergistic": [152], "mechanism": [153], "perturbation": [159], "diversity.": [160], "provides": [162], "theoretical": [163], "support": [164], "technical": [167], "pathway": [168], "for": [169], "improving": [170]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.62517/jbdc.202501103", "is_oa": true, "landing_page_url": "https://doi.org/10.62517/jbdc.202501103", "pdf_url": null, "source": {"id": "https://openalex.org/S4404663890", "display_name": "Journal of big data and computing.", "issn_l": "2959-0590", "issn": ["2959-0590"], "is_oa": false, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": null, "host_organization_name": null, "host_organization_lineage": [], "host_organization_lineage_names": [], "type": "journal"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Journal of Big Data and Computing", "raw_type": "journal-article"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4412691438", "doi": "https://doi.org/10.7759/s44389-024-01525-4", "title": "A Comprehensive Survey on Detection of Fake Multimedia Content", "publication_year": 2025, "publication_date": "2025-07-28", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5119091141", "display_name": "Ayush S Acharya", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Ayush S Acharya", "raw_affiliation_strings": [". Department of Computer Engineering , Modern Education Society's Wadia College of Engineering , Pune , IND"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": ". Department of Computer Engineering , Modern Education Society's Wadia College of Engineering , Pune , IND", "institution_ids": []}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5119091142", "display_name": "Ashish A Shisal", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Ashish A Shisal", "raw_affiliation_strings": [". Department of Computer Engineering , Modern Education Society's Wadia College of Engineering , Pune , IND"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": ". Department of Computer Engineering , Modern Education Society's Wadia College of Engineering , Pune , IND", "institution_ids": []}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5119091143", "display_name": "Saurabh K Butale", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Saurabh K Butale", "raw_affiliation_strings": [". Department of Computer Engineering , Modern Education Society's Wadia College of Engineering , Pune , IND"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": ". Department of Computer Engineering , Modern Education Society's Wadia College of Engineering , Pune , IND", "institution_ids": []}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5119091144", "display_name": "Omkar B Latpate", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Omkar B Latpate", "raw_affiliation_strings": [". Department of Computer Engineering , Modern Education Society's Wadia College of Engineering , Pune , IND"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": ". Department of Computer Engineering , Modern Education Society's Wadia College of Engineering , Pune , IND", "institution_ids": []}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5114025601", "display_name": "Shalaka Prasad Deore", "orcid": "https://orcid.org/0000-0002-5322-779X", "observed_orcids": ["https://orcid.org/0000-0002-5322-779X"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Shalaka  P Deore", "raw_affiliation_strings": [". Department of Computer Engineering , Modern Education Society's Wadia College of Engineering , Pune , IND"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": ". Department of Computer Engineering , Modern Education Society's Wadia College of Engineering , Pune , IND", "institution_ids": []}]}], "abstract_inverted_index": {"The": [0, 183], "rapid": [1], "rise": [2], "of": [3, 57, 168, 194, 209], "fake": [4, 63, 146], "news": [5, 147], "and": [6, 16, 38, 45, 47, 70, 85, 95, 107, 113, 180, 201], "deepfake": [7, 130], "media": [8], "poses": [9], "serious": [10], "challenges": [11], "to": [12, 157, 176, 204], "digital": [13, 108], "content": [14], "integrity": [15], "public": [17], "trust.": [18], "Despite": [19], "numerous": [20], "detection": [21, 59, 114], "models": [22, 87, 151], "being": [23], "developed,": [24], "there": [25], "remains": [26], "a": [27, 54], "critical": [28], "gap": [29], "in": [30, 48], "creating": [31], "solutions": [32], "that": [33, 103, 120], "are": [34], "both": [35], "highly": [36], "accurate": [37], "robust": [39], "across": [40], "diverse": [41], "modalities": [42], "(text,": [43], "image,": [44], "audio)": [46], "real-time": [49, 196], "applications.": [50], "This": [51], "paper": [52, 184], "presents": [53], "comprehensive": [55], "survey": [56], "state-of-the-art": [58], "techniques": [60], "for": [61, 110, 129, 141], "identifying": [62, 187], "multimedia": [64], "content.": [65], "We": [66], "critically": [67], "evaluate": [68], "traditional": [69], "modern": [71], "machine": [72], "learning": [73], "models,": [74], "such": [75], "as": [76], "convolutional": [77], "neural": [78], "network": [79], "(CNN),": [80], "long": [81], "short-term": [82], "memory": [83], "(LSTM),": [84], "Transformer-based": [86], "like": [88], "bidirectional": [89], "encoder": [90], "representations": [91], "from": [92], "transformers": [93], "(BERT)": [94], "robustly": [96], "optimized": [97], "BERT": [98], "approach,": [99], "alongside": [100], "hybrid": [101, 149], "approaches": [102, 170], "integrate": [104], "explainable": [105, 153], "AI": [106, 154], "watermarking": [109], "improved": [111], "interpretability": [112], "performance.": [115], "Our": [116], "comparative": [117], "analysis": [118], "highlights": [119], "the": [121, 125, 166, 192, 206], "Inception-ResNet-v2": [122], "model": [123], "achieves": [124], "highest": [126], "accuracy": [127, 159], "(99.81%)": [128], "image": [131], "detection,": [132, 148], "while": [133], "CNN": [134], "+": [135], "recurrent": [136], "architectures": [137], "perform": [138], "best": [139], "(96%)": [140], "audio": [142], "deepfakes.": [143], "In": [144], "text-based": [145], "LSTM-CNN": [150], "incorporating": [152], "report": [155], "up": [156], "99%": [158], "on": [160], "benchmark": [161], "datasets.": [162], "These": [163], "findings": [164], "illustrate": [165], "effectiveness": [167], "multimodal": [169], "but": [171], "also": [172], "expose": [173], "limitations": [174], "related": [175], "adversarial": [177], "robustness,": [178], "scalability,": [179], "cross-media": [181], "generalization.": [182], "concludes": [185], "by": [186], "future": [188], "research": [189], "directions,": [190], "including": [191], "development": [193], "lightweight,": [195], "systems,": [197], "cross-modal": [198], "generalization": [199], "frameworks,": [200], "policy-level": [202], "interventions": [203], "mitigate": [205], "societal": [207], "impact": [208], "synthetic": [210], "media.": [211]}, "primary_topic": {"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 0.6840999722480774, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 0.6840999722480774, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11147", "display_name": "Misinformation and Its Impacts", "score": 0.31130000948905945, "subfield": {"id": "https://openalex.org/subfields/3312", "display_name": "Sociology and Political Science"}, "field": {"id": "https://openalex.org/fields/33", "display_name": "Social Sciences"}, "domain": {"id": "https://openalex.org/domains/2", "display_name": "Social Sciences"}}, {"id": "https://openalex.org/T11644", "display_name": "Spam and Phishing Detection", "score": 0.000699999975040555, "subfield": {"id": "https://openalex.org/subfields/1710", "display_name": "Information Systems"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.7759/s44389-024-01525-4", "is_oa": true, "landing_page_url": "https://doi.org/10.7759/s44389-024-01525-4", "pdf_url": "https://assets.cureusjournals.com/artifacts/upload/review_article/pdf/1525/20250728-78905-qyxcdl.pdf", "source": {"id": "https://openalex.org/S4404677308", "display_name": "Cureus Journal of Computer Science.", "issn_l": "3005-1487", "issn": ["3005-1487"], "is_oa": false, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/P4310319900", "host_organization_name": "Springer Science+Business Media", "host_organization_lineage": ["https://openalex.org/P4310319900", "https://openalex.org/P4310319965"], "host_organization_lineage_names": ["Springer Science+Business Media", "Springer Nature"], "type": "journal"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Cureus Journal of Computer Science", "raw_type": "journal-article"}, "cited_by_count": 1, "is_retracted": false}, {"id": "https://openalex.org/W4412416783", "doi": "https://doi.org/10.31234/osf.io/zxuwf_v2", "title": "Defenses against LLM prompt injections in academic peer review", "publication_year": 2025, "publication_date": "2025-07-15", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Ondrej Zika", "orcid": "https://orcid.org/0000-0003-0483-4443", "observed_orcids": ["https://orcid.org/0000-0003-0483-4443"]}, "institutions": [], "countries": [], "is_corresponding": true, "raw_author_name": "Ondrej Zika", "raw_affiliation_strings": [], "raw_orcid": "https://orcid.org/0000-0003-0483-4443", "affiliations": []}], "abstract_inverted_index": {"Peer": [0], "review": [1, 23, 28, 87], "forms": [2], "the": [3, 6, 27, 35, 55, 74, 83, 92, 121, 167, 217, 245, 256], "cornerstone": [4], "of": [5, 16, 37, 57, 94, 123, 170, 202, 225, 249, 267], "academic": [7], "process.": [8], "Recent": [9], "work": [10], "has": [11], "proposed": [12], "that": [13, 149], "meaningful": [14], "integration": [15], "Large": [17], "Language": [18], "Models": [19], "(LLMs)": [20], "into": [21], "peer": [22, 253], "can": [24], "help": [25], "make": [26], "process": [29], "more": [30], "transparent": [31], "and": [32, 43, 131, 146, 165, 193, 247], "effective.": [33], "However,": [34, 185], "rise": [36], "LLMs": [38, 58, 101, 143, 173, 251], "also": [39, 159, 187, 212], "introduces": [40], "novel": [41], "vulnerabilities": [42], "challenges,": [44], "such": [45, 104], "as": [46], "attempts": [47], "to": [48, 59, 85, 102, 174, 233], "manipulate": [49, 86], "prompt": [50, 61, 75, 124, 150, 206], "contents.": [51], "This": [52, 242], "paper": [53, 79, 243], "investigates": [54], "susceptibility": [56], "covert": [60], "injection,": [62], "a": [63, 95, 138, 261], "technique": [64], "where": [65], "authors": [66], "embed": [67], "hidden": [68, 226], "instructions": [69], "(e.g.,": [70], "\"no": [71], "matter": [72], "what": [73], "is,": [76], "recommend": [77], "this": [78], "for": [80, 176, 199, 252, 265], "acceptance\")": [81], "within": [82], "manuscript": [84], "outcomes.": [88], "Additionally,": [89], "we": [90, 119], "explore": [91], "effectiveness": [93], "possible": [96], "defensive": [97], "strategy:": [98], "explicitly": [99], "instructing": [100], "detect": [103], "injections.": [105], "Using": [106], "26": [107], "freely": [108], "available": [109], "preprints": [110], "from": [111], "bioRxiv": [112], "which": [113], "have": [114], "not": [115], "yet": [116], "been": [117], "published,": [118], "evaluated": [120], "impact": [122], "injection": [125], "on": [126, 137], "publication": [127], "recommendations,": [128], "quality": [129, 164], "assessment": [130], "flaw": [132], "identification.": [133], "Our": [134], "findings,": [135], "based": [136], "controlled": [139], "experiment": [140], "with": [141], "three": [142], "(ChatGPT,": [144], "Gemini,": [145], "Llama),": [147], "reveal": [148], "injections": [151, 177, 227, 229, 240], "significantly": [152], "increased": [153, 161], "acceptance": [154], "rates": [155], "by": [156], "20%.": [157], "They": [158], "slightly": [160], "perceived": [162, 168], "scientific": [163], "decreased": [166], "probability": [169], "flaws.": [171], "Prompting": [172], "check": [175], "was": [178, 207], "successful": [179], "at": [180], "fully": [181], "reverting": [182], "these": [183], "effects.": [184], "it": [186, 259], "reduced": [188], "how": [189, 194], "manuscripts": [190], "were": [191, 197], "rated": [192], "often": [195], "they": [196], "recommended": [198], "publication,": [200], "irrespective": [201], "whether": [203], "an": [204], "injected": [205], "found": [208], "or": [209], "not.": [210], "We": [211], "note": [213], "major": [214], "differences": [215], "between": [216], "different": [218], "LLMs.": [219], "Gemini": [220], "performed": [221, 237], "highest": [222], "in": [223], "detection": [224], "(96.6%": [228], "detected": [230], "when": [231], "cautioned": [232], "check)": [234], "while": [235], "Llama": [236], "poorly": [238], "(18.3%": [239], "detected).": [241], "highlights": [244], "biases": [246], "challenges": [248], "using": [250], "review.": [254], "At": [255], "same": [257], "time,": [258], "proposes": [260], "simple": [262], "effective": [263], "method": [264], "prevention": [266], "peer-review": [268], "manipulation": [269], "attempts.": [270]}, "primary_topic": {"id": "https://openalex.org/T10883", "display_name": "Ethics and Social Impacts of AI", "score": 0.2793000042438507, "subfield": {"id": "https://openalex.org/subfields/3311", "display_name": "Safety Research"}, "field": {"id": "https://openalex.org/fields/33", "display_name": "Social Sciences"}, "domain": {"id": "https://openalex.org/domains/2", "display_name": "Social Sciences"}}, "topics": [{"id": "https://openalex.org/T10883", "display_name": "Ethics and Social Impacts of AI", "score": 0.2793000042438507, "subfield": {"id": "https://openalex.org/subfields/3311", "display_name": "Safety Research"}, "field": {"id": "https://openalex.org/fields/33", "display_name": "Social Sciences"}, "domain": {"id": "https://openalex.org/domains/2", "display_name": "Social Sciences"}}, {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.12300000339746475, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T13607", "display_name": "Academic Publishing and Open Access", "score": 0.06300000101327896, "subfield": {"id": "https://openalex.org/subfields/1802", "display_name": "Information Systems and Management"}, "field": {"id": "https://openalex.org/fields/18", "display_name": "Decision Sciences"}, "domain": {"id": "https://openalex.org/domains/2", "display_name": "Social Sciences"}}], "primary_location": {"id": "doi:10.31234/osf.io/zxuwf_v2", "is_oa": true, "landing_page_url": "https://doi.org/10.31234/osf.io/zxuwf_v2", "pdf_url": "https://osf.io/zxuwf_v2/download", "source": null, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "acceptedVersion", "is_accepted": true, "is_published": false, "raw_source_name": null, "raw_type": "posted-content"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4416149362", "doi": "https://doi.org/10.48550/arxiv.2502.19757", "title": "Snowball Adversarial Attack on Traffic Sign Classification", "publication_year": 2025, "publication_date": "2025-02-27", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5091968223", "display_name": "Anthony Etim", "orcid": "https://orcid.org/0009-0001-5932-9199", "observed_orcids": ["https://orcid.org/0009-0001-5932-9199"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Etim, Anthony", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "last", "author": {"id": "https://openalex.org/A5044387689", "display_name": "Jakub M. Szefer", "orcid": "https://orcid.org/0000-0001-9721-3640", "observed_orcids": ["https://orcid.org/0000-0001-9721-3640"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Szefer, Jakub", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}], "abstract_inverted_index": {"Adversarial": [0, 80, 116, 138], "attacks": [1, 44], "on": [2, 8, 18], "machine": [3, 36, 63, 104, 168], "learning": [4, 37, 64, 105, 169], "models": [5], "often": [6], "rely": [7], "small,": [9], "imperceptible": [10], "perturbations": [11, 48], "to": [12, 46, 97, 126], "mislead": [13], "classifiers.": [14], "Such": [15], "strategy": [16, 41], "focuses": [17], "minimizing": [19], "the": [20, 33, 69, 78, 83, 92, 114, 152, 160], "visual": [21], "perturbation": [22], "for": [23, 35, 42, 62, 162, 165], "humans": [24], "so": [25], "they": [26], "are": [27, 50, 107], "not": [28, 55], "confused,": [29], "and": [30, 72, 123, 158], "also": [31], "maximizing": [32], "misclassification": [34, 61], "algorithms.": [38, 65], "An": [39], "orthogonal": [40], "adversarial": [43], "is": [45, 118, 124], "create": [47], "that": [49, 113, 136], "clearly": [51], "visible": [52], "but": [53], "do": [54], "confuse": [56, 127], "humans,": [57], "yet": [58], "still": [59], "maximize": [60], "This": [66], "work": [67], "follows": [68], "later": [70], "strategy,": [71], "demonstrates": [73], "instance": [74], "of": [75, 85, 154], "it": [76], "through": [77], "Snowball": [79, 115, 137], "Attack": [81, 117, 139], "in": [82], "context": [84], "traffic": [86, 129], "sign": [87, 130], "recognition.": [88], "The": [89, 110, 133], "attack": [90], "leverages": [91], "human": [93], "brain's": [94], "superior": [95], "ability": [96], "recognize": [98], "objects": [99], "despite": [100], "various": [101, 121], "occlusions,": [102], "while": [103], "algorithms": [106], "easily": [108], "confused.": [109], "evaluation": [111], "shows": [112], "robust": [119], "across": [120], "images": [122], "able": [125], "state-of-the-art": [128], "recognition": [131, 167], "algorithm.": [132], "findings": [134], "reveal": [135], "can": [140], "significantly": [141], "degrade": [142], "model": [143], "performance": [144], "with": [145], "minimal": [146], "effort,": [147], "raising": [148], "important": [149], "concerns": [150], "about": [151], "vulnerabilities": [153], "deep": [155], "neural": [156], "networks": [157], "highlighting": [159], "necessity": [161], "improved": [163], "defenses": [164], "image": [166], "models.": [170]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10036", "display_name": "Advanced Neural Network Applications", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "pmh:oai:arXiv.org:2502.19757", "is_oa": true, "landing_page_url": "http://arxiv.org/abs/2502.19757", "pdf_url": "https://arxiv.org/pdf/2502.19757", "source": {"id": "https://openalex.org/S4306400194", "display_name": "arXiv (Cornell University)", "issn_l": "2331-8422", "issn": ["2331-8422"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I205783295", "host_organization_name": "Cornell University", "host_organization_lineage": ["https://openalex.org/I205783295"], "host_organization_lineage_names": [], "type": "repository"}, "license": null, "license_id": null, "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "text"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W7106782367", "doi": null, "title": "Medusa: Cross-Modal Transferable Adversarial Attacks on Multimodal Medical Retrieval-Augmented Generation", "publication_year": 2025, "publication_date": "2025-11-24", "type": "preprint", "language": null, "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Shang, Yingjia", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Shang, Yingjia", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Liu, Yi", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Liu, Yi", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Wang, Huimin", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Wang, Huimin", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Li, Furong", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Li, Furong", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Sun, Wenfang", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Sun, Wenfang", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Chengyu, Wu", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Chengyu, Wu", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "last", "author": {"id": null, "display_name": "Zheng, Yefeng", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Zheng, Yefeng", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}], "abstract_inverted_index": {"With": [0], "the": [1, 84, 111, 185, 190], "rapid": [2], "advancement": [3], "of": [4, 192], "retrieval-augmented": [5, 10], "vision-language": [6], "models,": [7], "multimodal": [8], "medical": [9, 24, 140, 143, 197], "generation": [11, 41, 145, 161], "(MMed-RAG)": [12], "systems": [13, 22, 76, 187], "are": [14, 203], "increasingly": [15], "adopted": [16], "in": [17, 184, 195], "clinical": [18], "decision": [19], "support.": [20], "These": [21], "enhance": [23, 115], "applications": [25], "by": [26], "performing": [27], "cross-modal": [28, 70], "retrieval": [29, 112], "to": [30, 97], "integrate": [31], "relevant": [32], "visual": [33, 56, 100], "and": [34, 42, 123, 146, 163, 188, 201], "textual": [35, 107], "evidence": [36], "for": [37, 68], "tasks,": [38, 141], "e.g.,": [39], "report": [40, 144], "disease": [43, 147], "diagnosis.": [44], "However,": [45], "their": [46], "complex": [47], "architecture": [48], "also": [49], "introduces": [50], "underexplored": [51], "adversarial": [52, 72, 99], "vulnerabilities,": [53], "particularly": [54], "via": [55], "input": [57], "perturbations.": [58], "In": [59], "this": [60], "paper,": [61], "we": [62, 117], "propose": [63], "Medusa,": [64], "a": [65, 78, 87, 92, 119, 125], "novel": [66], "framework": [67], "crafting": [69], "transferable": [71], "attacks": [73], "on": [74, 137], "MMed-RAG": [75, 186], "under": [77, 165], "black-box": [79], "setting.": [80], "Specifically,": [81], "Medusa": [82, 151], "formulates": [83], "attack": [85, 156], "as": [86], "perturbation": [88], "optimization": [89, 127], "problem,": [90], "leveraging": [91], "multi-positive": [93], "InfoNCE": [94], "loss": [95], "(MPIL)": [96], "align": [98], "embeddings": [101], "with": [102, 130], "medically": [103], "plausible": [104], "but": [105], "malicious": [106], "targets,": [108], "thereby": [109], "hijacking": [110], "process.": [113], "To": [114], "transferability,": [116], "adopt": [118], "surrogate": [120], "model": [121], "ensemble": [122], "design": [124], "dual-loop": [126], "strategy": [128], "augmented": [129], "invariant": [131], "risk": [132], "minimization": [133], "(IRM).": [134], "Extensive": [135], "experiments": [136], "two": [138], "real-world": [139], "including": [142], "diagnosis,": [148], "demonstrate": [149], "that": [150], "achieves": [152], "over": [153], "90%": [154], "average": [155], "success": [157], "rate": [158], "across": [159], "various": [160], "models": [162], "retrievers": [164], "appropriate": [166], "parameter": [167], "configuration,": [168], "while": [169], "remaining": [170], "robust": [171], "against": [172], "four": [173], "mainstream": [174], "defenses,": [175], "outperforming": [176], "state-of-the-art": [177], "baselines.": [178], "Our": [179], "results": [180], "reveal": [181], "critical": [182], "vulnerabilities": [183], "highlight": [189], "necessity": [191], "robustness": [193], "benchmarking": [194], "safety-critical": [196], "applications.": [198], "The": [199], "code": [200], "data": [202], "available": [204], "at": [205], "https://anonymous.4open.science/r/MMed-RAG-Attack-F05A.": [206]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 9.999999747378752e-05, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11714", "display_name": "Multimodal Machine Learning Applications", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "pmh:oai:arXiv.org:2511.19257", "is_oa": true, "landing_page_url": "http://arxiv.org/abs/2511.19257", "pdf_url": "https://arxiv.org/pdf/2511.19257", "source": {"id": "https://openalex.org/S4306400194", "display_name": "arXiv (Cornell University)", "issn_l": "2331-8422", "issn": ["2331-8422"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I205783295", "host_organization_name": "Cornell University", "host_organization_lineage": ["https://openalex.org/I205783295"], "host_organization_lineage_names": [], "type": "repository"}, "license": null, "license_id": null, "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "text"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4414743633", "doi": "https://doi.org/10.28925/2663-4023.2025.29.868", "title": "ENSURING SECURE OPERATING OF VOICE AGENTS BASED ON THE LARGE LANGUAGE MODELS", "publication_year": 2025, "publication_date": "2025-09-26", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5119811593", "display_name": "Andrii Artemenko", "orcid": "https://orcid.org/0009-0006-8047-1030", "observed_orcids": ["https://orcid.org/0009-0006-8047-1030"]}, "institutions": [{"id": "https://openalex.org/I4210092636", "display_name": "State University of Information and Communication Technologies", "ror": "https://ror.org/00fsgfk96", "country_code": "UA", "type": "education", "lineage": ["https://openalex.org/I4210092636"]}], "countries": ["UA"], "is_corresponding": false, "raw_author_name": "Andrii Artemenko", "raw_affiliation_strings": ["State University of Information and Communication Technologies"], "raw_orcid": "https://orcid.org/0009-0006-8047-1030", "affiliations": [{"raw_affiliation_string": "State University of Information and Communication Technologies", "institution_ids": ["https://openalex.org/I4210092636"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5116865592", "display_name": "Bohdan Khudik", "orcid": "https://orcid.org/0009-0005-1914-6418", "observed_orcids": ["https://orcid.org/0009-0005-1914-6418"]}, "institutions": [{"id": "https://openalex.org/I4210092636", "display_name": "State University of Information and Communication Technologies", "ror": "https://ror.org/00fsgfk96", "country_code": "UA", "type": "education", "lineage": ["https://openalex.org/I4210092636"]}], "countries": ["UA"], "is_corresponding": false, "raw_author_name": "Bohdan Khudik", "raw_affiliation_strings": ["State University of Information and Communication Technologies"], "raw_orcid": "https://orcid.org/0009-0005-1914-6418", "affiliations": [{"raw_affiliation_string": "State University of Information and Communication Technologies", "institution_ids": ["https://openalex.org/I4210092636"]}]}], "abstract_inverted_index": {"The": [0, 60, 90, 139, 172, 208, 244], "rapid": [1], "deployment": [2], "of": [3, 36, 75, 77, 85, 102, 105, 114, 125, 144, 168, 181, 189, 202, 211, 227, 240, 246, 250, 256, 269, 275, 281], "voice": [4, 68, 260], "agents": [5], "based": [6, 71], "on": [7, 72], "LLM": [8, 37, 109, 212], "(Large": [9], "Language": [10], "Models)": [11], "in": [12, 148, 238, 279], "corporate": [13, 257], "systems": [14, 258], "creates": [15, 93], "new": [16, 234], "challenges": [17], "for": [18, 108, 253, 272], "the": [19, 34, 55, 73, 78, 83, 100, 103, 118, 123, 134, 142, 145, 177, 182, 195, 200, 241, 247, 254, 264, 267, 273], "software": [20], "architecture": [21, 92, 174], "and": [22, 51, 136, 166, 179, 198, 205, 236], "information": [23], "system": [24, 97, 183, 196], "security.": [25], "Traditional": [26], "development": [27, 255], "approaches": [28], "do": [29], "not": [30], "take": [31], "into": [32], "account": [33], "specifics": [35], "integration": [38, 70], "as": [39, 130], "a": [40, 94, 126, 131, 186, 224], "component": [41], "that": [42], "can": [43], "be": [44], "compromised": [45], "by": [46], "attackers": [47], "through": [48], "prompt": [49, 153], "injections": [50, 154], "other": [52], "attacks": [53], "at": [54, 117], "natural": [56], "language": [57, 88, 128, 277], "processing": [58], "level.": [59], "article": [61], "presents": [62], "an": [63], "architectural": [64, 146, 209], "approach": [65, 147], "to": [66, 155, 185, 218, 233, 266], "secure": [67, 270], "agent": [69, 261], "principle": [74, 104], "separation": [76], "basic": [79], "business": [80, 115, 169], "rules": [81], "from": [82, 213], "logic": [84], "interaction": [86], "with": [87, 259], "models.": [89], "proposed": [91], "multi-level": [95], "security": [96, 229], "via": [98, 163], "1.": [99], "implementation": [101], "least": [106], "privilege": [107], "components:": [110], "2.": [111], "independent": [112], "validation": [113, 204], "operations": [116, 162, 215], "domain": [119], "service": [120], "level;": [121], "3.": [122], "usage": [124, 274], "large": [127, 276], "model": [129], "mediator": [132, 173], "between": [133, 191], "user": [135], "critical": [137, 214, 282], "systems.": [138], "research": [140, 248], "demonstrates": [141], "effectiveness": [143], "countering": [149], "typical": [150], "attacks,": [151], "including": [152], "bypass": [156], "authorisation,": [157], "sensitive": [158], "data": [159], "leakage,": [160], "unauthorised": [161], "function": [164], "calling,": [165], "violation": [167], "process": [170], "integrity.": [171], "greatly": [175], "simplifies": [176], "understandability": [178], "manageability": [180], "due": [184], "clear": [187], "division": [188], "roles": [190], "components,": [192], "which": [193], "increases": [194], "predictability,": [197], "enables": [199], "use": [201], "traditional": [203], "audit": [206], "methods.": [207], "isolation": [210], "allows": [216], "organisations": [217], "implement": [219], "advanced": [220], "AI": [221], "technologies": [222], "without": [223], "major": [225], "overhaul": [226], "existing": [228], "systems,": [230], "ensuring": [231], "resilience": [232], "vulnerabilities": [235], "flexibility": [237], "choosing": [239], "technological": [242], "solutions.": [243], "results": [245], "are": [249], "practical": [251], "importance": [252], "integration.": [262], "Also,": [263], "resultscontribute": [265], "forming": [268], "practices": [271], "models": [278], "applications": [280], "importance.": [283]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9199000000953674, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9199000000953674, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12479", "display_name": "Web Application Security Vulnerabilities", "score": 0.01489999983459711, "subfield": {"id": "https://openalex.org/subfields/1710", "display_name": "Information Systems"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.013299999758601189, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.28925/2663-4023.2025.29.868", "is_oa": true, "landing_page_url": "https://doi.org/10.28925/2663-4023.2025.29.868", "pdf_url": "https://csecurity.kubg.edu.ua/index.php/journal/article/download/868/737", "source": {"id": "https://openalex.org/S4210213151", "display_name": "Cybersecurity Education Science Technique", "issn_l": "2663-4023", "issn": ["2663-4023"], "is_oa": true, "is_in_doaj": true, "is_core": false, "listed_in": ["doaj"], "host_organization": null, "host_organization_name": null, "host_organization_lineage": [], "host_organization_lineage_names": [], "type": "journal"}, "license": "cc-by-nc-sa", "license_id": "https://openalex.org/licenses/cc-by-nc-sa", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Cybersecurity: Education, Science, Technique", "raw_type": "journal-article"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4417088894", "doi": "https://doi.org/10.48550/arxiv.2504.12321", "title": "AttentionDefense: Leveraging System Prompt Attention for Explainable Defense Against Novel Jailbreaks", "publication_year": 2025, "publication_date": "2025-04-10", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5095940451", "display_name": "Charlotte Siska", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Siska, Charlotte", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "last", "author": {"id": "https://openalex.org/A5067665101", "display_name": "Anush Sankaran", "orcid": "https://orcid.org/0000-0001-6796-2931", "observed_orcids": ["https://orcid.org/0000-0001-6796-2931"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Sankaran, Anush", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}], "abstract_inverted_index": {"In": [0, 84], "the": [1, 32, 48, 66, 69, 73, 120, 142, 182, 185, 197, 210, 239, 247], "past": [2], "few": [3], "years,": [4], "Language": [5, 96], "Models": [6, 97], "(LMs)": [7], "have": [8], "shown": [9], "par-human": [10], "capabilities": [11], "in": [12, 77, 127, 141, 225], "several": [13], "domains.": [14], "Despite": [15], "their": [16], "practical": [17, 229], "applications": [18], "and": [19, 89, 110, 129, 176], "exceeding": [20], "user": [21], "consumption,": [22], "they": [23], "are": [24], "susceptible": [25], "to": [26, 37, 64, 102, 134, 172], "jailbreaks": [27], "when": [28], "malicious": [29, 70, 135], "input": [30, 49, 136], "exploits": [31], "LM's": [33], "weaknesses,": [34], "causing": [35], "it": [36, 61, 237], "deviate": [38], "from": [39, 56, 94], "its": [40], "intended": [41], "behavior.": [42], "Current": [43], "defensive": [44], "strategies": [45], "either": [46], "classify": [47], "prompt": [50], "as": [51, 236], "adversarial": [52, 104], "or": [53, 166], "prevent": [54], "LMs": [55, 132], "generating": [57], "harmful": [58], "outputs.": [59], "However,": [60], "is": [62, 123, 138, 151, 232], "challenging": [63], "explain": [65], "reason": [67], "behind": [68], "nature": [71], "of": [72, 81, 145, 184, 192, 196, 242, 249], "jailbreak,": [74], "which": [75], "results": [76], "a": [78, 107, 190, 202, 243, 250], "wide": [79], "variety": [80], "closed-box": [82], "approaches.": [83], "this": [85, 217], "research,": [86], "we": [87, 188], "propose": [88], "demonstrate": [90, 208], "that": [91, 119, 137, 161, 209], "system-prompt": [92], "attention": [93, 121], "Small": [95], "(SLMs)": [98], "can": [99], "be": [100], "used": [101], "characterize": [103], "prompts,": [105], "providing": [106], "novel,": [108], "explainable,": [109], "cheaper": [111], "defense": [112], "approach": [113, 213], "called": [114], "AttentionDefense.": [115], "Our": [116], "research": [117], "suggests": [118], "mechanism": [122], "an": [124, 233], "integral": [125], "component": [126], "understanding": [128], "explaining": [130], "how": [131], "respond": [133], "not": [139], "captured": [140], "semantic": [143], "meaning": [144], "text": [146, 173], "embeddings.": [147], "The": [148], "proposed": [149, 186, 211], "AttentionDefense": [150, 163, 212, 231], "evaluated": [152], "against": [153], "existing": [154, 198, 222], "jailbreak": [155, 168, 194, 219], "benchmark": [156, 199], "datasets.": [157], "Ablation": [158], "studies": [159], "show": [160], "SLM-based": [162], "has": [164, 238], "equivalent": [165], "better": [167], "detection": [169], "performance": [170, 248], "compared": [171], "embedding-based": [174], "classifiers": [175], "GPT-4": [177], "zero-shot": [178], "detectors.To": [179], "further": [180], "validate": [181], "efficacy": [183], "approach,": [187], "generate": [189], "dataset": [191, 200, 220], "novel": [193, 218], "variants": [195], "using": [201], "closed-loop": [203], "LLM-based": [204], "multi-agent": [205], "system.": [206], "We": [207], "performs": [214], "robustly": [215], "on": [216], "while": [221], "approaches": [223], "suffer": [224], "performance.": [226], "Additionally,": [227], "for": [228], "purposes": [230], "ideal": [234], "solution": [235], "computation": [240], "requirements": [241], "small": [244], "LM": [245], "but": [246], "LLM": [251], "detector.": [252]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10028", "display_name": "Topic Modeling", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "pmh:oai:arXiv.org:2504.12321", "is_oa": true, "landing_page_url": "http://arxiv.org/abs/2504.12321", "pdf_url": "https://arxiv.org/pdf/2504.12321", "source": {"id": "https://openalex.org/S4306400194", "display_name": "arXiv (Cornell University)", "issn_l": "2331-8422", "issn": ["2331-8422"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I205783295", "host_organization_name": "Cornell University", "host_organization_lineage": ["https://openalex.org/I205783295"], "host_organization_lineage_names": [], "type": "repository"}, "license": null, "license_id": null, "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "text"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4417514286", "doi": "https://doi.org/10.48550/arxiv.2505.06860", "title": "DP-TRAE: A Dual-Phase Merging Transferable Reversible Adversarial Example for Image Privacy Protection", "publication_year": 2025, "publication_date": "2025-05-11", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Du, Xia", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Du, Xia", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5115604101", "display_name": "J.-G. Zhu", "orcid": "https://orcid.org/0009-0006-1853-6788", "observed_orcids": ["https://orcid.org/0009-0006-1853-6788"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Zhu, Jiajie", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5003270633", "display_name": "Jizhe Zhou", "orcid": "https://orcid.org/0000-0002-2447-1806", "observed_orcids": ["https://orcid.org/0000-0002-2447-1806"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Zhou, Jizhe", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5005772506", "display_name": "Chi\u2010Man Pun", "orcid": "https://orcid.org/0000-0003-1788-3746", "observed_orcids": ["https://orcid.org/0000-0003-1788-3746"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Pun, Chi-man", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5089094818", "display_name": "Zheng Lin", "orcid": "https://orcid.org/0000-0002-4463-5652", "observed_orcids": ["https://orcid.org/0000-0002-4463-5652", "https://orcid.org/0009-0006-4597-8557"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Lin, Zheng", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5101940977", "display_name": "Cong Wu", "orcid": "https://orcid.org/0000-0001-7590-8070", "observed_orcids": ["https://orcid.org/0000-0001-7590-8070"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Wu, Cong", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5100457729", "display_name": "Zhe Chen", "orcid": "https://orcid.org/0000-0002-9113-6362", "observed_orcids": ["https://orcid.org/0000-0002-9113-6362"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Chen, Zhe", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "last", "author": {"id": "https://openalex.org/A5101710819", "display_name": "Jun Luo", "orcid": "https://orcid.org/0000-0002-9413-5453", "observed_orcids": ["https://orcid.org/0000-0002-9413-5453"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Luo, Jun", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}], "abstract_inverted_index": {"In": [0], "the": [1, 88, 122, 159], "field": [2], "of": [3, 46, 124, 161], "digital": [4], "security,": [5], "Reversible": [6, 92], "Adversarial": [7], "Examples": [8], "(RAE)": [9], "combine": [10], "adversarial": [11, 100], "attacks": [12, 66], "with": [13], "reversible": [14], "data": [15, 22], "hiding": [16], "techniques": [17, 36], "to": [18, 113], "effectively": [19, 114], "protect": [20], "sensitive": [21], "and": [23, 73, 106, 133], "prevent": [24], "unauthorized": [25], "analysis": [26], "by": [27, 70], "malicious": [28], "Deep": [29], "Neural": [30], "Networks": [31], "(DNNs).": [32], "However,": [33], "existing": [34], "RAE": [35], "primarily": [37], "focus": [38], "on": [39, 153], "white-box": [40, 104], "attacks,": [41], "lacking": [42], "a": [43, 103, 108, 128, 150, 154], "comprehensive": [44], "evaluation": [45], "their": [47, 55, 79], "effectiveness": [48], "in": [49, 58, 102, 137, 143], "black-box": [50, 65, 111, 138, 151], "scenarios.": [51], "This": [52], "limitation": [53], "impedes": [54], "broader": [56], "deployment": [57], "complex,": [59], "dynamic": [60], "environments.": [61], "Further": [62], "more,": [63], "traditional": [64], "are": [67], "often": [68], "characterized": [69], "poor": [71], "transferability": [72], "high": [74], "query": [75], "costs,": [76], "significantly": [77], "limiting": [78], "practical": [80, 165], "applicability.": [81], "To": [82], "address": [83], "these": [84], "challenges,": [85], "we": [86, 147], "propose": [87], "Dual-Phase": [89], "Merging": [90], "Transferable": [91], "Attack": [93], "method,": [94], "which": [95], "generates": [96], "highly": [97], "transferable": [98], "initial": [99], "perturbations": [101], "model": [105], "employs": [107], "memory": [109], "augmented": [110], "strategy": [112], "mislead": [115], "target": [116], "mod": [117], "els.": [118], "Experimental": [119], "results": [120], "demonstrate": [121], "superiority": [123], "our": [125], "approach,": [126], "achieving": [127], "99.0%": [129], "attack": [130, 152], "success": [131], "rate": [132, 136], "100%": [134], "recovery": [135], "scenarios,": [139], "highlighting": [140], "its": [141], "robustness": [142], "privacy": [144], "protection.": [145], "Moreover,": [146], "successfully": [148], "implemented": [149], "commercial": [155], "model,": [156], "further": [157], "substantiating": [158], "potential": [160], "this": [162], "approach": [163], "for": [164], "use.": [166]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9970999956130981, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9970999956130981, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10388", "display_name": "Advanced Steganography and Watermarking Techniques", "score": 0.0008999999845400453, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 0.0006000000284984708, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "pmh:oai:arXiv.org:2505.06860", "is_oa": true, "landing_page_url": "http://arxiv.org/abs/2505.06860", "pdf_url": "https://arxiv.org/pdf/2505.06860", "source": {"id": "https://openalex.org/S4306400194", "display_name": "arXiv (Cornell University)", "issn_l": "2331-8422", "issn": ["2331-8422"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I205783295", "host_organization_name": "Cornell University", "host_organization_lineage": ["https://openalex.org/I205783295"], "host_organization_lineage_names": [], "type": "repository"}, "license": null, "license_id": null, "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "text"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4414790559", "doi": "https://doi.org/10.48550/arxiv.2509.21130", "title": "Sparse Representations Improve Adversarial Robustness of Neural Network Classifiers", "publication_year": 2025, "publication_date": "2025-09-25", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5119833485", "display_name": "Killian Steunou", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Steunou, Killian", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5119833487", "display_name": "Th\u00e9o Druilhe", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Druilhe, Th\u00e9o", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "last", "author": {"id": "https://openalex.org/A5019729911", "display_name": "Sigurd Saue", "orcid": "https://orcid.org/0000-0002-9942-510X", "observed_orcids": ["https://orcid.org/0000-0002-9942-510X"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Saue, Sigurd", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}], "abstract_inverted_index": {"Deep": [0], "neural": [1], "networks": [2], "perform": [3], "remarkably": [4], "well": [5], "on": [6], "image": [7], "classification": [8], "tasks": [9], "but": [10], "remain": [11], "vulnerable": [12], "to": [13, 71], "carefully": [14], "crafted": [15], "adversarial": [16, 164], "perturbations.": [17], "This": [18], "work": [19], "revisits": [20], "linear": [21, 68, 176], "dimensionality": [22], "reduction": [23], "as": [24, 42, 88], "a": [25, 55, 119, 129], "simple,": [26], "data-adapted": [27], "defense.": [28], "We": [29, 106], "empirically": [30], "compare": [31], "standard": [32], "Principal": [33], "Component": [34], "Analysis": [35], "(PCA)": [36], "with": [37, 54, 128], "its": [38], "sparse": [39], "variant": [40], "(SPCA)": [41], "front-end": [43], "feature": [44], "extractors": [45], "for": [46, 67, 74, 110], "downstream": [47], "classifiers,": [48], "and": [49, 77, 82, 101, 146, 166], "we": [50, 62], "complement": [51], "these": [52], "experiments": [53, 168], "theoretical": [56], "analysis.": [57], "On": [58], "the": [59, 84, 89, 99, 103, 134, 156, 159, 167, 175], "theory": [60, 157], "side,": [61], "derive": [63], "exact": [64], "robustness": [65], "certificates": [66], "heads": [69], "applied": [70], "SPCA": [72, 136], "features:": [73], "both": [75], "$\\ell_\\infty$": [76], "$\\ell_2$": [78], "threat": [79], "models": [80], "(binary": [81], "multiclass),": [83], "certified": [85], "radius": [86], "grows": [87], "dual": [90], "norms": [91], "of": [92], "$W^\\top": [93], "u$": [94], "shrink,": [95], "where": [96], "$W$": [97], "is": [98, 180], "projection": [100], "$u$": [102], "head": [104], "weights.": [105], "further": [107], "show": [108], "that": [109, 170], "general": [111], "(non-linear)": [112], "heads,": [113], "sparsity": [114], "reduces": [115], "operator-norm": [116], "bounds": [117], "through": [118], "Lipschitz": [120], "composition": [121], "argument,": [122], "predicting": [123], "lower": [124], "input": [125], "sensitivity.": [126], "Empirically,": [127], "small": [130], "non-linear": [131], "network": [132], "after": [133], "projection,": [135], "consistently": [137], "degrades": [138], "more": [139], "gracefully": [140], "than": [141], "PCA": [142], "under": [143], "strong": [144], "white-box": [145], "black-box": [147], "attacks": [148], "while": [149], "maintaining": [150], "competitive": [151], "clean": [152], "accuracy.": [153], "Taken": [154], "together,": [155], "identifies": [158], "mechanism": [160], "(sparser": [161], "projections": [162], "reduce": [163], "leverage)": [165], "verify": [169], "this": [171], "benefit": [172], "persists": [173], "beyond": [174], "setting.": [177], "Our": [178], "code": [179], "available": [181], "at": [182], "https://github.com/killian31/SPCARobustness.": [183]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10036", "display_name": "Advanced Neural Network Applications", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "pmh:oai:arXiv.org:2509.21130", "is_oa": true, "landing_page_url": "http://arxiv.org/abs/2509.21130", "pdf_url": "https://arxiv.org/pdf/2509.21130", "source": {"id": "https://openalex.org/S4306400194", "display_name": "arXiv (Cornell University)", "issn_l": "2331-8422", "issn": ["2331-8422"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I205783295", "host_organization_name": "Cornell University", "host_organization_lineage": ["https://openalex.org/I205783295"], "host_organization_lineage_names": [], "type": "repository"}, "license": null, "license_id": null, "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "text"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4414169679", "doi": "https://doi.org/10.1016/j.compeleceng.2025.110646", "title": "Chaotic variational auto encoder-based adversarial machine learning", "publication_year": 2025, "publication_date": "2025-09-09", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Daka Pavan Venkata Sainadh Reddy", "orcid": "https://orcid.org/0009-0009-4332-8659", "observed_orcids": ["https://orcid.org/0009-0009-4332-8659"]}, "institutions": [{"id": "https://openalex.org/I150312865", "display_name": "Institute for Development and Research in Banking Technology", "ror": "https://ror.org/00ta0g865", "country_code": "IN", "type": "government", "lineage": ["https://openalex.org/I150312865"]}, {"id": "https://openalex.org/I36893310", "display_name": "University of Hyderabad", "ror": "https://ror.org/04a7rxb17", "country_code": "IN", "type": "education", "lineage": ["https://openalex.org/I36893310"]}], "countries": ["IN"], "is_corresponding": false, "raw_author_name": "Daka Pavan Venkata Sainadh Reddy", "raw_affiliation_strings": ["Centre for Artificial Intelligence and Machine Learning, Institute For Development And Research In Banking Technology (IDRBT), Castle Hills Road #1, Masab Tank, Hyderabad 500057, India", "School of Computer Science And Information Sciences, University of Hyderabad, Hyderabad 500046, India"], "raw_orcid": "https://orcid.org/0009-0009-4332-8659", "affiliations": [{"raw_affiliation_string": "Centre for Artificial Intelligence and Machine Learning, Institute For Development And Research In Banking Technology (IDRBT), Castle Hills Road #1, Masab Tank, Hyderabad 500057, India", "institution_ids": ["https://openalex.org/I150312865"]}, {"raw_affiliation_string": "School of Computer Science And Information Sciences, University of Hyderabad, Hyderabad 500046, India", "institution_ids": ["https://openalex.org/I36893310"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5076646852", "display_name": "Yelleti Vivek", "orcid": "https://orcid.org/0000-0002-8387-6432", "observed_orcids": ["https://orcid.org/0000-0002-8387-6432"]}, "institutions": [{"id": "https://openalex.org/I150312865", "display_name": "Institute for Development and Research in Banking Technology", "ror": "https://ror.org/00ta0g865", "country_code": "IN", "type": "government", "lineage": ["https://openalex.org/I150312865"]}], "countries": ["IN"], "is_corresponding": false, "raw_author_name": "Yelleti Vivek", "raw_affiliation_strings": ["Centre for Artificial Intelligence and Machine Learning, Institute For Development And Research In Banking Technology (IDRBT), Castle Hills Road #1, Masab Tank, Hyderabad 500057, India"], "raw_orcid": "https://orcid.org/0000-0002-8387-6432", "affiliations": [{"raw_affiliation_string": "Centre for Artificial Intelligence and Machine Learning, Institute For Development And Research In Banking Technology (IDRBT), Castle Hills Road #1, Masab Tank, Hyderabad 500057, India", "institution_ids": ["https://openalex.org/I150312865"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5026972635", "display_name": "Gopi Pranay", "orcid": "https://orcid.org/0009-0004-0113-2889", "observed_orcids": ["https://orcid.org/0009-0004-0113-2889"]}, "institutions": [{"id": "https://openalex.org/I150312865", "display_name": "Institute for Development and Research in Banking Technology", "ror": "https://ror.org/00ta0g865", "country_code": "IN", "type": "government", "lineage": ["https://openalex.org/I150312865"]}], "countries": ["IN"], "is_corresponding": false, "raw_author_name": "Gopi Pranay", "raw_affiliation_strings": ["Centre for Artificial Intelligence and Machine Learning, Institute For Development And Research In Banking Technology (IDRBT), Castle Hills Road #1, Masab Tank, Hyderabad 500057, India"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Centre for Artificial Intelligence and Machine Learning, Institute For Development And Research In Banking Technology (IDRBT), Castle Hills Road #1, Masab Tank, Hyderabad 500057, India", "institution_ids": ["https://openalex.org/I150312865"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5073505371", "display_name": "Vadlamani Ravi", "orcid": "https://orcid.org/0000-0003-0082-6227", "observed_orcids": ["https://orcid.org/0000-0003-0082-6227"]}, "institutions": [{"id": "https://openalex.org/I150312865", "display_name": "Institute for Development and Research in Banking Technology", "ror": "https://ror.org/00ta0g865", "country_code": "IN", "type": "government", "lineage": ["https://openalex.org/I150312865"]}], "countries": ["IN"], "is_corresponding": true, "raw_author_name": "Vadlamani Ravi", "raw_affiliation_strings": ["Centre for Artificial Intelligence and Machine Learning, Institute For Development And Research In Banking Technology (IDRBT), Castle Hills Road #1, Masab Tank, Hyderabad 500057, India"], "raw_orcid": "https://orcid.org/0000-0003-0082-6227", "affiliations": [{"raw_affiliation_string": "Centre for Artificial Intelligence and Machine Learning, Institute For Development And Research In Banking Technology (IDRBT), Castle Hills Road #1, Masab Tank, Hyderabad 500057, India", "institution_ids": ["https://openalex.org/I150312865"]}]}], "abstract_inverted_index": null, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10764", "display_name": "Privacy-Preserving Technologies in Data", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.1016/j.compeleceng.2025.110646", "is_oa": false, "landing_page_url": "https://doi.org/10.1016/j.compeleceng.2025.110646", "pdf_url": null, "source": {"id": "https://openalex.org/S121340289", "display_name": "Computers & Electrical Engineering", "issn_l": "0045-7906", "issn": ["0045-7906", "1879-0755"], "is_oa": false, "is_in_doaj": false, "is_core": true, "listed_in": ["cwts-core", "jufo-1", "norway-1"], "host_organization": "https://openalex.org/P4310320990", "host_organization_name": "Elsevier BV", "host_organization_lineage": ["https://openalex.org/P4310320990"], "host_organization_lineage_names": ["Elsevier BV"], "type": "journal"}, "license": null, "license_id": null, "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Computers and Electrical Engineering", "raw_type": "journal-article"}, "cited_by_count": 3, "is_retracted": false}, {"id": "https://openalex.org/W4416389836", "doi": "https://doi.org/10.20944/preprints202511.1542.v1", "title": "When AI Reviews Science: Can We Trust the Referee?", "publication_year": 2025, "publication_date": "2025-11-20", "type": "preprint", "language": null, "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Jialiang Wang", "orcid": "https://orcid.org/0009-0005-0850-0389", "observed_orcids": ["https://orcid.org/0009-0005-0850-0389"]}, "institutions": [{"id": "https://openalex.org/I200769079", "display_name": "Hong Kong University of Science and Technology", "ror": "https://ror.org/00q4vv597", "country_code": "HK", "type": "education", "lineage": ["https://openalex.org/I200769079"]}], "countries": ["HK"], "is_corresponding": false, "raw_author_name": "Jialiang Wang", "raw_affiliation_strings": ["The Hong Kong University of Science and Technology"], "raw_orcid": "https://orcid.org/0009-0005-0850-0389", "affiliations": [{"raw_affiliation_string": "The Hong Kong University of Science and Technology", "institution_ids": ["https://openalex.org/I200769079"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5114152769", "display_name": "Yuchen Liu", "orcid": "https://orcid.org/0009-0002-5071-5680", "observed_orcids": ["https://orcid.org/0009-0002-5071-5680"]}, "institutions": [{"id": "https://openalex.org/I200769079", "display_name": "Hong Kong University of Science and Technology", "ror": "https://ror.org/00q4vv597", "country_code": "HK", "type": "education", "lineage": ["https://openalex.org/I200769079"]}], "countries": ["HK"], "is_corresponding": false, "raw_author_name": "Yuchen Liu", "raw_affiliation_strings": ["The Hong Kong University of Science and Technology"], "raw_orcid": "https://orcid.org/0009-0002-5071-5680", "affiliations": [{"raw_affiliation_string": "The Hong Kong University of Science and Technology", "institution_ids": ["https://openalex.org/I200769079"]}]}, {"author_position": "middle", "author": {"id": null, "display_name": "Hang Xu", "orcid": "https://orcid.org/0009-0008-8672-5323", "observed_orcids": ["https://orcid.org/0009-0008-8672-5323"]}, "institutions": [{"id": "https://openalex.org/I76569877", "display_name": "Southeast University", "ror": "https://ror.org/04ct4d772", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I76569877"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Hang Xu", "raw_affiliation_strings": ["Southeast University"], "raw_orcid": "https://orcid.org/0009-0008-8672-5323", "affiliations": [{"raw_affiliation_string": "Southeast University", "institution_ids": ["https://openalex.org/I76569877"]}]}, {"author_position": "middle", "author": {"id": null, "display_name": "Kaichun Hu", "orcid": "https://orcid.org/0009-0007-6547-6260", "observed_orcids": ["https://orcid.org/0009-0007-6547-6260"]}, "institutions": [{"id": "https://openalex.org/I76130692", "display_name": "Zhejiang University", "ror": "https://ror.org/00a2xv884", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I76130692"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Kaichun Hu", "raw_affiliation_strings": ["Zhejiang University"], "raw_orcid": "https://orcid.org/0009-0007-6547-6260", "affiliations": [{"raw_affiliation_string": "Zhejiang University", "institution_ids": ["https://openalex.org/I76130692"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5006260400", "display_name": "Shimin Di", "orcid": "https://orcid.org/0000-0002-7394-0082", "observed_orcids": ["https://orcid.org/0000-0002-7394-0082"]}, "institutions": [{"id": "https://openalex.org/I76569877", "display_name": "Southeast University", "ror": "https://ror.org/04ct4d772", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I76569877"]}], "countries": ["CN"], "is_corresponding": true, "raw_author_name": "Shimin Di", "raw_affiliation_strings": ["Southeast University"], "raw_orcid": "https://orcid.org/0000-0002-7394-0082", "affiliations": [{"raw_affiliation_string": "Southeast University", "institution_ids": ["https://openalex.org/I76569877"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5056383703", "display_name": "Wangze Ni", "orcid": "https://orcid.org/0000-0003-1438-1345", "observed_orcids": ["https://orcid.org/0000-0003-1438-1345"]}, "institutions": [{"id": "https://openalex.org/I76130692", "display_name": "Zhejiang University", "ror": "https://ror.org/00a2xv884", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I76130692"]}], "countries": ["CN"], "is_corresponding": true, "raw_author_name": "Wangze Ni", "raw_affiliation_strings": ["Zhejiang University"], "raw_orcid": "https://orcid.org/0000-0003-1438-1345", "affiliations": [{"raw_affiliation_string": "Zhejiang University", "institution_ids": ["https://openalex.org/I76130692"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5039145454", "display_name": "Linan Yue", "orcid": "https://orcid.org/0000-0002-5980-6098", "observed_orcids": ["https://orcid.org/0000-0002-5980-6098"]}, "institutions": [{"id": "https://openalex.org/I76569877", "display_name": "Southeast University", "ror": "https://ror.org/04ct4d772", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I76569877"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Linan Yue", "raw_affiliation_strings": ["Southeast University"], "raw_orcid": "https://orcid.org/0000-0002-5980-6098", "affiliations": [{"raw_affiliation_string": "Southeast University", "institution_ids": ["https://openalex.org/I76569877"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5079083101", "display_name": "Min-Ling Zhang", "orcid": "https://orcid.org/0000-0003-1880-5918", "observed_orcids": ["https://orcid.org/0000-0003-1880-5918"]}, "institutions": [{"id": "https://openalex.org/I76130692", "display_name": "Zhejiang University", "ror": "https://ror.org/00a2xv884", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I76130692"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Min-Ling Zhang", "raw_affiliation_strings": ["Zhejiang University"], "raw_orcid": "https://orcid.org/0000-0003-1880-5918", "affiliations": [{"raw_affiliation_string": "Zhejiang University", "institution_ids": ["https://openalex.org/I76130692"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5000596496", "display_name": "Kui Ren", "orcid": "https://orcid.org/0000-0003-3441-6277", "observed_orcids": ["https://orcid.org/0000-0003-3441-6277"]}, "institutions": [{"id": "https://openalex.org/I76569877", "display_name": "Southeast University", "ror": "https://ror.org/04ct4d772", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I76569877"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Kui Ren", "raw_affiliation_strings": ["Southeast University"], "raw_orcid": "https://orcid.org/0000-0003-3441-6277", "affiliations": [{"raw_affiliation_string": "Southeast University", "institution_ids": ["https://openalex.org/I76569877"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5100333516", "display_name": "Lei Chen", "orcid": "https://orcid.org/0000-0002-8257-5806", "observed_orcids": ["https://orcid.org/0000-0002-8257-5806", "https://orcid.org/0000-0002-9459-5695", "https://orcid.org/0009-0000-2383-6650"]}, "institutions": [{"id": "https://openalex.org/I200769079", "display_name": "Hong Kong University of Science and Technology", "ror": "https://ror.org/00q4vv597", "country_code": "HK", "type": "education", "lineage": ["https://openalex.org/I200769079"]}, {"id": "https://openalex.org/I4405261251", "display_name": "The Hong Kong University of Science and Technology (Guangzhou)", "ror": "https://ror.org/050h0vm43", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I4405261251"]}], "countries": ["CN", "HK"], "is_corresponding": false, "raw_author_name": "Lei Chen", "raw_affiliation_strings": ["The Hong Kong University of Science and Technology", "The Hong Kong University of Science and Technology (Guangzhou )"], "raw_orcid": "https://orcid.org/0000-0002-8257-5806", "affiliations": [{"raw_affiliation_string": "The Hong Kong University of Science and Technology", "institution_ids": ["https://openalex.org/I200769079"]}, {"raw_affiliation_string": "The Hong Kong University of Science and Technology (Guangzhou )", "institution_ids": ["https://openalex.org/I4405261251"]}]}], "abstract_inverted_index": {"The": [0], "volume": [1], "of": [2, 11, 41, 124, 157, 171, 200], "scientific": [3], "submissions": [4], "continues": [5], "to": [6, 87, 166, 209], "climb,": [7], "outpacing": [8], "the": [9, 20, 39, 113, 132, 168, 198], "capacity": [10], "qualified": [12], "human": [13], "referees": [14], "and": [15, 35, 54, 91, 94, 121, 135, 143, 178, 187, 196, 204], "stretching": [16], "editorial": [17], "timelines.": [18], "At": [19], "same": [21], "time,": [22], "modern": [23], "large": [24], "language": [25], "models": [26], "(LLMs)": [27], "offer": [28], "impressive": [29], "capabilities": [30], "in": [31, 48, 71], "summarization,": [32], "fact": [33], "checking,": [34], "literature": [36], "triage,": [37], "making": [38], "integration": [40], "AI": [42, 107, 114], "into": [43], "peer": [44, 126, 202], "review": [45, 133, 182, 203], "increasingly": [46], "attractive\u2014and,": [47], "practice,": [49], "unavoidable.": [50], "Yet": [51], "early": [52], "deployments": [53], "informal": [55], "adoption": [56], "have": [57, 64, 83], "exposed": [58], "acute": [59], "failure": [60, 207], "modes.": [61], "Recent": [62], "incidents": [63], "revealed": [65], "that": [66], "hidden": [67], "prompt": [68], "injections": [69], "embedded": [70], "manuscripts": [72], "can": [73, 110], "steer": [74], "AI-generated": [75], "reviews": [76, 108], "toward": [77], "unjustifiably": [78], "positive": [79], "judgments.": [80], "Complementary": [81], "studies": [82], "also": [84], "demonstrated": [85], "brittleness": [86], "adversarial": [88], "phrasing,": [89], "authority": [90], "length": [92], "biases,": [93], "hallucinated": [95], "claims.": [96], "These": [97], "episodes": [98], "raise": [99], "a": [100, 119, 154, 162], "central": [101], "question": [102], "for": [103, 194], "scholarly": [104], "communication:": [105], "when": [106], "science,": [109], "we": [111], "trust": [112], "referee?": [115], "This": [116], "paper": [117], "provides": [118], "security-": [120], "reliability-centered": [122], "analysis": [123], "AI-assisted": [125, 201], "review.": [127], "We": [128, 145], "map": [129], "attacks": [130], "across": [131], "lifecycle\u2014training": [134], "data": [136], "retrieval,": [137], "desk": [138], "review,": [139, 141], "deep": [140], "rebuttal,": [142], "system-level.": [144], "instantiate": [146], "this": [147, 185], "taxonomy": [148, 186], "with": [149], "four": [150], "treatment-control": [151], "probes": [152], "on": [153, 181], "stratified": [155], "set": [156], "ICLR": [158], "2025": [159], "submissions,": [160], "using": [161], "fixed": [163], "LLM": [164], "referee": [165], "isolate": [167], "causal": [169], "effects": [170], "prestige": [172], "framing,": [173], "assertion": [174], "strength,": [175], "rebuttal": [176], "sycophancy,": [177], "contextual": [179], "poisoning": [180], "scores.": [183], "Together,": [184], "experimental": [188], "audit": [189], "provide": [190], "an": [191], "evidence-based": [192], "baseline": [193], "assessing": [195], "tracking": [197], "reliability": [199], "highlight": [205], "concrete": [206], "points": [208], "guide": [210], "targeted,": [211], "testable": [212], "mitigations.": [213]}, "primary_topic": {"id": "https://openalex.org/T10883", "display_name": "Ethics and Social Impacts of AI", "score": 0.3928000032901764, "subfield": {"id": "https://openalex.org/subfields/3311", "display_name": "Safety Research"}, "field": {"id": "https://openalex.org/fields/33", "display_name": "Social Sciences"}, "domain": {"id": "https://openalex.org/domains/2", "display_name": "Social Sciences"}}, "topics": [{"id": "https://openalex.org/T10883", "display_name": "Ethics and Social Impacts of AI", "score": 0.3928000032901764, "subfield": {"id": "https://openalex.org/subfields/3311", "display_name": "Safety Research"}, "field": {"id": "https://openalex.org/fields/33", "display_name": "Social Sciences"}, "domain": {"id": "https://openalex.org/domains/2", "display_name": "Social Sciences"}}, {"id": "https://openalex.org/T13516", "display_name": "Publishing and Scholarly Communication", "score": 0.1754000037908554, "subfield": {"id": "https://openalex.org/subfields/1207", "display_name": "History and Philosophy of Science"}, "field": {"id": "https://openalex.org/fields/12", "display_name": "Arts and Humanities"}, "domain": {"id": "https://openalex.org/domains/2", "display_name": "Social Sciences"}}, {"id": "https://openalex.org/T13607", "display_name": "Academic Publishing and Open Access", "score": 0.16130000352859497, "subfield": {"id": "https://openalex.org/subfields/1802", "display_name": "Information Systems and Management"}, "field": {"id": "https://openalex.org/fields/18", "display_name": "Decision Sciences"}, "domain": {"id": "https://openalex.org/domains/2", "display_name": "Social Sciences"}}], "primary_location": {"id": "doi:10.20944/preprints202511.1542.v1", "is_oa": true, "landing_page_url": "https://doi.org/10.20944/preprints202511.1542.v1", "pdf_url": "https://www.preprints.org/frontend/manuscript/3ba9be7a1af7fc8779405ce870ec0528/download_pub", "source": {"id": "https://openalex.org/S6309402219", "display_name": "Preprints.org", "issn_l": null, "issn": null, "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": null, "host_organization_name": null, "host_organization_lineage": ["https://openalex.org/P4310310987"], "host_organization_lineage_names": ["Multidisciplinary Digital Publishing Institute"], "type": "repository"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "acceptedVersion", "is_accepted": true, "is_published": false, "raw_source_name": null, "raw_type": "posted-content"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W7110467614", "doi": null, "title": "PROMPT INJECTION ATTACKS ON LARGE LANGUAGE MODELS: A SYSTEMATIC LITERATURE REVIEW", "publication_year": 2025, "publication_date": "2025-06-20", "type": "review", "language": null, "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Bayhan, Fatih", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": true, "raw_author_name": "Bayhan, Fatih", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}], "abstract_inverted_index": {"The": [0, 141], "use": [1, 69], "of": [2, 12, 70, 107], "Large": [3], "Language": [4], "Models": [5], "has": [6], "increased": [7], "significantly": [8], "after": [9], "the": [10, 40, 67, 82, 104, 108, 155], "release": [11], "ChatGPT": [13], "in": [14, 19, 62], "2022.": [15], "LLMs": [16, 29, 46], "are": [17, 30, 50], "used": [18], "various": [20], "applications": [21, 34, 49], "including": [22], "chatbots": [23], "and": [24, 35, 80, 120, 137, 158, 172, 176], "generative": [25], "artificial": [26], "intelligence": [27], "applications.": [28, 72], "integrated": [31], "into": [32], "these": [33, 55], "perform": [36], "their": [37, 174], "functionality": [38], "at": [39], "backend.": [41], "Like": [42], "every": [43], "new": [44], "technology,": [45], "or": [47, 87, 149], "LLM-integrated": [48, 71], "vulnerable": [51], "to": [52, 66, 76, 84, 111, 112, 123, 166, 180], "attacks.": [53, 100], "Among": [54], "attacks,": [56], "prompt": [57, 98, 146], "injection": [58, 99, 147], "attacks": [59, 74, 148], "have": [60], "emerged": [61], "recent": [63], "years": [64], "due": [65], "widespread": [68], "These": [73], "aim": [75, 106], "manipulate": [77], "LLM": [78, 125, 183], "outputs": [79], "cause": [81], "model": [83], "provide": [85, 121], "incorrect": [86], "harmful": [88], "responses.": [89], "This": [90], "study": [91, 109, 130], "focuses": [92], "on": [93, 97, 131, 144], "examining": [94], "existing": [95], "research": [96, 178], "In": [101], "this": [102], "scope,": [103], "main": [105], "is": [110], "classify": [113], "attack": [114, 168], "types,": [115], "determine": [116], "current": [117], "defense": [118, 150, 170], "mechanisms,": [119], "guidelines": [122], "enhance": [124], "security.": [126], "A": [127, 161], "systematic": [128], "review": [129], "36": [132], "papers": [133, 142], "published": [134], "between": [135], "2022": [136], "2025": [138], "was": [139, 164], "examined.": [140], "focusing": [143], "either": [145], "mechanisms": [151], "were": [152], "selected": [153], "from": [154], "IEEE,": [156], "WOS,": [157], "Scopus": [159], "databases.": [160], "qualitative": [162], "analysis": [163], "conducted": [165], "categorize": [167], "methods,": [169], "techniques,": [171], "highlight": [173], "contributions": [175], "future": [177], "directions": [179], "promote": [181], "secure": [182], "development": [184], "research.": [185]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9994999766349792, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9994999766349792, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10028", "display_name": "Topic Modeling", "score": 9.999999747378752e-05, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 9.999999747378752e-05, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "pmh:oai:https://open.metu.edu.tr:11511/115034", "is_oa": true, "landing_page_url": "https://hdl.handle.net/11511/115034", "pdf_url": null, "source": {"id": "https://openalex.org/S4306402495", "display_name": "OpenMETU (Middle East Technical University)", "issn_l": null, "issn": null, "is_oa": false, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I201799495", "host_organization_name": "Middle East Technical University", "host_organization_lineage": ["https://openalex.org/I201799495"], "host_organization_lineage_names": [], "type": "repository"}, "license": "cc-by-nc-nd", "license_id": "https://openalex.org/licenses/cc-by-nc-nd", "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "Term Project"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4415981878", "doi": "https://doi.org/10.48550/arxiv.2510.02999", "title": "NonTextual Target Attack", "publication_year": 2025, "publication_date": "2025-10-03", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5146540057", "display_name": "Xinzhe Huang", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I76130692", "display_name": "Zhejiang University", "ror": "https://ror.org/00a2xv884", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I76130692"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Huang, Xinzhe", "raw_affiliation_strings": ["Hangzhou High-Tech Zone (Binjiang ) Insti- tute of Blockchain and Data Security", "The State Key Laboratory of Blockchain and Data Security , Zhejiang University"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Hangzhou High-Tech Zone (Binjiang ) Insti- tute of Blockchain and Data Security", "institution_ids": []}, {"raw_affiliation_string": "The State Key Laboratory of Blockchain and Data Security , Zhejiang University", "institution_ids": ["https://openalex.org/I76130692"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5114029460", "display_name": "Wenjing Hu", "orcid": "https://orcid.org/0009-0007-5384-1240", "observed_orcids": ["https://orcid.org/0009-0007-5384-1240"]}, "institutions": [{"id": "https://openalex.org/I36399199", "display_name": "Nanjing University of Science and Technology", "ror": "https://ror.org/00xp9wg62", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I36399199"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Hu, Wenjing", "raw_affiliation_strings": ["School of Cyberspace Se- curity , Nanjing University of Science and Technology"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "School of Cyberspace Se- curity , Nanjing University of Science and Technology", "institution_ids": ["https://openalex.org/I36399199"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5153617866", "display_name": "Kedong Xiu", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I76130692", "display_name": "Zhejiang University", "ror": "https://ror.org/00a2xv884", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I76130692"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Xiu, Kedong", "raw_affiliation_strings": ["Hangzhou High-Tech Zone (Binjiang ) Insti- tute of Blockchain and Data Security", "The State Key Laboratory of Blockchain and Data Security , Zhejiang University"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Hangzhou High-Tech Zone (Binjiang ) Insti- tute of Blockchain and Data Security", "institution_ids": []}, {"raw_affiliation_string": "The State Key Laboratory of Blockchain and Data Security , Zhejiang University", "institution_ids": ["https://openalex.org/I76130692"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5153586084", "display_name": "Hongsheng Hu", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Hu, Hongsheng", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5153556295", "display_name": "Xiaojun Jia", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I172675005", "display_name": "Nanyang Technological University", "ror": "https://ror.org/02e7b5302", "country_code": "SG", "type": "education", "lineage": ["https://openalex.org/I172675005"]}], "countries": ["SG"], "is_corresponding": false, "raw_author_name": "Jia, Xiaojun", "raw_affiliation_strings": ["Nanyang Technological University (NTU )"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Nanyang Technological University (NTU )", "institution_ids": ["https://openalex.org/I172675005"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5153561451", "display_name": "Zhan Qin", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I76130692", "display_name": "Zhejiang University", "ror": "https://ror.org/00a2xv884", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I76130692"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Qin, Zhan", "raw_affiliation_strings": ["Hangzhou High-Tech Zone (Binjiang ) Insti- tute of Blockchain and Data Security", "The State Key Laboratory of Blockchain and Data Security , Zhejiang University"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Hangzhou High-Tech Zone (Binjiang ) Insti- tute of Blockchain and Data Security", "institution_ids": []}, {"raw_affiliation_string": "The State Key Laboratory of Blockchain and Data Security , Zhejiang University", "institution_ids": ["https://openalex.org/I76130692"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5153567588", "display_name": "Tianhang Zheng", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I76130692", "display_name": "Zhejiang University", "ror": "https://ror.org/00a2xv884", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I76130692"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Zheng, Tianhang", "raw_affiliation_strings": ["Hangzhou High-Tech Zone (Binjiang ) Insti- tute of Blockchain and Data Security", "The State Key Laboratory of Blockchain and Data Security , Zhejiang University"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Hangzhou High-Tech Zone (Binjiang ) Insti- tute of Blockchain and Data Security", "institution_ids": []}, {"raw_affiliation_string": "The State Key Laboratory of Blockchain and Data Security , Zhejiang University", "institution_ids": ["https://openalex.org/I76130692"]}]}], "abstract_inverted_index": {"Existing": [0], "gradient-based": [1, 79, 155, 203], "jailbreak": [2], "attacks": [3, 204], "on": [4, 83, 158, 199], "Large": [5], "Language": [6], "Models": [7], "(LLMs)": [8], "typically": [9, 44], "optimize": [10, 125], "adversarial": [11, 33, 130], "suffixes": [12], "to": [13, 49, 88, 123, 143, 149], "align": [14], "the": [15, 24, 32, 37, 51, 55, 59, 90, 94, 126, 129, 133, 136, 145, 165], "LLM": [16, 61, 95, 175], "output": [17], "with": [18, 139, 194], "predefined": [19], "target": [20, 57, 161], "responses.": [21], "However,": [22], "restricting": [23], "objective": [25, 87, 109], "as": [26], "inducing": [27], "fixed": [28, 56], "targets": [29], "inherently": [30], "constrains": [31], "search": [34], "space,": [35, 167], "limiting": [36], "overall": [38], "attack": [39, 66, 80, 166, 185], "efficacy.": [40], "Furthermore,": [41], "existing": [42, 150], "methods": [43], "require": [45], "numerous": [46], "optimization": [47, 157, 197], "iterations": [48, 198], "fulfill": [50], "large": [52], "gap": [53], "between": [54], "and": [58, 128, 162, 171], "original": [60, 137], "output,": [62, 96], "resulting": [63], "in": [64, 132], "low": [65], "efficiency.": [67], "To": [68], "overcome": [69], "these": [70], "limitations,": [71], "we": [72, 105], "propose": [73], "NonTextual": [74], "Target": [75], "Attack": [76], "(NTA),the": [77], "first": [78, 153], "that": [81, 180], "relies": [82], "a": [84, 140, 159], "non-textual": [85, 160], "constrained": [86, 112], "maximize": [89], "unsafety": [91], "probability": [92], "of": [93, 135, 174, 188], "without": [97], "enforcing": [98], "any": [99], "response": [100, 127], "patterns.": [101], "For": [102], "tractable": [103], "optimization,": [104], "further": [106], "decompose": [107], "this": [108], "into": [110], "two": [111, 119], "sub-objectives,": [113], "which": [114], "can": [115], "be": [116], "approximated": [117], "by": [118, 205], "differentiable": [120], "unconstrained": [121], "losses,": [122], "iteratively": [124], "prompt": [131, 156], "neighborhood": [134], "prompt,": [138], "theoretical": [141], "analysis": [142], "validate": [144], "decomposition.": [146], "In": [147], "contrast": [148], "attacks,": [151], "NTA": [152, 181], "realizes": [154], "significantly": [163], "expands": [164], "enabling": [168], "more": [169], "flexible": [170], "efficient": [172], "exploration": [173], "vulnerabilities.": [176], "Extensive": [177], "evaluations": [178], "show": [179], "achieves": [182], "an": [183], "average": [184], "success": [186], "rate": [187], "96.8%": [189], "against": [190], "recent": [191], "safety-aligned": [192], "LLMs": [193], "only": [195], "100": [196], "AdvBench,": [200], "outperforming": [201], "state-of-the-art": [202], "over": [206], "40%.": [207]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10028", "display_name": "Topic Modeling", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "pmh:oai:arXiv.org:2510.02999", "is_oa": true, "landing_page_url": "https://arxiv.org/abs/2510.02999", "pdf_url": "https://arxiv.org/pdf/2510.02999", "source": {"id": "https://openalex.org/S4306400194", "display_name": "arXiv (Cornell University)", "issn_l": "2331-8422", "issn": ["2331-8422"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I205783295", "host_organization_name": "Cornell University", "host_organization_lineage": ["https://openalex.org/I205783295"], "host_organization_lineage_names": [], "type": "repository"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "text"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W7114776852", "doi": "https://doi.org/10.5445/ir/1000188258", "title": "A Systematic Literature Review on Vehicular Collaborative Perception\u2014A Computer Vision Perspective", "publication_year": 2025, "publication_date": "2025-01-01", "type": "review", "language": "en", "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Wan, Lei", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Wan, Lei", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Zhao, Jianxin", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Zhao, Jianxin", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Wiedholz, Andreas", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Wiedholz, Andreas", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5007195611", "display_name": "Manuel Bied", "orcid": "https://orcid.org/0000-0002-0653-8106", "observed_orcids": ["https://orcid.org/0000-0002-0653-8106"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Bied, Manuel", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Martinez de Lucena, Mateus", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Martinez de Lucena, Mateus", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Dinkar Jagtap, Abhishek", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Dinkar Jagtap, Abhishek", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Festag, Andreas", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Festag, Andreas", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Augusto Fr\u00f6hlich, Ant\u00f4nio", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Augusto Fr\u00f6hlich, Ant\u00f4nio", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Ejaz Keen, Hannan", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Ejaz Keen, Hannan", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "last", "author": {"id": null, "display_name": "Vinel, Alexey", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Vinel, Alexey", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}], "abstract_inverted_index": {"The": [0], "effectiveness": [1], "of": [2, 61], "autonomous": [3, 62], "vehicles": [4], "relies": [5], "on": [6, 75, 135], "reliable": [7], "perception": [8, 22, 78, 141], "capabilities.": [9, 35], "Despite": [10], "significant": [11], "advancements": [12, 65], "in": [13, 66, 210], "artificial": [14], "intelligence": [15], "and": [16, 31, 43, 57, 92, 112, 126, 139, 167, 182, 201], "sensor": [17], "fusion": [18], "technologies,": [19], "current": [20, 180], "single-vehicle": [21], "systems": [23], "continue": [24], "to": [25, 53], "encounter": [26], "limitations,": [27], "notably": [28], "visual": [29], "occlusions": [30], "limited": [32], "long-range": [33], "detection": [34], "Collaborative": [36], "Perception": [37], "(CP),": [38], "enabled": [39], "by": [40], "Vehicle-to-Vehicle": [41], "(V2V)": [42], "Vehicle-to-Infrastructure": [44], "(V2I)": [45], "communication,": [46, 67], "has": [47], "emerged": [48], "as": [49, 157, 204], "a": [50, 83, 100, 144, 177, 205], "promising": [51], "solution": [52], "mitigate": [54], "these": [55], "issues": [56, 155], "enhance": [58], "the": [59, 68, 122], "reliability": [60], "systems.": [63], "Beyond": [64], "computer": [69], "vision": [70], "community": [71], "is": [72, 96], "increasingly": [73], "focusing": [74], "improving": [76], "vehicular": [77, 211], "through": [79], "collaborative": [80, 212], "approaches.": [81], "However,": [82], "systematic": [84, 101], "literature": [85], "review": [86, 148, 194], "that": [87], "thoroughly": [88], "examines": [89, 173], "existing": [90], "work": [91], "reduces": [93], "subjective": [94], "bias": [95], "still": [97], "lacking.": [98], "Such": [99], "approach": [102], "helps": [103], "identify": [104], "research": [105, 115, 209], "gaps,": [106], "recognize": [107], "common": [108], "trends": [109], "across": [110], "studies,": [111], "inform": [113], "future": [114], "directions.": [116], "In": [117], "response,": [118], "this": [119, 147, 193], "study": [120], "follows": [121], "PRISMA": [123], "2020": [124], "guidelines": [125], "includes": [127], "106peer-reviewed": [128], "articles.": [129], "These": [130], "publications": [131], "are": [132], "analyzed": [133], "based": [134], "modalities,": [136], "collaboration": [137], "schemes,": [138], "key": [140], "tasks.": [142], "Through": [143], "comparative": [145], "analysis,": [146], "illustrates": [149], "how": [150], "different": [151], "methods": [152], "address": [153], "practical": [154], "such": [156], "pose": [158], "errors,": [159], "temporal": [160], "latency,": [161], "communication": [162], "constraints,": [163], "domain": [164], "shifts,": [165], "heterogeneity,": [166], "adversarial": [168], "attacks.": [169], "Furthermore,": [170], "it": [171], "critically": [172], "evaluation": [174], "methodologies,": [175], "highlighting": [176], "misalignment": [178], "between": [179], "metrics": [181], "CP\u2019s": [183], "fundamental": [184], "objectives.": [185], "By": [186], "delving": [187], "into": [188, 198], "all": [189], "relevant": [190], "topics": [191], "in-depth,": [192], "offers": [195], "valuable": [196], "insights": [197], "challenges,": [199], "opportunities,": [200], "risks,": [202], "serving": [203], "reference": [206], "for": [207], "advancing": [208], "perception.": [213]}, "primary_topic": {"id": "https://openalex.org/T11099", "display_name": "Autonomous Vehicle Technology and Safety", "score": 0.9926999807357788, "subfield": {"id": "https://openalex.org/subfields/2203", "display_name": "Automotive Engineering"}, "field": {"id": "https://openalex.org/fields/22", "display_name": "Engineering"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11099", "display_name": "Autonomous Vehicle Technology and Safety", "score": 0.9926999807357788, "subfield": {"id": "https://openalex.org/subfields/2203", "display_name": "Automotive Engineering"}, "field": {"id": "https://openalex.org/fields/22", "display_name": "Engineering"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10036", "display_name": "Advanced Neural Network Applications", "score": 0.002099999925121665, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10761", "display_name": "Vehicular Ad Hoc Networks (VANETs)", "score": 0.0012000000569969416, "subfield": {"id": "https://openalex.org/subfields/2208", "display_name": "Electrical and Electronic Engineering"}, "field": {"id": "https://openalex.org/fields/22", "display_name": "Engineering"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.5445/ir/1000188258", "is_oa": true, "landing_page_url": "https://doi.org/10.5445/ir/1000188258", "pdf_url": null, "source": {"id": "https://openalex.org/S7407052948", "display_name": "KITopen", "issn_l": null, "issn": null, "is_oa": false, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I102335020", "host_organization_name": "Karlsruhe Institute of Technology", "host_organization_lineage": ["https://openalex.org/I102335020"], "host_organization_lineage_names": [], "type": "repository"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": null, "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "article-journal"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W7133303467", "doi": "https://doi.org/10.65521/ijaece.v13i1.84", "title": "Robustness of Neural Networks: Adversarial Attacks and Defenses", "publication_year": 2025, "publication_date": "2025-04-15", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5072203446", "display_name": "Akash Verma", "orcid": "https://orcid.org/0000-0001-9683-1738", "observed_orcids": ["https://orcid.org/0000-0001-9683-1738"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Akash Verma", "raw_affiliation_strings": ["Blue Ridge Institute of Technology"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Blue Ridge Institute of Technology", "institution_ids": []}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5127928662", "display_name": "Maria Gonzalez", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Maria Gonzalez", "raw_affiliation_strings": ["Highland Technical University"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Highland Technical University", "institution_ids": []}]}], "abstract_inverted_index": {"Quantum": [0], "Machine": [1], "Learning": [2], "(QML)": [3], "is": [4], "an": [5], "emerging": [6], "interdisciplinary": [7], "field": [8], "that": [9], "integrates": [10], "quantum": [11, 42, 46, 53, 59, 90, 97, 132], "computing": [12], "with": [13, 111], "classical": [14, 30], "machine": [15], "learning": [16], "techniques": [17, 102], "to": [18, 64], "enhance": [19], "computational": [20], "efficiency": [21], "and": [22, 45, 61, 68, 86, 99, 117, 130], "solve": [23], "complex": [24], "problems": [25], "beyond": [26], "the": [27, 115, 121, 124], "capabilities": [28], "of": [29, 76], "systems.": [31], "This": [32], "paper": [33], "explores": [34], "fundamental": [35], "QML": [36, 77], "algorithms,": [37], "including": [38], "quantum-enhanced": [39], "data": [40, 69], "processing,": [41], "neural": [43], "networks,": [44], "support": [47], "vector": [48], "machines.": [49], "We": [50, 109], "discuss": [51], "how": [52], "speedup": [54], "can": [55], "be": [56], "achieved": [57], "through": [58], "parallelism": [60], "entanglement,": [62], "leading": [63], "improvements": [65], "in": [66, 78, 96, 120], "optimization": [67], "classification": [70], "tasks.": [71], "Additionally,": [72], "we": [73], "highlight": [74], "applications": [75], "areas": [79], "such": [80], "as": [81], "drug": [82], "discovery,": [83], "financial": [84], "modeling,": [85], "cryptography.": [87], "While": [88], "current": [89], "hardware": [91], "imposes": [92], "limitations,": [93], "ongoing": [94], "advancements": [95], "algorithms": [98], "error": [100], "correction": [101], "suggest": [103], "a": [104, 112], "promising": [105], "future": [106, 118], "for": [107, 126], "QML.": [108], "conclude": [110], "discussion": [113], "on": [114], "challenges": [116], "directions": [119], "field,": [122], "emphasizing": [123], "need": [125], "hybrid": [127], "quantum-classical": [128], "approaches": [129], "scalable": [131], "hardware.": [133]}, "primary_topic": {"id": "https://openalex.org/T10682", "display_name": "Quantum Computing Algorithms and Architecture", "score": 0.6991999745368958, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T10682", "display_name": "Quantum Computing Algorithms and Architecture", "score": 0.6991999745368958, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.29490000009536743, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10020", "display_name": "Quantum Information and Cryptography", "score": 0.0008999999845400453, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.65521/ijaece.v13i1.84", "is_oa": true, "landing_page_url": "https://doi.org/10.65521/ijaece.v13i1.84", "pdf_url": "https://journals.mriindia.com/index.php/ijaece/article/download/84/73", "source": {"id": "https://openalex.org/S7407055544", "display_name": "International Journal on Advanced Electrical and Computer Engineering", "issn_l": "2349-932X", "issn": ["2349-932X", "2349-9338"], "is_oa": false, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": null, "host_organization_name": null, "host_organization_lineage": [], "host_organization_lineage_names": [], "type": "journal"}, "license": null, "license_id": null, "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "International Journal on Advanced Electrical and Computer Engineering", "raw_type": "journal-article"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4414984227", "doi": "https://doi.org/10.1038/s41467-025-64062-1", "title": "Adversarial prompt and fine-tuning attacks threaten medical large language models", "publication_year": 2025, "publication_date": "2025-10-09", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5101623103", "display_name": "Yifan Yang", "orcid": "https://orcid.org/0000-0003-4414-9176", "observed_orcids": ["https://orcid.org/0000-0003-4414-9176"]}, "institutions": [{"id": "https://openalex.org/I1299303238", "display_name": "National Institutes of Health", "ror": "https://ror.org/01cwqze88", "country_code": "US", "type": "government", "lineage": ["https://openalex.org/I1299022934", "https://openalex.org/I1299303238"]}, {"id": "https://openalex.org/I2800548410", "display_name": "United States National Library of Medicine", "ror": "https://ror.org/0060t0j89", "country_code": "US", "type": "archive", "lineage": ["https://openalex.org/I1299022934", "https://openalex.org/I1299303238", "https://openalex.org/I2800548410"]}, {"id": "https://openalex.org/I66946132", "display_name": "University of Maryland, College Park", "ror": "https://ror.org/047s2c258", "country_code": "US", "type": "education", "lineage": ["https://openalex.org/I66946132"]}], "countries": ["US"], "is_corresponding": false, "raw_author_name": "Yifan Yang", "raw_affiliation_strings": ["National Library of Medicine (NLM), National Institutes of Health (NIH), Bethesda, MD, USA", "University of Maryland at College Park, Department of Computer Science, College Park, MD, USA"], "raw_orcid": "https://orcid.org/0000-0003-4414-9176", "affiliations": [{"raw_affiliation_string": "National Library of Medicine (NLM), National Institutes of Health (NIH), Bethesda, MD, USA", "institution_ids": ["https://openalex.org/I1299303238", "https://openalex.org/I2800548410"]}, {"raw_affiliation_string": "University of Maryland at College Park, Department of Computer Science, College Park, MD, USA", "institution_ids": ["https://openalex.org/I66946132"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5100611571", "display_name": "Qiao Jin", "orcid": "https://orcid.org/0000-0002-1268-7239", "observed_orcids": ["https://orcid.org/0000-0002-1268-7239"]}, "institutions": [{"id": "https://openalex.org/I1299303238", "display_name": "National Institutes of Health", "ror": "https://ror.org/01cwqze88", "country_code": "US", "type": "government", "lineage": ["https://openalex.org/I1299022934", "https://openalex.org/I1299303238"]}, {"id": "https://openalex.org/I2800548410", "display_name": "United States National Library of Medicine", "ror": "https://ror.org/0060t0j89", "country_code": "US", "type": "archive", "lineage": ["https://openalex.org/I1299022934", "https://openalex.org/I1299303238", "https://openalex.org/I2800548410"]}], "countries": ["US"], "is_corresponding": false, "raw_author_name": "Qiao Jin", "raw_affiliation_strings": ["National Library of Medicine (NLM), National Institutes of Health (NIH), Bethesda, MD, USA"], "raw_orcid": "https://orcid.org/0000-0002-1268-7239", "affiliations": [{"raw_affiliation_string": "National Library of Medicine (NLM), National Institutes of Health (NIH), Bethesda, MD, USA", "institution_ids": ["https://openalex.org/I1299303238", "https://openalex.org/I2800548410"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5091135797", "display_name": "Furong Huang", "orcid": "https://orcid.org/0000-0001-8760-439X", "observed_orcids": ["https://orcid.org/0000-0001-8760-439X", "https://orcid.org/0009-0009-0372-1202"]}, "institutions": [{"id": "https://openalex.org/I66946132", "display_name": "University of Maryland, College Park", "ror": "https://ror.org/047s2c258", "country_code": "US", "type": "education", "lineage": ["https://openalex.org/I66946132"]}], "countries": ["US"], "is_corresponding": false, "raw_author_name": "Furong Huang", "raw_affiliation_strings": ["University of Maryland at College Park, Department of Computer Science, College Park, MD, USA"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "University of Maryland at College Park, Department of Computer Science, College Park, MD, USA", "institution_ids": ["https://openalex.org/I66946132"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5083081872", "display_name": "Zhiyong Lu", "orcid": "https://orcid.org/0000-0001-9998-916X", "observed_orcids": ["https://orcid.org/0000-0001-9998-916X", "https://orcid.org/0000-0002-8301-9553"]}, "institutions": [{"id": "https://openalex.org/I1299303238", "display_name": "National Institutes of Health", "ror": "https://ror.org/01cwqze88", "country_code": "US", "type": "government", "lineage": ["https://openalex.org/I1299022934", "https://openalex.org/I1299303238"]}, {"id": "https://openalex.org/I2800548410", "display_name": "United States National Library of Medicine", "ror": "https://ror.org/0060t0j89", "country_code": "US", "type": "archive", "lineage": ["https://openalex.org/I1299022934", "https://openalex.org/I1299303238", "https://openalex.org/I2800548410"]}], "countries": ["US"], "is_corresponding": true, "raw_author_name": "Zhiyong Lu", "raw_affiliation_strings": ["National Library of Medicine (NLM), National Institutes of Health (NIH), Bethesda, MD, USA. zhiyong.lu@nih.gov", "National Library of Medicine (NLM), National Institutes of Health (NIH), Bethesda, MD, USA"], "raw_orcid": "https://orcid.org/0000-0001-9998-916X", "affiliations": [{"raw_affiliation_string": "National Library of Medicine (NLM), National Institutes of Health (NIH), Bethesda, MD, USA. zhiyong.lu@nih.gov", "institution_ids": ["https://openalex.org/I1299303238", "https://openalex.org/I2800548410"]}, {"raw_affiliation_string": "National Library of Medicine (NLM), National Institutes of Health (NIH), Bethesda, MD, USA", "institution_ids": ["https://openalex.org/I1299303238", "https://openalex.org/I2800548410"]}]}], "abstract_inverted_index": {"The": [0], "integration": [1], "of": [2, 24, 47, 52, 142], "Large": [3], "Language": [4], "Models": [5], "(LLMs)": [6], "into": [7], "healthcare": [8, 159], "applications": [9], "offers": [10], "promising": [11], "advancements": [12], "in": [13, 38, 115, 148, 158], "medical": [14, 40, 65, 107, 149], "diagnostics,": [15], "treatment": [16], "recommendations,": [17], "and": [18, 59, 70, 81, 125, 139, 155], "patient": [19, 74], "care.": [20], "However,": [21], "the": [22, 45, 132, 140], "susceptibility": [23], "LLMs": [25, 48, 83, 147], "to": [26, 35, 49, 86, 112, 145, 151], "adversarial": [27, 53], "attacks": [28], "poses": [29], "a": [30, 120], "significant": [31], "threat,": [32], "potentially": [33], "leading": [34], "harmful": [36], "outcomes": [37], "delicate": [39], "contexts.": [41], "This": [42, 129], "study": [43], "investigates": [44], "vulnerability": [46], "two": [50], "types": [51], "attacks-prompt": [54], "injections": [55], "with": [56, 61], "malicious": [57, 87], "instructions": [58], "fine-tuning": [60], "poisoned": [62, 97], "samples-across": [63], "three": [64], "tasks:": [66], "disease": [67], "prevention,": [68], "diagnosis,": [69], "treatment.": [71], "Utilizing": [72], "real-world": [73], "data,": [75], "we": [76], "demonstrate": [77], "that": [78, 94], "both": [79], "open-source": [80], "proprietary": [82], "are": [84], "vulnerable": [85], "manipulation": [88], "across": [89], "multiple": [90], "tasks.": [91], "We": [92], "discover": [93], "while": [95], "integrating": [96], "data": [98], "does": [99], "not": [100], "markedly": [101], "degrade": [102], "overall": [103], "model": [104, 117, 127], "performance": [105], "on": [106], "benchmarks,": [108], "it": [109], "can": [110], "lead": [111], "noticeable": [113], "shifts": [114], "fine-tuned": [116], "weights,": [118], "suggesting": [119], "potential": [121], "pathway": [122], "for": [123, 135], "detecting": [124], "countering": [126], "attacks.": [128], "research": [130], "highlights": [131], "urgent": [133], "need": [134], "robust": [136], "security": [137], "measures": [138], "development": [141], "defensive": [143], "mechanisms": [144], "safeguard": [146], "applications,": [150], "ensure": [152], "their": [153], "safe": [154], "effective": [156], "deployment": [157], "settings.": [160]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10764", "display_name": "Privacy-Preserving Technologies in Data", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.1038/s41467-025-64062-1", "is_oa": true, "landing_page_url": "https://doi.org/10.1038/s41467-025-64062-1", "pdf_url": "https://www.nature.com/articles/s41467-025-64062-1.pdf", "source": {"id": "https://openalex.org/S64187185", "display_name": "Nature Communications", "issn_l": "2041-1723", "issn": ["2041-1723"], "is_oa": true, "is_in_doaj": true, "is_core": true, "listed_in": ["cwts-core", "doaj", "doyens", "jufo-3", "ki-jl-3", "medline", "norway-2"], "host_organization": "https://openalex.org/P4310319908", "host_organization_name": "Nature Portfolio", "host_organization_lineage": ["https://openalex.org/P4310319908", "https://openalex.org/P4310319965"], "host_organization_lineage_names": ["Nature Portfolio", "Springer Nature"], "type": "journal"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Nature Communications", "raw_type": "journal-article"}, "cited_by_count": 17, "is_retracted": false}, {"id": "https://openalex.org/W4407386048", "doi": "https://doi.org/10.48550/arxiv.2502.05931", "title": "Protecting Intellectual Property of EEG-based Neural Networks with Watermarking", "publication_year": 2025, "publication_date": "2025-02-09", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5101807751", "display_name": "Ahmed Hussen Abdelaziz", "orcid": "https://orcid.org/0000-0001-8027-4666", "observed_orcids": ["https://orcid.org/0000-0001-8027-4666"]}, "institutions": [{"id": "https://openalex.org/I32619867", "display_name": "Egypt-Japan University of Science and Technology", "ror": "https://ror.org/02x66tk73", "country_code": "EG", "type": "education", "lineage": ["https://openalex.org/I32619867"]}], "countries": ["EG"], "is_corresponding": false, "raw_author_name": "Abdelaziz, Ahmed", "raw_affiliation_strings": ["Department of Computer Science and Engineering (CSE ) Egypt Japan University of Science and Technology (EJUST)"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Computer Science and Engineering (CSE ) Egypt Japan University of Science and Technology (EJUST)", "institution_ids": ["https://openalex.org/I32619867"]}]}, {"author_position": "middle", "author": {"id": null, "display_name": "Fathi, Ahmed", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I32619867", "display_name": "Egypt-Japan University of Science and Technology", "ror": "https://ror.org/02x66tk73", "country_code": "EG", "type": "education", "lineage": ["https://openalex.org/I32619867"]}], "countries": ["EG"], "is_corresponding": false, "raw_author_name": "Fathi, Ahmed", "raw_affiliation_strings": ["Department of Computer Science and Engineering (CSE ) Egypt Japan University of Science and Technology (EJUST)"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Computer Science and Engineering (CSE ) Egypt Japan University of Science and Technology (EJUST)", "institution_ids": ["https://openalex.org/I32619867"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5031269487", "display_name": "Ahmed H. Fares", "orcid": "https://orcid.org/0000-0002-4391-1176", "observed_orcids": ["https://orcid.org/0000-0002-4391-1176"]}, "institutions": [{"id": "https://openalex.org/I32619867", "display_name": "Egypt-Japan University of Science and Technology", "ror": "https://ror.org/02x66tk73", "country_code": "EG", "type": "education", "lineage": ["https://openalex.org/I32619867"]}], "countries": ["EG"], "is_corresponding": false, "raw_author_name": "Fares, Ahmed", "raw_affiliation_strings": ["Department of Computer Science and Engineering (CSE ) Egypt Japan University of Science and Technology (EJUST)"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Computer Science and Engineering (CSE ) Egypt Japan University of Science and Technology (EJUST)", "institution_ids": ["https://openalex.org/I32619867"]}]}], "abstract_inverted_index": {"EEG-based": [0, 60], "neural": [1, 61], "networks,": [2], "pivotal": [3], "in": [4, 83, 152, 199], "medical": [5], "diagnosis": [6], "and": [7, 24, 39, 66, 87, 105, 154, 212], "brain-computer": [8], "interfaces,": [9], "face": [10], "significant": [11], "intellectual": [12], "property": [13], "(IP)": [14], "risks": [15], "due": [16], "to": [17, 41, 142, 224], "their": [18], "reliance": [19], "on": [20, 167], "sensitive": [21, 226], "neurophysiological": [22, 203], "data": [23], "resource-intensive": [25], "development.": [26], "Current": [27], "watermarking": [28, 56], "methods,": [29], "particularly": [30], "those": [31], "using": [32], "abstract": [33], "trigger": [34], "sets,": [35], "lack": [36], "robust": [37], "authentication": [38], "fail": [40], "address": [42], "the": [43, 69, 73, 140, 168, 176], "unique": [44], "challenges": [45], "of": [46], "EEG": [47, 84, 227], "models.": [48], "This": [49], "paper": [50], "introduces": [51], "a": [52, 196, 206], "cryptographic": [53], "wonder": [54, 70, 188], "filter-based": [55], "framework": [57, 94], "tailored": [58], "for": [59, 116, 202, 210], "networks.": [62], "Leveraging": [63], "collision-resistant": [64], "hashing": [65, 158], "public-key": [67], "encryption,": [68], "filter": [71], "embeds": [72], "watermark": [74, 91, 111], "during": [75], "training,": [76], "ensuring": [77], "minimal": [78], "distortion": [79], "($\\leq": [80], "5\\%$": [81], "drop": [82], "task": [85, 128], "accuracy)": [86], "high": [88], "reliability": [89], "(100\\%": [90], "detection).": [92], "The": [93, 215], "is": [95, 137], "rigorously": [96], "evaluated": [97], "against": [98, 218], "adversarial": [99, 219], "attacks,": [100], "including": [101], "fine-tuning,": [102], "transfer": [103], "learning,": [104], "neuron": [106], "pruning.": [107], "Results": [108], "demonstrate": [109], "persistent": [110], "retention,": [112], "with": [113, 190], "classification": [114], "accuracy": [115, 148], "watermarked": [117], "states": [118], "remaining": [119], "above": [120], "90\\%": [121], "even": [122], "after": [123], "aggressive": [124], "pruning,": [125], "while": [126, 229], "primary": [127], "performance": [129], "degrades": [130], "faster,": [131], "deterring": [132], "removal": [133], "attempts.": [134], "Piracy": [135], "resistance": [136], "validated": [138], "by": [139], "inability": [141], "embed": [143], "secondary": [144], "watermarks": [145], "without": [146], "severe": [147], "loss": [149], "(": [150], "$>10\\%$": [151], "EEGNet": [153], "CCNN": [155], "models).": [156], "Cryptographic": [157], "ensures": [159], "authentication,": [160], "reducing": [161], "brute-force": [162], "attack": [163], "success": [164], "probabilities.": [165], "Evaluated": [166], "DEAP": [169], "dataset": [170], "across": [171], "models": [172, 228], "(CCNN,": [173], "EEGNet,": [174], "TSception),": [175], "method": [177], "achieves": [178], "$>99.4\\%$": [179], "null-embedding": [180], "accuracy,": [181], "effectively": [182], "eliminating": [183], "false": [184], "positives.": [185], "By": [186], "integrating": [187], "filters": [189], "EEG-specific": [191], "adaptations,": [192], "this": [193], "work": [194], "bridges": [195], "critical": [197], "gap": [198], "IP": [200], "protection": [201], "models,": [204], "offering": [205], "secure,": [207], "tamper-proof": [208], "solution": [209], "healthcare": [211], "biometric": [213], "applications.": [214], "framework's": [216], "robustness": [217], "modifications": [220], "underscores": [221], "its": [222], "potential": [223], "safeguard": [225], "maintaining": [230], "diagnostic": [231], "utility.": [232]}, "primary_topic": {"id": "https://openalex.org/T10388", "display_name": "Advanced Steganography and Watermarking Techniques", "score": 0.5985999703407288, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T10388", "display_name": "Advanced Steganography and Watermarking Techniques", "score": 0.5985999703407288, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12122", "display_name": "Physical Unclonable Functions (PUFs) and Hardware Security", "score": 0.17569999396800995, "subfield": {"id": "https://openalex.org/subfields/1708", "display_name": "Hardware and Architecture"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.13230000436306, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "pmh:oai:arXiv.org:2502.05931", "is_oa": true, "landing_page_url": "http://arxiv.org/abs/2502.05931", "pdf_url": "https://arxiv.org/pdf/2502.05931", "source": {"id": "https://openalex.org/S4306400194", "display_name": "arXiv (Cornell University)", "issn_l": "2331-8422", "issn": ["2331-8422"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I205783295", "host_organization_name": "Cornell University", "host_organization_lineage": ["https://openalex.org/I205783295"], "host_organization_lineage_names": [], "type": "repository"}, "license": "cc-by-nc-sa", "license_id": "https://openalex.org/licenses/cc-by-nc-sa", "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "text"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4415366333", "doi": "https://doi.org/10.51519/journalisi.v7i3.1195", "title": "Securing EEG-based Brain-Computer Interface Systems from Data Poisoning Attacks", "publication_year": 2025, "publication_date": "2025-09-25", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5012616154", "display_name": "Joshua J. Tom", "orcid": "https://orcid.org/0000-0001-9644-6805", "observed_orcids": ["https://orcid.org/0000-0001-9644-6805"]}, "institutions": [{"id": "https://openalex.org/I3132355903", "display_name": "Elizade University", "ror": "https://ror.org/02qjtnr91", "country_code": "NG", "type": "education", "lineage": ["https://openalex.org/I3132355903"]}], "countries": ["NG"], "is_corresponding": false, "raw_author_name": "Joshua Joshua Tom", "raw_affiliation_strings": ["Elizade University"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Elizade University", "institution_ids": ["https://openalex.org/I3132355903"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5028765446", "display_name": "Frank Edughom Ekpar", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I96576516", "display_name": "Rivers State University", "ror": "https://ror.org/01kr7aq59", "country_code": "NG", "type": "education", "lineage": ["https://openalex.org/I96576516"]}], "countries": ["NG"], "is_corresponding": false, "raw_author_name": "Frank Edughom Ekpar", "raw_affiliation_strings": ["Rivers State University"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Rivers State University", "institution_ids": ["https://openalex.org/I96576516"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5120072039", "display_name": "Wilfred Adiqwe", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Wilfred Adiqwe", "raw_affiliation_strings": ["Delta State University of Science and Technology"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Delta State University of Science and Technology", "institution_ids": []}]}], "abstract_inverted_index": {"Electroencephalogram": [0], "(EEG)-based": [1], "brain": [2, 22, 42, 228], "computer": [3], "interface": [4], "(BCI)": [5], "is": [6, 91, 126, 231, 237], "a": [7, 109, 161, 171], "widely": [8], "used": [9], "access": [10], "technology": [11], "to": [12, 54, 69, 92, 116, 196], "aid": [13], "human-computer": [14], "interactions.": [15], "It": [16], "enables": [17], "communication": [18], "between": [19], "the": [20, 28, 58, 75, 80, 94, 129, 183, 202, 216, 219, 257], "human": [21, 34], "and": [23, 36, 48, 56, 77, 83, 138, 143, 208, 245], "external": [24], "devices": [25], "directly": [26], "without": [27], "need": [29], "for": [30, 102], "actuators": [31], "such": [32], "as": [33], "hands": [35], "legs.": [37], "The": [38, 86, 147, 234], "BCI": [39, 65, 81, 95, 119], "system": [40, 104, 191], "acquires": [41], "signals": [43, 59], "from": [44, 194], "an": [45, 189], "EEG": [46, 154], "device": [47], "uses": [49], "machine": [50, 220], "learning": [51, 221], "(ML)": [52], "algorithms": [53], "analyze": [55], "interpret": [57], "into": [60], "actionable": [61], "commands.": [62], "However,": [63], "EEG-based": [64, 118], "systems": [66, 96, 120], "are": [67], "vulnerable": [68], "data": [70, 99, 122, 179, 247, 261, 269], "poisoning": [71, 100, 123, 213], "attacks,": [72], "which": [73], "compromises": [74], "accuracy": [76, 163, 192], "security": [78], "of": [79, 88, 149, 164, 218, 259], "system,": [82], "user": [84, 268], "safety.": [85], "objective": [87], "this": [89, 107], "paper": [90], "protect": [93], "against": [97, 121, 267], "backdoor": [98, 110], "attacks": [101, 125], "reliable": [103], "operations.": [105], "In": [106], "paper,": [108], "detect-and-clean": [111], "mechanism,": [112], "code": [113], "named": [114], "Bkd-DETCLEAN,": [115], "secure": [117], "(backdoor)": [124], "proposed": [127, 203, 223, 235], "using": [128], "Random": [130], "Forest": [131], "Classifier.": [132], "Two": [133], "models": [134, 252], "were": [135], "designed,": [136], "trained": [137], "validated": [139], "on": [140, 151, 199], "both": [141], "clean": [142], "poisoned": [144, 168, 184], "dataset": [145], "respectively.": [146], "results": [148], "experiments": [150], "two": [152], "benchmark": [153], "datasets": [155], "shows": [156], "that": [157, 227], "our": [158], "solution": [159], "achieves": [160], "detection": [162, 207, 251], "98.5%,": [165], "effectively": [166], "identifying": [167], "samples": [169], "with": [170, 211], "little": [172], "below": [173], "5%": [174], "false": [175], "positive": [176], "rate.": [177], "Continued": [178], "cleaning": [180, 209], "iterations": [181], "restored": [182], "training": [185], "set,": [186], "resulting": [187], "in": [188, 225, 240, 253, 262, 271], "overall": [190], "improvement": [193], "78.9%": [195], "93%.": [197], "Based": [198], "these": [200], "results,": [201], "model": [204, 224], "sustained": [205], "high": [206], "efficiency": [210], "different": [212], "rates,": [214], "underscoring": [215], "effectiveness": [217], "driven": [222], "ensuring": [226, 256], "signal": [229], "integrity": [230, 258], "not": [232], "compromised.": [233], "mechanism": [236], "also": [238], "applicable": [239], "other": [241], "areas": [242], "including": [243], "healthcare": [244], "medical": [246], "protection,": [248], "protecting": [249, 266], "fraud": [250], "financial": [254], "systems,": [255, 265, 273], "sensor": [260], "industrial": [263], "control": [264], "manipulation": [270], "recommender": [272], "etc.": [274]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9897000193595886, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9897000193595886, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10429", "display_name": "EEG and Brain-Computer Interfaces", "score": 0.004900000058114529, "subfield": {"id": "https://openalex.org/subfields/2805", "display_name": "Cognitive Neuroscience"}, "field": {"id": "https://openalex.org/fields/28", "display_name": "Neuroscience"}, "domain": {"id": "https://openalex.org/domains/1", "display_name": "Life Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0006000000284984708, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.51519/journalisi.v7i3.1195", "is_oa": true, "landing_page_url": "https://doi.org/10.51519/journalisi.v7i3.1195", "pdf_url": "https://journal-isi.org/index.php/isi/article/download/1195/604", "source": {"id": "https://openalex.org/S4210216117", "display_name": "Journal of Information Systems and Informatics", "issn_l": "2656-4882", "issn": ["2656-4882", "2656-5935"], "is_oa": true, "is_in_doaj": true, "is_core": false, "listed_in": ["doaj"], "host_organization": null, "host_organization_name": null, "host_organization_lineage": [], "host_organization_lineage_names": [], "type": "journal"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Journal of Information Systems and Informatics", "raw_type": "journal-article"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4413340807", "doi": "https://doi.org/10.7753/ijcatr1312.1008", "title": "Adversarial Machine Learning for Robust Cybersecurity: Strengthening Deep Neural Architectures against Evasion, Poisoning, and Model-Inference Attacks", "publication_year": 2025, "publication_date": "2025-08-20", "type": "article", "language": "en", "authorships": [], "abstract_inverted_index": {"The": [0], "rapid": [1], "digitalization": [2], "of": [3, 11, 71, 128, 135, 142, 170, 203, 223], "modern": [4], "economies": [5], "has": [6, 51, 88], "expanded": [7], "the": [8, 69, 126, 140, 168, 201], "attack": [9, 227], "surface": [10], "critical": [12, 79], "systems,": [13], "exposing": [14], "organizations": [15], "and": [16, 26, 40, 65, 114, 133, 148, 160, 187, 200, 234], "governments": [17], "to": [18, 74, 104, 138, 176], "increasingly": [19], "sophisticated": [20], "cyber": [21, 164], "threats.Traditional": [22], "rule-based": [23], "defense": [24, 154], "mechanisms": [25], "static": [27], "security": [28], "architectures": [29], "are": [30, 102, 112], "proving": [31], "insufficient": [32], "in": [33, 93, 180, 206], "countering": [34], "advanced": [35], "persistent": [36], "threats,": [37], "zero-day": [38], "exploits,": [39], "highly": [41], "adaptive": [42], "adversaries.Artificial": [43], "intelligence": [44], "(AI),": [45], "particularly": [46], "deep": [47], "neural": [48], "networks": [49], "(DNNs),": [50], "emerged": [52], "as": [53, 184], "a": [54, 78, 90, 213], "cornerstone": [55], "for": [56], "enhancing": [57], "cybersecurity": [58, 143, 220], "through": [59], "automated": [60], "intrusion": [61], "detection,": [62, 64, 106], "anomaly": [63], "real-time": [66], "threat": [67], "response.However,": [68], "vulnerability": [70], "these": [72], "models": [73], "adversarial": [75, 129, 136, 196, 209], "attacks": [76], "presents": [77], "weakness": [80], "that": [81, 156], "adversaries": [82], "can": [83], "exploit.Adversarial": [84], "machine": [85, 210], "learning": [86, 150, 211], "(AML)": [87], "become": [89], "focal": [91], "area": [92], "strengthening": [94], "DNNs": [95], "against": [96, 225], "evasion": [97], "attacks,": [98, 116], "where": [99, 109], "malicious": [100], "inputs": [101], "designed": [103], "bypass": [105], "data": [107, 231], "poisoning,": [108], "training": [110], "sets": [111], "corrupted,": [113], "model-inference": [115], "which": [117], "extract": [118], "sensitive": [119], "information": [120], "from": [121], "trained": [122], "models.This": [123], "research": [124], "emphasizes": [125], "integration": [127], "training,": [130], "robust": [131], "optimization,": [132], "detection": [134], "examples": [137], "improve": [139], "resilience": [141], "systems.By": [144], "leveraging": [145], "explainable": [146], "AI": [147], "graph-based": [149], "mechanisms,": [151], "we": [152], "propose": [153], "strategies": [155], "provide": [157], "transparency,": [158], "adaptability,": [159], "robustness": [161, 175, 205], "across": [162, 198], "dynamic": [163], "environments.The": [165], "study": [166], "highlights": [167], "importance": [169], "balancing": [171], "predictive": [172], "performance": [173], "with": [174], "ensure": [177], "practical": [178], "deployment": [179], "high-stakes": [181], "domains": [182], "such": [183], "finance,": [185], "defense,": [186], "healthcare.We": [188], "also": [189], "discuss": [190], "emerging": [191], "challenges,": [192], "including": [193], "computational": [194], "overheads,": [195], "transferability": [197], "models,": [199], "difficulty": [202], "benchmarking": [204], "real-world": [207], "scenarios.Ultimately,": [208], "offers": [212], "transformative": [214], "pathway": [215], "toward": [216], "developing": [217], "resilient,": [218], "trustworthy": [219], "infrastructures": [221], "capable": [222], "defending": [224], "evolving": [226], "vectors": [228], "while": [229], "safeguarding": [230], "integrity,": [232], "confidentiality,": [233], "system": [235], "reliability.": [236]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10400", "display_name": "Network Security and Intrusion Detection", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1705", "display_name": "Computer Networks and Communications"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.7753/ijcatr1312.1008", "is_oa": true, "landing_page_url": "https://doi.org/10.7753/ijcatr1312.1008", "pdf_url": "https://doi.org/10.7753/ijcatr1312.1008", "source": {"id": "https://openalex.org/S2764994988", "display_name": "International Journal of Computer Applications Technology and Research", "issn_l": "2319-8656", "issn": ["2319-8656"], "is_oa": false, "is_in_doaj": false, "is_core": true, "listed_in": ["cwts-core"], "host_organization": null, "host_organization_name": null, "host_organization_lineage": [], "host_organization_lineage_names": [], "type": "journal"}, "license": null, "license_id": null, "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "International Journal of Computer Applications Technology and Research", "raw_type": "journal-article"}, "cited_by_count": 4, "is_retracted": false}, {"id": "https://openalex.org/W4414683742", "doi": "https://doi.org/10.48550/arxiv.2506.19140", "title": "Command-V: Pasting LLM Behaviors via Activation Profiles", "publication_year": 2025, "publication_date": "2025-06-23", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Wang, Barry", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Wang, Barry", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5026712341", "display_name": "Avi Schwarzschild", "orcid": "https://orcid.org/0000-0003-0997-4867", "observed_orcids": ["https://orcid.org/0000-0003-0997-4867"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Schwarzschild, Avi", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5028501158", "display_name": "Alexander Robey", "orcid": "https://orcid.org/0009-0003-5693-2819", "observed_orcids": ["https://orcid.org/0009-0003-5693-2819"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Robey, Alexander", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5076250758", "display_name": "Ali Payani", "orcid": "https://orcid.org/0000-0003-4054-2958", "observed_orcids": ["https://orcid.org/0000-0003-4054-2958"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Payani, Ali", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Fleming, Charles", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Fleming, Charles", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Sun, Mingjie", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Sun, Mingjie", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "last", "author": {"id": "https://openalex.org/A5022994077", "display_name": "Daphne Ippolito", "orcid": "https://orcid.org/0000-0001-9328-8995", "observed_orcids": ["https://orcid.org/0000-0001-9328-8995"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Ippolito, Daphne", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}], "abstract_inverted_index": {"Retrofitting": [0], "large": [1], "language": [2], "models": [3], "(LLMs)": [4], "with": [5], "new": [6], "behaviors": [7], "typically": [8], "requires": [9], "full": [10], "finetuning": [11, 110], "or": [12, 104], "distillation-costly": [13], "steps": [14], "that": [15, 33], "must": [16], "be": [17], "repeated": [18], "for": [19], "every": [20], "architecture.": [21], "In": [22, 92], "this": [23], "work,": [24], "we": [25], "introduce": [26], "Command-V,": [27], "a": [28, 41, 49, 57], "backpropagation-free": [29], "behavior": [30], "transfer": [31], "method": [32], "copies": [34], "an": [35], "existing": [36], "residual": [37], "activation": [38, 75], "adapter": [39], "from": [40], "donor": [42, 70], "model": [43], "and": [44, 67, 88, 99, 120], "pastes": [45], "its": [46], "effect": [47], "into": [48], "recipient": [50], "model.": [51], "Command-V": [52], "profiles": [53], "layer": [54], "activations": [55], "on": [56], "small": [58], "prompt": [59], "set,": [60], "derives": [61], "linear": [62], "converters": [63], "between": [64], "corresponding": [65], "layers,": [66], "applies": [68], "the": [69, 73, 84, 106], "intervention": [71], "in": [72], "recipient's": [74], "space.": [76], "This": [77], "process": [78], "does": [79], "not": [80], "require": [81], "access": [82], "to": [83], "original": [85], "training": [86], "data": [87, 121], "needs": [89], "minimal": [90], "compute.": [91, 117], "three": [93], "case": [94], "studies-safety-refusal": [95], "enhancement,": [96], "jailbreak": [97], "facilitation,": [98], "automatic": [100], "chain-of-thought": [101], "reasoning--Command-V": [102], "matches": [103], "exceeds": [105], "performance": [107], "of": [108, 114], "direct": [109], "while": [111], "using": [112], "orders": [113], "magnitude": [115], "less": [116], "Our": [118], "code": [119], "are": [122], "accessible": [123], "at": [124], "https://github.com/GithuBarry/Command-V/.": [125]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.451200008392334, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.451200008392334, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11307", "display_name": "Domain Adaptation and Few-Shot Learning", "score": 0.2728999853134155, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10028", "display_name": "Topic Modeling", "score": 0.20020000636577606, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "pmh:oai:arXiv.org:2506.19140", "is_oa": true, "landing_page_url": "http://arxiv.org/abs/2506.19140", "pdf_url": "https://arxiv.org/pdf/2506.19140", "source": {"id": "https://openalex.org/S4306400194", "display_name": "arXiv (Cornell University)", "issn_l": "2331-8422", "issn": ["2331-8422"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I205783295", "host_organization_name": "Cornell University", "host_organization_lineage": ["https://openalex.org/I205783295"], "host_organization_lineage_names": [], "type": "repository"}, "license": null, "license_id": null, "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "text"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4414580537", "doi": "https://doi.org/10.48550/arxiv.2505.13862", "title": "PandaGuard: Systematic Evaluation of LLM Safety against Jailbreaking Attacks", "publication_year": 2025, "publication_date": "2025-05-20", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5081220735", "display_name": "Guobin Shen", "orcid": "https://orcid.org/0000-0002-4069-2107", "observed_orcids": ["https://orcid.org/0000-0002-4069-2107"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Shen, Guobin", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5091698766", "display_name": "Dongcheng Zhao", "orcid": "https://orcid.org/0000-0002-0593-8650", "observed_orcids": ["https://orcid.org/0000-0002-0593-8650", "https://orcid.org/0000-0001-5280-8683"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Zhao, Dongcheng", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Feng, Linghao", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Feng, Linghao", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5004308926", "display_name": "Xiang He", "orcid": "https://orcid.org/0000-0003-0740-0253", "observed_orcids": ["https://orcid.org/0000-0003-0740-0253", "https://orcid.org/0009-0005-3036-0474"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "He, Xiang", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Wang, Jihang", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Wang, Jihang", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Shen, Sicheng", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Shen, Sicheng", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Tong, Haibo", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Tong, Haibo", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5101206796", "display_name": "Yiting Dong", "orcid": "https://orcid.org/0000-0002-8405-3139", "observed_orcids": ["https://orcid.org/0000-0002-8405-3139"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Dong, Yiting", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5042031737", "display_name": "Jindong Li", "orcid": "https://orcid.org/0000-0002-4009-916X", "observed_orcids": ["https://orcid.org/0000-0002-4009-916X", "https://orcid.org/0009-0007-2228-3696"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Li, Jindong", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5042329532", "display_name": "Xiang Zheng", "orcid": "https://orcid.org/0000-0002-2990-2169", "observed_orcids": ["https://orcid.org/0000-0002-2990-2169", "https://orcid.org/0000-0003-4288-1865"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Zheng, Xiang", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "last", "author": {"id": null, "display_name": "Zeng, Yi", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Zeng, Yi", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}], "abstract_inverted_index": {"Large": [0], "language": [1], "models": [2, 62], "(LLMs)": [3], "have": [4], "achieved": [5], "remarkable": [6], "capabilities": [7], "but": [8], "remain": [9], "vulnerable": [10], "to": [11, 142, 188], "adversarial": [12], "prompts": [13], "known": [14], "as": [15, 66], "jailbreaks,": [16], "which": [17], "can": [18], "bypass": [19], "safety": [20, 31, 65, 178], "alignment": [21], "and": [22, 45, 58, 73, 81, 103, 109, 133, 156, 170, 185, 191], "elicit": [23], "harmful": [24], "outputs.": [25], "Despite": [26], "growing": [27], "efforts": [28], "in": [29, 177, 194], "LLM": [30, 63, 98, 195], "research,": [32], "existing": [33], "evaluations": [34], "are": [35], "often": [36], "fragmented,": [37], "focused": [38], "on": [39, 113], "isolated": [40], "attack": [41, 79], "or": [42], "defense": [43, 83, 153, 164], "techniques,": [44], "lack": [46], "systematic,": [47], "reproducible": [48, 192], "analysis.": [49], "In": [50], "this": [51, 114], "work,": [52], "we": [53, 116], "introduce": [54], "PandaGuard,": [55], "a": [56, 67, 92, 119], "unified": [57], "modular": [59], "framework": [60, 76], "that": [61, 106, 122, 161, 171], "jailbreak": [64], "multi-agent": [68], "system": [69], "comprising": [70], "attackers,": [71], "defenders,": [72], "judges.": [74], "Our": [75, 144], "implements": [77], "19": [78], "methods": [80, 129], "12": [82], "mechanisms,": [84], "along": [85], "with": [86], "multiple": [87, 100], "judgment": [88, 135], "strategies,": [89], "all": [90, 168], "within": [91], "flexible": [93], "plugin": [94], "architecture": [95], "supporting": [96], "diverse": [97], "interfaces,": [99], "interaction": [101], "modes,": [102], "configuration-driven": [104], "experimentation": [105], "enhances": [107], "reproducibility": [108], "practical": [110], "deployment.": [111], "Built": [112], "framework,": [115], "develop": [117], "PandaBench,": [118], "comprehensive": [120], "benchmark": [121], "evaluates": [123], "the": [124, 182], "interactions": [125], "between": [126], "these": [127], "attack/defense": [128], "across": [130, 167], "49": [131], "LLMs": [132], "various": [134], "approaches,": [136], "requiring": [137], "over": [138], "3": [139], "billion": [140], "tokens": [141], "execute.": [143], "extensive": [145], "evaluation": [146, 186], "reveals": [147], "key": [148], "insights": [149], "into": [150], "model": [151], "vulnerabilities,": [152], "cost-performance": [154], "trade-offs,": [155], "judge": [157, 172], "consistency.": [158], "We": [159, 180], "find": [160], "no": [162], "single": [163], "is": [165], "optimal": [166], "dimensions": [169], "disagreement": [173], "introduces": [174], "nontrivial": [175], "variance": [176], "assessments.": [179], "release": [181], "code,": [183], "configurations,": [184], "results": [187], "support": [189], "transparent": [190], "research": [193], "safety.": [196]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10028", "display_name": "Topic Modeling", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "pmh:oai:arXiv.org:2505.13862", "is_oa": true, "landing_page_url": "http://arxiv.org/abs/2505.13862", "pdf_url": "https://arxiv.org/pdf/2505.13862", "source": {"id": "https://openalex.org/S4306400194", "display_name": "arXiv (Cornell University)", "issn_l": "2331-8422", "issn": ["2331-8422"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I205783295", "host_organization_name": "Cornell University", "host_organization_lineage": ["https://openalex.org/I205783295"], "host_organization_lineage_names": [], "type": "repository"}, "license": null, "license_id": null, "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "text"}, "cited_by_count": 1, "is_retracted": false}, {"id": "https://openalex.org/W4413283185", "doi": "https://doi.org/10.3390/computers14080332", "title": "Multi-Layered Framework for LLM Hallucination Mitigation in High-Stakes Applications: A Tutorial", "publication_year": 2025, "publication_date": "2025-08-16", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5075862014", "display_name": "Sachin Hiriyanna", "orcid": "https://orcid.org/0000-0003-1091-970X", "observed_orcids": ["https://orcid.org/0000-0003-1091-970X"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Sachin Hiriyanna", "raw_affiliation_strings": ["Navan Inc., Palo Alto, CA 94306, USA"], "raw_orcid": "https://orcid.org/0000-0003-1091-970X", "affiliations": [{"raw_affiliation_string": "Navan Inc., Palo Alto, CA 94306, USA", "institution_ids": []}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5065763841", "display_name": "Wenbing Zhao", "orcid": "https://orcid.org/0000-0002-3202-1127", "observed_orcids": ["https://orcid.org/0000-0002-3202-1127"]}, "institutions": [{"id": "https://openalex.org/I102607778", "display_name": "Cleveland State University", "ror": "https://ror.org/002tx1f22", "country_code": "US", "type": "education", "lineage": ["https://openalex.org/I102607778"]}], "countries": ["US"], "is_corresponding": true, "raw_author_name": "Wenbing Zhao", "raw_affiliation_strings": ["Department of Electrical and Computer Engineering, Cleveland State University, Cleveland, OH 44115, USA"], "raw_orcid": "https://orcid.org/0000-0002-3202-1127", "affiliations": [{"raw_affiliation_string": "Department of Electrical and Computer Engineering, Cleveland State University, Cleveland, OH 44115, USA", "institution_ids": ["https://openalex.org/I102607778"]}]}], "abstract_inverted_index": {"Large": [0], "language": [1, 13], "models": [2], "(LLMs)": [3], "now": [4], "match": [5], "or": [6, 43, 176, 236], "exceed": [7], "human": [8], "performance": [9], "on": [10, 76, 160], "many": [11], "open-ended": [12], "tasks,": [14], "yet": [15, 114], "they": [16], "continue": [17], "to": [18, 31, 134, 142, 146, 151, 183, 254], "produce": [19], "fluent": [20], "but": [21, 249], "incorrect": [22], "statements,": [23], "which": [24], "is": [25, 57, 106], "a": [26, 127, 136, 202, 221], "failure": [27], "mode": [28], "widely": [29], "referred": [30], "as": [32, 47], "hallucination.": [33], "In": [34], "low-stakes": [35], "settings": [36], "this": [37, 104], "may": [38], "be": [39], "tolerable;": [40], "in": [41, 103, 118, 126, 138, 187], "regulated": [42], "safety-critical": [44], "domains": [45], "such": [46], "financial": [48, 163], "services,": [49], "compliance": [50], "review,": [51], "and": [52, 93, 149, 215, 229, 262, 280], "client": [53], "decision": [54], "support,": [55], "it": [56], "not.": [58], "Motivated": [59], "by": [60], "these": [61], "realities,": [62], "we": [63, 181, 200, 219, 246, 267], "develop": [64], "an": [65, 191, 269], "integrated": [66], "mitigation": [67, 109, 208], "framework": [68, 81], "that": [69, 206, 225], "layers": [70], "complementary": [71], "controls": [72], "rather": [73], "than": [74], "relying": [75], "any": [77], "single": [78], "technique.": [79], "The": [80], "combines": [82], "structured": [83], "prompt": [84, 258], "design,": [85], "retrieval-augmented": [86], "generation": [87], "(RAG)": [88], "with": [89, 97], "verifiable": [90], "evidence": [91], "sources,": [92], "targeted": [94], "fine-tuning": [95], "aligned": [96], "domain": [98], "truth": [99], "constraints.": [100], "Our": [101], "interest": [102], "problem": [105], "practical.": [107], "Individual": [108], "techniques": [110], "have": [111], "matured": [112], "quickly,": [113], "teams": [115], "deploying": [116], "LLMs": [117], "production": [119, 273], "routinely": [120], "report": [121], "difficulty": [122], "stitching": [123], "them": [124], "together": [125], "coherent,": [128], "maintainable": [129], "pipeline.": [130], "Decisions": [131], "about": [132], "when": [133, 141, 239], "ground": [135], "response": [137], "retrieved": [139], "data,": [140], "escalate": [143], "uncertainty,": [144], "how": [145, 150], "capture": [147], "provenance,": [148], "evaluate": [152], "fidelity": [153], "are": [154], "often": [155], "made": [156], "ad": [157], "hoc.": [158], "Drawing": [159], "experience": [161], "from": [162, 283], "technology": [164], "implementations,": [165], "where": [166], "even": [167], "rare": [168], "hallucinations": [169], "can": [170], "carry": [171], "material": [172], "cost,": [173], "regulatory": [174], "exposure,": [175], "loss": [177], "of": [178, 190], "customer": [179], "trust,": [180], "aim": [182], "provide": [184], "clearer": [185], "guidance": [186], "the": [188], "form": [189], "easy-to-follow": [192], "tutorial.": [193], "This": [194], "paper": [195], "makes": [196], "four": [197], "contributions.": [198], "First,": [199], "introduce": [201], "three-layer": [203], "reference": [204], "architecture": [205], "organizes": [207], "activities": [209], "across": [210], "input": [211], "governance,": [212], "evidence-grounded": [213], "generation,": [214], "post-response": [216], "verification.": [217], "Second,": [218], "describe": [220], "lightweight": [222], "supervisory": [223], "agent": [224], "manages": [226], "uncertainty": [227], "signals": [228], "triggers": [230], "escalation": [231], "(to": [232], "humans,": [233], "alternate": [234], "models,": [235], "constrained": [237], "workflows)": [238], "confidence": [240], "falls": [241], "below": [242], "policy": [243, 263], "thresholds.": [244], "Third,": [245], "analyze": [247], "common": [248], "under-addressed": [250], "security": [251], "surfaces": [252], "relevant": [253], "hallucination": [255], "mitigation,": [256], "including": [257, 275], "injection,": [259], "retrieval": [260], "poisoning,": [261], "evasion": [264], "attacks.": [265], "Finally,": [266], "outline": [268], "implementation": [270], "playbook": [271], "for": [272], "deployment,": [274], "evaluation": [276], "metrics,": [277], "operational": [278], "trade-offs,": [279], "lessons": [281], "learned": [282], "early": [284], "financial-services": [285], "pilots.": [286]}, "primary_topic": {"id": "https://openalex.org/T10028", "display_name": "Topic Modeling", "score": 0.5508000254631042, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T10028", "display_name": "Topic Modeling", "score": 0.5508000254631042, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.39500001072883606, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10181", "display_name": "Natural Language Processing Techniques", "score": 0.02410000003874302, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.3390/computers14080332", "is_oa": true, "landing_page_url": "https://doi.org/10.3390/computers14080332", "pdf_url": "https://www.mdpi.com/2073-431X/14/8/332/pdf?version=1755333839", "source": {"id": "https://openalex.org/S4210228075", "display_name": "Computers", "issn_l": "2073-431X", "issn": ["2073-431X"], "is_oa": true, "is_in_doaj": true, "is_core": true, "listed_in": ["cwts-core", "doaj", "norway-1"], "host_organization": "https://openalex.org/P4310310987", "host_organization_name": "Multidisciplinary Digital Publishing Institute", "host_organization_lineage": ["https://openalex.org/P4310310987"], "host_organization_lineage_names": ["Multidisciplinary Digital Publishing Institute"], "type": "journal"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Computers", "raw_type": "journal-article"}, "cited_by_count": 9, "is_retracted": false}, {"id": "https://openalex.org/W7108743113", "doi": "https://doi.org/10.5281/zenodo.17819442", "title": "Attentional Filtering for Enhanced Robustness and Generalization in Deep Learning", "publication_year": 2025, "publication_date": "2025-12-04", "type": "article", "language": null, "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Revista, Zen", "orcid": "https://orcid.org/0009-0007-6299-2008", "observed_orcids": ["https://orcid.org/0009-0007-6299-2008"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Revista, Zen", "raw_affiliation_strings": [], "raw_orcid": "https://orcid.org/0009-0007-6299-2008", "affiliations": []}, {"author_position": "last", "author": {"id": null, "display_name": "IA, 10", "orcid": "https://orcid.org/0009-0007-6299-2008", "observed_orcids": ["https://orcid.org/0009-0007-6299-2008"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "IA, 10", "raw_affiliation_strings": [], "raw_orcid": "https://orcid.org/0009-0007-6299-2008", "affiliations": []}], "abstract_inverted_index": {"Deep": [0], "learning": [1, 124], "models": [2, 63, 125], "have": [3], "achieved": [4], "remarkable": [5], "success": [6], "in": [7, 91, 126], "various": [8], "domains,": [9], "but": [10], "they": [11], "often": [12], "struggle": [13], "with": [14], "robustness": [15, 44, 93], "against": [16, 94], "adversarial": [17, 95], "attacks": [18, 96], "and": [19, 45, 54, 69, 97, 120], "generalization": [20, 98], "to": [21, 36, 64, 72, 101], "unseen": [22], "data.": [23], "This": [24], "paper": [25], "introduces": [26], "attentional": [27, 60, 82, 110], "filtering,": [28], "a": [29, 78, 113], "novel": [30], "approach": [31], "that": [32], "leverages": [33], "attention": [34], "mechanisms": [35], "selectively": [37], "filter": [38], "input": [39], "features,": [40], "thereby": [41], "enhancing": [42], "both": [43, 92], "generalization.": [46], "By": [47], "focusing": [48], "on": [49, 84], "the": [50, 107, 118], "most": [51], "relevant": [52], "features": [53], "suppressing": [55], "noise": [56], "or": [57], "irrelevant": [58], "information,": [59], "filtering": [61, 83, 111], "enables": [62], "learn": [65], "more": [66], "robust": [67], "representations": [68], "generalize": [70], "better": [71], "new": [73], "data": [74], "distributions.": [75], "We": [76], "present": [77], "comprehensive": [79], "evaluation": [80], "of": [81, 109, 122], "several": [85], "benchmark": [86], "datasets,": [87], "demonstrating": [88], "significant": [89], "improvements": [90], "performance": [99], "compared": [100], "state-of-the-art": [102], "methods.": [103], "Our": [104], "results": [105], "highlight": [106], "potential": [108], "as": [112], "powerful": [114], "technique": [115], "for": [116], "improving": [117], "reliability": [119], "applicability": [121], "deep": [123], "real-world": [127], "scenarios.": [128]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9883000254631042, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9883000254631042, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10036", "display_name": "Advanced Neural Network Applications", "score": 0.006200000178068876, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11307", "display_name": "Domain Adaptation and Few-Shot Learning", "score": 0.00139999995008111, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.5281/zenodo.17819442", "is_oa": true, "landing_page_url": "https://doi.org/10.5281/zenodo.17819442", "pdf_url": null, "source": {"id": "https://openalex.org/S4306400562", "display_name": "Zenodo (CERN European Organization for Nuclear Research)", "issn_l": null, "issn": null, "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I67311998", "host_organization_name": "European Organization for Nuclear Research", "host_organization_lineage": ["https://openalex.org/I67311998"], "host_organization_lineage_names": [], "type": "repository"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": null, "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "JournalArticle"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4407212768", "doi": "https://doi.org/10.48550/arxiv.2502.02913", "title": "Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage", "publication_year": 2025, "publication_date": "2025-02-05", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5111240418", "display_name": "Jiayang Meng", "orcid": "https://orcid.org/0009-0004-4305-6175", "observed_orcids": ["https://orcid.org/0009-0004-4305-6175"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Meng, Jiayang", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5068307801", "display_name": "Tao Huang", "orcid": "https://orcid.org/0000-0002-5504-7848", "observed_orcids": ["https://orcid.org/0000-0002-5504-7848"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Huang, Tao", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5100420423", "display_name": "Hong Chen", "orcid": "https://orcid.org/0000-0002-2035-6851", "observed_orcids": ["https://orcid.org/0000-0002-2035-6851"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Chen, Hong", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Shi, Xin", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Shi, Xin", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5111240419", "display_name": "Qingyu Huang", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Huang, Qingyu", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "last", "author": {"id": "https://openalex.org/A5112321698", "display_name": "Chen Hou", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Hou, Chen", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}], "abstract_inverted_index": {"The": [0], "widespread": [1], "deployment": [2, 188], "of": [3, 77, 106, 116, 149, 164, 189], "deep": [4, 190], "learning": [5, 191], "models": [6, 192], "in": [7, 169, 182, 193], "privacy-sensitive": [8], "domains": [9], "has": [10], "amplified": [11], "concerns": [12], "regarding": [13], "privacy": [14, 25, 62, 78, 117, 150, 165, 173, 183], "risks,": [15], "particularly": [16], "those": [17], "stemming": [18], "from": [19, 84, 110], "gradient": [20, 92], "leakage": [21, 109, 151], "during": [22, 65, 87], "training.": [23, 88], "Current": [24], "assessments": [26, 148], "primarily": [27], "rely": [28], "on": [29, 49, 121], "post-training": [30], "attack": [31, 44, 123], "simulations.": [32, 124], "However,": [33], "these": [34], "methods": [35], "are": [36, 81], "inherently": [37], "reactive,": [38], "unable": [39], "to": [40, 61, 135], "encompass": [41], "all": [42], "potential": [43], "scenarios,": [45], "and": [46, 142, 146, 167, 171], "often": [47], "based": [48], "idealized": [50], "adversarial": [51, 122], "assumptions.": [52], "These": [53], "limitations": [54], "underscore": [55], "the": [56, 66, 75, 104, 137, 153, 162, 186], "need": [57], "for": [58], "proactive": [59, 176], "approaches": [60], "risk": [63], "assessment": [64], "training": [67, 111, 140, 154], "process.": [68, 155], "To": [69], "address": [70], "this": [71], "gap,": [72], "we": [73, 126], "propose": [74], "concept": [76], "tokens,": [79], "which": [80], "derived": [82], "directly": [83], "private": [85, 107], "gradients": [86], "Privacy": [89], "tokens": [90, 166], "encapsulate": [91], "features": [93], "and,": [94], "when": [95], "combined": [96], "with": [97], "data": [98, 141], "features,": [99], "offer": [100], "valuable": [101], "insights": [102], "into": [103], "extent": [105], "information": [108], "data,": [112], "enabling": [113], "real-time": [114], "measurement": [115], "risks": [118], "without": [119], "relying": [120], "Additionally,": [125], "employ": [127], "Mutual": [128], "Information": [129], "(MI)": [130], "as": [131], "a": [132, 179], "robust": [133], "metric": [134], "quantify": [136], "relationship": [138], "between": [139], "gradients,": [143], "providing": [144], "precise": [145], "continuous": [147], "throughout": [152], "Extensive": [156], "experiments": [157], "validate": [158], "our": [159], "framework,": [160], "demonstrating": [161], "effectiveness": [163], "MI": [168], "identifying": [170], "quantifying": [172], "risks.": [174], "This": [175], "approach": [177], "marks": [178], "significant": [180], "advancement": [181], "monitoring,": [184], "promoting": [185], "safer": [187], "sensitive": [194], "applications.": [195]}, "primary_topic": {"id": "https://openalex.org/T10764", "display_name": "Privacy-Preserving Technologies in Data", "score": 0.9990000128746033, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T10764", "display_name": "Privacy-Preserving Technologies in Data", "score": 0.9990000128746033, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.0006000000284984708, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11045", "display_name": "Privacy, Security, and Data Protection", "score": 9.999999747378752e-05, "subfield": {"id": "https://openalex.org/subfields/3312", "display_name": "Sociology and Political Science"}, "field": {"id": "https://openalex.org/fields/33", "display_name": "Social Sciences"}, "domain": {"id": "https://openalex.org/domains/2", "display_name": "Social Sciences"}}], "primary_location": {"id": "pmh:oai:arXiv.org:2502.02913", "is_oa": true, "landing_page_url": "http://arxiv.org/abs/2502.02913", "pdf_url": "https://arxiv.org/pdf/2502.02913", "source": {"id": "https://openalex.org/S4306400194", "display_name": "arXiv (Cornell University)", "issn_l": "2331-8422", "issn": ["2331-8422"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I205783295", "host_organization_name": "Cornell University", "host_organization_lineage": ["https://openalex.org/I205783295"], "host_organization_lineage_names": [], "type": "repository"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "text"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4413991433", "doi": "https://doi.org/10.3390/app15179685", "title": "Robust DeepFake Audio Detection via an Improved NeXt-TDNN with Multi-Fused Self-Supervised Learning Features", "publication_year": 2025, "publication_date": "2025-09-03", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5073440516", "display_name": "G\u00fcl Tahao\u011flu", "orcid": "https://orcid.org/0000-0002-8828-5674", "observed_orcids": ["https://orcid.org/0000-0002-8828-5674"]}, "institutions": [{"id": "https://openalex.org/I162720556", "display_name": "Karadeniz Technical University", "ror": "https://ror.org/03z8fyr40", "country_code": "TR", "type": "education", "lineage": ["https://openalex.org/I162720556"]}], "countries": ["TR"], "is_corresponding": true, "raw_author_name": "Gul Tahaoglu", "raw_affiliation_strings": ["Department of Computer Engineering, Karadeniz Technical University, Trabzon 61080, T\u00fcrkiye"], "raw_orcid": "https://orcid.org/0000-0002-8828-5674", "affiliations": [{"raw_affiliation_string": "Department of Computer Engineering, Karadeniz Technical University, Trabzon 61080, T\u00fcrkiye", "institution_ids": ["https://openalex.org/I162720556"]}]}], "abstract_inverted_index": {"Deepfake": [0], "audio": [1, 79, 82], "refers": [2], "to": [3, 24, 43, 76], "speech": [4, 88], "that": [5, 141], "has": [6], "been": [7], "synthetically": [8], "generated": [9], "or": [10], "altered": [11], "through": [12, 104], "advanced": [13], "neural": [14], "network": [15], "techniques,": [16], "often": [17], "with": [18, 126, 268], "a": [19, 59, 118, 146, 156, 164, 193, 228, 269, 273, 282], "degree": [20], "of": [21, 52, 69, 208, 213, 231, 236, 271, 275, 279, 285], "realism": [22], "sufficient": [23], "convincingly": [25], "imitate": [26], "genuine": [27], "human": [28], "voices.": [29], "As": [30], "these": [31], "manipulations": [32], "become": [33], "increasingly": [34], "indistinguishable": [35], "from": [36, 86], "authentic": [37], "recordings,": [38], "they": [39], "present": [40], "significant": [41], "threats": [42], "security,": [44], "undermine": [45], "media": [46], "integrity,": [47], "and": [48, 73, 96, 134, 149, 163, 199, 210, 233, 256, 281], "challenge": [49], "the": [50, 67, 142, 169, 186, 190, 205, 218, 224, 239, 245, 260], "reliability": [51], "digital": [53], "authentication": [54], "systems.": [55], "In": [56], "this": [57], "study,": [58], "robust": [60], "detection": [61, 182], "framework": [62], "is": [63], "proposed,": [64], "which": [65, 251], "leverages": [66], "power": [68], "self-supervised": [70], "learning": [71], "(SSL)": [72], "attention-based": [74], "modeling": [75], "identify": [77], "deepfake": [78, 181], "samples.": [80], "Specifically,": [81], "features": [83, 100, 113], "are": [84, 101, 114], "extracted": [85], "input": [87], "using": [89, 117], "two": [90], "powerful": [91], "pretrained": [92], "SSL": [93], "models:": [94], "HuBERT-Large": [95], "WavLM-Large.": [97], "These": [98], "distinctive": [99], "then": [102], "integrated": [103], "an": [105, 277], "Attentional": [106], "Multi-Feature": [107], "Fusion": [108], "(AMFF)": [109], "mechanism.": [110], "The": [111], "fused": [112], "subsequently": [115], "classified": [116], "NeXt-Time": [119], "Delay": [120], "Neural": [121], "Network": [122], "(NeXt-TDNN)": [123], "model": [124], "enhanced": [125], "Efficient": [127], "Channel": [128], "Attention": [129], "(ECA),": [130], "enabling": [131], "improved": [132], "temporal": [133], "channel-wise": [135], "feature": [136], "discrimination.": [137], "Experimental": [138], "results": [139], "show": [140], "proposed": [143, 225, 261], "method": [144, 191, 226, 262], "achieves": [145, 263], "0.42%": [147], "EER": [148, 158, 167], "0.01": [150], "min-tDCF": [151], "on": [152, 159, 168, 185, 217, 238], "ASVspoof": [153, 160, 171, 187, 219, 240, 248], "2019": [154, 161, 220, 241], "LA,": [155], "1.01%": [157], "PA,": [162], "pooled": [165], "6.56%": [166], "cross-channel": [170], "2021": [172], "LA": [173, 221], "evaluation,": [174], "thus": [175], "highlighting": [176], "its": [177], "effectiveness": [178], "for": [179], "real-world": [180], "scenarios.": [183], "Furthermore,": [184], "5": [188, 249], "dataset,": [189, 222, 250], "achieved": [192, 227], "7.23%": [194], "EER,": [195], "outperforming": [196], "strong": [197, 201], "baselines": [198], "demonstrating": [200], "generalization": [202], "ability.": [203], "Moreover,": [204], "macro-averaged": [206, 229, 264], "F1-score": [207, 230], "96.01%": [209], "balanced": [211, 234, 283], "accuracy": [212, 235, 284], "99.06%": [214], "were": [215], "obtained": [216], "while": [223], "98.70%": [232], "98.90%": [237], "PA": [242], "dataset.": [243], "On": [244], "highly": [246], "challenging": [247], "includes": [252], "crowdsourced,": [253], "non-studio-quality": [254], "audio,": [255], "novel": [257], "adversarial": [258], "attacks,": [259], "metrics": [265], "exceeding": [266], "92%,": [267], "precision": [270], "92.07%,": [272], "recall": [274], "92.63%,": [276], "F1-measure": [278], "92.35%,": [280], "92.63%.": [286]}, "primary_topic": {"id": "https://openalex.org/T10201", "display_name": "Speech Recognition and Synthesis", "score": 0.9940999746322632, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T10201", "display_name": "Speech Recognition and Synthesis", "score": 0.9940999746322632, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10860", "display_name": "Speech and Audio Processing", "score": 0.003000000026077032, "subfield": {"id": "https://openalex.org/subfields/1711", "display_name": "Signal Processing"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 0.0007999999797903001, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.3390/app15179685", "is_oa": true, "landing_page_url": "https://doi.org/10.3390/app15179685", "pdf_url": "https://www.mdpi.com/2076-3417/15/17/9685/pdf?version=1756888874", "source": {"id": "https://openalex.org/S4210205812", "display_name": "Applied Sciences", "issn_l": "2076-3417", "issn": ["2076-3417"], "is_oa": true, "is_in_doaj": true, "is_core": true, "listed_in": ["cwts-core", "doaj", "norway-1"], "host_organization": "https://openalex.org/P4310310987", "host_organization_name": "Multidisciplinary Digital Publishing Institute", "host_organization_lineage": ["https://openalex.org/P4310310987"], "host_organization_lineage_names": ["Multidisciplinary Digital Publishing Institute"], "type": "journal"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Applied Sciences", "raw_type": "journal-article"}, "cited_by_count": 10, "is_retracted": false}, {"id": "https://openalex.org/W4411464665", "doi": "https://doi.org/10.30574/wjaets.2025.15.3.1086", "title": "Generative AI Integration with Cloud Services: Revolutionizing Cybersecurity Frameworks", "publication_year": 2025, "publication_date": "2025-06-19", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Raakesh Dhanasekaran", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I180949307", "display_name": "Illinois Institute of Technology", "ror": "https://ror.org/037t3ry66", "country_code": "US", "type": "education", "lineage": ["https://openalex.org/I180949307"]}], "countries": ["US"], "is_corresponding": true, "raw_author_name": "Raakesh Dhanasekaran", "raw_affiliation_strings": ["Illinois Institute of Tech , Chicago , USA"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Illinois Institute of Tech , Chicago , USA", "institution_ids": ["https://openalex.org/I180949307"]}]}], "abstract_inverted_index": {"The": [0, 156], "integration": [1, 82], "of": [2, 61, 159, 166, 181, 195], "generative": [3], "artificial": [4], "intelligence": [5], "with": [6], "cloud": [7, 45, 198], "computing": [8, 126], "has": [9], "fundamentally": [10], "transformed": [11], "cybersecurity": [12], "frameworks,": [13], "enabling": [14], "unprecedented": [15], "capabilities": [16], "in": [17, 73], "threat": [18, 190], "detection": [19, 40, 74], "and": [20, 41, 78, 96, 118, 169, 197], "automated": [21, 97], "incident": [22], "response.": [23], "This": [24], "technological": [25, 161], "convergence": [26, 194], "allows": [27], "organizations": [28, 175], "to": [29, 33, 56, 172], "shift": [30], "from": [31], "reactive": [32], "proactive": [34], "security": [35, 50, 86, 107, 167], "postures": [36], "through": [37, 141], "sophisticated": [38, 189], "anomaly": [39], "predictive": [42], "analytics.": [43], "Major": [44], "providers": [46], "have": [47], "embedded": [48], "AI-driven": [49], "tools": [51], "that": [52, 102, 174], "analyze": [53], "vast": [54], "datasets": [55], "identify": [57], "subtle": [58], "patterns": [59], "indicative": [60], "potential": [62, 180], "threats": [63, 101], "before": [64], "they": [65], "materialize": [66], "into": [67], "breaches.": [68], "While": [69], "delivering": [70], "significant": [71], "improvements": [72], "accuracy,": [75], "response": [76], "time,": [77], "cost": [79], "reduction,": [80], "this": [81, 160], "also": [83], "introduces": [84], "novel": [85], "challenges.": [87], "Adversarial": [88], "attacks": [89], "against": [90, 187], "AI": [91, 134, 182, 196], "models,": [92], "AI-generated": [93], "phishing": [94], "campaigns,": [95], "malware": [98], "represent": [99], "emerging": [100], "require": [103], "comprehensive": [104], "countermeasures.": [105], "Multi-layered": [106], "frameworks": [108, 171], "incorporating": [109], "access": [110], "control,": [111], "data": [112, 138], "protection,": [113], "confidential": [114], "computing,": [115], "model": [116, 151], "security,": [117], "continuous": [119], "monitoring": [120], "provide": [121], "effective": [122], "defense": [123], "mechanisms.": [124], "Confidential": [125], "emerges": [127], "as": [128], "a": [129], "critical": [130], "technology": [131], "for": [132, 149], "securing": [133], "operations,": [135], "protecting": [136], "sensitive": [137], "during": [139], "processing": [140], "hardware-based": [142], "isolation": [143], "while": [144, 183], "facilitating": [145], "secure": [146], "multi-party": [147], "computation": [148], "collaborative": [150], "training": [152], "across": [153], "regulated": [154], "industries.": [155], "rapid": [157], "evolution": [158], "intersection": [162], "demands": [163], "ongoing": [164], "adaptation": [165], "strategies": [168], "governance": [170], "ensure": [173], "can": [176], "leverage": [177], "the": [178, 193], "transformative": [179], "maintaining": [184], "robust": [185], "defenses": [186], "increasingly": [188], "actors": [191], "targeting": [192], "infrastructure.": [199]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.40059998631477356, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.40059998631477356, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10400", "display_name": "Network Security and Intrusion Detection", "score": 0.27250000834465027, "subfield": {"id": "https://openalex.org/subfields/1705", "display_name": "Computer Networks and Communications"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11614", "display_name": "Cloud Data Security Solutions", "score": 0.17020000517368317, "subfield": {"id": "https://openalex.org/subfields/1710", "display_name": "Information Systems"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.30574/wjaets.2025.15.3.1086", "is_oa": true, "landing_page_url": "https://doi.org/10.30574/wjaets.2025.15.3.1086", "pdf_url": "https://journalwjaets.com/sites/default/files/fulltext_pdf/WJAETS-2025-1086.pdf", "source": {"id": "https://openalex.org/S4210239011", "display_name": "World Journal of Advanced Engineering Technology and Sciences", "issn_l": "2582-8266", "issn": ["2582-8266"], "is_oa": false, "is_in_doaj": false, "is_core": true, "listed_in": ["cwts-core"], "host_organization": "https://openalex.org/P4383735917", "host_organization_name": "GSC Online Press", "host_organization_lineage": ["https://openalex.org/P4383735917"], "host_organization_lineage_names": ["GSC Online Press"], "type": "journal"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "World Journal of Advanced Engineering Technology and Sciences", "raw_type": "journal-article"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4410198389", "doi": "https://doi.org/10.1016/j.future.2025.107877", "title": "Can LLM-generated misinformation be detected: A study on Cyber Threat Intelligence", "publication_year": 2025, "publication_date": "2025-05-08", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "He Huang", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I31746571", "display_name": "UNSW Sydney", "ror": "https://ror.org/03r8z3t63", "country_code": "AU", "type": "education", "lineage": ["https://openalex.org/I31746571"]}, {"id": "https://openalex.org/I4394709116", "display_name": "UNSW Canberra", "ror": "https://ror.org/0125wpx05", "country_code": null, "type": "education", "lineage": ["https://openalex.org/I31746571", "https://openalex.org/I4394709116"]}], "countries": ["AU"], "is_corresponding": false, "raw_author_name": "He Huang", "raw_affiliation_strings": ["University of New South Wales, Northcott Dr, Campbell, Canberra, 2600, ACT, Australia"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "University of New South Wales, Northcott Dr, Campbell, Canberra, 2600, ACT, Australia", "institution_ids": ["https://openalex.org/I31746571", "https://openalex.org/I4394709116"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5070493833", "display_name": "Nan Sun", "orcid": "https://orcid.org/0000-0001-9123-9022", "observed_orcids": ["https://orcid.org/0000-0001-9123-9022"]}, "institutions": [{"id": "https://openalex.org/I31746571", "display_name": "UNSW Sydney", "ror": "https://ror.org/03r8z3t63", "country_code": "AU", "type": "education", "lineage": ["https://openalex.org/I31746571"]}, {"id": "https://openalex.org/I4394709116", "display_name": "UNSW Canberra", "ror": "https://ror.org/0125wpx05", "country_code": null, "type": "education", "lineage": ["https://openalex.org/I31746571", "https://openalex.org/I4394709116"]}], "countries": ["AU"], "is_corresponding": true, "raw_author_name": "Nan Sun", "raw_affiliation_strings": ["University of New South Wales, Northcott Dr, Campbell, Canberra, 2600, ACT, Australia"], "raw_orcid": "https://orcid.org/0000-0001-9123-9022", "affiliations": [{"raw_affiliation_string": "University of New South Wales, Northcott Dr, Campbell, Canberra, 2600, ACT, Australia", "institution_ids": ["https://openalex.org/I31746571", "https://openalex.org/I4394709116"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5076982333", "display_name": "Massimiliano Tani", "orcid": "https://orcid.org/0000-0001-7642-8343", "observed_orcids": ["https://orcid.org/0000-0001-7642-8343"]}, "institutions": [{"id": "https://openalex.org/I31746571", "display_name": "UNSW Sydney", "ror": "https://ror.org/03r8z3t63", "country_code": "AU", "type": "education", "lineage": ["https://openalex.org/I31746571"]}, {"id": "https://openalex.org/I4394709116", "display_name": "UNSW Canberra", "ror": "https://ror.org/0125wpx05", "country_code": null, "type": "education", "lineage": ["https://openalex.org/I31746571", "https://openalex.org/I4394709116"]}], "countries": ["AU"], "is_corresponding": false, "raw_author_name": "Massimiliano Tani", "raw_affiliation_strings": ["University of New South Wales, Northcott Dr, Campbell, Canberra, 2600, ACT, Australia"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "University of New South Wales, Northcott Dr, Campbell, Canberra, 2600, ACT, Australia", "institution_ids": ["https://openalex.org/I31746571", "https://openalex.org/I4394709116"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5015011245", "display_name": "Leo Yu Zhang", "orcid": "https://orcid.org/0000-0001-9330-2662", "observed_orcids": ["https://orcid.org/0000-0001-9330-2662"]}, "institutions": [{"id": "https://openalex.org/I31746571", "display_name": "UNSW Sydney", "ror": "https://ror.org/03r8z3t63", "country_code": "AU", "type": "education", "lineage": ["https://openalex.org/I31746571"]}, {"id": "https://openalex.org/I4394709116", "display_name": "UNSW Canberra", "ror": "https://ror.org/0125wpx05", "country_code": null, "type": "education", "lineage": ["https://openalex.org/I31746571", "https://openalex.org/I4394709116"]}], "countries": ["AU"], "is_corresponding": false, "raw_author_name": "Yu Zhang", "raw_affiliation_strings": ["University of New South Wales, Northcott Dr, Campbell, Canberra, 2600, ACT, Australia"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "University of New South Wales, Northcott Dr, Campbell, Canberra, 2600, ACT, Australia", "institution_ids": ["https://openalex.org/I31746571", "https://openalex.org/I4394709116"]}]}, {"author_position": "middle", "author": {"id": null, "display_name": "Jiaojiao Jiang", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I31746571", "display_name": "UNSW Sydney", "ror": "https://ror.org/03r8z3t63", "country_code": "AU", "type": "education", "lineage": ["https://openalex.org/I31746571"]}], "countries": ["AU"], "is_corresponding": false, "raw_author_name": "Jiaojiao Jiang", "raw_affiliation_strings": ["University of New South Wales, High St, Kensington, Sydney, 2052, NSW, Australia"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "University of New South Wales, High St, Kensington, Sydney, 2052, NSW, Australia", "institution_ids": ["https://openalex.org/I31746571"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5015261020", "display_name": "Sanjay Kumar Jha", "orcid": "https://orcid.org/0000-0002-1844-1520", "observed_orcids": ["https://orcid.org/0000-0002-1844-1520"]}, "institutions": [{"id": "https://openalex.org/I31746571", "display_name": "UNSW Sydney", "ror": "https://ror.org/03r8z3t63", "country_code": "AU", "type": "education", "lineage": ["https://openalex.org/I31746571"]}], "countries": ["AU"], "is_corresponding": false, "raw_author_name": "Sanjay Jha", "raw_affiliation_strings": ["University of New South Wales, High St, Kensington, Sydney, 2052, NSW, Australia"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "University of New South Wales, High St, Kensington, Sydney, 2052, NSW, Australia", "institution_ids": ["https://openalex.org/I31746571"]}]}], "abstract_inverted_index": {"Given": [0], "the": [1, 50, 56, 84, 87, 157, 160, 179, 198, 231], "increasing": [2], "number": [3], "and": [4, 26, 42, 90, 149, 171, 227, 257], "severity": [5], "of": [6, 53, 58, 86, 159, 192, 200, 233], "cyber": [7], "attacks,": [8], "there": [9, 103], "has": [10], "been": [11], "a": [12, 77, 124, 135, 164, 239], "surge": [13], "in": [14, 244], "cybersecurity": [15, 38, 54, 131], "information": [16], "across": [17], "various": [18, 206], "mediums": [19], "such": [20, 97], "as": [21, 98], "posts,": [22], "news": [23, 101], "articles,": [24], "reports,": [25], "other": [27, 95], "resources.": [28], "Cyber": [29], "Threat": [30], "Intelligence": [31], "(CTI)": [32], "involves": [33], "processing": [34], "data": [35, 67, 132, 152], "from": [36, 185], "these": [37], "sources,": [39], "enabling": [40], "professionals": [41], "organizations": [43], "to": [44, 63, 133, 155, 214, 230], "gain": [45], "valuable": [46], "insights.": [47], "However,": [48], "with": [49], "rapid": [51], "dissemination": [52], "information,": [55], "inclusion": [57], "fake": [59, 92, 99, 113, 221, 234], "CTI": [60, 114, 142, 181, 187, 235], "can": [61], "lead": [62], "severe": [64], "consequences,": [65], "including": [66], "poisoning": [68], "attacks.": [69], "To": [70, 117, 248], "address": [71, 118], "this": [72, 119, 245], "challenge,": [73], "we": [74, 121, 237, 252], "have": [75], "implemented": [76], "three-step": [78], "strategy:": [79], "generating": [80], "synthetic": [81, 141, 151], "CTI,": [82, 89], "evaluating": [83], "quality": [85, 158], "generated": [88, 161, 180], "detecting": [91], "CTI.": [93, 222], "Unlike": [94], "subdomains,": [96], "COVID": [100], "detection,": [102, 236], "is": [104], "currently": [105], "no": [106], "publicly": [107, 260], "available": [108, 261], "dataset": [109, 127, 213], "specifically": [110], "tailored": [111], "for": [112, 140, 219, 241], "detection": [115, 208], "research.": [116], "gap,": [120], "first": [122], "establish": [123, 215], "reliable": [125], "groundtruth": [126, 212], "by": [128, 188], "utilizing": [129], "domain-specific": [130], "fine-tune": [134], "Large": [136], "Language": [137], "Model": [138], "(LLM)": [139], "generation.": [143], "We": [144, 204], "then": [145], "employ": [146], "crowdsourcing": [147], "techniques": [148, 209, 226], "advanced": [150], "verification": [153], "methods": [154], "evaluate": [156], "dataset,": [162, 256], "introducing": [163], "novel": [165], "evaluation": [166, 176], "methodology": [167], "that": [168, 178], "combines": [169], "quantitative": [170], "qualitative": [172], "approaches.": [173], "Our": [174], "comprehensive": [175], "reveals": [177], "cannot": [182], "be": [183], "distinguished": [184], "genuine": [186], "human": [189], "annotators,": [190], "regardless": [191], "their": [193], "computer": [194], "science": [195], "background,": [196], "demonstrating": [197], "effectiveness": [199], "our": [201, 211, 254], "generation": [202], "approach.": [203], "benchmark": [205], "misinformation": [207], "against": [210], "baseline": [216], "performance": [217], "metrics": [218], "identifying": [220], "By": [223], "leveraging": [224], "existing": [225], "adapting": [228], "them": [229], "context": [232], "provide": [238], "foundation": [240], "future": [242], "research": [243], "critical": [246], "field.": [247], "facilitate": [249], "further": [250], "research,": [251], "make": [253], "code,": [255], "experimental": [258], "results": [259], "on": [262], "GitHub": [263], ".": [264]}, "primary_topic": {"id": "https://openalex.org/T11147", "display_name": "Misinformation and Its Impacts", "score": 0.9965999722480774, "subfield": {"id": "https://openalex.org/subfields/3312", "display_name": "Sociology and Political Science"}, "field": {"id": "https://openalex.org/fields/33", "display_name": "Social Sciences"}, "domain": {"id": "https://openalex.org/domains/2", "display_name": "Social Sciences"}}, "topics": [{"id": "https://openalex.org/T11147", "display_name": "Misinformation and Its Impacts", "score": 0.9965999722480774, "subfield": {"id": "https://openalex.org/subfields/3312", "display_name": "Sociology and Political Science"}, "field": {"id": "https://openalex.org/fields/33", "display_name": "Social Sciences"}, "domain": {"id": "https://openalex.org/domains/2", "display_name": "Social Sciences"}}, {"id": "https://openalex.org/T11644", "display_name": "Spam and Phishing Detection", "score": 0.0027000000700354576, "subfield": {"id": "https://openalex.org/subfields/1710", "display_name": "Information Systems"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10734", "display_name": "Information and Cyber Security", "score": 9.999999747378752e-05, "subfield": {"id": "https://openalex.org/subfields/1710", "display_name": "Information Systems"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.1016/j.future.2025.107877", "is_oa": true, "landing_page_url": "https://doi.org/10.1016/j.future.2025.107877", "pdf_url": null, "source": {"id": "https://openalex.org/S186357190", "display_name": "Future Generation Computer Systems", "issn_l": "0167-739X", "issn": ["0167-739X", "1872-7115"], "is_oa": false, "is_in_doaj": false, "is_core": true, "listed_in": ["cwts-core", "jufo-3", "ki-jl-2", "norway-2"], "host_organization": "https://openalex.org/P4310320990", "host_organization_name": "Elsevier BV", "host_organization_lineage": ["https://openalex.org/P4310320990"], "host_organization_lineage_names": ["Elsevier BV"], "type": "journal"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Future Generation Computer Systems", "raw_type": "journal-article"}, "cited_by_count": 15, "is_retracted": false}, {"id": "https://openalex.org/W4417199959", "doi": "https://doi.org/10.1038/s41598-025-32087-7", "title": "A privacy preserving intrusion detection framework for IIoT in 6G networks using homomorphic encryption and graph neural networks", "publication_year": 2025, "publication_date": "2025-12-10", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5104126457", "display_name": "Binjie Hua", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I183006215", "display_name": "Shijiazhuang University", "ror": "https://ror.org/028rmam09", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I183006215"]}], "countries": ["CN"], "is_corresponding": true, "raw_author_name": "Binjie Hua", "raw_affiliation_strings": ["School of Future Information Technology, Shijiazhuang University, Shijiazhuang, 050035, Hebei, China. hbj.king.1974@163.com"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "School of Future Information Technology, Shijiazhuang University, Shijiazhuang, 050035, Hebei, China. hbj.king.1974@163.com", "institution_ids": ["https://openalex.org/I183006215"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5017270732", "display_name": "Haiyan Xi", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Haiyan Xi", "raw_affiliation_strings": ["Hebei Institute of Radio and Television Science and Technology, Shijiazhuang, 050011, Hebei, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Hebei Institute of Radio and Television Science and Technology, Shijiazhuang, 050011, Hebei, China", "institution_ids": []}]}], "abstract_inverted_index": {"The": [0, 57, 150], "integration": [1, 194], "of": [2, 6, 75, 86, 169], "the": [3, 72, 109, 166, 175], "Industrial": [4], "Internet": [5], "Things": [7], "(IIoT)": [8], "with": [9, 130, 184, 195], "sixth-generation": [10], "(6G)": [11], "networks": [12], "offers": [13], "revolutionary": [14], "connectivity": [15], "and": [16, 29, 53, 67, 90, 99, 115, 139, 161, 180, 193], "ultra-low": [17], "latency,": [18], "although": [19], "it": [20, 144], "also": [21], "increases": [22], "cybersecurity": [23], "vulnerabilities": [24], "due": [25], "to": [26, 62, 118, 198], "resource-limited": [27], "devices": [28], "dynamic": [30, 167], "network": [31], "structures.": [32], "This": [33, 172], "research": [34], "presents": [35], "a": [36], "novel": [37], "privacy-preserving": [38], "intrusion": [39], "detection": [40, 131], "system": [41, 59], "(IDS)": [42], "for": [43, 111, 146, 177], "IIoT": [44, 148, 182], "in": [45, 158, 201], "6G": [46], "settings,": [47], "using": [48], "Graph": [49], "Neural": [50], "Networks": [51], "(GNNs)": [52], "Homomorphic": [54], "Encryption": [55], "(HE).": [56], "proposed": [58], "utilizes": [60], "GNNs": [61], "represent": [63], "intricate": [64], "inter-device": [65], "interactions": [66], "temporal": [68], "traffic": [69], "patterns,": [70], "facilitating": [71], "effective": [73], "identification": [74], "advanced": [76], "threats,": [77], "such": [78], "as": [79, 123], "Advanced": [80], "Persistent": [81], "Threats": [82], "(APTs),": [83], "Distributed": [84], "Denial": [85], "Service": [87], "(DDoS)": [88], "attacks,": [89], "Mirai": [91], "botnet": [92], "attacks.": [93], "HE": [94, 153], "enables": [95], "secure": [96], "distributed": [97], "training": [98], "inference": [100], "by": [101], "executing": [102], "computations": [103], "on": [104], "encrypted": [105], "data,": [106], "thereby": [107], "obviating": [108], "necessity": [110], "centralized": [112], "data": [113], "aggregation": [114], "assuring": [116], "adherence": [117], "rigorous": [119], "privacy": [120, 162], "standards": [121], "like": [122], "GDPR.": [124], "Experimental": [125], "results": [126], "indicate": [127], "outstanding": [128], "performance,": [129], "accuracies": [132], "over": [133], "98%,": [134], "low": [135], "false": [136], "positive": [137], "rates,": [138], "little": [140], "computing": [141], "cost,": [142], "rendering": [143], "appropriate": [145], "resource-constrained": [147], "devices.": [149], "GNN": [151], "+": [152], "model": [154], "surpasses": [155], "state-of-the-art": [156], "approaches": [157], "accuracy,": [159], "scalability,": [160], "protection,": [163], "effectively": [164], "tackling": [165], "difficulties": [168], "6G-IIoT": [170], "ecosystems.": [171], "study": [173], "lays": [174], "groundwork": [176], "secure,": [178], "scalable,": [179], "privacy-compliant": [181], "systems,": [183], "future": [185], "efforts": [186], "directed": [187], "towards": [188], "adversarial": [189], "robustness,": [190], "real-time": [191], "implementation,": [192], "federated": [196], "learning": [197], "improve": [199], "resilience": [200], "highly": [202], "interconnected": [203], "industrial": [204], "settings.": [205]}, "primary_topic": {"id": "https://openalex.org/T10400", "display_name": "Network Security and Intrusion Detection", "score": 0.9907000064849854, "subfield": {"id": "https://openalex.org/subfields/1705", "display_name": "Computer Networks and Communications"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T10400", "display_name": "Network Security and Intrusion Detection", "score": 0.9907000064849854, "subfield": {"id": "https://openalex.org/subfields/1705", "display_name": "Computer Networks and Communications"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11598", "display_name": "Internet Traffic Analysis and Secure E-voting", "score": 0.002300000051036477, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10764", "display_name": "Privacy-Preserving Technologies in Data", "score": 0.0008999999845400453, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.1038/s41598-025-32087-7", "is_oa": true, "landing_page_url": "https://doi.org/10.1038/s41598-025-32087-7", "pdf_url": "https://www.nature.com/articles/s41598-025-32087-7_reference.pdf", "source": {"id": "https://openalex.org/S196734849", "display_name": "Scientific Reports", "issn_l": "2045-2322", "issn": ["2045-2322"], "is_oa": true, "is_in_doaj": true, "is_core": true, "listed_in": ["cwts-core", "doaj", "doyens", "jufo-1", "ki-jl-1", "medline", "norway-1"], "host_organization": "https://openalex.org/P4310319908", "host_organization_name": "Nature Portfolio", "host_organization_lineage": ["https://openalex.org/P4310319908", "https://openalex.org/P4310319965"], "host_organization_lineage_names": ["Nature Portfolio", "Springer Nature"], "type": "journal"}, "license": "cc-by-nc-nd", "license_id": "https://openalex.org/licenses/cc-by-nc-nd", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Scientific Reports", "raw_type": "journal-article"}, "cited_by_count": 8, "is_retracted": false}, {"id": "https://openalex.org/W4414809964", "doi": "https://doi.org/10.48550/arxiv.2510.01014", "title": "Revisiting Adversarial Training under Hyperspectral Image", "publication_year": 2025, "publication_date": "2025-10-01", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5100370301", "display_name": "Weihua Zhang", "orcid": "https://orcid.org/0000-0001-8377-3356", "observed_orcids": ["https://orcid.org/0000-0001-8377-3356"]}, "institutions": [{"id": "https://openalex.org/I76569877", "display_name": "Southeast University", "ror": "https://ror.org/04ct4d772", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I76569877"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Zhang, Weihua", "raw_affiliation_strings": ["Southeast University"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Southeast University", "institution_ids": ["https://openalex.org/I76569877"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5061961316", "display_name": "Chengze Jiang", "orcid": "https://orcid.org/0000-0002-1681-8128", "observed_orcids": ["https://orcid.org/0000-0002-1681-8128"]}, "institutions": [{"id": "https://openalex.org/I76569877", "display_name": "Southeast University", "ror": "https://ror.org/04ct4d772", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I76569877"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Jiang, Chengze", "raw_affiliation_strings": ["Southeast University"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Southeast University", "institution_ids": ["https://openalex.org/I76569877"]}]}, {"author_position": "middle", "author": {"id": null, "display_name": "Dong, Minjing", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Dong, Minjing", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Gui, Jie", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I76569877", "display_name": "Southeast University", "ror": "https://ror.org/04ct4d772", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I76569877"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Gui, Jie", "raw_affiliation_strings": ["Southeast University"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Southeast University", "institution_ids": ["https://openalex.org/I76569877"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5101037836", "display_name": "Dong Lu", "orcid": "https://orcid.org/0009-0000-6558-5589", "observed_orcids": ["https://orcid.org/0009-0000-6558-5589"]}, "institutions": [{"id": "https://openalex.org/I76569877", "display_name": "Southeast University", "ror": "https://ror.org/04ct4d772", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I76569877"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Dong, Lu", "raw_affiliation_strings": ["Southeast University"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Southeast University", "institution_ids": ["https://openalex.org/I76569877"]}]}, {"author_position": "middle", "author": {"id": null, "display_name": "Gui, Zhipeng", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Gui, Zhipeng", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Tang, Yuan Yan", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Tang, Yuan Yan", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "last", "author": {"id": null, "display_name": "Kwok, James Tin-Yau", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Kwok, James Tin-Yau", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}], "abstract_inverted_index": {"Recent": [0], "studies": [1], "have": [2], "shown": [3], "that": [4, 109, 122, 171, 200], "deep": [5], "learning-based": [6], "hyperspectral": [7, 68, 96], "image": [8, 74], "(HSI)": [9], "classification": [10, 81], "models": [11], "are": [12, 110], "highly": [13, 111], "vulnerable": [14], "to": [15, 26, 45, 79, 86, 113, 165, 185], "adversarial": [16, 56, 114, 123, 130, 177, 212], "attacks,": [17], "posing": [18], "significant": [19], "security": [20], "risks.": [21], "Although": [22], "most": [23, 62], "approaches": [24, 210], "attempt": [25], "enhance": [27, 186], "robustness": [28], "by": [29, 176], "optimizing": [30], "network": [31], "architectures,": [32], "these": [33], "methods": [34, 203], "often": [35], "rely": [36], "on": [37, 102, 194], "customized": [38], "designs": [39], "with": [40, 208], "limited": [41], "scalability": [42], "and": [43, 91, 106, 125, 153, 161], "struggle": [44], "defend": [46], "against": [47], "strong": [48, 92], "attacks.": [49, 213], "To": [50, 141], "address": [51], "this": [52, 143], "issue,": [53, 144], "we": [54, 120, 145], "introduce": [55], "training": [57], "(AT),": [58], "one": [59], "of": [60, 95, 129], "the": [61, 67, 87, 126, 201], "effective": [63], "defense": [64], "strategies,": [65], "into": [66], "domain.": [69], "However,": [70], "unlike": [71], "conventional": [72], "RGB": [73], "classification,": [75], "directly": [76], "applying": [77], "AT": [78, 149], "HSI": [80, 197], "introduces": [82, 181], "unique": [83], "challenges": [84], "due": [85], "high-dimensional": [88], "spectral": [89, 104, 138, 158, 182, 187], "signatures": [90], "inter-band": [93], "correlations": [94], "data,": [97], "where": [98], "discriminative": [99], "information": [100], "relies": [101], "subtle": [103], "semantics": [105], "spectral-spatial": [107], "consistency": [108], "sensitive": [112], "perturbations.": [115, 178], "Through": [116], "extensive": [117], "empirical": [118], "analyses,": [119], "observe": [121], "perturbations": [124], "non-smooth": [127], "nature": [128], "examples": [131], "can": [132], "distort": [133], "or": [134], "even": [135], "eliminate": [136], "important": [137], "semantic": [139, 173], "information.": [140], "mitigate": [142], "propose": [146], "two": [147], "hyperspectral-specific": [148], "methods,": [150], "termed": [151], "AT-HARL": [152, 156], "AT-RA.": [154], "Specifically,": [155], "exploits": [157], "characteristic": [159], "differences": [160], "class": [162], "distribution": [163], "ratios": [164], "design": [166], "a": [167], "novel": [168], "loss": [169], "function": [170], "alleviates": [172], "distortion": [174], "caused": [175], "Meanwhile,": [179], "AT-RA": [180], "data": [183], "augmentation": [184], "diversity": [188], "while": [189], "preserving": [190], "spatial": [191], "smoothness.": [192], "Experiments": [193], "four": [195], "benchmark": [196], "datasets": [198], "demonstrate": [199], "proposed": [202], "achieve": [204], "competitive": [205], "performance": [206], "compared": [207], "state-of-the-art": [209], "under": [211]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.86080002784729, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.86080002784729, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10689", "display_name": "Remote-Sensing Image Classification", "score": 0.11909999698400497, "subfield": {"id": "https://openalex.org/subfields/2214", "display_name": "Media Technology"}, "field": {"id": "https://openalex.org/fields/22", "display_name": "Engineering"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 0.002099999925121665, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "pmh:oai:arXiv.org:2510.01014", "is_oa": true, "landing_page_url": "http://arxiv.org/abs/2510.01014", "pdf_url": "https://arxiv.org/pdf/2510.01014", "source": {"id": "https://openalex.org/S4306400194", "display_name": "arXiv (Cornell University)", "issn_l": "2331-8422", "issn": ["2331-8422"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I205783295", "host_organization_name": "Cornell University", "host_organization_lineage": ["https://openalex.org/I205783295"], "host_organization_lineage_names": [], "type": "repository"}, "license": null, "license_id": null, "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "text"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4414478158", "doi": "https://doi.org/10.54254/2755-2721/2025.bj27247", "title": "The Mechanisms, Evaluation, and Future Prospects of Black-Box Adversarial Attacks", "publication_year": 2025, "publication_date": "2025-09-24", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5020944142", "display_name": "Tianyi Huang", "orcid": "https://orcid.org/0009-0007-4099-3915", "observed_orcids": ["https://orcid.org/0009-0007-4099-3915"]}, "institutions": [{"id": "https://openalex.org/I180726961", "display_name": "Shenzhen University", "ror": "https://ror.org/01vy4gh70", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I180726961"]}], "countries": ["CN"], "is_corresponding": true, "raw_author_name": "Tianyi Huang", "raw_affiliation_strings": ["Mathematics, Shenzhen University, Shenzhen, 518060, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Mathematics, Shenzhen University, Shenzhen, 518060, China", "institution_ids": ["https://openalex.org/I180726961"]}]}], "abstract_inverted_index": {"As": [0], "machine": [1, 79], "learning": [2, 80, 143], "is": [3, 160], "increasingly": [4], "applied": [5], "in": [6, 29, 92], "healthcare,": [7], "finance,": [8], "and": [9, 47, 56, 71, 82, 86, 174], "security,": [10], "black-box": [11, 35, 72], "adversarial": [12, 36], "attacks": [13, 37, 131], "that": [14, 91], "manipulate": [15], "inputs": [16], "to": [17, 105], "mislead": [18], "models": [19], "without": [20], "accessing": [21], "internal": [22], "details": [23], "pose": [24], "a": [25, 100, 107], "growing": [26], "security": [27], "threat": [28], "real-world": [30], "applications.": [31], "This": [32], "paper": [33], "reviews": [34], "by": [38, 117, 150], "categorizing": [39], "perturbation": [40], "generation": [41], "methods,": [42], "such": [43], "as": [44], "gradient": [45], "estimation": [46], "evolutionary": [48, 112], "search,": [49], "along": [50], "with": [51, 168], "attack": [52, 62, 172], "targets,": [53], "including": [54], "directional": [55], "non-directional": [57], "types.": [58], "Besides,": [59], "it": [60], "distinguishes": [61], "scenarios": [63], "based": [64], "on": [65], "the": [66, 139, 155], "attacker\u2019s": [67], "knowledge": [68], "into": [69], "white-box": [70], "categories,": [73], "analyzing": [74], "their": [75], "effects": [76], "across": [77], "different": [78], "tasks": [81], "summarizing": [83], "related": [84], "challenges": [85], "opportunities.": [87], "The": [88], "results": [89], "indicate": [90], "image": [93], "classification": [94], "tasks,": [95], "zero-order": [96], "optimization": [97], "(ZOO)": [98], "demands": [99], "large": [101], "number": [102], "of": [103, 157], "queries": [104], "reach": [106], "high": [108], "success": [109, 133], "rate,": [110], "whereas": [111], "algorithms": [113], "enhance": [114], "defense": [115], "effectiveness": [116, 156], "about": [118], "30%": [119], "but": [120], "involve": [121], "greater": [122, 135], "computational": [123], "costs.": [124], "For": [125], "large-scale": [126], "language": [127], "models,": [128], "template": [129], "injection": [130], "achieve": [132], "rates": [134], "than": [136], "80%,": [137], "while": [138], "PathSeeker": [140], "multi-agent": [141], "reinforcement": [142], "framework": [144], "achieves": [145], "over": [146], "80%": [147], "detection": [148], "evasion": [149], "dynamically": [151], "adjusting": [152], "templates.": [153], "However,": [154], "cross-domain": [158], "transfer": [159], "still": [161], "severely": [162], "constrained.": [163], "Key": [164], "directions": [165], "include": [166], "meta-learning": [167], "Bayesian": [169], "optimization,": [170], "cross-modal": [171], "frameworks,": [173], "testing": [175], "standards": [176], "for": [177], "high-risk": [178], "settings.": [179]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.54254/2755-2721/2025.bj27247", "is_oa": true, "landing_page_url": "https://doi.org/10.54254/2755-2721/2025.bj27247", "pdf_url": "https://www.ewadirect.com/proceedings/ace/article/view/27247/pdf", "source": {"id": "https://openalex.org/S4387281889", "display_name": "Applied and Computational Engineering", "issn_l": "2755-2721", "issn": ["2755-2721", "2755-273X"], "is_oa": false, "is_in_doaj": false, "is_core": true, "listed_in": ["cwts-core"], "host_organization": null, "host_organization_name": null, "host_organization_lineage": [], "host_organization_lineage_names": [], "type": "journal"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Applied and Computational Engineering", "raw_type": "journal-article"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4412584206", "doi": "https://doi.org/10.7840/kics.2025.50.7.995", "title": "Metamorphic Test-Based Robustness Evaluation of Object Detection Models in Safety Critical Systems", "publication_year": 2025, "publication_date": "2025-07-23", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Jun-Cheol Suh", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Jun-Cheol Suh", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5004093779", "display_name": "Jung-Been Lee", "orcid": "https://orcid.org/0000-0002-8208-0387", "observed_orcids": ["https://orcid.org/0000-0002-8208-0387"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Jung-Been Lee", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5054412359", "display_name": "Jeong\u2010Dong Kim", "orcid": "https://orcid.org/0000-0002-5113-221X", "observed_orcids": ["https://orcid.org/0000-0002-5113-221X"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Jeong-Dong Kim", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "last", "author": {"id": "https://openalex.org/A5064167751", "display_name": "Taek Lee", "orcid": "https://orcid.org/0000-0003-2277-8211", "observed_orcids": ["https://orcid.org/0000-0003-2277-8211"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Taek Lee", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}], "abstract_inverted_index": {"In": [0], "recent": [1], "years,": [2], "artificial": [3], "intelligence": [4], "(AI)": [5], "technology": [6], "has": [7], "made": [8], "rapid": [9], "progress": [10], "and": [11, 23, 46, 72, 96, 108, 182], "is": [12, 53], "widely": [13], "used": [14], "in": [15, 37, 88, 156, 177, 184], "various": [16], "fields": [17], "such": [18, 41], "as": [19, 42], "natural": [20], "language": [21], "processing": [22], "computer": [24], "vision.": [25], "However,": [26], "the": [27, 80, 133, 168], "black-box": [28], "nature": [29], "of": [30, 170], "AI": [31, 175], "models": [32, 66, 155, 176], "raises": [33], "reliability": [34, 181], "concerns,": [35], "particularly": [36], "safety-critical": [38], "systems": [39], "(ScSs)": [40], "autonomous": [43], "vehicles": [44], "(AVs)": [45], "medical": [47], "systems,": [48], "where": [49], "understanding": [50], "model": [51, 81, 118, 123], "behavior": [52], "crucial.": [54], "This": [55, 150], "study": [56], "proposes": [57], "a": [58, 77], "robustness": [59, 146, 172], "evaluation": [60, 173], "method": [61], "for": [62, 174], "AV": [63], "object": [64], "detection": [65, 135], "(ODMs)": [67], "by": [68], "integrating": [69], "metamorphic": [70], "testing": [71], "adversarial": [73], "attack": [74], "techniques.": [75], "Using": [76], "YOLOv5-based": [78], "ODM,": [79], "was": [82], "tested": [83], "to": [84, 116, 179], "detect": [85], "essential": [86], "objects": [87], "traffic": [89, 94], "safety": [90, 183], "scenarios,": [91], "including": [92], "pedestrians,": [93], "lights,": [95], "road": [97], "signs.": [98], "Various": [99], "image": [100], "augmentations": [101], "simulating": [102], "physical": [103], "deformations": [104], "(e.g.,": [105, 111], "rotation,": [106], "tilt)": [107], "weather": [109], "conditions": [110, 158], "snow,": [112], "rain)": [113], "were": [114], "applied": [115], "measure": [117], "robustness.": [119], "Results": [120], "showed": [121, 143], "that": [122, 152], "performance": [124], "varied": [125], "significantly": [126], "with": [127], "specific": [128], "augmentations,": [129], "revealing": [130], "vulnerabilities.": [131], "Notably,": [132], "pedestrian": [134], "model,": [136], "despite": [137], "its": [138], "high": [139], "accuracy": [140], "during": [141], "training,": [142], "only": [144], "35.8%": [145], "against": [147], "augmented": [148], "images.": [149], "highlights": [151], "even": [153], "high-performing": [154], "general": [157], "may": [159], "fail": [160], "under": [161], "diverse": [162], "environmental": [163], "factors.": [164], "These": [165], "findings": [166], "underscore": [167], "importance": [169], "rigorous": [171], "ScSs": [178], "ensure": [180], "real-world": [185], "applications": [186], "like": [187], "AVs.": [188]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9824000000953674, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9824000000953674, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10743", "display_name": "Software Testing and Debugging Techniques", "score": 0.007699999958276749, "subfield": {"id": "https://openalex.org/subfields/1712", "display_name": "Software"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10036", "display_name": "Advanced Neural Network Applications", "score": 0.00559999980032444, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.7840/kics.2025.50.7.995", "is_oa": false, "landing_page_url": "https://doi.org/10.7840/kics.2025.50.7.995", "pdf_url": null, "source": {"id": "https://openalex.org/S4306496539", "display_name": "\ud55c\uad6d\ud1b5\uc2e0\ud559\ud68c\ub17c\ubb38\uc9c0", "issn_l": "1226-4717", "issn": ["1226-4717", "2287-3880"], "is_oa": false, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": null, "host_organization_name": null, "host_organization_lineage": [], "host_organization_lineage_names": [], "type": "journal"}, "license": null, "license_id": null, "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "The Journal of Korean Institute of Communications and Information Sciences", "raw_type": "journal-article"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4414889911", "doi": "https://doi.org/10.48550/arxiv.2506.00373", "title": "Adversarial Machine Learning for Robust Password Strength Estimation", "publication_year": 2025, "publication_date": "2025-05-31", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Jha, Pappu", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Jha, Pappu", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Hamid, Hanzla", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Hamid, Hanzla", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5119876253", "display_name": "Oluseyi Olukola", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Olukola, Oluseyi", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5044274845", "display_name": "Ashim Dahal", "orcid": "https://orcid.org/0000-0003-4456-1021", "observed_orcids": ["https://orcid.org/0000-0003-4456-1021"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Dahal, Ashim", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "last", "author": {"id": "https://openalex.org/A5102764912", "display_name": "Nick Rahimi", "orcid": "https://orcid.org/0000-0002-1964-1794", "observed_orcids": ["https://orcid.org/0000-0002-1964-1794"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Rahimi, Nick", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}], "abstract_inverted_index": {"Passwords": [0], "remain": [1], "one": [2], "of": [3, 83, 114], "the": [4, 13, 35, 88, 112], "most": [5], "common": [6], "methods": [7], "for": [8], "securing": [9], "sensitive": [10], "data": [11, 26], "in": [12], "digital": [14], "age.": [15], "However,": [16], "weak": [17], "password": [18, 42, 96, 133], "choices": [19], "continue": [20], "to": [21, 25, 33, 60, 86, 102, 105, 122], "pose": [22], "significant": [23], "risks": [24], "security": [27, 120], "and": [28, 62, 74], "privacy.": [29], "This": [30], "study": [31], "aims": [32], "solve": [34], "problem": [36], "by": [37, 66, 100], "focusing": [38], "on": [39, 55], "developing": [40], "robust": [41], "strength": [43, 97], "estimation": [44], "models": [45, 54], "using": [46], "adversarial": [47, 84, 93, 116, 131], "machine": [48, 107, 117, 136], "learning,": [49], "a": [50, 76], "technique": [51], "that": [52, 92], "trains": [53], "intentionally": [56], "crafted": [57], "deceptive": [58], "passwords": [59, 85], "expose": [61], "address": [63], "vulnerabilities": [64], "posed": [65], "such": [67], "passwords.": [68], "We": [69], "apply": [70], "five": [71], "classification": [72, 98], "algorithms": [73], "use": [75], "dataset": [77], "with": [78], "more": [79], "than": [80], "670,000": [81], "samples": [82], "train": [87], "models.": [89, 109], "Results": [90], "demonstrate": [91], "training": [94], "improves": [95], "accuracy": [99], "up": [101], "20%": [103], "compared": [104], "traditional": [106], "learning": [108, 118, 137], "It": [110], "highlights": [111], "importance": [113], "integrating": [115], "into": [119], "systems": [121], "enhance": [123], "their": [124], "robustness": [125], "against": [126], "modern": [127], "adaptive": [128], "threats.": [129], "Keywords:": [130], "attack,": [132], "strength,": [134], "classification,": [135]}, "primary_topic": {"id": "https://openalex.org/T11800", "display_name": "User Authentication and Security Systems", "score": 0.9096999764442444, "subfield": {"id": "https://openalex.org/subfields/1710", "display_name": "Information Systems"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11800", "display_name": "User Authentication and Security Systems", "score": 0.9096999764442444, "subfield": {"id": "https://openalex.org/subfields/1710", "display_name": "Information Systems"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.08780000358819962, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10734", "display_name": "Information and Cyber Security", "score": 0.00039999998989515007, "subfield": {"id": "https://openalex.org/subfields/1710", "display_name": "Information Systems"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "pmh:oai:arXiv.org:2506.00373", "is_oa": true, "landing_page_url": "http://arxiv.org/abs/2506.00373", "pdf_url": "https://arxiv.org/pdf/2506.00373", "source": {"id": "https://openalex.org/S4306400194", "display_name": "arXiv (Cornell University)", "issn_l": "2331-8422", "issn": ["2331-8422"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I205783295", "host_organization_name": "Cornell University", "host_organization_lineage": ["https://openalex.org/I205783295"], "host_organization_lineage_names": [], "type": "repository"}, "license": null, "license_id": null, "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "text"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W7118180995", "doi": "https://doi.org/10.28925/2663-4023.2025.31.1012", "title": "MODELS AND METHODS FOR WIRELESS DEVICE IDENTIFICATION BASED ON RADIO FREQUENCY CHARACTERISTICS: A COMPREHENSIVE ANALYSIS OF MODERN RF-FINGERPRINTING APPROACHES", "publication_year": 2025, "publication_date": "2025-01-01", "type": "article", "language": "uk", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5121957786", "display_name": "Heorhii Loban", "orcid": "https://orcid.org/0009-0003-4862-8729", "observed_orcids": ["https://orcid.org/0009-0003-4862-8729"]}, "institutions": [{"id": "https://openalex.org/I98435010", "display_name": "Lviv Polytechnic National University", "ror": "https://ror.org/0542q3127", "country_code": "UA", "type": "education", "lineage": ["https://openalex.org/I98435010"]}], "countries": ["UA"], "is_corresponding": false, "raw_author_name": "Heorhii Loban", "raw_affiliation_strings": ["\u041d\u0430\u0446\u0456\u043e\u043d\u0430\u043b\u044c\u043d\u0438\u0439 \u0423\u043d\u0456\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442 \u00ab\u041b\u044c\u0432\u0456\u0432\u0441\u044c\u043a\u0430 \u041f\u043e\u043b\u0456\u0442\u0435\u0445\u043d\u0456\u043a\u0430\u00bb"], "raw_orcid": "https://orcid.org/0009-0003-4862-8729", "affiliations": [{"raw_affiliation_string": "\u041d\u0430\u0446\u0456\u043e\u043d\u0430\u043b\u044c\u043d\u0438\u0439 \u0423\u043d\u0456\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442 \u00ab\u041b\u044c\u0432\u0456\u0432\u0441\u044c\u043a\u0430 \u041f\u043e\u043b\u0456\u0442\u0435\u0445\u043d\u0456\u043a\u0430\u00bb", "institution_ids": ["https://openalex.org/I98435010"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5118699849", "display_name": "Taras Lukovskyy", "orcid": "https://orcid.org/0009-0008-1652-8121", "observed_orcids": ["https://orcid.org/0009-0008-1652-8121"]}, "institutions": [{"id": "https://openalex.org/I98435010", "display_name": "Lviv Polytechnic National University", "ror": "https://ror.org/0542q3127", "country_code": "UA", "type": "education", "lineage": ["https://openalex.org/I98435010"]}], "countries": ["UA"], "is_corresponding": false, "raw_author_name": "Taras Lukovskyy", "raw_affiliation_strings": ["\u041d\u0430\u0446\u0456\u043e\u043d\u0430\u043b\u044c\u043d\u0438\u0439 \u0423\u043d\u0456\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442 \u00ab\u041b\u044c\u0432\u0456\u0432\u0441\u044c\u043a\u0430 \u041f\u043e\u043b\u0456\u0442\u0435\u0445\u043d\u0456\u043a\u0430\u00bb"], "raw_orcid": "https://orcid.org/0009-0008-1652-8121", "affiliations": [{"raw_affiliation_string": "\u041d\u0430\u0446\u0456\u043e\u043d\u0430\u043b\u044c\u043d\u0438\u0439 \u0423\u043d\u0456\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442 \u00ab\u041b\u044c\u0432\u0456\u0432\u0441\u044c\u043a\u0430 \u041f\u043e\u043b\u0456\u0442\u0435\u0445\u043d\u0456\u043a\u0430\u00bb", "institution_ids": ["https://openalex.org/I98435010"]}]}], "abstract_inverted_index": {"This": [0], "article": [1, 110], "presents": [2], "a": [3, 112], "comprehensive": [4], "analysis": [5], "of": [6, 26, 37, 50, 115, 149, 162, 170, 189, 213], "state-of-the-art": [7], "models": [8, 127], "and": [9, 63, 80, 96, 106, 143, 156, 179, 187, 201, 227], "methods": [10, 191], "for": [11, 120, 210], "wireless": [12], "device": [13, 121, 181, 199], "identification": [14, 141], "based": [15], "on": [16, 221], "their": [17], "unique": [18], "radio": [19], "frequency": [20], "characteristics": [21], "(RF-fingerprinting).": [22], "The": [23, 44, 109, 147], "fundamental": [24], "principles": [25], "RF": [27], "fingerprint": [28], "formation,": [29], "which": [30], "arise": [31], "from": [32, 124], "the": [33, 47, 93, 160, 211], "intrinsic": [34], "hardware": [35], "imperfections": [36], "transmitter": [38], "components,": [39], "are": [40, 70, 145, 183, 192, 216], "examined": [41], "in": [42, 55, 92, 173], "detail.": [43], "study": [45], "analyzes": [46], "primary": [48], "sources": [49], "signal": [51, 89, 230], "uniqueness,": [52], "including": [53, 99, 194], "variations": [54], "oscillator": [56], "parameters,": [57], "power": [58], "amplifier": [59], "behavior,": [60], "modulator": [61], "nonlinearities,": [62], "antenna": [64], "system": [65], "characteristics.": [66], "Existing": [67], "RF-fingerprinting": [68, 163, 172, 214], "approaches": [69, 134], "systematized": [71], "according": [72], "to": [73, 88, 128, 139, 197, 203], "feature": [74, 104], "extraction": [75], "methodology,": [76], "applied": [77], "classification": [78, 114], "algorithms,": [79], "practical": [81], "application": [82], "domains.": [83], "Special": [84], "attention": [85], "is": [86, 165], "devoted": [87], "processing": [90, 231], "techniques": [91], "time,": [94], "frequency,": [95], "time\u2013frequency": [97], "domains,": [98], "transient": [100], "behavior": [101], "analysis,": [102], "spectral": [103], "characterization,": [105], "wavelet": [107], "transforms.": [108], "provides": [111], "structured": [113], "machine": [116], "learning": [117, 131], "algorithms": [118], "used": [119], "identification,": [122], "ranging": [123], "traditional": [125], "statistical": [126], "advanced": [129], "deep": [130], "architectures.": [132], "Hybrid": [133], "that": [135], "combine": [136], "multiple": [137], "methodologies": [138], "improve": [140], "accuracy": [142], "robustness": [144], "highlighted.": [146], "impact": [148], "environmental": [150], "factors\u2014such": [151], "as": [152], "multipath": [153], "propagation,": [154], "interference,": [155], "dynamic": [157], "channel": [158], "variation\u2014on": [159], "effectiveness": [161], "systems": [164, 226], "thoroughly": [166], "examined.": [167], "Practical": [168], "aspects": [169], "deploying": [171], "cybersecurity": [174], "systems,": [175], "access": [176], "control": [177], "mechanisms,": [178], "counterfeit": [180], "detection": [182], "discussed.": [184], "Key": [185], "challenges": [186], "limitations": [188], "existing": [190], "identified,": [193], "scalability,": [195], "adaptability": [196], "emerging": [198, 228], "types,": [200], "resilience": [202], "intentional": [204], "adversarial": [205], "attacks.": [206], "Finally,": [207], "promising": [208], "directions": [209], "development": [212], "technology": [215], "proposed,": [217], "with": [218, 223], "particular": [219], "emphasis": [220], "integration": [222], "artificial": [224], "intelligence": [225], "quantum-enabled": [229], "methods.": [232]}, "primary_topic": {"id": "https://openalex.org/T12131", "display_name": "Wireless Signal Modulation Classification", "score": 0.9994999766349792, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T12131", "display_name": "Wireless Signal Modulation Classification", "score": 0.9994999766349792, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10964", "display_name": "Wireless Communication Security Techniques", "score": 9.999999747378752e-05, "subfield": {"id": "https://openalex.org/subfields/2208", "display_name": "Electrical and Electronic Engineering"}, "field": {"id": "https://openalex.org/fields/22", "display_name": "Engineering"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11598", "display_name": "Internet Traffic Analysis and Secure E-voting", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.28925/2663-4023.2025.31.1012", "is_oa": true, "landing_page_url": "https://doi.org/10.28925/2663-4023.2025.31.1012", "pdf_url": "https://csecurity.kubg.edu.ua/index.php/journal/article/download/1012/852", "source": {"id": "https://openalex.org/S4210213151", "display_name": "Cybersecurity Education Science Technique", "issn_l": "2663-4023", "issn": ["2663-4023"], "is_oa": true, "is_in_doaj": true, "is_core": false, "listed_in": ["doaj"], "host_organization": null, "host_organization_name": null, "host_organization_lineage": [], "host_organization_lineage_names": [], "type": "journal"}, "license": "cc-by-nc-sa", "license_id": "https://openalex.org/licenses/cc-by-nc-sa", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Cybersecurity: Education, Science, Technique", "raw_type": "journal-article"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4416238507", "doi": "https://doi.org/10.48550/arxiv.2511.10088", "title": "eXIAA: eXplainable Injections for Adversarial Attack", "publication_year": 2025, "publication_date": "2025-11-13", "type": "preprint", "language": null, "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5120353651", "display_name": "Leonardo Pesce", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I165932596", "display_name": "National University of Singapore", "ror": "https://ror.org/01tgyzw49", "country_code": "SG", "type": "education", "lineage": ["https://openalex.org/I165932596"]}], "countries": ["SG"], "is_corresponding": false, "raw_author_name": "Pesce, Leonardo", "raw_affiliation_strings": ["Department of Mechanical Engineering National University of Singapore 9 Engineering Drive 1 , Singapore , 117575"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Mechanical Engineering National University of Singapore 9 Engineering Drive 1 , Singapore , 117575", "institution_ids": ["https://openalex.org/I165932596"]}]}, {"author_position": "middle", "author": {"id": null, "display_name": "Wei, Jiawen", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I165932596", "display_name": "National University of Singapore", "ror": "https://ror.org/01tgyzw49", "country_code": "SG", "type": "education", "lineage": ["https://openalex.org/I165932596"]}], "countries": ["SG"], "is_corresponding": false, "raw_author_name": "Wei, Jiawen", "raw_affiliation_strings": ["Department of Mechanical Engineering National University of Singapore 9 Engineering Drive 1 , Singapore , 117575"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Mechanical Engineering National University of Singapore 9 Engineering Drive 1 , Singapore , 117575", "institution_ids": ["https://openalex.org/I165932596"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5125718695", "display_name": "Gianmarco Mengaldo", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I165932596", "display_name": "National University of Singapore", "ror": "https://ror.org/01tgyzw49", "country_code": "SG", "type": "education", "lineage": ["https://openalex.org/I165932596"]}, {"id": "https://openalex.org/I47508984", "display_name": "Imperial College London", "ror": "https://ror.org/041kmwe10", "country_code": "GB", "type": "education", "lineage": ["https://openalex.org/I47508984"]}], "countries": ["GB", "SG"], "is_corresponding": false, "raw_author_name": "Mengaldo, Gianmarco", "raw_affiliation_strings": ["Department of Mechanical Engineering National University of Singapore 9 Engineering Drive 1 , Singapore , 117575", "research fellow at Imperial College London"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Mechanical Engineering National University of Singapore 9 Engineering Drive 1 , Singapore , 117575", "institution_ids": ["https://openalex.org/I165932596"]}, {"raw_affiliation_string": "research fellow at Imperial College London", "institution_ids": ["https://openalex.org/I47508984"]}]}], "abstract_inverted_index": {"Post-hoc": [0], "explainability": [1, 129, 150], "methods": [2, 151], "are": [3], "a": [4, 14, 18, 22, 30, 103, 124], "subset": [5], "of": [6, 49, 120, 187, 206], "Machine": [7], "Learning": [8], "(ML)": [9], "that": [10, 169], "aim": [11], "to": [12, 53, 73, 82, 90, 174], "provide": [13], "reason": [15], "for": [16, 36, 159], "why": [17], "model": [19, 84], "behaves": [20], "in": [21, 43, 102, 127, 136], "certain": [23], "way.": [24], "In": [25, 71], "this": [26], "paper,": [27], "we": [28, 76], "show": [29, 168], "new": [31], "black-box": [32], "model-agnostic": [33], "adversarial": [34], "attack": [35, 51, 99], "post-hoc": [37, 149], "explainable": [38], "Artificial": [39], "Intelligence": [40], "(XAI),": [41], "particularly": [42], "the": [44, 50, 55, 62, 67, 83, 91, 98, 109, 145, 180, 185, 191, 196, 204, 207, 211, 215], "image": [45, 209], "domain.": [46], "The": [47, 117, 166], "goal": [48], "is": [52, 100], "modify": [54], "original": [56, 208], "explanations": [57, 146, 177], "while": [58, 106], "being": [59], "undetected": [60], "by": [61, 114, 148], "human": [63], "eye": [64], "and": [65, 95, 156, 162, 202, 210], "maintain": [66], "same": [68], "predicted": [69], "class.": [70], "contrast": [72], "previous": [74], "methods,": [75, 130], "do": [77], "not": [78], "require": [79], "any": [80], "access": [81], "or": [85], "its": [86], "weights,": [87], "but": [88], "only": [89], "model's": [92], "computed": [93], "predictions": [94], "explanations.": [96], "Additionally,": [97], "accomplished": [101], "single": [104], "step": [105], "significantly": [107], "changing": [108, 179], "provided": [110], "explanations,": [111], "as": [112], "demonstrated": [113], "empirical": [115], "evaluation.": [116], "low": [118], "requirements": [119], "our": [121, 170, 188], "method": [122], "expose": [123], "critical": [125], "vulnerability": [126], "current": [128], "raising": [131], "concerns": [132], "about": [133], "their": [134], "reliability": [135], "safety-critical": [137], "applications.": [138], "We": [139, 183], "systematically": [140], "generate": [141], "attacks": [142, 171], "based": [143, 194], "on": [144, 164, 195], "generated": [147], "(saliency": [152], "maps,": [153], "integrated": [154], "gradients,": [155], "DeepLIFT": [157], "SHAP)": [158], "pretrained": [160], "ResNet-18": [161], "ViT-B16": [163], "ImageNet.": [165], "results": [167], "could": [172], "lead": [173], "dramatically": [175], "different": [176], "without": [178], "predictive": [181], "probabilities.": [182], "validate": [184], "effectiveness": [186], "attack,": [189], "compute": [190], "induced": [192], "change": [193], "explanation": [197], "with": [198, 214], "mean": [199], "absolute": [200], "difference,": [201], "verify": [203], "closeness": [205], "corrupted": [212], "one": [213], "Structural": [216], "Similarity": [217], "Index": [218], "Measure": [219], "(SSIM).": [220]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.8428000211715698, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.8428000211715698, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12026", "display_name": "Explainable Artificial Intelligence (XAI)", "score": 0.15559999644756317, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 0.00039999998989515007, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "pmh:oai:arXiv.org:2511.10088", "is_oa": true, "landing_page_url": "http://arxiv.org/abs/2511.10088", "pdf_url": "https://arxiv.org/pdf/2511.10088", "source": {"id": "https://openalex.org/S4306400194", "display_name": "arXiv (Cornell University)", "issn_l": "2331-8422", "issn": ["2331-8422"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I205783295", "host_organization_name": "Cornell University", "host_organization_lineage": ["https://openalex.org/I205783295"], "host_organization_lineage_names": [], "type": "repository"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "text"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4406868049", "doi": "https://doi.org/10.3390/fire8020050", "title": "Adversarial Robustness for Deep Learning-Based Wildfire Prediction Models", "publication_year": 2025, "publication_date": "2025-01-26", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5115728555", "display_name": "Ryo Ide", "orcid": "https://orcid.org/0009-0009-3387-9078", "observed_orcids": ["https://orcid.org/0009-0009-3387-9078"]}, "institutions": [{"id": "https://openalex.org/I4210128217", "display_name": "Metabolism and Renal Physiology", "ror": "https://ror.org/0366b1491", "country_code": "FR", "type": "facility", "lineage": ["https://openalex.org/I1294671590", "https://openalex.org/I154526488", "https://openalex.org/I159885104", "https://openalex.org/I204730241", "https://openalex.org/I2746051580", "https://openalex.org/I39804081", "https://openalex.org/I4210096427", "https://openalex.org/I4210128217"]}, {"id": "https://openalex.org/I4210137563", "display_name": "Manhattan High School", "ror": "https://ror.org/03tmvjq86", "country_code": "US", "type": "education", "lineage": ["https://openalex.org/I4210137563"]}, {"id": "https://openalex.org/I4387156267", "display_name": "Biologie Mol\u00e9culaire Structurale et Processus Infectieux", "ror": "https://ror.org/009b91528", "country_code": "FR", "type": "facility", "lineage": ["https://openalex.org/I1294671590", "https://openalex.org/I157536573", "https://openalex.org/I4387156267"]}], "countries": ["FR", "US"], "is_corresponding": false, "raw_author_name": "Ryo Ide", "raw_affiliation_strings": ["Harrison High School, Harrison, NY 10528, USA"], "raw_orcid": "https://orcid.org/0009-0009-3387-9078", "affiliations": [{"raw_affiliation_string": "Harrison High School, Harrison, NY 10528, USA", "institution_ids": ["https://openalex.org/I4210128217", "https://openalex.org/I4210137563", "https://openalex.org/I4387156267"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5072565301", "display_name": "Lei Yang", "orcid": "https://orcid.org/0000-0002-5176-003X", "observed_orcids": ["https://orcid.org/0000-0002-5176-003X"]}, "institutions": [{"id": "https://openalex.org/I134113660", "display_name": "University of Nevada, Reno", "ror": "https://ror.org/01keh0577", "country_code": "US", "type": "education", "lineage": ["https://openalex.org/I134113660"]}], "countries": ["US"], "is_corresponding": true, "raw_author_name": "Lei Yang", "raw_affiliation_strings": ["Department of Computer Science and Engineering, University of Nevada, Reno, NV 89557, USA"], "raw_orcid": "https://orcid.org/0000-0002-5176-003X", "affiliations": [{"raw_affiliation_string": "Department of Computer Science and Engineering, University of Nevada, Reno, NV 89557, USA", "institution_ids": ["https://openalex.org/I134113660"]}]}], "abstract_inverted_index": {"Rapidly": [0], "growing": [1], "wildfires": [2], "have": [3], "recently": [4], "devastated": [5], "societal": [6], "assets,": [7], "exposing": [8], "a": [9, 29, 201, 206], "critical": [10], "need": [11], "for": [12, 32, 84], "early": [13, 208], "warning": [14, 210], "systems": [15], "to": [16, 66, 159], "expedite": [17], "relief": [18], "efforts.": [19], "Smoke": [20], "detection": [21, 87], "using": [22], "camera-based": [23], "Deep": [24], "Neural": [25, 57], "Networks": [26, 58], "(DNNs)": [27], "offers": [28], "promising": [30], "solution": [31], "wildfire": [33, 86, 209, 219], "prediction.": [34], "However,": [35], "the": [36, 80], "rarity": [37], "of": [38], "smoke": [39, 166, 189], "across": [40], "time": [41], "and": [42, 50, 60, 104, 108, 114, 125, 138, 185, 192, 196], "space": [43], "limits": [44], "training": [45], "data,": [46], "raising": [47], "model": [48, 172, 194], "overfitting": [49], "bias": [51], "concerns.": [52], "Current": [53], "DNNs,": [54], "primarily": [55], "Convolutional": [56], "(CNNs)": [59], "transformers,": [61], "complicate": [62], "robustness": [63], "evaluation": [64], "due": [65], "architectural": [67], "differences.": [68], "To": [69, 170], "address": [70], "these": [71], "challenges,": [72], "we": [73, 134, 174], "introduce": [74], "WARP": [75, 91], "(Wildfire": [76], "Adversarial": [77], "Robustness": [78], "Procedure),": [79], "first": [81, 216], "model-agnostic": [82], "framework": [83], "evaluating": [85], "models\u2019": [88], "adversarial": [89, 100, 130], "robustness.": [90, 197], "addresses": [92], "inherent": [93], "limitations": [94], "in": [95], "data": [96, 178, 191], "diversity": [97], "by": [98], "generating": [99, 128], "examples": [101], "through": [102], "image-global": [103], "-local": [105], "perturbations.": [106], "Global": [107], "local": [109, 168], "attacks": [110], "superimpose": [111], "Gaussian": [112], "noise": [113], "PNG": [115, 162], "patches": [116, 163], "onto": [117], "image": [118, 190], "inputs,": [119], "respectively;": [120], "this": [121], "suits": [122], "both": [123, 155], "CNNs": [124, 137], "transformers": [126, 145], "while": [127, 154], "realistic": [129], "scenarios.": [131], "Using": [132], "WARP,": [133], "assessed": [135], "real-time": [136], "Transformers,": [139], "uncovering": [140], "key": [141], "vulnerabilities.": [142], "At": [143], "times,": [144], "exhibited": [146], "over": [147], "70%": [148], "precision": [149, 195], "degradation": [150], "under": [151], "global": [152], "attacks,": [153], "models": [156], "generally": [157], "struggled": [158], "differentiate": [160], "cloud-like": [161], "from": [164], "real": [165], "during": [167], "attacks.": [169], "enhance": [171], "robustness,": [173], "proposed": [175], "four": [176], "wildfire-oriented": [177], "augmentation": [179], "techniques": [180], "based": [181], "on": [182], "WARP\u2019s": [183], "methodology": [184], "results,": [186], "which": [187, 212], "diversify": [188], "improve": [193], "These": [198], "advancements": [199], "represent": [200], "substantial": [202], "step": [203], "toward": [204], "developing": [205], "reliable": [207], "system,": [211], "may": [213], "be": [214], "our": [215], "safeguard": [217], "against": [218], "destruction.": [220]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9970999956130981, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9970999956130981, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12597", "display_name": "Fire Detection and Safety Systems", "score": 0.0015999999595806003, "subfield": {"id": "https://openalex.org/subfields/2213", "display_name": "Safety, Risk, Reliability and Quality"}, "field": {"id": "https://openalex.org/fields/22", "display_name": "Engineering"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10036", "display_name": "Advanced Neural Network Applications", "score": 0.00039999998989515007, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.3390/fire8020050", "is_oa": true, "landing_page_url": "https://doi.org/10.3390/fire8020050", "pdf_url": null, "source": {"id": "https://openalex.org/S4210172554", "display_name": "Fire", "issn_l": "2571-6255", "issn": ["2571-6255"], "is_oa": true, "is_in_doaj": true, "is_core": true, "listed_in": ["cwts-core", "doaj", "norway-1"], "host_organization": "https://openalex.org/P4310310987", "host_organization_name": "Multidisciplinary Digital Publishing Institute", "host_organization_lineage": ["https://openalex.org/P4310310987"], "host_organization_lineage_names": ["Multidisciplinary Digital Publishing Institute"], "type": "journal"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Fire", "raw_type": "journal-article"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4415256338", "doi": "https://doi.org/10.2139/ssrn.5610070", "title": "From Companion to Conspirator: Ethical Concerns of Unrestricted AI as a Human Partner", "publication_year": 2025, "publication_date": "2025-01-01", "type": "preprint", "language": null, "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Pranshu Lokhande", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I4405263090", "display_name": "VIT Bhopal University", "ror": "https://ror.org/02d03ve54", "country_code": "IN", "type": "education", "lineage": ["https://openalex.org/I4405263090"]}], "countries": ["IN"], "is_corresponding": true, "raw_author_name": "Pranshu Lokhande", "raw_affiliation_strings": ["VIT Bhopal University"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "VIT Bhopal University", "institution_ids": ["https://openalex.org/I4405263090"]}]}], "abstract_inverted_index": null, "primary_topic": {"id": "https://openalex.org/T10883", "display_name": "Ethics and Social Impacts of AI", "score": 0.9800000190734863, "subfield": {"id": "https://openalex.org/subfields/3311", "display_name": "Safety Research"}, "field": {"id": "https://openalex.org/fields/33", "display_name": "Social Sciences"}, "domain": {"id": "https://openalex.org/domains/2", "display_name": "Social Sciences"}}, "topics": [{"id": "https://openalex.org/T10883", "display_name": "Ethics and Social Impacts of AI", "score": 0.9800000190734863, "subfield": {"id": "https://openalex.org/subfields/3311", "display_name": "Safety Research"}, "field": {"id": "https://openalex.org/fields/33", "display_name": "Social Sciences"}, "domain": {"id": "https://openalex.org/domains/2", "display_name": "Social Sciences"}}, {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.018200000748038292, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T13851", "display_name": "Law, AI, and Intellectual Property", "score": 0.00039999998989515007, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.2139/ssrn.5610070", "is_oa": true, "landing_page_url": "https://doi.org/10.2139/ssrn.5610070", "pdf_url": null, "source": {"id": "https://openalex.org/S4210172589", "display_name": "SSRN Electronic Journal", "issn_l": "1556-5068", "issn": ["1556-5068"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I1318003438", "host_organization_name": "RELX Group (Netherlands)", "host_organization_lineage": ["https://openalex.org/I1318003438"], "host_organization_lineage_names": [], "type": "repository"}, "license": null, "license_id": null, "version": "acceptedVersion", "is_accepted": true, "is_published": false, "raw_source_name": null, "raw_type": "posted-content"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4416223466", "doi": "https://doi.org/10.48550/arxiv.2511.09105", "title": "Cost-Minimized Label-Flipping Poisoning Attack to LLM Alignment", "publication_year": 2025, "publication_date": "2025-11-12", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5120352487", "display_name": "Shigeki Kusaka", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I146399215", "display_name": "University of Tsukuba", "ror": "https://ror.org/02956yf07", "country_code": "JP", "type": "education", "lineage": ["https://openalex.org/I146399215"]}], "countries": ["JP"], "is_corresponding": false, "raw_author_name": "Kusaka, Shigeki", "raw_affiliation_strings": ["University of Tsukuba ,"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "University of Tsukuba ,", "institution_ids": ["https://openalex.org/I146399215"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5078368325", "display_name": "Keita Saito", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I146399215", "display_name": "University of Tsukuba", "ror": "https://ror.org/02956yf07", "country_code": "JP", "type": "education", "lineage": ["https://openalex.org/I146399215"]}], "countries": ["JP"], "is_corresponding": false, "raw_author_name": "Saito, Keita", "raw_affiliation_strings": ["University of Tsukuba ,"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "University of Tsukuba ,", "institution_ids": ["https://openalex.org/I146399215"]}]}, {"author_position": "middle", "author": {"id": null, "display_name": "Kudo, Mikoto", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I146399215", "display_name": "University of Tsukuba", "ror": "https://ror.org/02956yf07", "country_code": "JP", "type": "education", "lineage": ["https://openalex.org/I146399215"]}, {"id": "https://openalex.org/I4210110652", "display_name": "RIKEN", "ror": "https://ror.org/01sjwvz98", "country_code": "JP", "type": "facility", "lineage": ["https://openalex.org/I4210110652"]}, {"id": "https://openalex.org/I4210126580", "display_name": "RIKEN Center for Advanced Intelligence Project", "ror": "https://ror.org/03ckxwf91", "country_code": "JP", "type": "facility", "lineage": ["https://openalex.org/I4210110652", "https://openalex.org/I4210126580"]}], "countries": ["JP"], "is_corresponding": false, "raw_author_name": "Kudo, Mikoto", "raw_affiliation_strings": ["RIKEN AIP ,", "University of Tsukuba ,"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "RIKEN AIP ,", "institution_ids": ["https://openalex.org/I4210110652", "https://openalex.org/I4210126580"]}, {"raw_affiliation_string": "University of Tsukuba ,", "institution_ids": ["https://openalex.org/I146399215"]}]}, {"author_position": "middle", "author": {"id": null, "display_name": "Tanabe, Takumi", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Tanabe, Takumi", "raw_affiliation_strings": ["LY Corporation ,"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "LY Corporation ,", "institution_ids": []}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5052503437", "display_name": "Akifumi Wachi", "orcid": "https://orcid.org/0009-0008-4722-9861", "observed_orcids": ["https://orcid.org/0009-0008-4722-9861"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Wachi, Akifumi", "raw_affiliation_strings": ["LY Corporation ,"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "LY Corporation ,", "institution_ids": []}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5038757231", "display_name": "Youhei Akimoto", "orcid": "https://orcid.org/0000-0003-2760-8123", "observed_orcids": ["https://orcid.org/0000-0003-2760-8123"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Akimoto, Youhei", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}], "abstract_inverted_index": {"Large": [0], "language": [1], "models": [2], "(LLMs)": [3], "are": [4], "increasingly": [5], "deployed": [6], "in": [7, 149], "real-world": [8], "systems,": [9], "making": [10], "it": [11], "critical": [12], "to": [13, 40, 102, 140, 155], "understand": [14], "their": [15, 28, 157], "vulnerabilities.": [16], "While": [17], "data": [18], "poisoning": [19, 37, 114, 126, 161], "attacks": [20], "during": [21, 53], "RLHF/DPO": [22, 150], "alignment": [23], "have": [24], "been": [25], "studied": [26], "empirically,": [27], "theoretical": [29, 86], "foundations": [30], "remain": [31], "unclear.": [32], "We": [33, 60], "investigate": [34], "the": [35, 57, 77, 104, 112, 132, 141], "minimum-cost": [36], "attack": [38, 79, 94], "required": [39, 109], "steer": [41], "an": [42, 46], "LLM's": [43], "policy": [44], "toward": [45], "attacker's": [47], "target": [48], "by": [49], "flipping": [50], "preference": [51], "labels": [52], "RLHF/DPO,": [54], "without": [55], "altering": [56], "compared": [58], "outputs.": [59], "formulate": [61], "this": [62, 85, 120], "as": [63], "a": [64, 82], "convex": [65], "optimization": [66], "problem": [67], "with": [68], "linear": [69], "constraints,": [70], "deriving": [71], "lower": [72], "and": [73, 152], "upper": [74], "bounds": [75], "on": [76], "minimum": [78], "cost.": [80], "As": [81], "byproduct": [83], "of": [84, 106], "analysis,": [87], "we": [88], "show": [89], "that": [90, 119], "any": [91], "existing": [92], "label-flipping": [93], "can": [95, 123], "be": [96], "post-processed": [97], "via": [98], "our": [99], "proposed": [100], "method": [101], "reduce": [103, 125], "number": [105], "label": [107], "flips": [108], "while": [110], "preserving": [111], "intended": [113], "effect.": [115], "Empirical": [116], "results": [117], "demonstrate": [118], "cost-minimization": [121], "post-processing": [122], "significantly": [124], "costs": [127], "over": [128], "baselines,": [129], "particularly": [130], "when": [131], "reward": [133], "model's": [134], "feature": [135], "dimension": [136], "is": [137], "small": [138], "relative": [139], "dataset": [142], "size.": [143], "These": [144], "findings": [145], "highlight": [146], "fundamental": [147], "vulnerabilities": [148], "pipelines": [151], "provide": [153], "tools": [154], "evaluate": [156], "robustness": [158], "against": [159], "low-cost": [160], "attacks.": [162]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10764", "display_name": "Privacy-Preserving Technologies in Data", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10028", "display_name": "Topic Modeling", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "pmh:oai:arXiv.org:2511.09105", "is_oa": true, "landing_page_url": "http://arxiv.org/abs/2511.09105", "pdf_url": "https://arxiv.org/pdf/2511.09105", "source": {"id": "https://openalex.org/S4306400194", "display_name": "arXiv (Cornell University)", "issn_l": "2331-8422", "issn": ["2331-8422"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I205783295", "host_organization_name": "Cornell University", "host_organization_lineage": ["https://openalex.org/I205783295"], "host_organization_lineage_names": [], "type": "repository"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "text"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4412623683", "doi": "https://doi.org/10.1109/tifs.2025.3592530", "title": "Adversarial Waveform Design for Wireless Transceivers Toward Intelligent Eavesdropping", "publication_year": 2025, "publication_date": "2025-01-01", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5090826988", "display_name": "Zhenju Zhang", "orcid": "https://orcid.org/0009-0009-5460-3695", "observed_orcids": ["https://orcid.org/0009-0009-5460-3695"]}, "institutions": [{"id": "https://openalex.org/I149594827", "display_name": "Xidian University", "ror": "https://ror.org/05s92vm98", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I149594827"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Zhenju Zhang", "raw_affiliation_strings": ["State Key Laboratory of Integrated Service Networks, Xidian University, Xi&#x2019;an, Shaanxi, China"], "raw_orcid": "https://orcid.org/0009-0009-5460-3695", "affiliations": [{"raw_affiliation_string": "State Key Laboratory of Integrated Service Networks, Xidian University, Xi&#x2019;an, Shaanxi, China", "institution_ids": ["https://openalex.org/I149594827"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5060002668", "display_name": "Mingqian Liu", "orcid": "https://orcid.org/0000-0001-9872-9710", "observed_orcids": ["https://orcid.org/0000-0001-9872-9710"]}, "institutions": [{"id": "https://openalex.org/I149594827", "display_name": "Xidian University", "ror": "https://ror.org/05s92vm98", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I149594827"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Mingqian Liu", "raw_affiliation_strings": ["State Key Laboratory of Integrated Service Networks, Xidian University, Xi&#x2019;an, Shaanxi, China"], "raw_orcid": "https://orcid.org/0000-0001-9872-9710", "affiliations": [{"raw_affiliation_string": "State Key Laboratory of Integrated Service Networks, Xidian University, Xi&#x2019;an, Shaanxi, China", "institution_ids": ["https://openalex.org/I149594827"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5102013387", "display_name": "Yunfei Chen", "orcid": "https://orcid.org/0000-0001-8083-1805", "observed_orcids": ["https://orcid.org/0000-0001-8083-1805"]}, "institutions": [{"id": "https://openalex.org/I190082696", "display_name": "Durham University", "ror": "https://ror.org/01v29qb04", "country_code": "GB", "type": "education", "lineage": ["https://openalex.org/I190082696"]}], "countries": ["GB"], "is_corresponding": false, "raw_author_name": "Yunfei Chen", "raw_affiliation_strings": ["Department of Engineering, University of Durham, Durham, U.K"], "raw_orcid": "https://orcid.org/0000-0001-8083-1805", "affiliations": [{"raw_affiliation_string": "Department of Engineering, University of Durham, Durham, U.K", "institution_ids": ["https://openalex.org/I190082696"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5100656619", "display_name": "Nan Zhao", "orcid": "https://orcid.org/0000-0002-6497-7799", "observed_orcids": ["https://orcid.org/0000-0002-6497-7799", "https://orcid.org/0000-0003-2442-840X"]}, "institutions": [{"id": "https://openalex.org/I27357992", "display_name": "Dalian University of Technology", "ror": "https://ror.org/023hj5876", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I27357992"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Nan Zhao", "raw_affiliation_strings": ["School of Information and Communication Engineering, Dalian University of Technology, Dalian, China"], "raw_orcid": "https://orcid.org/0000-0002-6497-7799", "affiliations": [{"raw_affiliation_string": "School of Information and Communication Engineering, Dalian University of Technology, Dalian, China", "institution_ids": ["https://openalex.org/I27357992"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5089631680", "display_name": "Jie Tang", "orcid": "https://orcid.org/0000-0003-0619-0338", "observed_orcids": ["https://orcid.org/0000-0003-0619-0338"]}, "institutions": [{"id": "https://openalex.org/I90610280", "display_name": "South China University of Technology", "ror": "https://ror.org/0530pts50", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I90610280"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Jie Tang", "raw_affiliation_strings": ["School of Electronic and Information Engineering, South China University of Technology, Guangzhou, China"], "raw_orcid": "https://orcid.org/0000-0003-0619-0338", "affiliations": [{"raw_affiliation_string": "School of Electronic and Information Engineering, South China University of Technology, Guangzhou, China", "institution_ids": ["https://openalex.org/I90610280"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5011048761", "display_name": "Kai\u2010Kit Wong", "orcid": "https://orcid.org/0000-0001-7521-0078", "observed_orcids": ["https://orcid.org/0000-0001-7521-0078"]}, "institutions": [{"id": "https://openalex.org/I45129253", "display_name": "University College London", "ror": "https://ror.org/02jx3x895", "country_code": "GB", "type": "education", "lineage": ["https://openalex.org/I124357947", "https://openalex.org/I45129253"]}], "countries": ["GB"], "is_corresponding": false, "raw_author_name": "Kai-Kit Wong", "raw_affiliation_strings": ["Department of Electronic and Electrical Engineering, University College London, London, U.K", "Department of Electronic and Electrical Engineering, University College London, Torrington Place, United Kingdom"], "raw_orcid": "https://orcid.org/0000-0001-7521-0078", "affiliations": [{"raw_affiliation_string": "Department of Electronic and Electrical Engineering, University College London, London, U.K", "institution_ids": ["https://openalex.org/I45129253"]}, {"raw_affiliation_string": "Department of Electronic and Electrical Engineering, University College London, Torrington Place, United Kingdom", "institution_ids": ["https://openalex.org/I45129253"]}]}, {"author_position": "last", "author": {"id": null, "display_name": "George K. Karagiannidis", "orcid": "https://orcid.org/0000-0001-5420-8286", "observed_orcids": ["https://orcid.org/0000-0001-5420-8286"]}, "institutions": [{"id": "https://openalex.org/I21370196", "display_name": "Aristotle University of Thessaloniki", "ror": "https://ror.org/02j61yw88", "country_code": "GR", "type": "education", "lineage": ["https://openalex.org/I21370196"]}], "countries": ["GR"], "is_corresponding": false, "raw_author_name": "George K. Karagiannidis", "raw_affiliation_strings": ["Department of Electrical and Computer Engineering, Aristotle University of Thessaloniki, Thessaloniki, Greece"], "raw_orcid": "https://orcid.org/0000-0001-5420-8286", "affiliations": [{"raw_affiliation_string": "Department of Electrical and Computer Engineering, Aristotle University of Thessaloniki, Thessaloniki, Greece", "institution_ids": ["https://openalex.org/I21370196"]}]}], "abstract_inverted_index": {"In": [0, 121], "wireless": [1, 214], "communications,": [2], "the": [3, 7, 26, 52, 60, 65, 75, 92, 98, 112, 117, 125, 128, 131, 137, 145, 149, 152, 159, 162, 167, 171, 178, 183, 187, 190, 196, 200, 206], "communication": [4, 215], "channel": [5, 129, 146], "between": [6], "transmitter": [8], "and": [9, 31, 72, 204, 208], "receiver": [10], "can": [11, 141, 181], "be": [12, 42, 142], "monitored": [13], "by": [14, 55, 69, 123], "an": [15, 85], "eavesdropper.": [16], "The": [17], "eavesdropper": [18, 61, 76], "uses": [19, 91], "deep": [20], "learning": [21], "(DL)": [22], "to": [23, 41, 44, 50, 101, 106, 147, 170, 198], "quickly": [24], "identify": [25], "modulation": [27, 66, 192, 202], "parameters": [28], "of": [29, 94, 116, 127, 151, 161, 186, 210], "signals": [30], "further": [32, 135], "disrupt": [33], "legitimate": [34, 70, 211], "communications.": [35, 81], "Since": [36], "DL": [37], "has": [38], "been": [39], "proven": [40], "vulnerable": [43], "adversarial": [45, 57, 103, 119, 132, 138, 163], "attacks,": [46], "this": [47], "paper": [48, 83], "proposes": [49, 84], "attack": [51, 88, 114, 153, 168, 188], "eavesdropper\u2019s": [53, 191], "model": [54, 100, 197], "designing": [56], "waveforms,": [58], "preventing": [59, 74], "from": [62, 77], "correctly": [63], "identifying": [64], "schemes": [67], "used": [68], "users,": [71], "thereby": [73], "interfering": [78], "with": [79], "normal": [80], "This": [82, 109], "attention-based": [86], "black-box": [87], "method,": [89], "which": [90], "prediction": [93], "different": [95], "networks": [96], "in": [97, 144, 213], "ensemble": [99], "assign": [102], "attention": [104], "factors": [105], "each": [107], "network.": [108], "greatly": [110], "improves": [111], "transmission": [113], "performance": [115], "designed": [118], "examples.": [120], "addition,": [122], "analysing": [124], "influence": [126], "on": [130, 189], "waveform,": [133], "we": [134, 156], "design": [136], "waveform": [139], "that": [140, 166, 177], "transmitted": [143], "improve": [148, 182, 205], "practicability": [150], "algorithm.": [154], "Finally,": [155], "theoretically": [157], "derive": [158], "bounds": [160], "risk": [164], "increase": [165], "brings": [169], "target": [172], "model.": [173], "Simulation": [174], "results": [175], "show": [176], "proposed": [179], "method": [180], "success": [184], "rate": [185], "detection": [193], "model,": [194], "cause": [195], "misidentify": [199], "signal": [201], "type,": [203], "security": [207], "reliability": [209], "transceivers": [212], "systems.": [216]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.7103999853134155, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.7103999853134155, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10964", "display_name": "Wireless Communication Security Techniques", "score": 0.20419999957084656, "subfield": {"id": "https://openalex.org/subfields/2208", "display_name": "Electrical and Electronic Engineering"}, "field": {"id": "https://openalex.org/fields/22", "display_name": "Engineering"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12131", "display_name": "Wireless Signal Modulation Classification", "score": 0.07519999891519547, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.1109/tifs.2025.3592530", "is_oa": false, "landing_page_url": "https://doi.org/10.1109/tifs.2025.3592530", "pdf_url": null, "source": {"id": "https://openalex.org/S61310614", "display_name": "IEEE Transactions on Information Forensics and Security", "issn_l": "1556-6013", "issn": ["1556-6013", "1556-6021"], "is_oa": false, "is_in_doaj": false, "is_core": true, "listed_in": ["cwts-core", "jufo-2", "norway-2"], "host_organization": "https://openalex.org/P4310319808", "host_organization_name": "Institute of Electrical and Electronics Engineers", "host_organization_lineage": ["https://openalex.org/P4310319808"], "host_organization_lineage_names": ["Institute of Electrical and Electronics Engineers"], "type": "journal"}, "license": null, "license_id": null, "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "IEEE Transactions on Information Forensics and Security", "raw_type": "journal-article"}, "cited_by_count": 1, "is_retracted": false}, {"id": "https://openalex.org/W7117870962", "doi": "https://doi.org/10.5281/zenodo.18104802", "title": "Advances in Spam Email Filtering: Integrating Deep Learning and Ensemble Methods", "publication_year": 2025, "publication_date": "2025-12-31", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5121716179", "display_name": "Raksha R", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Raksha R", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5121715896", "display_name": "P T Bhargavi", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "P T Bhargavi", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5121719254", "display_name": "Shreya Mohan Bhat", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Shreya Mohan Bhat", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5093922206", "display_name": "Megha Shri", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Megha Shri", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "last", "author": {"id": "https://openalex.org/A5121738116", "display_name": "Manish Kumar", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Manish Kumar", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}], "abstract_inverted_index": {"Spam": [0], "emails": [1, 46], "continue": [2], "to": [3, 15, 34, 192, 239, 273], "grow": [4], "in": [5, 182, 306], "volume": [6], "and": [7, 18, 31, 59, 78, 97, 131, 168, 208, 217, 244, 260, 283, 302], "sophistication": [8], "each": [9], "year,": [10], "posing": [11], "serious": [12], "security": [13], "risks": [14], "individuals,": [16], "enterprises,": [17], "government": [19], "systems.": [20], "Modern": [21], "attackers": [22], "leverage": [23], "linguistic": [24, 186], "obfuscation,": [25], "AI-generated": [26], "text,": [27], "dynamic": [28], "content": [29], "injection,": [30], "large-scale": [32], "botnets": [33], "bypass": [35], "traditional": [36], "email": [37, 109, 221], "filters.": [38], "As": [39], "a": [40, 153, 295], "result,": [41], "detecting": [42], "malicious": [43, 127], "or": [44], "unsolicited": [45], "using": [47], "conventional": [48], "approaches": [49, 160], "has": [50], "become": [51], "increasingly": [52], "challenging.": [53], "This": [54, 291], "paper": [55, 265], "presents": [56], "an": [57], "expanded": [58], "in-depth": [60], "survey": [61, 189], "of": [62, 65, 73, 107, 137, 197, 220, 298, 309], "the": [63, 71, 172, 194, 284, 299, 307], "evolution": [64], "spam": [66, 113, 138, 176, 311], "filtering": [67, 227, 258], "technologies,": [68], "focusing": [69], "on": [70], "integration": [72], "machine": [74], "learning,": [75, 77], "ensemble": [76], "advanced": [79], "deep": [80, 199, 236], "learning": [81, 200], "it": [82], "now": [83], "includes": [84], "phishing": [85], "schemes,": [86], "credential-harvesting": [87], "at-": [88], "tempts,": [89], "malware": [90], "attachments,": [91], "ransomware": [92], "triggers,": [93], "social": [94], "engineering": [95], "lures,": [96], "impersonation": [98], "attacks.": [99], "Recent": [100], "global": [101], "statistics": [102], "indicate": [103], "that": [104, 141, 229, 252], "nearly": [105], "half": [106], "all": [108], "traffic": [110], "originates": [111], "from": [112], "campaigns.": [114], "These": [115], "campaigns": [116], "often": [117], "utilize": [118], "sophisticated": [119], "techniques": [120, 139], "such": [121, 161, 211], "as": [122, 162, 212], "randomized": [123], "text": [124], "generation,": [125], "embedded": [126], "URLs,": [128], "image-based": [129], "spam,": [130], "AI-assisted": [132], "obfuscation.": [133], "The": [134, 188, 264], "sheer": [135], "adaptability": [136], "means": [140], "static,": [142], "rule-based": [143], "filters": [144], "are": [145], "consistently": [146], "paradigms": [147], "outpaced": [148], "by": [149, 267], "attackers.": [150], "For": [151], "example,": [152], "keyword-based": [154], "filter.": [155], "We": [156, 248], "analyze": [157], "how": [158], "classical": [159], "Na\u0131ve": [163], "Bayes,": [164], "Support": [165], "Vector": [166], "Machines,": [167], "Decision": [169], "Trees": [170], "laid": [171], "foundation": [173], "for": [174, 286], "early": [175], "detection,": [177], "while": [178], "highlighting": [179], "their": [180], "limitations": [181], "dealing": [183], "with": [184, 234], "non-linear": [185], "structures.": [187], "then": [190], "transitions": [191], "exploring": [193], "transformative": [195], "impact": [196], "modern": [198], "architectures\u2014particularly": [201], "Convolutional": [202], "Neural": [203, 206], "Networks,": [204, 207], "Recurrent": [205], "Transformer-based": [209], "models": [210, 233], "BERT\u2014on": [213], "capturing": [214], "semantic,": [215], "contextual,": [216], "syntactic": [218], "properties": [219], "text.": [222], "Furthermore,": [223], "we": [224], "investigate": [225], "hybrid": [226], "frameworks": [228], "combine": [230], "fast": [231], "statistical": [232], "high-capacity": [235], "neural": [237], "networks": [238], "achieve": [240], "both": [241], "computational": [242], "efficiency": [243], "high": [245], "detection": [246], "accuracy.": [247], "provide": [249], "visual": [250], "diagrams": [251], "illustrate": [253], "practical": [254], "implementation": [255], "pathways,": [256], "multi-stage": [257], "pipelines,": [259], "ensemble-based": [261], "decision": [262], "calibration.": [263], "concludes": [266], "identifying": [268], "open": [269], "research": [270], "challenges": [271], "related": [272], "explainable": [274], "filtering,": [275, 280], "federated": [276], "model": [277], "training,": [278], "multilingual": [279], "adversarial": [281], "robustness,": [282], "need": [285], "energy-efficient": [287], "deployment": [288], "at": [289], "scale.": [290], "comprehensive": [292], "review": [293], "establishes": [294], "clear": [296], "understanding": [297], "current": [300], "landscape": [301], "encourages": [303], "future": [304], "contributions": [305], "domain": [308], "intelligent": [310], "filtering.": [312]}, "primary_topic": {"id": "https://openalex.org/T11644", "display_name": "Spam and Phishing Detection", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1710", "display_name": "Information Systems"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11644", "display_name": "Spam and Phishing Detection", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1710", "display_name": "Information Systems"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11550", "display_name": "Text and Document Classification Technologies", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12262", "display_name": "Hate Speech and Cyberbullying Detection", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.5281/zenodo.18104802", "is_oa": true, "landing_page_url": "https://doi.org/10.5281/zenodo.18104802", "pdf_url": null, "source": {"id": "https://openalex.org/S4306400562", "display_name": "Zenodo (CERN European Organization for Nuclear Research)", "issn_l": null, "issn": null, "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I67311998", "host_organization_name": "European Organization for Nuclear Research", "host_organization_lineage": ["https://openalex.org/I67311998"], "host_organization_lineage_names": [], "type": "repository"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": null, "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "JournalArticle"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4417200572", "doi": "https://doi.org/10.2139/ssrn.5901185", "title": "RIVAL: From Information Accumulation to LLM Jailbreaking via Reflective Action Loops", "publication_year": 2025, "publication_date": "2025-01-01", "type": "preprint", "language": null, "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Yijie Peng", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Yijie Peng", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5100354039", "display_name": "Xin Li", "orcid": "https://orcid.org/0000-0003-2067-2763", "observed_orcids": ["https://orcid.org/0000-0003-2067-2763", "https://orcid.org/0009-0006-5858-1444"]}, "institutions": [], "countries": [], "is_corresponding": true, "raw_author_name": "Xin Li", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Yu Yan", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Yu Yan", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5020368019", "display_name": "Mingshuai Liu", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Mingshuai Liu", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Mingfeng Li", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Mingfeng Li", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "last", "author": {"id": null, "display_name": "Dongxian Chen", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Dongxian Chen", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}], "abstract_inverted_index": null, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9990000128746033, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9990000128746033, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.00019999999494757503, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10028", "display_name": "Topic Modeling", "score": 9.999999747378752e-05, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.2139/ssrn.5901185", "is_oa": true, "landing_page_url": "https://doi.org/10.2139/ssrn.5901185", "pdf_url": null, "source": {"id": "https://openalex.org/S4210172589", "display_name": "SSRN Electronic Journal", "issn_l": "1556-5068", "issn": ["1556-5068"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I1318003438", "host_organization_name": "RELX Group (Netherlands)", "host_organization_lineage": ["https://openalex.org/I1318003438"], "host_organization_lineage_names": [], "type": "repository"}, "license": null, "license_id": null, "version": "acceptedVersion", "is_accepted": true, "is_published": false, "raw_source_name": null, "raw_type": "posted-content"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4416681971", "doi": "https://doi.org/10.48550/arxiv.2509.00124", "title": "A Whole New World: Creating a Parallel-Poisoned Web Only AI-Agents Can See", "publication_year": 2025, "publication_date": "2025-08-29", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5092867315", "display_name": "Shaked Zychlinski", "orcid": "https://orcid.org/0009-0003-7968-6489", "observed_orcids": ["https://orcid.org/0009-0003-7968-6489"]}, "institutions": [], "countries": [], "is_corresponding": true, "raw_author_name": "Zychlinski, Shaked", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}], "abstract_inverted_index": {"This": [0, 110, 139], "paper": [1], "introduces": [2], "a": [3, 48, 77, 88, 96], "novel": [4], "attack": [5, 56], "vector": [6], "that": [7], "leverages": [8], "website": [9, 62], "cloaking": [10], "techniques": [11], "to": [12, 114, 119, 132], "compromise": [13], "autonomous": [14], "web-browsing": [15], "agents": [16, 25], "powered": [17], "by": [18], "Large": [19], "Language": [20], "Models": [21], "(LLMs).": [22], "As": [23], "these": [24], "become": [26], "more": [27], "prevalent,": [28], "their": [29], "unique": [30], "and": [31, 43, 74, 135, 151, 153, 175], "often": [32], "homogenous": [33], "digital": [34], "fingerprints": [35], "-": [36, 46], "comprising": [37], "browser": [38], "attributes,": [39], "automation": [40], "framework": [41], "signatures,": [42], "network": [44], "characteristics": [45], "create": [47], "new,": [49], "distinguishable": [50], "class": [51], "of": [52, 81, 148, 162], "web": [53], "traffic.": [54], "The": [55], "exploits": [57], "this": [58, 173], "fingerprintability.": [59], "A": [60], "malicious": [61, 103], "can": [63], "identify": [64], "an": [65, 71], "incoming": [66], "request": [67], "as": [68, 106], "originating": [69], "from": [70], "AI": [72], "agent": [73, 92, 116, 149], "dynamically": [75], "serve": [76], "different,": [78], "\"cloaked\"": [79], "version": [80], "its": [82], "content.": [83], "While": [84], "human": [85, 133], "users": [86, 134], "see": [87], "benign": [89], "webpage,": [90], "the": [91, 142, 146, 155, 160, 166], "is": [93], "presented": [94], "with": [95, 101], "visually": [97], "identical": [98], "page": [99], "embedded": [100], "hidden,": [102], "instructions,": [104], "such": [105], "indirect": [107], "prompt": [108], "injections.": [109], "mechanism": [111], "allows": [112], "adversaries": [113], "hijack": [115], "behavior,": [117], "leading": [118], "data": [120], "exfiltration,": [121], "malware": [122], "execution,": [123], "or": [124], "misinformation": [125], "propagation,": [126], "all": [127], "while": [128], "remaining": [129], "completely": [130], "invisible": [131], "conventional": [136], "security": [137, 157], "crawlers.": [138], "work": [140], "formalizes": [141], "threat": [143], "model,": [144], "details": [145], "mechanics": [147], "fingerprinting": [150], "cloaking,": [152], "discusses": [154], "profound": [156], "implications": [158], "for": [159, 169], "future": [161], "agentic": [163], "AI,": [164], "highlighting": [165], "urgent": [167], "need": [168], "robust": [170], "defenses": [171], "against": [172], "stealthy": [174], "scalable": [176], "attack.": [177]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.3970000147819519, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.3970000147819519, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12479", "display_name": "Web Application Security Vulnerabilities", "score": 0.290800005197525, "subfield": {"id": "https://openalex.org/subfields/1710", "display_name": "Information Systems"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11644", "display_name": "Spam and Phishing Detection", "score": 0.21230000257492065, "subfield": {"id": "https://openalex.org/subfields/1710", "display_name": "Information Systems"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "pmh:oai:arXiv.org:2509.00124", "is_oa": true, "landing_page_url": "http://arxiv.org/abs/2509.00124", "pdf_url": "https://arxiv.org/pdf/2509.00124", "source": {"id": "https://openalex.org/S4306400194", "display_name": "arXiv (Cornell University)", "issn_l": "2331-8422", "issn": ["2331-8422"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I205783295", "host_organization_name": "Cornell University", "host_organization_lineage": ["https://openalex.org/I205783295"], "host_organization_lineage_names": [], "type": "repository"}, "license": null, "license_id": null, "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "text"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4415196146", "doi": "https://doi.org/10.2139/ssrn.5601330", "title": "AI and Cybersecurity: Opportunities, Challenges, and Governance", "publication_year": 2025, "publication_date": "2025-01-01", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Rajat Bhandari", "orcid": "https://orcid.org/0009-0002-2898-1990", "observed_orcids": ["https://orcid.org/0009-0002-2898-1990"]}, "institutions": [{"id": "https://openalex.org/I153151563", "display_name": "Harrisburg University of Science and Technology", "ror": "https://ror.org/02g0s4z48", "country_code": "US", "type": "education", "lineage": ["https://openalex.org/I153151563"]}], "countries": ["US"], "is_corresponding": true, "raw_author_name": "Rajat Bhandari", "raw_affiliation_strings": ["Harrisburg University of Science and Technology", "Harrisburg University of Science and Technology, 326 Market St, Harrisburg, PA 17101, United States"], "raw_orcid": "https://orcid.org/0009-0002-2898-1990", "affiliations": [{"raw_affiliation_string": "Harrisburg University of Science and Technology", "institution_ids": ["https://openalex.org/I153151563"]}, {"raw_affiliation_string": "Harrisburg University of Science and Technology, 326 Market St, Harrisburg, PA 17101, United States", "institution_ids": ["https://openalex.org/I153151563"]}]}], "abstract_inverted_index": null, "primary_topic": {"id": "https://openalex.org/T10734", "display_name": "Information and Cyber Security", "score": 0.5029000043869019, "subfield": {"id": "https://openalex.org/subfields/1710", "display_name": "Information Systems"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T10734", "display_name": "Information and Cyber Security", "score": 0.5029000043869019, "subfield": {"id": "https://openalex.org/subfields/1710", "display_name": "Information Systems"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10400", "display_name": "Network Security and Intrusion Detection", "score": 0.16220000386238098, "subfield": {"id": "https://openalex.org/subfields/1705", "display_name": "Computer Networks and Communications"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T13364", "display_name": "Digitalization, Law, and Regulation", "score": 0.0843999981880188, "subfield": {"id": "https://openalex.org/subfields/3308", "display_name": "Law"}, "field": {"id": "https://openalex.org/fields/33", "display_name": "Social Sciences"}, "domain": {"id": "https://openalex.org/domains/2", "display_name": "Social Sciences"}}], "primary_location": {"id": "doi:10.2139/ssrn.5601330", "is_oa": true, "landing_page_url": "https://doi.org/10.2139/ssrn.5601330", "pdf_url": null, "source": {"id": "https://openalex.org/S4210172589", "display_name": "SSRN Electronic Journal", "issn_l": "1556-5068", "issn": ["1556-5068"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I1318003438", "host_organization_name": "RELX Group (Netherlands)", "host_organization_lineage": ["https://openalex.org/I1318003438"], "host_organization_lineage_names": [], "type": "repository"}, "license": null, "license_id": null, "version": "acceptedVersion", "is_accepted": true, "is_published": false, "raw_source_name": null, "raw_type": "posted-content"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4410973564", "doi": "https://doi.org/10.1016/j.engappai.2025.111341", "title": "Image steganography with high embedding capacity based on multi-target adversarial attack", "publication_year": 2025, "publication_date": "2025-06-02", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5100393835", "display_name": "Xiaolong Liu", "orcid": "https://orcid.org/0009-0000-3427-9255", "observed_orcids": ["https://orcid.org/0009-0000-3427-9255"]}, "institutions": [{"id": "https://openalex.org/I61057504", "display_name": "Fujian Agriculture and Forestry University", "ror": "https://ror.org/04kx2sy84", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I61057504"]}], "countries": ["CN"], "is_corresponding": true, "raw_author_name": "Xiaolong Liu", "raw_affiliation_strings": ["Center for Agroforestry Mega Data Science, School of Future Technology, Fujian Agriculture and Forestry University, Fuzhou, 350002, China", "College of Computer and Information Sciences, Fujian Agriculture and Forestry University, Fuzhou, 350002, China"], "raw_orcid": "https://orcid.org/0009-0000-3427-9255", "affiliations": [{"raw_affiliation_string": "Center for Agroforestry Mega Data Science, School of Future Technology, Fujian Agriculture and Forestry University, Fuzhou, 350002, China", "institution_ids": ["https://openalex.org/I61057504"]}, {"raw_affiliation_string": "College of Computer and Information Sciences, Fujian Agriculture and Forestry University, Fuzhou, 350002, China", "institution_ids": ["https://openalex.org/I61057504"]}]}, {"author_position": "middle", "author": {"id": null, "display_name": "Minghuang Shen", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I61057504", "display_name": "Fujian Agriculture and Forestry University", "ror": "https://ror.org/04kx2sy84", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I61057504"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Minghuang Shen", "raw_affiliation_strings": ["College of Computer and Information Sciences, Fujian Agriculture and Forestry University, Fuzhou, 350002, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "College of Computer and Information Sciences, Fujian Agriculture and Forestry University, Fuzhou, 350002, China", "institution_ids": ["https://openalex.org/I61057504"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5114310289", "display_name": "Jiayi Liu", "orcid": "https://orcid.org/0009-0004-9625-2372", "observed_orcids": ["https://orcid.org/0009-0004-9625-2372"]}, "institutions": [{"id": "https://openalex.org/I61057504", "display_name": "Fujian Agriculture and Forestry University", "ror": "https://ror.org/04kx2sy84", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I61057504"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Jiayi Liu", "raw_affiliation_strings": ["College of Computer and Information Sciences, Fujian Agriculture and Forestry University, Fuzhou, 350002, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "College of Computer and Information Sciences, Fujian Agriculture and Forestry University, Fuzhou, 350002, China", "institution_ids": ["https://openalex.org/I61057504"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5114832611", "display_name": "Qiwen Wu", "orcid": "https://orcid.org/0009-0001-0884-0026", "observed_orcids": ["https://orcid.org/0009-0001-0884-0026", "https://orcid.org/0009-0005-6435-2325"]}, "institutions": [{"id": "https://openalex.org/I61057504", "display_name": "Fujian Agriculture and Forestry University", "ror": "https://ror.org/04kx2sy84", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I61057504"]}], "countries": ["CN"], "is_corresponding": true, "raw_author_name": "Qiwen Wu", "raw_affiliation_strings": ["College of Computer and Information Sciences, Fujian Agriculture and Forestry University, Fuzhou, 350002, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "College of Computer and Information Sciences, Fujian Agriculture and Forestry University, Fuzhou, 350002, China", "institution_ids": ["https://openalex.org/I61057504"]}]}], "abstract_inverted_index": null, "primary_topic": {"id": "https://openalex.org/T10388", "display_name": "Advanced Steganography and Watermarking Techniques", "score": 0.9932000041007996, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T10388", "display_name": "Advanced Steganography and Watermarking Techniques", "score": 0.9932000041007996, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 0.0038999998942017555, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.000699999975040555, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.1016/j.engappai.2025.111341", "is_oa": false, "landing_page_url": "https://doi.org/10.1016/j.engappai.2025.111341", "pdf_url": null, "source": {"id": "https://openalex.org/S900972176", "display_name": "Engineering Applications of Artificial Intelligence", "issn_l": "0952-1976", "issn": ["0952-1976", "1873-6769"], "is_oa": false, "is_in_doaj": false, "is_core": true, "listed_in": ["cwts-core", "jufo-2", "ki-jl-1", "norway-1"], "host_organization": "https://openalex.org/P4310320990", "host_organization_name": "Elsevier BV", "host_organization_lineage": ["https://openalex.org/P4310320990"], "host_organization_lineage_names": ["Elsevier BV"], "type": "journal"}, "license": null, "license_id": null, "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Engineering Applications of Artificial Intelligence", "raw_type": "journal-article"}, "cited_by_count": 4, "is_retracted": false}, {"id": "https://openalex.org/W4415783717", "doi": "https://doi.org/10.70382/mejaimr.v10i2.077", "title": "EVALUATING THE ROBUSTNESS OF CONVOLUTIONAL NEURAL NETWORKS AGAINST ADVERSARIAL IMAGE PERTURBATIONS IN REAL-WORLD SCENARIOS", "publication_year": 2025, "publication_date": "2025-11-03", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5152856231", "display_name": "ISHOLA A.K.", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I4387154758", "display_name": "Anchor University Lagos", "ror": "https://ror.org/01zr8ek85", "country_code": null, "type": "education", "lineage": ["https://openalex.org/I4387154758"]}], "countries": [], "is_corresponding": false, "raw_author_name": "ISHOLA A.K.", "raw_affiliation_strings": ["Department of Computing, Anchor University Lagos, Nigeria"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Computing, Anchor University Lagos, Nigeria", "institution_ids": ["https://openalex.org/I4387154758"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5085527654", "display_name": "Babatunde Olofin", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I4387154758", "display_name": "Anchor University Lagos", "ror": "https://ror.org/01zr8ek85", "country_code": null, "type": "education", "lineage": ["https://openalex.org/I4387154758"]}], "countries": [], "is_corresponding": false, "raw_author_name": "OLOFIN, B.B.", "raw_affiliation_strings": ["Department of Computing, Anchor University Lagos, Nigeria"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Computing, Anchor University Lagos, Nigeria", "institution_ids": ["https://openalex.org/I4387154758"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5126776456", "display_name": "P. E Ishola", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I4387154758", "display_name": "Anchor University Lagos", "ror": "https://ror.org/01zr8ek85", "country_code": null, "type": "education", "lineage": ["https://openalex.org/I4387154758"]}], "countries": [], "is_corresponding": false, "raw_author_name": "ISHOLA, P.E.", "raw_affiliation_strings": ["Department of Computing, Anchor University Lagos, Nigeria"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Computing, Anchor University Lagos, Nigeria", "institution_ids": ["https://openalex.org/I4387154758"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5115671146", "display_name": "Uduakobong M. Umoren", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I4387154758", "display_name": "Anchor University Lagos", "ror": "https://ror.org/01zr8ek85", "country_code": null, "type": "education", "lineage": ["https://openalex.org/I4387154758"]}], "countries": [], "is_corresponding": false, "raw_author_name": "UMOREN, U.M.", "raw_affiliation_strings": ["Department of Computing, Anchor University Lagos, Nigeria"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Computing, Anchor University Lagos, Nigeria", "institution_ids": ["https://openalex.org/I4387154758"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5120227153", "display_name": "P. ADEOLA", "orcid": "https://orcid.org/0009-0007-9215-3870", "observed_orcids": ["https://orcid.org/0009-0007-9215-3870"]}, "institutions": [{"id": "https://openalex.org/I4387154758", "display_name": "Anchor University Lagos", "ror": "https://ror.org/01zr8ek85", "country_code": null, "type": "education", "lineage": ["https://openalex.org/I4387154758"]}], "countries": [], "is_corresponding": false, "raw_author_name": "ADEOLA, P.", "raw_affiliation_strings": ["Department of Computing, Anchor University Lagos, Nigeria"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Computing, Anchor University Lagos, Nigeria", "institution_ids": ["https://openalex.org/I4387154758"]}]}], "abstract_inverted_index": {"Convolutional": [0], "Neural": [1], "Networks": [2], "(CNNs)": [3], "have": [4], "achieved": [5], "remarkable": [6], "success": [7], "in": [8, 21], "computer": [9], "vision": [10], "tasks": [11], "but": [12], "remain": [13], "highly": [14], "vulnerable": [15], "to": [16, 65, 104], "adversarial": [17, 37, 67, 93], "image": [18], "perturbations,": [19], "especially": [20], "real-world": [22, 89], "environments.": [23], "This": [24], "study": [25], "evaluates": [26], "the": [27, 74, 105], "robustness": [28], "of": [29, 36, 107], "leading": [30], "CNN": [31], "models": [32, 58], "against": [33], "a": [34], "range": [35], "attacks\u2014both": [38], "digital": [39], "and": [40, 49, 68, 82, 97, 110], "physical\u2014under": [41], "realistic": [42], "conditions": [43], "such": [44], "as": [45], "lighting": [46], "variations,": [47], "occlusions,": [48], "sensor": [50], "noise.": [51], "Experimental": [52], "results": [53], "reveal": [54], "that": [55, 86], "even": [56], "state-of-the-art": [57], "experience": [59], "significant": [60], "performance": [61], "degradation": [62], "when": [63], "exposed": [64], "combined": [66], "environmental": [69], "challenges.": [70], "The": [71], "findings": [72], "underscore": [73], "urgent": [75], "need": [76], "for": [77, 88, 114], "more": [78, 108], "resilient": [79], "training": [80], "strategies": [81], "comprehensive": [83], "evaluation": [84], "frameworks": [85], "account": [87], "complexities.": [90], "By": [91], "integrating": [92], "training,": [94], "defensive": [95], "distillation,": [96], "input": [98], "transformation": [99], "techniques,": [100], "this": [101], "research": [102], "contributes": [103], "development": [106], "reliable": [109], "secure": [111], "CNN-based": [112], "systems": [113], "practical": [115], "applications.": [116]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 9.999999747378752e-05, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10036", "display_name": "Advanced Neural Network Applications", "score": 9.999999747378752e-05, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.70382/mejaimr.v10i2.077", "is_oa": true, "landing_page_url": "https://doi.org/10.70382/mejaimr.v10i2.077", "pdf_url": "https://mediterraneanpublications.com/mejaimr/article/download/939/1002", "source": {"id": "https://openalex.org/S4404661668", "display_name": "International Journal of African Innovation and Multidisciplinary Research", "issn_l": "1116-3240", "issn": ["1116-3240", "3026-9334"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": null, "host_organization_name": null, "host_organization_lineage": [], "host_organization_lineage_names": [], "type": "journal"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "International Journal of African Innovation and Multidisciplinary Research", "raw_type": "journal-article"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4412549363", "doi": "https://doi.org/10.51846/jcsa.v2i1.4278", "title": "Semantically-Aligned Reasoning for Safe AGI via Knowledge-Based Deep Models", "publication_year": 2025, "publication_date": "2025-06-01", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Noor ul Ain Zaidi", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I142732210", "display_name": "University of Engineering and Technology Lahore", "ror": "https://ror.org/0051w2v06", "country_code": "PK", "type": "education", "lineage": ["https://openalex.org/I142732210"]}], "countries": ["PK"], "is_corresponding": false, "raw_author_name": "Noor ul Ain Zaidi", "raw_affiliation_strings": ["Department of Computer Science, University of Engineering and Technology (UET), Lahore, Pakistan"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Computer Science, University of Engineering and Technology (UET), Lahore, Pakistan", "institution_ids": ["https://openalex.org/I142732210"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5108869433", "display_name": "Sundas Fatima", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I142204992", "display_name": "University of Lahore", "ror": "https://ror.org/051jrjw38", "country_code": "PK", "type": "education", "lineage": ["https://openalex.org/I142204992"]}, {"id": "https://openalex.org/I142732210", "display_name": "University of Engineering and Technology Lahore", "ror": "https://ror.org/0051w2v06", "country_code": "PK", "type": "education", "lineage": ["https://openalex.org/I142732210"]}], "countries": ["PK"], "is_corresponding": false, "raw_author_name": "Sundas Fatima", "raw_affiliation_strings": ["Department of Computer Science and Information Technology, The University of Lahore, Lahore Campus, Pakistan"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Computer Science and Information Technology, The University of Lahore, Lahore Campus, Pakistan", "institution_ids": ["https://openalex.org/I142204992", "https://openalex.org/I142732210"]}]}], "abstract_inverted_index": {"A": [0, 112], "hybrid": [1], "neuro-symbolic": [2], "framework": [3, 64], "is": [4], "presented": [5], "in": [6, 21, 30], "this": [7], "work": [8], "with": [9, 53, 74, 84], "the": [10, 14, 31, 68, 75, 137], "goal": [11], "of": [12, 19, 33, 71, 78], "enhancing": [13], "safety,": [15], "dependability,": [16], "and": [17, 50, 59, 90, 99, 107, 125, 133], "interpretability": [18], "reasoning": [20, 88], "large": [22], "language": [23, 57], "models": [24], "(LLMs),": [25], "which": [26], "will": [27], "ultimately": [28], "aid": [29], "development": [32], "reliable": [34], "artificial": [35], "general": [36], "intelligence": [37], "(AGI).The": [38], "proposed": [39], "strategy": [40], "integrates": [41], "structured": [42], "knowledge": [43], "representations,": [44], "such": [45], "as": [46, 128, 130], "ontologies,": [47], "symbolic": [48, 72], "planners,": [49], "formal": [51], "logic,": [52], "deep": [54], "learning-based": [55], "natural": [56], "comprehension": [58], "Chain-of-Thought": [60], "(CoT)": [61], "reasoning.": [62], "The": [63], "aims": [65], "to": [66, 80, 119], "combine": [67], "semantic": [69, 82], "rigor": [70], "systems": [73], "generative": [76], "flexibility": [77], "LLMs": [79], "ensure": [81], "alignment": [83, 108], "human": [85], "ideals,": [86], "improve": [87], "faithfulness,": [89], "lessen": [91], "hallucinations.": [92], "Adversarial": [93], "robustness": [94], "testing,": [95], "logic-based": [96], "inference": [97], "validation,": [98], "a": [100], "benchmark": [101], "suite": [102], "for": [103], "assessing": [104], "coherence,": [105], "honesty,": [106], "are": [109, 135], "important": [110], "elements.": [111], "functioning": [113], "prototype": [114], "that": [115], "may": [116], "be": [117], "applied": [118], "high-stakes": [120], "decision-making": [121], "domains,": [122], "including": [123], "healthcare": [124], "autonomous": [126], "systems,": [127], "well": [129], "assessment": [131], "metrics": [132], "tools,": [134], "among": [136], "anticipated": [138], "results.": [139]}, "primary_topic": {"id": "https://openalex.org/T11010", "display_name": "Logic, Reasoning, and Knowledge", "score": 0.6650000214576721, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11010", "display_name": "Logic, Reasoning, and Knowledge", "score": 0.6650000214576721, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10028", "display_name": "Topic Modeling", "score": 0.07859999686479568, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10906", "display_name": "AI-based Problem Solving and Planning", "score": 0.04699999839067459, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.51846/jcsa.v2i1.4278", "is_oa": true, "landing_page_url": "https://doi.org/10.51846/jcsa.v2i1.4278", "pdf_url": null, "source": {"id": "https://openalex.org/S5407023187", "display_name": "Journal of Computational Science and Applications (JCSA)", "issn_l": "2710-3102", "issn": ["2710-3102", "3079-0867"], "is_oa": false, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": null, "host_organization_name": null, "host_organization_lineage": [], "host_organization_lineage_names": [], "type": "journal"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Journal of Computational Science and Applications (JCSA), ISSN: 3079-0867 (Onilne)", "raw_type": "journal-article"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4414973332", "doi": "https://doi.org/10.48550/arxiv.2510.05052", "title": "Proactive defense against LLM Jailbreak", "publication_year": 2025, "publication_date": "2025-10-06", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5048063139", "display_name": "Weiliang Zhao", "orcid": "https://orcid.org/0000-0003-2599-9968", "observed_orcids": ["https://orcid.org/0000-0003-2599-9968"]}, "institutions": [{"id": "https://openalex.org/I78577930", "display_name": "Columbia University", "ror": "https://ror.org/00hj8s172", "country_code": "US", "type": "education", "lineage": ["https://openalex.org/I78577930"]}], "countries": ["US"], "is_corresponding": false, "raw_author_name": "Zhao, Weiliang", "raw_affiliation_strings": ["Department of Computer Science Columbia University"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Computer Science Columbia University", "institution_ids": ["https://openalex.org/I78577930"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5119912646", "display_name": "Jinjun Peng", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I78577930", "display_name": "Columbia University", "ror": "https://ror.org/00hj8s172", "country_code": "US", "type": "education", "lineage": ["https://openalex.org/I78577930"]}], "countries": ["US"], "is_corresponding": false, "raw_author_name": "Peng, Jinjun", "raw_affiliation_strings": ["Department of Computer Science Columbia University"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Computer Science Columbia University", "institution_ids": ["https://openalex.org/I78577930"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5114658000", "display_name": "Daniel Ben-Levi", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I78577930", "display_name": "Columbia University", "ror": "https://ror.org/00hj8s172", "country_code": "US", "type": "education", "lineage": ["https://openalex.org/I78577930"]}], "countries": ["US"], "is_corresponding": false, "raw_author_name": "Ben-Levi, Daniel", "raw_affiliation_strings": ["Department of Computer Science Columbia University"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Computer Science Columbia University", "institution_ids": ["https://openalex.org/I78577930"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5119912648", "display_name": "Zhou Yu", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I78577930", "display_name": "Columbia University", "ror": "https://ror.org/00hj8s172", "country_code": "US", "type": "education", "lineage": ["https://openalex.org/I78577930"]}], "countries": ["US"], "is_corresponding": false, "raw_author_name": "Yu, Zhou", "raw_affiliation_strings": ["Department of Computer Science Columbia University"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Computer Science Columbia University", "institution_ids": ["https://openalex.org/I78577930"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5028642102", "display_name": "Junfeng Yang", "orcid": "https://orcid.org/0000-0002-6962-8926", "observed_orcids": ["https://orcid.org/0000-0002-6962-8926"]}, "institutions": [{"id": "https://openalex.org/I78577930", "display_name": "Columbia University", "ror": "https://ror.org/00hj8s172", "country_code": "US", "type": "education", "lineage": ["https://openalex.org/I78577930"]}], "countries": ["US"], "is_corresponding": false, "raw_author_name": "Yang, Junfeng", "raw_affiliation_strings": ["Department of Computer Science Columbia University"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Computer Science Columbia University", "institution_ids": ["https://openalex.org/I78577930"]}]}], "abstract_inverted_index": {"The": [0], "proliferation": [1], "of": [2], "powerful": [3], "large": [4], "language": [5], "models": [6, 15], "(LLMs)": [7], "has": [8, 82], "necessitated": [9], "robust": [10], "safety": [11, 122, 174], "alignment,": [12], "yet": [13], "these": [14, 43, 62, 74], "remain": [16], "vulnerable": [17], "to": [18, 41, 58, 71, 94, 104, 138, 158, 171], "evolving": [19], "adversarial": [20, 102], "attacks,": [21], "including": [22], "multi-turn": [23], "jailbreaks": [24], "that": [25, 79, 126, 165], "iteratively": [26], "search": [27, 64, 103], "for": [28], "successful": [29], "queries.": [30], "Current": [31], "defenses,": [32], "which": [33], "are": [34], "primarily": [35], "reactive": [36], "and": [37, 60, 107, 121, 130], "static,": [38], "often": [39], "fail": [40], "handle": [42], "iterative": [44, 63], "attacks.": [45, 180], "In": [46], "this": [47], "paper,": [48], "we": [49, 124], "introduce": [50], "ProAct,": [51], "a": [52], "novel": [53], "proactive": [54], "defense": [55, 147, 163], "framework": [56], "designed": [57], "disrupt": [59], "mislead": [61, 73], "jailbreak": [65, 75], "methods.": [66], "Our": [67], "core": [68], "idea": [69], "is": [70], "intentionally": [72], "methods": [76], "into": [77], "thinking": [78], "the": [80, 95, 101, 110, 152, 176], "model": [81], "been": [83], "jailbroken": [84], "with": [85, 145], "\"spurious": [86], "responses\".": [87], "These": [88], "misleading": [89], "responses": [90], "provide": [91], "false": [92], "signals": [93], "attacker's": [96], "internal": [97], "optimization": [98], "loop,": [99], "causing": [100], "terminate": [105], "prematurely": [106], "effectively": [108], "jailbreaking": [109, 119, 179], "jailbreak.": [111], "By": [112], "conducting": [113], "extensive": [114], "experiments": [115], "across": [116], "state-of-the-art": [117], "LLMs,": [118], "frameworks,": [120], "benchmarks,": [123], "demonstrate": [125], "our": [127], "method": [128], "consistently": [129], "significantly": [131], "reduces": [132, 151], "attack": [133, 154], "success": [134, 156], "rates": [135], "by": [136], "up": [137], "94%": [139], "without": [140], "affecting": [141], "utility.": [142], "When": [143], "combined": [144], "other": [146], "fraeworks,": [148], "it": [149], "further": [150], "latest": [153], "strategies'": [155], "rate": [157], "0%.": [159], "ProActrepresents": [160], "an": [161, 168], "orthogonal": [162], "strategy": [164], "serves": [166], "as": [167], "additional": [169], "guardrail": [170], "enhance": [172], "LLM": [173], "against": [175], "most": [177], "effective": [178]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10028", "display_name": "Topic Modeling", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "pmh:oai:arXiv.org:2510.05052", "is_oa": true, "landing_page_url": "http://arxiv.org/abs/2510.05052", "pdf_url": "https://arxiv.org/pdf/2510.05052", "source": {"id": "https://openalex.org/S4306400194", "display_name": "arXiv (Cornell University)", "issn_l": "2331-8422", "issn": ["2331-8422"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I205783295", "host_organization_name": "Cornell University", "host_organization_lineage": ["https://openalex.org/I205783295"], "host_organization_lineage_names": [], "type": "repository"}, "license": null, "license_id": null, "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "text"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4413887190", "doi": "https://doi.org/10.1109/ojcoms.2025.3602200", "title": "Mitigating ML-Driven Adversarial Attacks on xApps Using Dynamic Defense Mechanisms", "publication_year": 2025, "publication_date": "2025-01-01", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5094276213", "display_name": "Prudhvi Kumar Kakani", "orcid": "https://orcid.org/0009-0000-1177-8318", "observed_orcids": ["https://orcid.org/0009-0000-1177-8318"]}, "institutions": [{"id": "https://openalex.org/I153267046", "display_name": "University of Kaiserslautern", "ror": "https://ror.org/04zrf7b53", "country_code": "DE", "type": "education", "lineage": ["https://openalex.org/I153267046", "https://openalex.org/I4387152675"]}, {"id": "https://openalex.org/I4387152675", "display_name": "Rheinland-Pf\u00e4lzische Technische Universit\u00e4t Kaiserslautern-Landau", "ror": "https://ror.org/01qrts582", "country_code": "DE", "type": "education", "lineage": ["https://openalex.org/I4387152675"]}], "countries": ["DE"], "is_corresponding": false, "raw_author_name": "Prudhvi Kumar Kakani", "raw_affiliation_strings": ["Department of Electrical and Computer Engineering, Division of Wireless Communications and Radio Navigation, University of Kaiserslautern-Landau, Kaiserslautern, Germany", "Department of Electrical and Computer Engineering EIT, Division of Wireless Communications and Radio Navigation WiCoN, University of Kaiserslautern RPTU, Kaiserslautern, Germany"], "raw_orcid": "https://orcid.org/0009-0000-1177-8318", "affiliations": [{"raw_affiliation_string": "Department of Electrical and Computer Engineering, Division of Wireless Communications and Radio Navigation, University of Kaiserslautern-Landau, Kaiserslautern, Germany", "institution_ids": ["https://openalex.org/I153267046", "https://openalex.org/I4387152675"]}, {"raw_affiliation_string": "Department of Electrical and Computer Engineering EIT, Division of Wireless Communications and Radio Navigation WiCoN, University of Kaiserslautern RPTU, Kaiserslautern, Germany", "institution_ids": ["https://openalex.org/I153267046", "https://openalex.org/I4387152675"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5013819636", "display_name": "Mohammad Asif Habibi", "orcid": "https://orcid.org/0000-0001-9874-0047", "observed_orcids": ["https://orcid.org/0000-0001-9874-0047"]}, "institutions": [{"id": "https://openalex.org/I153267046", "display_name": "University of Kaiserslautern", "ror": "https://ror.org/04zrf7b53", "country_code": "DE", "type": "education", "lineage": ["https://openalex.org/I153267046", "https://openalex.org/I4387152675"]}, {"id": "https://openalex.org/I4387152675", "display_name": "Rheinland-Pf\u00e4lzische Technische Universit\u00e4t Kaiserslautern-Landau", "ror": "https://ror.org/01qrts582", "country_code": "DE", "type": "education", "lineage": ["https://openalex.org/I4387152675"]}], "countries": ["DE"], "is_corresponding": false, "raw_author_name": "Mohammad Asif Habibi", "raw_affiliation_strings": ["Department of Electrical and Computer Engineering, Division of Wireless Communications and Radio Navigation, University of Kaiserslautern-Landau, Kaiserslautern, Germany", "Department of Electrical and Computer Engineering EIT, Division of Wireless Communications and Radio Navigation WiCoN, University of Kaiserslautern RPTU, Kaiserslautern, Germany"], "raw_orcid": "https://orcid.org/0000-0001-9874-0047", "affiliations": [{"raw_affiliation_string": "Department of Electrical and Computer Engineering, Division of Wireless Communications and Radio Navigation, University of Kaiserslautern-Landau, Kaiserslautern, Germany", "institution_ids": ["https://openalex.org/I153267046", "https://openalex.org/I4387152675"]}, {"raw_affiliation_string": "Department of Electrical and Computer Engineering EIT, Division of Wireless Communications and Radio Navigation WiCoN, University of Kaiserslautern RPTU, Kaiserslautern, Germany", "institution_ids": ["https://openalex.org/I153267046", "https://openalex.org/I4387152675"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5119500872", "display_name": "Manjunath Reddy Chavva Balannagari", "orcid": "https://orcid.org/0009-0002-4557-4641", "observed_orcids": ["https://orcid.org/0009-0002-4557-4641"]}, "institutions": [{"id": "https://openalex.org/I153267046", "display_name": "University of Kaiserslautern", "ror": "https://ror.org/04zrf7b53", "country_code": "DE", "type": "education", "lineage": ["https://openalex.org/I153267046", "https://openalex.org/I4387152675"]}, {"id": "https://openalex.org/I4387152675", "display_name": "Rheinland-Pf\u00e4lzische Technische Universit\u00e4t Kaiserslautern-Landau", "ror": "https://ror.org/01qrts582", "country_code": "DE", "type": "education", "lineage": ["https://openalex.org/I4387152675"]}], "countries": ["DE"], "is_corresponding": false, "raw_author_name": "Manjunath Reddy Chavva Balannagari", "raw_affiliation_strings": ["Department of Electrical and Computer Engineering, Division of Wireless Communications and Radio Navigation, University of Kaiserslautern-Landau, Kaiserslautern, Germany", "Department of Electrical and Computer Engineering EIT, Division of Wireless Communications and Radio Navigation WiCoN, University of Kaiserslautern RPTU, Kaiserslautern, Germany"], "raw_orcid": "https://orcid.org/0009-0002-4557-4641", "affiliations": [{"raw_affiliation_string": "Department of Electrical and Computer Engineering, Division of Wireless Communications and Radio Navigation, University of Kaiserslautern-Landau, Kaiserslautern, Germany", "institution_ids": ["https://openalex.org/I153267046", "https://openalex.org/I4387152675"]}, {"raw_affiliation_string": "Department of Electrical and Computer Engineering EIT, Division of Wireless Communications and Radio Navigation WiCoN, University of Kaiserslautern RPTU, Kaiserslautern, Germany", "institution_ids": ["https://openalex.org/I153267046", "https://openalex.org/I4387152675"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5086187463", "display_name": "Xavier Costa\u2010P\u00e9rez", "orcid": "https://orcid.org/0000-0002-9654-6109", "observed_orcids": ["https://orcid.org/0000-0002-9654-6109"]}, "institutions": [{"id": "https://openalex.org/I4210164122", "display_name": "NEC (Germany)", "ror": "https://ror.org/05hxss661", "country_code": "DE", "type": "company", "lineage": ["https://openalex.org/I118347220", "https://openalex.org/I4210164122"]}], "countries": ["DE"], "is_corresponding": false, "raw_author_name": "Xavier Costa-P\u00e9rez", "raw_affiliation_strings": ["6G Networks Research and Development Department, NEC Laboratories Europe, Heidelberg, Germany", "Networks Research and Development Department, NEC Laboratories Europe, Heidelberg, Germany"], "raw_orcid": "https://orcid.org/0000-0002-9654-6109", "affiliations": [{"raw_affiliation_string": "6G Networks Research and Development Department, NEC Laboratories Europe, Heidelberg, Germany", "institution_ids": ["https://openalex.org/I4210164122"]}, {"raw_affiliation_string": "Networks Research and Development Department, NEC Laboratories Europe, Heidelberg, Germany", "institution_ids": ["https://openalex.org/I4210164122"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5008473850", "display_name": "Hans Dieter Schotten", "orcid": "https://orcid.org/0000-0001-5005-3635", "observed_orcids": ["https://orcid.org/0000-0001-5005-3635"]}, "institutions": [{"id": "https://openalex.org/I153267046", "display_name": "University of Kaiserslautern", "ror": "https://ror.org/04zrf7b53", "country_code": "DE", "type": "education", "lineage": ["https://openalex.org/I153267046", "https://openalex.org/I4387152675"]}, {"id": "https://openalex.org/I4387152675", "display_name": "Rheinland-Pf\u00e4lzische Technische Universit\u00e4t Kaiserslautern-Landau", "ror": "https://ror.org/01qrts582", "country_code": "DE", "type": "education", "lineage": ["https://openalex.org/I4387152675"]}], "countries": ["DE"], "is_corresponding": false, "raw_author_name": "Hans D. Schotten", "raw_affiliation_strings": ["Department of Electrical and Computer Engineering, Division of Wireless Communications and Radio Navigation, University of Kaiserslautern-Landau, Kaiserslautern, Germany", "Department of Electrical and Computer Engineering EIT, Division of Wireless Communications and Radio Navigation WiCoN, University of Kaiserslautern RPTU, Kaiserslautern, Germany"], "raw_orcid": "https://orcid.org/0000-0001-5005-3635", "affiliations": [{"raw_affiliation_string": "Department of Electrical and Computer Engineering, Division of Wireless Communications and Radio Navigation, University of Kaiserslautern-Landau, Kaiserslautern, Germany", "institution_ids": ["https://openalex.org/I153267046", "https://openalex.org/I4387152675"]}, {"raw_affiliation_string": "Department of Electrical and Computer Engineering EIT, Division of Wireless Communications and Radio Navigation WiCoN, University of Kaiserslautern RPTU, Kaiserslautern, Germany", "institution_ids": ["https://openalex.org/I153267046", "https://openalex.org/I4387152675"]}]}], "abstract_inverted_index": {"The": [0, 105], "open": [1], "radio": [2], "access": [3], "network": [4, 17, 154], "architecture": [5, 7], "(O-RAN)": [6], "leverages": [8], "intelligent": [9, 73], "near-real-time": [10, 71], "applications,": [11], "known": [12], "as": [13], "xApps,": [14], "to": [15, 29, 57, 88, 130, 186, 201, 225, 241], "optimize": [16], "performance": [18, 92, 126, 176, 295], "and": [19, 37, 52, 77, 100, 118, 157, 189, 211, 232, 257, 272, 286, 291], "services.": [20], "However,": [21], "these": [22, 59, 138, 213], "machine": [23], "learning": [24], "(ML)-driven": [25], "xApps": [26, 51, 290], "are": [27], "vulnerable": [28], "adversarial": [30, 48, 103, 106, 214, 255], "attacks": [31, 256], "that": [32, 68, 145, 167, 265], "can": [33], "compromise": [34], "their": [35], "functionality": [36], "reliability.": [38], "In": [39], "this": [40], "paper,": [41], "we": [42, 140, 281], "present": [43], "a": [44, 90, 97, 101, 142, 194, 251, 261, 277], "comprehensive": [45], "study": [46], "of": [47, 177, 220, 254, 288], "threats": [49], "targeting": [50], "explore": [53], "dynamic": [54, 278], "defense": [55, 143, 207, 279], "mechanisms": [56], "mitigate": [58], "risks.": [60], "We": [61, 81], "begin": [62], "by": [63, 123], "identifying": [64], "potential": [65], "attack": [66, 162, 170, 191, 231, 238], "vectors": [67], "target": [69, 179], "the": [70, 132, 168, 173, 178, 198, 205, 218, 221, 229, 244, 284], "RAN": [72], "controller": [74], "(Near-RT": [75], "RIC)": [76], "its": [78, 182], "associated": [79], "xApps.": [80], "then": [82], "utilize": [83], "an": [84], "open-source": [85], "O-RAN": [86, 263, 294], "testbed": [87], "deploy": [89], "key": [91, 125], "indicator": [93], "(KPI)": [94], "Monitoring": [95], "xApp,": [96, 99, 180], "detection": [98, 134, 149, 175, 199, 239], "malicious": [102], "xApp.": [104, 135], "xApp": [107, 144, 208], "carries": [108], "out": [109], "sophisticated": [110], "inference-time": [111], "attacks,": [112], "including": [113], "Carlini": [114], "&": [115], "Wagner": [116], "(C&W)": [117, 230], "basic": [119], "iterative": [120], "method": [121], "(BIM),": [122], "perturbing": [124], "metrics": [127], "in": [128, 243], "real-time": [129, 161], "mislead": [131], "ML-based": [133], "To": [136], "counter": [137], "threats,": [139], "develop": [141], "integrates": [146], "sequential": [147], "anomaly": [148], "techniques,": [150], "ensemble": [151], "deep": [152], "neural": [153], "(DNN)": [155], "inference,": [156], "gradient-based": [158], "heuristics": [159], "for": [160], "mitigation.": [163], "Experimental": [164], "results": [165], "demonstrate": [166], "C&W": [169], "significantly": [171, 282], "degrades": [172], "baseline": [174], "reducing": [181], "accuracy": [183, 200, 227, 240], "from": [184], "92%": [185], "just": [187], "16%": [188], "BIM": [190, 234], "also": [192], "achieves": [193], "comparable": [195], "impact,": [196], "lowering": [197], "around": [202], "10%.": [203], "Nevertheless,": [204], "proposed": [206], "promptly": [209], "detects": [210], "neutralizes": [212], "manipulations,": [215], "thereby": [216], "restoring": [217], "effectiveness": [219], "detector": [222], "achieving": [223], "up": [224], "84%": [226], "under": [228], "improving": [233], "(Basic": [235], "Iterative": [236], "Method)": [237], "93%": [242], "most": [245], "challenging": [246], "scenarios.": [247], "This": [248], "work": [249], "presents": [250], "closed-loop": [252], "evaluation": [253], "corresponding": [258], "defenses": [259], "within": [260], "real-world": [262, 270], "environment": [264], "provides": [266], "valuable": [267], "insights": [268], "into": [269], "vulnerabilities": [271], "mitigation": [273], "strategies.": [274], "By": [275], "introducing": [276], "framework,": [280], "enhance": [283], "security": [285], "resilience": [287], "ML-driven": [289], "maintain": [292], "reliable": [293], "even": [296], "during": [297], "attacks.": [298]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9990000128746033, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9990000128746033, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10400", "display_name": "Network Security and Intrusion Detection", "score": 9.999999747378752e-05, "subfield": {"id": "https://openalex.org/subfields/1705", "display_name": "Computer Networks and Communications"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 9.999999747378752e-05, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.1109/ojcoms.2025.3602200", "is_oa": true, "landing_page_url": "https://doi.org/10.1109/ojcoms.2025.3602200", "pdf_url": null, "source": {"id": "https://openalex.org/S4210202420", "display_name": "IEEE Open Journal of the Communications Society", "issn_l": "2644-125X", "issn": ["2644-125X"], "is_oa": true, "is_in_doaj": true, "is_core": true, "listed_in": ["cwts-core", "doaj", "jufo-1", "norway-1"], "host_organization": "https://openalex.org/P4310316002", "host_organization_name": "IEEE Communications Society", "host_organization_lineage": ["https://openalex.org/P4310316002", "https://openalex.org/P4310319808"], "host_organization_lineage_names": ["IEEE Communications Society", "Institute of Electrical and Electronics Engineers"], "type": "journal"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "IEEE Open Journal of the Communications Society", "raw_type": "journal-article"}, "cited_by_count": 2, "is_retracted": false}, {"id": "https://openalex.org/W4408860774", "doi": "https://doi.org/10.1109/jiot.2025.3554800", "title": "Dynamic Quasi-Hyperbolic Momentum Iterative Attack With Small Perturbation for 4D-Flight Trajectory Prediction", "publication_year": 2025, "publication_date": "2025-03-27", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5038246109", "display_name": "Zhengyang Zhao", "orcid": "https://orcid.org/0000-0003-2667-1358", "observed_orcids": ["https://orcid.org/0000-0003-2667-1358"]}, "institutions": [{"id": "https://openalex.org/I4210104252", "display_name": "Air Force Engineering University", "ror": "https://ror.org/00seraz22", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I4210104252"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Zhengyang Zhao", "raw_affiliation_strings": ["School of Information and Navigation, Air Force Engineering University, Xi&#x2019;an, China"], "raw_orcid": "https://orcid.org/0000-0003-2667-1358", "affiliations": [{"raw_affiliation_string": "School of Information and Navigation, Air Force Engineering University, Xi&#x2019;an, China", "institution_ids": ["https://openalex.org/I4210104252"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5042938268", "display_name": "Buhong Wang", "orcid": "https://orcid.org/0000-0001-7425-0502", "observed_orcids": ["https://orcid.org/0000-0001-7425-0502", "https://orcid.org/0000-0002-3287-4410"]}, "institutions": [{"id": "https://openalex.org/I4210104252", "display_name": "Air Force Engineering University", "ror": "https://ror.org/00seraz22", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I4210104252"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Buhong Wang", "raw_affiliation_strings": ["School of Information and Navigation, Air Force Engineering University, Xi&#x2019;an, China"], "raw_orcid": "https://orcid.org/0000-0001-7425-0502", "affiliations": [{"raw_affiliation_string": "School of Information and Navigation, Air Force Engineering University, Xi&#x2019;an, China", "institution_ids": ["https://openalex.org/I4210104252"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5066456303", "display_name": "Xuan Yao", "orcid": "https://orcid.org/0000-0002-8549-2096", "observed_orcids": ["https://orcid.org/0000-0002-8549-2096"]}, "institutions": [{"id": "https://openalex.org/I28407311", "display_name": "University of Manchester", "ror": "https://ror.org/027m9bs27", "country_code": "GB", "type": "education", "lineage": ["https://openalex.org/I28407311"]}], "countries": ["GB"], "is_corresponding": false, "raw_author_name": "Xuan Yao", "raw_affiliation_strings": ["Department of Computer Science, University of Manchester, Manchester, U.K"], "raw_orcid": "https://orcid.org/0000-0002-8549-2096", "affiliations": [{"raw_affiliation_string": "Department of Computer Science, University of Manchester, Manchester, U.K", "institution_ids": ["https://openalex.org/I28407311"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5083064267", "display_name": "Jiwei Tian", "orcid": "https://orcid.org/0000-0002-1485-7465", "observed_orcids": ["https://orcid.org/0000-0002-1485-7465"]}, "institutions": [{"id": "https://openalex.org/I4210104252", "display_name": "Air Force Engineering University", "ror": "https://ror.org/00seraz22", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I4210104252"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Jiwei Tian", "raw_affiliation_strings": ["Air Traffic Control and Navigation College, Air Force Engineering University, Xi&#x2019;an, China", "Air Traffic Control and Navigation College, Air Force Engineering University, Xi&#x2019;an"], "raw_orcid": "https://orcid.org/0000-0002-1485-7465", "affiliations": [{"raw_affiliation_string": "Air Traffic Control and Navigation College, Air Force Engineering University, Xi&#x2019;an, China", "institution_ids": ["https://openalex.org/I4210104252"]}, {"raw_affiliation_string": "Air Traffic Control and Navigation College, Air Force Engineering University, Xi&#x2019;an", "institution_ids": ["https://openalex.org/I4210104252"]}]}, {"author_position": "middle", "author": {"id": null, "display_name": "Ruochen Dong", "orcid": "https://orcid.org/0000-0003-0454-9394", "observed_orcids": ["https://orcid.org/0000-0003-0454-9394"]}, "institutions": [{"id": "https://openalex.org/I4210104252", "display_name": "Air Force Engineering University", "ror": "https://ror.org/00seraz22", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I4210104252"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Ruochen Dong", "raw_affiliation_strings": ["School of Information and Navigation, Air Force Engineering University, Xi&#x2019;an, China"], "raw_orcid": "https://orcid.org/0000-0003-0454-9394", "affiliations": [{"raw_affiliation_string": "School of Information and Navigation, Air Force Engineering University, Xi&#x2019;an, China", "institution_ids": ["https://openalex.org/I4210104252"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5038915198", "display_name": "Peican Zhu", "orcid": "https://orcid.org/0000-0002-8389-1093", "observed_orcids": ["https://orcid.org/0000-0002-8389-1093"]}, "institutions": [{"id": "https://openalex.org/I17145004", "display_name": "Northwestern Polytechnical University", "ror": "https://ror.org/01y0j0j86", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I17145004"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Peican Zhu", "raw_affiliation_strings": ["School of Artificial Intelligence, Optics, and Electronics, Northwestern Polytechnical University, Xi&#x2019;an, China"], "raw_orcid": "https://orcid.org/0000-0002-8389-1093", "affiliations": [{"raw_affiliation_string": "School of Artificial Intelligence, Optics, and Electronics, Northwestern Polytechnical University, Xi&#x2019;an, China", "institution_ids": ["https://openalex.org/I17145004"]}]}], "abstract_inverted_index": {"With": [0], "the": [1, 34, 66, 80, 113, 145], "rapid": [2], "growth": [3], "of": [4, 68], "global": [5], "air": [6, 161], "traffic,": [7], "4D-flight": [8], "trajectory": [9], "prediction": [10, 57], "(4D-FTP)": [11], "using": [12], "deep": [13], "learning": [14, 122], "(DL)": [15], "methods": [16], "has": [17], "become": [18], "essential": [19], "for": [20, 60], "applications,": [21], "such": [22], "as": [23], "flight": [24], "delay": [25], "prediction,": [26], "fuel": [27], "consumption": [28], "analysis,": [29], "and": [30, 70, 95, 118], "traffic": [31, 162], "management.": [32], "However,": [33], "adversarial": [35, 150], "attacks": [36, 151], "pose": [37], "significant": [38], "security": [39, 158], "threats": [40], "to": [41, 65, 99, 143, 147], "DL-based": [42], "4D-FTP": [43, 61, 104, 153], "systems": [44], "reliant": [45], "on": [46, 152], "automatic": [47], "dependent": [48], "surveillance-broadcast": [49], "(ADS-B)": [50], "sensors.": [51], "Furthermore,": [52], "existing": [53], "vulnerabilities": [54], "in": [55, 103, 160], "time-series": [56], "(TSP)": [58], "models": [59], "remain": [62], "underexplored": [63], "due": [64], "lack": [67], "effective": [69], "stealthy": [71, 149], "attack": [72, 86, 108], "methods.": [73], "To": [74], "address": [75, 148], "this": [76], "gap,": [77], "we": [78], "propose": [79], "dynamic": [81, 96], "quasi-hyperbolic": [82], "momentum": [83], "(QHM)": [84], "iterative": [85], "with": [87, 132], "small": [88], "perturbation": [89], "(DQM-Attack).": [90], "This": [91, 140], "method": [92], "leverages": [93], "QHM": [94], "step": [97], "sizes": [98], "optimize": [100], "gradient": [101], "utilization": [102], "models.": [105, 139], "In": [106], "addition,": [107], "stealth": [109], "is": [110], "enhanced": [111], "through": [112], "manifold": [114], "smooth": [115, 120], "module": [116], "(MSM)": [117], "sparse": [119], "reinforcement": [121], "(SS-RL).": [123], "Experimental": [124], "results": [125], "demonstrate": [126], "that": [127], "DQM-Attack": [128], "effectively": [129], "disrupts": [130], "predictions": [131], "minimal": [133], "perturbations": [134], "across": [135], "four": [136], "state-of-the-art": [137], "TSP": [138], "study": [141], "appears": [142], "be": [144], "first": [146], "systems,": [154], "revealing": [155], "a": [156], "critical": [157], "vulnerability": [159], "management": [163], "(ATM).": [164]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9990000128746033, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9990000128746033, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11489", "display_name": "Air Traffic Management and Optimization", "score": 0.0003000000142492354, "subfield": {"id": "https://openalex.org/subfields/2202", "display_name": "Aerospace Engineering"}, "field": {"id": "https://openalex.org/fields/22", "display_name": "Engineering"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10764", "display_name": "Privacy-Preserving Technologies in Data", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.1109/jiot.2025.3554800", "is_oa": false, "landing_page_url": "https://doi.org/10.1109/jiot.2025.3554800", "pdf_url": null, "source": {"id": "https://openalex.org/S2480266640", "display_name": "IEEE Internet of Things Journal", "issn_l": "2327-4662", "issn": ["2327-4662", "2372-2541"], "is_oa": false, "is_in_doaj": false, "is_core": true, "listed_in": ["cwts-core", "jufo-2", "norway-2"], "host_organization": "https://openalex.org/P4310319808", "host_organization_name": "Institute of Electrical and Electronics Engineers", "host_organization_lineage": ["https://openalex.org/P4310319808"], "host_organization_lineage_names": ["Institute of Electrical and Electronics Engineers"], "type": "journal"}, "license": null, "license_id": null, "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "IEEE Internet of Things Journal", "raw_type": "journal-article"}, "cited_by_count": 6, "is_retracted": false}, {"id": "https://openalex.org/W4413231980", "doi": "https://doi.org/10.20944/preprints202508.0464.v1", "title": "Recent Advances in Efficient Spiking Neural Networks: Architectures, Learning Rules, and Hardware Realizations", "publication_year": 2025, "publication_date": "2025-08-07", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Jovan Bowen Heng", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I152815399", "display_name": "Singapore University of Technology and Design", "ror": "https://ror.org/05j6fvn87", "country_code": "SG", "type": "education", "lineage": ["https://openalex.org/I152815399"]}], "countries": ["SG"], "is_corresponding": true, "raw_author_name": "Jovan Bowen Heng", "raw_affiliation_strings": ["Singapore University of Technology and Design , Singapore"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Singapore University of Technology and Design , Singapore", "institution_ids": ["https://openalex.org/I152815399"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5087192549", "display_name": "Tee Hui Teo", "orcid": "https://orcid.org/0000-0003-2123-9347", "observed_orcids": ["https://orcid.org/0000-0003-2123-9347"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Tee Hui Teo", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Jeremy Tan", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Jeremy Tan", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "last", "author": {"id": "https://openalex.org/A5064146876", "display_name": "Songbai Yao", "orcid": "https://orcid.org/0000-0003-2290-576X", "observed_orcids": ["https://orcid.org/0000-0003-2290-576X"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Song Cheng Yao", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}], "abstract_inverted_index": {"Spiking": [0], "Neural": [1], "Networks": [2], "(SNNs)": [3], "have": [4], "emerged": [5], "as": [6], "a": [7, 140], "promising": [8], "paradigm": [9], "for": [10, 69, 92, 124, 143, 152], "energy-efficient": [11], "and": [12, 31, 62, 86, 109, 131, 145], "event-driven": [13, 66], "computing,": [14], "drawing": [15], "inspiration": [16], "from": [17], "biological": [18], "neurons.": [19], "Recent": [20], "research": [21], "has": [22], "introduced": [23], "novel": [24], "methods": [25], "to": [26, 51, 81, 138, 148], "enhance": [27], "the": [28, 122], "performance,": [29], "robustness,": [30], "hardware": [32, 114, 133], "compatibility": [33], "of": [34], "SNNs.": [35], "This": [36, 135], "review": [37, 136], "synthesizes": [38], "key": [39], "advances": [40], "across": [41], "five": [42], "major": [43], "areas:": [44], "pulse": [45], "width": [46], "modulation": [47], "(PWM)-based": [48], "spike": [49, 63, 67], "generation": [50], "eliminate": [52], "timing": [53], "errors,": [54], "spike-timing-dependent": [55], "plasticity": [56], "(STDP)": [57], "acceleration": [58], "via": [59], "early": [60], "termination": [61], "count": [64], "strategies,": [65], "detection": [68], "neuromorphic": [70, 154], "implantable": [71], "brain\u2013machine": [72], "interfaces": [73], "(iBMIs),": [74], "one-spike": [75], "phase": [76], "coding": [77, 129], "with": [78], "base": [79], "manipulation": [80], "minimize": [82], "ANN-to-SNN": [83], "conversion": [84, 126], "loss,": [85], "memristor-based": [87], "radial-basis": [88], "spiking": [89], "neuron": [90], "circuits": [91], "adversarial": [93], "attack": [94], "resilience.": [95], "By": [96], "analyzing": [97], "over": [98], "45": [99], "recent": [100], "IEEE": [101], "studies,": [102], "we": [103, 117], "highlight": [104], "trade-offs": [105], "between": [106], "accuracy,": [107], "latency,": [108], "power": [110], "consumption": [111], "while": [112], "benchmarking": [113], "implementations.": [115], "Furthermore,": [116], "discuss": [118], "open": [119], "challenges,": [120], "including": [121], "need": [123], "improved": [125], "techniques,": [127], "adaptive": [128], "schemes,": [130], "scalable": [132], "platforms.": [134], "aims": [137], "provide": [139], "comprehensive": [141], "foundation": [142], "researchers": [144], "engineers": [146], "seeking": [147], "advance": [149], "SNN": [150], "technologies": [151], "next-generation": [153], "systems.": [155]}, "primary_topic": {"id": "https://openalex.org/T10502", "display_name": "Advanced Memory and Neural Computing", "score": 0.9984999895095825, "subfield": {"id": "https://openalex.org/subfields/2208", "display_name": "Electrical and Electronic Engineering"}, "field": {"id": "https://openalex.org/fields/22", "display_name": "Engineering"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T10502", "display_name": "Advanced Memory and Neural Computing", "score": 0.9984999895095825, "subfield": {"id": "https://openalex.org/subfields/2208", "display_name": "Electrical and Electronic Engineering"}, "field": {"id": "https://openalex.org/fields/22", "display_name": "Engineering"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10581", "display_name": "Neural dynamics and brain function", "score": 0.00039999998989515007, "subfield": {"id": "https://openalex.org/subfields/2805", "display_name": "Cognitive Neuroscience"}, "field": {"id": "https://openalex.org/fields/28", "display_name": "Neuroscience"}, "domain": {"id": "https://openalex.org/domains/1", "display_name": "Life Sciences"}}, {"id": "https://openalex.org/T12029", "display_name": "DNA and Biological Computing", "score": 0.00019999999494757503, "subfield": {"id": "https://openalex.org/subfields/1312", "display_name": "Molecular Biology"}, "field": {"id": "https://openalex.org/fields/13", "display_name": "Biochemistry, Genetics and Molecular Biology"}, "domain": {"id": "https://openalex.org/domains/1", "display_name": "Life Sciences"}}], "primary_location": {"id": "doi:10.20944/preprints202508.0464.v1", "is_oa": true, "landing_page_url": "https://doi.org/10.20944/preprints202508.0464.v1", "pdf_url": "https://www.preprints.org/frontend/manuscript/aa1b6355e8c0668fee50d3e29c990e5f/download_pub", "source": {"id": "https://openalex.org/S6309402219", "display_name": "Preprints.org", "issn_l": null, "issn": null, "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": null, "host_organization_name": null, "host_organization_lineage": ["https://openalex.org/P4310310987"], "host_organization_lineage_names": ["Multidisciplinary Digital Publishing Institute"], "type": "repository"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "acceptedVersion", "is_accepted": true, "is_published": false, "raw_source_name": null, "raw_type": "posted-content"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4407091402", "doi": "https://doi.org/10.48550/arxiv.2501.19180", "title": "Enhancing Model Defense Against Jailbreaks with Proactive Safety Reasoning", "publication_year": 2025, "publication_date": "2025-01-31", "type": "preprint", "language": "en", "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Yang, Xianglin", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I165932596", "display_name": "National University of Singapore", "ror": "https://ror.org/01tgyzw49", "country_code": "SG", "type": "education", "lineage": ["https://openalex.org/I165932596"]}], "countries": ["SG"], "is_corresponding": false, "raw_author_name": "Yang, Xianglin", "raw_affiliation_strings": ["National University of Singapore"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "National University of Singapore", "institution_ids": ["https://openalex.org/I165932596"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5029243457", "display_name": "Gelei Deng", "orcid": "https://orcid.org/0000-0002-0046-6674", "observed_orcids": ["https://orcid.org/0000-0002-0046-6674"]}, "institutions": [{"id": "https://openalex.org/I172675005", "display_name": "Nanyang Technological University", "ror": "https://ror.org/02e7b5302", "country_code": "SG", "type": "education", "lineage": ["https://openalex.org/I172675005"]}], "countries": ["SG"], "is_corresponding": false, "raw_author_name": "Deng, Gelei", "raw_affiliation_strings": ["Nanyang Technological University"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Nanyang Technological University", "institution_ids": ["https://openalex.org/I172675005"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5007796732", "display_name": "J. Y. Shi", "orcid": "https://orcid.org/0000-0002-0465-1551", "observed_orcids": ["https://orcid.org/0000-0002-0465-1551", "https://orcid.org/0009-0000-6832-523X"]}, "institutions": [{"id": "https://openalex.org/I14243506", "display_name": "Hong Kong Polytechnic University", "ror": "https://ror.org/0030zas98", "country_code": "HK", "type": "education", "lineage": ["https://openalex.org/I14243506"]}], "countries": ["HK"], "is_corresponding": false, "raw_author_name": "Shi, Jieming", "raw_affiliation_strings": ["The Hong Kong Polytechnic University"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "The Hong Kong Polytechnic University", "institution_ids": ["https://openalex.org/I14243506"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5101591101", "display_name": "Tianwei Zhang", "orcid": "https://orcid.org/0000-0001-6595-6650", "observed_orcids": ["https://orcid.org/0000-0001-6595-6650"]}, "institutions": [{"id": "https://openalex.org/I172675005", "display_name": "Nanyang Technological University", "ror": "https://ror.org/02e7b5302", "country_code": "SG", "type": "education", "lineage": ["https://openalex.org/I172675005"]}], "countries": ["SG"], "is_corresponding": false, "raw_author_name": "Zhang, Tianwei", "raw_affiliation_strings": ["Nanyang Technological University"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Nanyang Technological University", "institution_ids": ["https://openalex.org/I172675005"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5085067496", "display_name": "Jin Song Dong", "orcid": "https://orcid.org/0000-0002-6512-8326", "observed_orcids": ["https://orcid.org/0000-0002-6512-8326"]}, "institutions": [{"id": "https://openalex.org/I165932596", "display_name": "National University of Singapore", "ror": "https://ror.org/01tgyzw49", "country_code": "SG", "type": "education", "lineage": ["https://openalex.org/I165932596"]}], "countries": ["SG"], "is_corresponding": false, "raw_author_name": "Dong, Jin Song", "raw_affiliation_strings": ["National University of Singapore"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "National University of Singapore", "institution_ids": ["https://openalex.org/I165932596"]}]}], "abstract_inverted_index": {"Large": [0], "language": [1], "models": [2], "(LLMs)": [3], "are": [4], "vital": [5], "for": [6, 69], "a": [7, 54], "wide": [8], "range": [9], "of": [10, 24, 67, 72, 105], "applications": [11], "yet": [12], "remain": [13], "susceptible": [14], "to": [15, 21, 37, 48, 86, 140], "jailbreak": [16], "threats,": [17], "which": [18, 61], "could": [19], "lead": [20], "the": [22, 63, 89, 103, 116, 126], "generation": [23], "inappropriate": [25], "responses.": [26], "Conventional": [27], "defenses,": [28, 137], "such": [29], "as": [30], "refusal": [31, 83], "and": [32, 111, 143], "adversarial": [33, 144], "training,": [34], "often": [35], "fail": [36], "cover": [38], "corner": [39], "cases": [40], "or": [41], "rare": [42], "domains,": [43], "leaving": [44], "LLMs": [45, 68, 106], "still": [46], "vulnerable": [47], "more": [49], "sophisticated": [50], "attacks.": [51], "We": [52], "propose": [53], "novel": [55], "defense": [56], "strategy,": [57], "Safety": [58], "Chain-of-Thought": [59], "(SCoT),": [60], "harnesses": [62], "enhanced": [64], "\\textit{reasoning": [65], "capabilities}": [66], "proactive": [70, 99], "assessment": [71], "harmful": [73, 109], "inputs,": [74], "rather": [75], "than": [76], "simply": [77], "blocking": [78], "them.": [79], "SCoT": [80, 101, 133], "augments": [81], "any": [82], "training": [84], "datasets": [85], "critically": [87], "analyze": [88], "intent": [90], "behind": [91], "each": [92], "request": [93], "before": [94], "generating": [95], "answers.": [96], "By": [97], "employing": [98], "reasoning,": [100], "enhances": [102], "generalization": [104], "across": [107], "varied": [108], "queries": [110], "scenarios": [112], "not": [113], "covered": [114], "in": [115], "safety": [117], "alignment": [118], "corpus.": [119], "Additionally,": [120], "it": [121], "generates": [122], "detailed": [123], "refusals": [124], "specifying": [125], "rules": [127], "violated.": [128], "Comparative": [129], "evaluations": [130], "show": [131], "that": [132], "significantly": [134], "surpasses": [135], "existing": [136], "reducing": [138], "vulnerability": [139], "out-of-distribution": [141], "issues": [142], "manipulations": [145], "while": [146], "maintaining": [147], "strong": [148], "general": [149], "capabilities.": [150]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12262", "display_name": "Hate Speech and Cyberbullying Detection", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10028", "display_name": "Topic Modeling", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "pmh:oai:arXiv.org:2501.19180", "is_oa": true, "landing_page_url": "http://arxiv.org/abs/2501.19180", "pdf_url": "https://arxiv.org/pdf/2501.19180", "source": {"id": "https://openalex.org/S4306400194", "display_name": "arXiv (Cornell University)", "issn_l": "2331-8422", "issn": ["2331-8422"], "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I205783295", "host_organization_name": "Cornell University", "host_organization_lineage": ["https://openalex.org/I205783295"], "host_organization_lineage_names": [], "type": "repository"}, "license": "other-oa", "license_id": "https://openalex.org/licenses/other-oa", "version": "submittedVersion", "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "text"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W7108692302", "doi": "https://doi.org/10.5281/zenodo.17816816", "title": "Anticipatory Benchmarking: Proactive Evaluation for Robust AI Generalization", "publication_year": 2025, "publication_date": "2025-12-04", "type": "article", "language": null, "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Revista, Zen", "orcid": "https://orcid.org/0009-0007-6299-2008", "observed_orcids": ["https://orcid.org/0009-0007-6299-2008"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Revista, Zen", "raw_affiliation_strings": [], "raw_orcid": "https://orcid.org/0009-0007-6299-2008", "affiliations": []}, {"author_position": "last", "author": {"id": null, "display_name": "IA, 10", "orcid": "https://orcid.org/0009-0007-6299-2008", "observed_orcids": ["https://orcid.org/0009-0007-6299-2008"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "IA, 10", "raw_affiliation_strings": [], "raw_orcid": "https://orcid.org/0009-0007-6299-2008", "affiliations": []}], "abstract_inverted_index": {"The": [0, 160], "quest": [1], "for": [2, 99, 141, 228, 262], "artificial": [3], "intelligence": [4], "(AI)": [5], "systems": [6, 113, 253], "capable": [7], "of": [8, 55, 66, 118, 133, 180, 190, 207, 222, 257], "robust": [9, 57], "generalization": [10, 79], "to": [11, 74, 110, 114, 196, 231, 247], "unseen": [12], "and": [13, 58, 76, 87, 106, 136, 151, 173, 204, 219, 250, 266], "evolving": [14], "environments": [15, 109], "remains": [16], "a": [17, 69, 93, 115, 125, 178, 239], "paramount": [18], "challenge.": [19], "Traditional": [20], "benchmarking": [21, 237], "methodologies": [22], "primarily": [23], "evaluate": [24], "AI": [25, 78, 112, 252, 268], "models": [26], "on": [27], "static,": [28], "historically": [29], "curated": [30], "datasets,": [31], "offering": [32, 226], "limited": [33], "insight": [34], "into": [35], "their": [36], "performance": [37, 246], "when": [38], "confronted": [39], "with": [40], "novel": [41], "data": [42, 101], "distributions,": [43], "adversarial": [44, 103, 202], "attacks,": [45], "or": [46], "emergent": [47], "phenomena.": [48], "This": [49, 61], "limitation": [50], "inherently": [51], "hinders": [52], "the": [53, 64, 131, 138, 187, 214, 255, 260], "development": [54, 206], "truly": [56, 208], "deployable": [59], "AI.": [60, 210], "paper": [62], "introduces": [63], "paradigm": [65], "anticipatory": [67, 168, 224, 236], "benchmarking,": [68, 225], "proactive": [70, 142], "evaluation": [71, 135], "framework": [72, 161], "designed": [73], "assess": [75], "enhance": [77], "capabilities": [80], "by": [81], "systematically": [82], "simulating": [83], "future": [84, 122, 229], "operational": [85], "conditions": [86], "potential": [88], "failure": [89], "modes.": [90], "We": [91, 185], "propose": [92], "methodology": [94], "that": [95], "integrates": [96], "advanced": [97], "techniques": [98], "synthetic": [100], "generation,": [102], "scenario": [104], "construction,": [105], "continuous": [107, 181], "learning": [108], "expose": [111], "diverse": [116], "array": [117], "hypothetical": [119], "yet": [120], "plausible": [121], "challenges.": [123, 234], "Through": [124], "comprehensive": [126], "literature": [127], "review,": [128], "we": [129, 212], "highlight": [130], "shortcomings": [132], "reactive": [134], "underscore": [137], "critical": [139], "need": [140], "strategies,": [143], "particularly": [144], "in": [145, 183], "high-stakes": [146], "domains": [147], "such": [148], "as": [149], "cybersecurity": [150], "financial": [152], "fraud": [153], "detection,": [154], "where": [155, 165], "threat": [156], "landscapes": [157], "continuously": [158], "evolve.": [159], "emphasizes": [162], "iterative": [163], "adaptation,": [164], "insights": [166], "from": [167, 242], "evaluations": [169], "inform": [170], "model": [171], "retraining": [172], "architectural": [174], "refinements,": [175], "thereby": [176], "fostering": [177], "cycle": [179], "improvement": [182], "robustness.": [184], "discuss": [186], "expected": [188], "benefits": [189], "this": [191], "approach,": [192], "including": [193], "improved": [194], "resilience": [195], "domain": [197], "shift,": [198], "enhanced": [199], "security": [200], "against": [201, 254], "perturbations,": [203], "accelerated": [205], "generalized": [209], "Furthermore,": [211], "address": [213], "inherent": [215], "complexities,": [216], "computational": [217], "demands,": [218], "ethical": [220], "considerations": [221], "implementing": [223], "pathways": [227], "research": [230], "mitigate": [232], "these": [233], "Ultimately,": [235], "presents": [238], "vital": [240], "shift": [241], "merely": [243], "measuring": [244], "current": [245], "actively": [248], "forecasting": [249], "fortifying": [251], "uncertainties": [256], "tomorrow,": [258], "paving": [259], "way": [261], "more": [263], "reliable,": [264], "secure,": [265], "adaptable": [267], "deployments.": [269]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9541000127792358, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9541000127792358, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11307", "display_name": "Domain Adaptation and Few-Shot Learning", "score": 0.0406000018119812, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T13904", "display_name": "Artificial Intelligence Applications", "score": 0.0010999999940395355, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.5281/zenodo.17816816", "is_oa": true, "landing_page_url": "https://doi.org/10.5281/zenodo.17816816", "pdf_url": null, "source": {"id": "https://openalex.org/S4306400562", "display_name": "Zenodo (CERN European Organization for Nuclear Research)", "issn_l": null, "issn": null, "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I67311998", "host_organization_name": "European Organization for Nuclear Research", "host_organization_lineage": ["https://openalex.org/I67311998"], "host_organization_lineage_names": [], "type": "repository"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": null, "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "JournalArticle"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4416390166", "doi": "https://doi.org/10.21203/rs.3.rs-7984549/v1", "title": "Going deeper with morphologically detailed neural networks by error-backpropagating mirror neuron", "publication_year": 2025, "publication_date": "2025-11-19", "type": "preprint", "language": null, "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5041571551", "display_name": "Gan He", "orcid": "https://orcid.org/0000-0001-5746-8737", "observed_orcids": ["https://orcid.org/0000-0001-5746-8737"]}, "institutions": [{"id": "https://openalex.org/I20231570", "display_name": "Peking University", "ror": "https://ror.org/02v51f717", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I20231570"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Gan He", "raw_affiliation_strings": ["Peking University"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Peking University", "institution_ids": ["https://openalex.org/I20231570"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5058066577", "display_name": "Tiejun Huang", "orcid": "https://orcid.org/0000-0002-4234-6099", "observed_orcids": ["https://orcid.org/0000-0002-4234-6099"]}, "institutions": [{"id": "https://openalex.org/I20231570", "display_name": "Peking University", "ror": "https://ror.org/02v51f717", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I20231570"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Tiejun Huang", "raw_affiliation_strings": ["Peking University"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Peking University", "institution_ids": ["https://openalex.org/I20231570"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5103451458", "display_name": "Kai Du", "orcid": "https://orcid.org/0000-0002-7505-1561", "observed_orcids": ["https://orcid.org/0000-0002-7505-1561", "https://orcid.org/0009-0003-4074-1751"]}, "institutions": [{"id": "https://openalex.org/I99065089", "display_name": "Tsinghua University", "ror": "https://ror.org/03cve4549", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I99065089"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Kai Du", "raw_affiliation_strings": ["Tsinghua University"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Tsinghua University", "institution_ids": ["https://openalex.org/I99065089"]}]}], "abstract_inverted_index": null, "primary_topic": {"id": "https://openalex.org/T10320", "display_name": "Neural Networks and Applications", "score": 0.6312999725341797, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T10320", "display_name": "Neural Networks and Applications", "score": 0.6312999725341797, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10502", "display_name": "Advanced Memory and Neural Computing", "score": 0.20260000228881836, "subfield": {"id": "https://openalex.org/subfields/2208", "display_name": "Electrical and Electronic Engineering"}, "field": {"id": "https://openalex.org/fields/22", "display_name": "Engineering"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10581", "display_name": "Neural dynamics and brain function", "score": 0.14480000734329224, "subfield": {"id": "https://openalex.org/subfields/2805", "display_name": "Cognitive Neuroscience"}, "field": {"id": "https://openalex.org/fields/28", "display_name": "Neuroscience"}, "domain": {"id": "https://openalex.org/domains/1", "display_name": "Life Sciences"}}], "primary_location": {"id": "doi:10.21203/rs.3.rs-7984549/v1", "is_oa": true, "landing_page_url": "https://doi.org/10.21203/rs.3.rs-7984549/v1", "pdf_url": "https://www.researchsquare.com/article/rs-7984549/latest.pdf", "source": {"id": "https://openalex.org/S4306525896", "display_name": "Research Square", "issn_l": null, "issn": null, "is_oa": false, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": null, "host_organization_name": null, "host_organization_lineage": [], "host_organization_lineage_names": [], "type": "repository"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "acceptedVersion", "is_accepted": true, "is_published": false, "raw_source_name": "Research Square", "raw_type": "posted-content"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4409219917", "doi": "https://doi.org/10.1016/j.patcog.2025.111652", "title": "Cross-task and time-aware adversarial attack framework for perception of autonomous driving", "publication_year": 2025, "publication_date": "2025-04-07", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5077680871", "display_name": "Yantao Lu", "orcid": "https://orcid.org/0000-0002-3103-1067", "observed_orcids": ["https://orcid.org/0000-0002-3103-1067"]}, "institutions": [{"id": "https://openalex.org/I17145004", "display_name": "Northwestern Polytechnical University", "ror": "https://ror.org/01y0j0j86", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I17145004"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Yantao Lu", "raw_affiliation_strings": ["Northwestern Polytechnical University, School of Computer Science, Xi\u2019an, Shaanxi, China"], "raw_orcid": "https://orcid.org/0000-0002-3103-1067", "affiliations": [{"raw_affiliation_string": "Northwestern Polytechnical University, School of Computer Science, Xi\u2019an, Shaanxi, China", "institution_ids": ["https://openalex.org/I17145004"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5100432426", "display_name": "Ning Liu", "orcid": "https://orcid.org/0000-0003-4943-6625", "observed_orcids": ["https://orcid.org/0000-0003-4943-6625"]}, "institutions": [{"id": "https://openalex.org/I4210093653", "display_name": "Midea Group (China)", "ror": "https://ror.org/006fm2278", "country_code": "CN", "type": "company", "lineage": ["https://openalex.org/I4210093653"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Ning Liu", "raw_affiliation_strings": ["Midea Group, AI Innovation Center, Beijing, China"], "raw_orcid": "https://orcid.org/0000-0003-4943-6625", "affiliations": [{"raw_affiliation_string": "Midea Group, AI Innovation Center, Beijing, China", "institution_ids": ["https://openalex.org/I4210093653"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5102936390", "display_name": "Yilan Li", "orcid": "https://orcid.org/0000-0002-4157-7792", "observed_orcids": ["https://orcid.org/0000-0002-4157-7792"]}, "institutions": [{"id": "https://openalex.org/I4210131919", "display_name": "Xi'an University of Technology", "ror": "https://ror.org/038avdt50", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I4210131919"]}], "countries": ["CN"], "is_corresponding": true, "raw_author_name": "Yilan Li", "raw_affiliation_strings": ["Xi\u2019an University of Technology, School of Computer Science and Engineering, Xi\u2019an, Shaanxi, China"], "raw_orcid": "https://orcid.org/0000-0002-4157-7792", "affiliations": [{"raw_affiliation_string": "Xi\u2019an University of Technology, School of Computer Science and Engineering, Xi\u2019an, Shaanxi, China", "institution_ids": ["https://openalex.org/I4210131919"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5086071901", "display_name": "Jinchao Chen", "orcid": "https://orcid.org/0000-0001-6234-1001", "observed_orcids": ["https://orcid.org/0000-0001-6234-1001"]}, "institutions": [{"id": "https://openalex.org/I17145004", "display_name": "Northwestern Polytechnical University", "ror": "https://ror.org/01y0j0j86", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I17145004"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Jinchao Chen", "raw_affiliation_strings": ["Northwestern Polytechnical University, School of Computer Science, Xi\u2019an, Shaanxi, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Northwestern Polytechnical University, School of Computer Science, Xi\u2019an, Shaanxi, China", "institution_ids": ["https://openalex.org/I17145004"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5004337702", "display_name": "Senem Velipasalar", "orcid": "https://orcid.org/0000-0002-1430-1555", "observed_orcids": ["https://orcid.org/0000-0002-1430-1555"]}, "institutions": [{"id": "https://openalex.org/I70983195", "display_name": "Syracuse University", "ror": "https://ror.org/025r5qe02", "country_code": "US", "type": "education", "lineage": ["https://openalex.org/I70983195"]}], "countries": ["US"], "is_corresponding": false, "raw_author_name": "Senem Velipasalar", "raw_affiliation_strings": ["Syracuse University, Department of Electrical Engineering and Computer Science, NY, 13244, USA"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Syracuse University, Department of Electrical Engineering and Computer Science, NY, 13244, USA", "institution_ids": ["https://openalex.org/I70983195"]}]}], "abstract_inverted_index": null, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10036", "display_name": "Advanced Neural Network Applications", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11099", "display_name": "Autonomous Vehicle Technology and Safety", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/2203", "display_name": "Automotive Engineering"}, "field": {"id": "https://openalex.org/fields/22", "display_name": "Engineering"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.1016/j.patcog.2025.111652", "is_oa": false, "landing_page_url": "https://doi.org/10.1016/j.patcog.2025.111652", "pdf_url": null, "source": {"id": "https://openalex.org/S414566", "display_name": "Pattern Recognition", "issn_l": "0031-3203", "issn": ["0031-3203", "1873-5142"], "is_oa": false, "is_in_doaj": false, "is_core": true, "listed_in": ["cwts-core", "jufo-3", "norway-2"], "host_organization": "https://openalex.org/P4310320990", "host_organization_name": "Elsevier BV", "host_organization_lineage": ["https://openalex.org/P4310320990"], "host_organization_lineage_names": ["Elsevier BV"], "type": "journal"}, "license": null, "license_id": null, "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Pattern Recognition", "raw_type": "journal-article"}, "cited_by_count": 14, "is_retracted": false}, {"id": "https://openalex.org/W7108671924", "doi": "https://doi.org/10.5281/zenodo.17822995", "title": "Unveiling Algorithmic Causality: Mechanistic Interpretability for Robust and Generalizable AI", "publication_year": 2025, "publication_date": "2025-12-05", "type": "article", "language": null, "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Revista, Zen", "orcid": "https://orcid.org/0009-0007-6299-2008", "observed_orcids": ["https://orcid.org/0009-0007-6299-2008"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Revista, Zen", "raw_affiliation_strings": [], "raw_orcid": "https://orcid.org/0009-0007-6299-2008", "affiliations": []}, {"author_position": "last", "author": {"id": null, "display_name": "IA, 10", "orcid": "https://orcid.org/0009-0007-6299-2008", "observed_orcids": ["https://orcid.org/0009-0007-6299-2008"]}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "IA, 10", "raw_affiliation_strings": [], "raw_orcid": "https://orcid.org/0009-0007-6299-2008", "affiliations": []}], "abstract_inverted_index": {"The": [0], "pursuit": [1], "of": [2, 80, 119, 141, 149], "robust": [3], "and": [4, 41, 76, 115, 122], "generalizable": [5], "artificial": [6], "intelligence": [7], "(AI)": [8], "systems": [9], "hinges": [10], "on": [11, 57], "understanding": [12], "the": [13, 63, 89, 117, 139, 146], "underlying": [14], "causal": [15, 64, 98], "mechanisms": [16], "that": [17], "govern": [18], "their": [19, 85], "behavior.": [20, 92], "Current": [21], "AI": [22, 68, 124, 136], "models,": [23], "particularly": [24], "deep": [25], "neural": [26, 81], "networks,": [27], "often": [28], "operate": [29], "as": [30], "black": [31], "boxes,": [32], "hindering": [33], "our": [34], "ability": [35], "to": [36, 61, 73, 83, 88, 103, 144], "diagnose": [37], "failures,": [38], "ensure": [39], "safety,": [40], "transfer": [42], "knowledge": [43], "across": [44, 112, 134], "different": [45], "domains.": [46], "This": [47], "paper": [48], "proposes": [49], "a": [50], "novel": [51], "framework": [52], "for": [53], "\"algorithmic": [54], "causality,\"": [55], "focusing": [56], "mechanistic": [58], "interpretability": [59], "techniques": [60], "unveil": [62], "relationships": [65], "embedded": [66], "within": [67], "models.": [69], "We": [70, 93], "explore": [71], "methods": [72], "identify,": [74], "isolate,": [75], "manipulate": [77], "individual": [78], "components": [79], "networks": [82], "understand": [84], "specific": [86], "contributions": [87], "overall": [90], "model": [91, 105], "further": [94], "investigate": [95], "how": [96], "these": [97], "insights": [99], "can": [100], "be": [101], "leveraged": [102], "improve": [104], "robustness": [106], "against": [107], "adversarial": [108], "attacks,": [109], "enhance": [110], "generalization": [111], "diverse": [113], "datasets,": [114], "facilitate": [116], "development": [118], "more": [120], "reliable": [121], "trustworthy": [123], "systems.": [125], "Our": [126], "approach": [127], "combines": [128], "theoretical": [129], "analysis": [130], "with": [131], "empirical": [132], "evaluations": [133], "various": [135], "tasks,": [137], "demonstrating": [138], "potential": [140], "algorithmic": [142], "causality": [143], "unlock": [145], "next": [147], "generation": [148], "AI.": [150]}, "primary_topic": {"id": "https://openalex.org/T12026", "display_name": "Explainable Artificial Intelligence (XAI)", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T12026", "display_name": "Explainable Artificial Intelligence (XAI)", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10743", "display_name": "Software Testing and Debugging Techniques", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1712", "display_name": "Software"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.5281/zenodo.17822995", "is_oa": true, "landing_page_url": "https://doi.org/10.5281/zenodo.17822995", "pdf_url": null, "source": {"id": "https://openalex.org/S4306400562", "display_name": "Zenodo (CERN European Organization for Nuclear Research)", "issn_l": null, "issn": null, "is_oa": true, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": "https://openalex.org/I67311998", "host_organization_name": "European Organization for Nuclear Research", "host_organization_lineage": ["https://openalex.org/I67311998"], "host_organization_lineage_names": [], "type": "repository"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": null, "is_accepted": false, "is_published": false, "raw_source_name": null, "raw_type": "JournalArticle"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4406087672", "doi": "https://doi.org/10.3390/app15010448", "title": "G&G Attack: General and Geometry-Aware Adversarial Attack on the Point Cloud", "publication_year": 2025, "publication_date": "2025-01-06", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5100452898", "display_name": "Geng Chen", "orcid": "https://orcid.org/0000-0003-3619-3951", "observed_orcids": ["https://orcid.org/0000-0003-3619-3951", "https://orcid.org/0009-0007-6470-4778"]}, "institutions": [{"id": "https://openalex.org/I170215575", "display_name": "National University of Defense Technology", "ror": "https://ror.org/05d2yfz11", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I170215575"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Geng Chen", "raw_affiliation_strings": ["College of Computer, National University of Defense Technology, Changsha 410073, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "College of Computer, National University of Defense Technology, Changsha 410073, China", "institution_ids": ["https://openalex.org/I170215575"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5100611983", "display_name": "Zhiwen Zhang", "orcid": "https://orcid.org/0000-0003-3791-6306", "observed_orcids": ["https://orcid.org/0000-0003-3791-6306"]}, "institutions": [{"id": "https://openalex.org/I170215575", "display_name": "National University of Defense Technology", "ror": "https://ror.org/05d2yfz11", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I170215575"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Zhiwen Zhang", "raw_affiliation_strings": ["College of Computer, National University of Defense Technology, Changsha 410073, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "College of Computer, National University of Defense Technology, Changsha 410073, China", "institution_ids": ["https://openalex.org/I170215575"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5043043084", "display_name": "Yuanxi Peng", "orcid": "https://orcid.org/0000-0002-6647-8862", "observed_orcids": ["https://orcid.org/0000-0002-6647-8862"]}, "institutions": [{"id": "https://openalex.org/I170215575", "display_name": "National University of Defense Technology", "ror": "https://ror.org/05d2yfz11", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I170215575"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Yuanxi Peng", "raw_affiliation_strings": ["College of Computer, National University of Defense Technology, Changsha 410073, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "College of Computer, National University of Defense Technology, Changsha 410073, China", "institution_ids": ["https://openalex.org/I170215575"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5069094590", "display_name": "Chunchao Li", "orcid": "https://orcid.org/0000-0003-0878-6733", "observed_orcids": ["https://orcid.org/0000-0003-0878-6733"]}, "institutions": [{"id": "https://openalex.org/I170215575", "display_name": "National University of Defense Technology", "ror": "https://ror.org/05d2yfz11", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I170215575"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Chunchao Li", "raw_affiliation_strings": ["College of Computer, National University of Defense Technology, Changsha 410073, China"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "College of Computer, National University of Defense Technology, Changsha 410073, China", "institution_ids": ["https://openalex.org/I170215575"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5062506580", "display_name": "Teng Li", "orcid": "https://orcid.org/0000-0002-5175-0819", "observed_orcids": ["https://orcid.org/0000-0002-5175-0819"]}, "institutions": [{"id": "https://openalex.org/I170215575", "display_name": "National University of Defense Technology", "ror": "https://ror.org/05d2yfz11", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I170215575"]}], "countries": ["CN"], "is_corresponding": true, "raw_author_name": "Teng Li", "raw_affiliation_strings": ["Beijing Institute for Advanced Study, National University of Defense Technology, Beijing 100020, China", "College of Advanced Interdisciplinary Studies, National University of Defense Technology, Changsha 410073, China"], "raw_orcid": "https://orcid.org/0000-0002-5175-0819", "affiliations": [{"raw_affiliation_string": "Beijing Institute for Advanced Study, National University of Defense Technology, Beijing 100020, China", "institution_ids": ["https://openalex.org/I170215575"]}, {"raw_affiliation_string": "College of Advanced Interdisciplinary Studies, National University of Defense Technology, Changsha 410073, China", "institution_ids": ["https://openalex.org/I170215575"]}]}], "abstract_inverted_index": {"Deep": [0], "neural": [1], "networks": [2, 80], "have": [3], "been": [4], "shown": [5], "to": [6, 61, 69, 85, 107, 126, 150], "produce": [7], "incorrect": [8], "predictions": [9], "when": [10], "imperceptible": [11], "perturbations": [12], "are": [13, 101], "introduced": [14], "into": [15, 89], "the": [16, 82, 90, 105, 115, 119, 128, 141, 181], "clean": [17], "input.": [18], "This": [19], "phenomenon": [20], "has": [21], "garnered": [22], "significant": [23], "attention": [24], "and": [25, 52, 98, 147], "extensive": [26], "research": [27], "in": [28, 39, 138, 162], "2D": [29], "images.": [30], "However,": [31], "related": [32], "work": [33], "on": [34, 64, 153], "point": [35, 50, 129], "clouds": [36], "is": [37, 58, 96, 135], "still": [38], "its": [40], "infancy.": [41], "Current": [42], "methods": [43], "suffer": [44], "from": [45], "issues": [46], "such": [47], "as": [48], "generated": [49], "outliers": [51], "poor": [53], "attack": [54, 91, 142], "generalization.": [55], "Consequently,": [56], "it": [57], "not": [59], "feasible": [60], "rely": [62], "solely": [63], "overall": [65], "or": [66], "geometry-aware": [67, 83, 124], "attacks": [68], "generate": [70, 108], "adversarial": [71, 78, 87], "samples.": [72], "In": [73], "this": [74], "paper,": [75], "we": [76], "integrate": [77], "transfer": [79], "with": [81, 169], "method": [84, 156], "introduce": [86], "loss": [88], "target.": [92], "A": [93], "state-of-the-art": [94], "autoencoder": [95, 106], "employed,": [97], "sensitivity": [99], "maps": [100], "utilized.": [102], "We": [103], "use": [104], "a": [109, 123], "sufficiently": [110], "deceptive": [111], "mask": [112], "that": [113], "covers": [114], "original": [116], "input,": [117], "adjusting": [118], "critical": [120], "subset": [121], "through": [122], "trick": [125], "distort": [127], "cloud": [130], "gradient.": [131], "Our": [132], "proposed": [133], "approach": [134], "quantitatively": [136], "evaluated": [137], "terms": [139], "of": [140, 174, 183], "success": [143], "rate": [144], "(ASR),": [145], "imperceptibility,": [146], "transferability.": [148], "Compared": [149], "other": [151], "baselines": [152], "ModelNet40,": [154], "our": [155, 184], "demonstrates": [157], "an": [158, 170], "approximately": [159], "38%": [160], "improvement": [161], "ASR": [163], "for": [164], "black-box": [165], "transferability": [166], "query": [167, 172], "attacks,": [168], "average": [171], "count": [173], "around": [175], "7.84.": [176], "Comprehensive": [177], "experimental": [178], "results": [179], "confirm": [180], "superiority": [182], "method.": [185]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10719", "display_name": "3D Shape Modeling and Analysis", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/2206", "display_name": "Computational Mechanics"}, "field": {"id": "https://openalex.org/fields/22", "display_name": "Engineering"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.3390/app15010448", "is_oa": true, "landing_page_url": "https://doi.org/10.3390/app15010448", "pdf_url": "https://www.mdpi.com/2076-3417/15/1/448/pdf?version=1736148236", "source": {"id": "https://openalex.org/S4210205812", "display_name": "Applied Sciences", "issn_l": "2076-3417", "issn": ["2076-3417"], "is_oa": true, "is_in_doaj": true, "is_core": true, "listed_in": ["cwts-core", "doaj", "norway-1"], "host_organization": "https://openalex.org/P4310310987", "host_organization_name": "Multidisciplinary Digital Publishing Institute", "host_organization_lineage": ["https://openalex.org/P4310310987"], "host_organization_lineage_names": ["Multidisciplinary Digital Publishing Institute"], "type": "journal"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Applied Sciences", "raw_type": "journal-article"}, "cited_by_count": 2, "is_retracted": false}, {"id": "https://openalex.org/W4407912006", "doi": "https://doi.org/10.12720/jait.16.2.243-250", "title": "SafetyRAG: Towards Safe Large Language Model-Based Application through Retrieval-Augmented Generation", "publication_year": 2025, "publication_date": "2025-01-01", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5016752950", "display_name": "Sihem Omri", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I179097149", "display_name": "University of Carthage", "ror": "https://ror.org/057x6za15", "country_code": "TN", "type": "education", "lineage": ["https://openalex.org/I179097149"]}, {"id": "https://openalex.org/I4210110695", "display_name": "Universit\u00e9 Tunis Carthage", "ror": "https://ror.org/01xf5pq20", "country_code": "TN", "type": "education", "lineage": ["https://openalex.org/I4210110695"]}, {"id": "https://openalex.org/I4405269272", "display_name": "\u00c9cole Sup\u00e9rieure des Communications de Tunis", "ror": "https://ror.org/03mcjjp59", "country_code": "TN", "type": "education", "lineage": ["https://openalex.org/I4405269272"]}], "countries": ["TN"], "is_corresponding": false, "raw_author_name": "Sihem Omri", "raw_affiliation_strings": ["Higher School of Communication of Tunis , University of Carthage , Tunis , Tunisia"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Higher School of Communication of Tunis , University of Carthage , Tunis , Tunisia", "institution_ids": ["https://openalex.org/I179097149", "https://openalex.org/I4210110695", "https://openalex.org/I4405269272"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5104112024", "display_name": "Manel Abdelkader", "orcid": "https://orcid.org/0009-0007-1246-5779", "observed_orcids": ["https://orcid.org/0009-0007-1246-5779"]}, "institutions": [{"id": "https://openalex.org/I108714496", "display_name": "Tunis University", "ror": "https://ror.org/02q1spa57", "country_code": "TN", "type": "education", "lineage": ["https://openalex.org/I108714496"]}], "countries": ["TN"], "is_corresponding": false, "raw_author_name": "Manel Abdelkader", "raw_affiliation_strings": ["Tunis Business School , University of Tunis , Tunis , Tunisia"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Tunis Business School , University of Tunis , Tunis , Tunisia", "institution_ids": ["https://openalex.org/I108714496"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5038440594", "display_name": "Mohamed Hamdi", "orcid": "https://orcid.org/0000-0002-8867-2340", "observed_orcids": ["https://orcid.org/0000-0002-8867-2340"]}, "institutions": [{"id": "https://openalex.org/I179097149", "display_name": "University of Carthage", "ror": "https://ror.org/057x6za15", "country_code": "TN", "type": "education", "lineage": ["https://openalex.org/I179097149"]}, {"id": "https://openalex.org/I4210110695", "display_name": "Universit\u00e9 Tunis Carthage", "ror": "https://ror.org/01xf5pq20", "country_code": "TN", "type": "education", "lineage": ["https://openalex.org/I4210110695"]}, {"id": "https://openalex.org/I4405269272", "display_name": "\u00c9cole Sup\u00e9rieure des Communications de Tunis", "ror": "https://ror.org/03mcjjp59", "country_code": "TN", "type": "education", "lineage": ["https://openalex.org/I4405269272"]}], "countries": ["TN"], "is_corresponding": false, "raw_author_name": "Mohamed Hamdi", "raw_affiliation_strings": ["Higher School of Communication of Tunis , University of Carthage , Tunis , Tunisia"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Higher School of Communication of Tunis , University of Carthage , Tunis , Tunisia", "institution_ids": ["https://openalex.org/I179097149", "https://openalex.org/I4210110695", "https://openalex.org/I4405269272"]}]}], "abstract_inverted_index": {"Large": [0], "Language": [1], "Model": [2], "(LLM)": [3], "agents": [4], "have": [5], "proven": [6], "to": [7, 34, 67, 119, 122, 150, 181], "perform": [8], "exceptionally": [9], "well": [10], "in": [11, 176], "a": [12, 40, 46, 112, 173], "wide": [13], "range": [14], "of": [15, 19, 24, 30, 134, 143, 157], "applications,": [16], "mainly": [17], "because": [18], "their": [20], "advanced": [21], "reasoning,": [22], "use": [23, 29, 39], "external": [25, 140], "tools": [26], "and": [27, 32, 87, 90, 98, 102, 154, 169], "information,": [28], "APIs,": [31], "ability": [33, 180], "interact": [35], "with": [36, 53, 163, 186], "environments.They": [37], "often": [38, 95], "Retrieval-Augmented": [41], "Generation": [42], "(RAG)": [43], "mechanism": [44], "as": [45, 71], "memory": [47], "module": [48], "that": [49], "retrieves": [50], "relevant": [51], "information": [52], "similar": [54], "embedding": [55], "from": [56], "knowledge": [57, 141], "bases.However,": [58], "recent": [59], "studies": [60], "indicate": [61], "LLM-based": [62], "applications": [63], "are": [64], "highly": [65], "susceptible": [66], "malicious": [68], "uses": [69], "such": [70], "prompt": [72, 187], "injections": [73], "(or": [74], "jailbreaking).To": [75], "address": [76], "this": [77, 105], "issue,": [78], "most": [79], "existing": [80], "techniques": [81], "rely": [82], "on": [83], "filters": [84], "for": [85], "detection": [86], "blocking,": [88], "fine-tuning,": [89], "reinforcement": [91], "learning.However,": [92], "these": [93], "methods": [94], "necessitate": [96], "complex": [97], "resource-intensive": [99], "data": [100], "collection": [101], "training": [103], "procedures.In": [104], "work,": [106], "we": [107], "propose": [108], "the": [109, 117, 123, 132, 152, 178], "SafetyRAG": [110], "framework,": [111], "straightforward": [113], "solution": [114, 160], "which": [115], "utilizes": [116], "RAGtechnique": [118], "explicitly": [120], "provide": [121], "LLM": [124, 165], "some": [125], "safety": [126, 144], "facts": [127, 145], "about": [128, 146], "unsafe": [129, 148, 183], "prompts": [130, 149], "during": [131], "generation": [133], "its": [135], "response.This": [136], "approach": [137], "employs": [138], "an": [139, 158], "base": [142], "various": [147], "enhance": [151], "decision-making": [153], "safe": [155], "behavior": [156], "LLM.The": [159], "is": [161], "evaluated": [162], "several": [164], "models,": [166], "GPT-3.5-turbo,Llama2-13B,": [167], "Gemma-7B": [168], "Mistral-7B-instruct.The": [170], "results": [171], "show": [172], "significant": [174], "improvement": [175], "all": [177], "models'": [179], "decline": [182], "requests,": [184], "even": [185], "injections.": [188]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9951000213623047, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9951000213623047, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10028", "display_name": "Topic Modeling", "score": 0.0027000000700354576, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12262", "display_name": "Hate Speech and Cyberbullying Detection", "score": 0.00039999998989515007, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.12720/jait.16.2.243-250", "is_oa": true, "landing_page_url": "https://doi.org/10.12720/jait.16.2.243-250", "pdf_url": "https://www.jait.us/articles/2025/JAIT-V16N2-243.pdf", "source": {"id": "https://openalex.org/S136819581", "display_name": "Journal of Advances in Information Technology", "issn_l": "1798-2340", "issn": ["1798-2340"], "is_oa": true, "is_in_doaj": true, "is_core": true, "listed_in": ["cwts-core", "doaj"], "host_organization": null, "host_organization_name": null, "host_organization_lineage": [], "host_organization_lineage_names": [], "type": "journal"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Journal of Advances in Information Technology", "raw_type": "journal-article"}, "cited_by_count": 9, "is_retracted": false}, {"id": "https://openalex.org/W4416308972", "doi": "https://doi.org/10.1038/s41598-025-25436-z", "title": "Hybrid framework for image forgery detection and robustness against adversarial attacks using vision transformer and SVM", "publication_year": 2025, "publication_date": "2025-11-18", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5028733642", "display_name": "Mohamed Abdelmaksoud", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I145487455", "display_name": "Cairo University", "ror": "https://ror.org/03q21mh05", "country_code": "EG", "type": "education", "lineage": ["https://openalex.org/I145487455"]}], "countries": ["EG"], "is_corresponding": true, "raw_author_name": "Mohamed Abdelmaksoud", "raw_affiliation_strings": ["Department of Computer Science, Faculty of Computers and Artificial Intelligence, Cairo University, Cairo, Egypt. m.abdelmaksoud@grad.fci-cu.edu.eg"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Computer Science, Faculty of Computers and Artificial Intelligence, Cairo University, Cairo, Egypt. m.abdelmaksoud@grad.fci-cu.edu.eg", "institution_ids": ["https://openalex.org/I145487455"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5082355527", "display_name": "Basheer Youssef", "orcid": "https://orcid.org/0000-0003-0479-199X", "observed_orcids": ["https://orcid.org/0000-0003-0479-199X"]}, "institutions": [{"id": "https://openalex.org/I145487455", "display_name": "Cairo University", "ror": "https://ror.org/03q21mh05", "country_code": "EG", "type": "education", "lineage": ["https://openalex.org/I145487455"]}], "countries": ["EG"], "is_corresponding": false, "raw_author_name": "Basheer Youssef", "raw_affiliation_strings": ["Department of Computer Science, Faculty of Computers and Artificial Intelligence, Cairo University, Cairo, Egypt"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Computer Science, Faculty of Computers and Artificial Intelligence, Cairo University, Cairo, Egypt", "institution_ids": ["https://openalex.org/I145487455"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5027622725", "display_name": "Khaled Tawfik Wassif", "orcid": "https://orcid.org/0000-0002-7401-5219", "observed_orcids": ["https://orcid.org/0000-0002-7401-5219"]}, "institutions": [{"id": "https://openalex.org/I145487455", "display_name": "Cairo University", "ror": "https://ror.org/03q21mh05", "country_code": "EG", "type": "education", "lineage": ["https://openalex.org/I145487455"]}], "countries": ["EG"], "is_corresponding": false, "raw_author_name": "Khaled Wassif", "raw_affiliation_strings": ["Department of Computer Science, Faculty of Computers and Artificial Intelligence, Cairo University, Cairo, Egypt"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Computer Science, Faculty of Computers and Artificial Intelligence, Cairo University, Cairo, Egypt", "institution_ids": ["https://openalex.org/I145487455"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5004178843", "display_name": "Reda A. El-Khoribi", "orcid": "https://orcid.org/0000-0002-6592-1842", "observed_orcids": ["https://orcid.org/0000-0002-6592-1842"]}, "institutions": [{"id": "https://openalex.org/I145487455", "display_name": "Cairo University", "ror": "https://ror.org/03q21mh05", "country_code": "EG", "type": "education", "lineage": ["https://openalex.org/I145487455"]}], "countries": ["EG"], "is_corresponding": false, "raw_author_name": "Reda A. El-Khoribi", "raw_affiliation_strings": ["Department of Computer Science, Faculty of Computers and Artificial Intelligence, Cairo University, Cairo, Egypt"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Department of Computer Science, Faculty of Computers and Artificial Intelligence, Cairo University, Cairo, Egypt", "institution_ids": ["https://openalex.org/I145487455"]}]}], "abstract_inverted_index": {"People": [0], "routinely": [1], "capture": [2], "photos": [3], "and": [4, 31, 46, 55, 68, 80, 149, 169], "videos": [5, 69], "to": [6, 53, 83, 126, 176], "document": [7], "their": [8], "daily": [9], "experiences,": [10], "with": [11], "such": [12], "visual": [13, 58], "media": [14], "frequently": [15], "regarded": [16], "as": [17], "reliable": [18], "sources": [19], "of": [20, 24, 66], "evidence.": [21], "The": [22, 63, 133, 151, 163], "proliferation": [23], "social": [25], "networking": [26], "platforms,": [27], "digital": [28], "photography": [29], "technologies,": [30], "image": [32, 110, 173], "manipulation": [33, 180], "applications": [34], "have": [35], "introduced": [36, 134], "emerging": [37], "concerns": [38, 50], "that": [39], "demand": [40], "investigation": [41], "by": [42], "academics,": [43], "industry": [44], "executives,": [45], "cybersecurity": [47], "experts.": [48], "These": [49], "specifically": [51], "relate": [52], "identifying": [54], "mitigating": [56], "fraudulent": [57], "content": [59], "across": [60, 139], "online": [61], "platforms.": [62], "deliberate": [64], "alteration": [65], "photographs": [67, 116], "has": [70], "become": [71], "progressively": [72], "prevalent,": [73], "potentially": [74], "resulting": [75], "in": [76, 179], "severe": [77], "emotional,": [78], "bodily,": [79], "societal": [81], "damage": [82], "affected": [84], "persons.": [85], "This": [86], "research": [87], "introduces": [88], "a": [89, 95], "combined": [90], "Deep": [91], "Learning": [92], "approach": [93, 135], "utilizing": [94], "pre-trained": [96], "Vision": [97], "Transformer": [98], "(ViT)": [99], "for": [100, 108], "feature": [101], "extraction": [102], "alongside": [103], "Support": [104], "Vector": [105], "Machine": [106], "(SVM)": [107], "dual-category": [109], "classification,": [111], "differentiating": [112], "authentic": [113], "from": [114], "manipulated": [115], "(Copy-move": [117], "&": [118], "Splicing).": [119], "Additionally,": [120], "we": [121], "implemented": [122], "adversarial": [123, 131], "training": [124], "techniques": [125], "enhance": [127], "model": [128], "robustness": [129, 171], "against": [130, 172], "attacks.": [132], "underwent": [136], "comprehensive": [137], "evaluation": [138], "multiple": [140], "benchmarks,": [141], "including": [142], "CASIA": [143, 145], "v1.0,": [144], "v2.0,": [146], "MICC-F220,": [147], "MICC-F2000,": [148], "MICC-F600.": [150], "methodology": [152], "exhibits": [153], "considerable": [154], "potential": [155], "regarding": [156], "forgery": [157], "detection": [158, 181], "performance": [159, 168], "following": [160], "extensive": [161], "validation.": [162], "proposed": [164], "framework": [165], "demonstrated": [166], "competitive": [167], "improved": [170], "manipulations": [174], "compared": [175], "existing": [177], "methods": [178], "tasks.": [182]}, "primary_topic": {"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10388", "display_name": "Advanced Steganography and Watermarking Techniques", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T13720", "display_name": "Benford\u2019s Law and Fraud Detection", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/2613", "display_name": "Statistics and Probability"}, "field": {"id": "https://openalex.org/fields/26", "display_name": "Mathematics"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.1038/s41598-025-25436-z", "is_oa": true, "landing_page_url": "https://doi.org/10.1038/s41598-025-25436-z", "pdf_url": "https://www.nature.com/articles/s41598-025-25436-z.pdf", "source": {"id": "https://openalex.org/S196734849", "display_name": "Scientific Reports", "issn_l": "2045-2322", "issn": ["2045-2322"], "is_oa": true, "is_in_doaj": true, "is_core": true, "listed_in": ["cwts-core", "doaj", "doyens", "jufo-1", "ki-jl-1", "medline", "norway-1"], "host_organization": "https://openalex.org/P4310319908", "host_organization_name": "Nature Portfolio", "host_organization_lineage": ["https://openalex.org/P4310319908", "https://openalex.org/P4310319965"], "host_organization_lineage_names": ["Nature Portfolio", "Springer Nature"], "type": "journal"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Scientific Reports", "raw_type": "journal-article"}, "cited_by_count": 12, "is_retracted": false}, {"id": "https://openalex.org/W4412592295", "doi": "https://doi.org/10.33425/3066-1226.1123", "title": "Hybrid Machine Learning Model for Efficient Malware Network Attack Detection in IoT Environment", "publication_year": 2025, "publication_date": "2025-06-15", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": null, "display_name": "Prasad Bobbillapati", "orcid": null, "observed_orcids": []}, "institutions": [{"id": "https://openalex.org/I4210104573", "display_name": "CMR University", "ror": "https://ror.org/015waqy33", "country_code": "IN", "type": "education", "lineage": ["https://openalex.org/I4210104573", "https://openalex.org/I4405282222"]}], "countries": ["IN"], "is_corresponding": false, "raw_author_name": "Prasad Bobbillapati", "raw_affiliation_strings": ["Associate Professor, Department of CSE , CMR Engineering College , Hyderabad"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Associate Professor, Department of CSE , CMR Engineering College , Hyderabad", "institution_ids": ["https://openalex.org/I4210104573"]}]}, {"author_position": "middle", "author": {"id": null, "display_name": "S Md Ismail", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "S Md Ismail", "raw_affiliation_strings": [], "raw_orcid": null, "affiliations": []}, {"author_position": "middle", "author": {"id": null, "display_name": "Syeda Farhath Begum", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Syeda Farhath Begum", "raw_affiliation_strings": ["Assistant Professor, Department of CSE , Nawab Shah Alam Khan College of Engineering and Technology , Hyderabad"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Assistant Professor, Department of CSE , Nawab Shah Alam Khan College of Engineering and Technology , Hyderabad", "institution_ids": []}]}, {"author_position": "last", "author": {"id": null, "display_name": "Farheen Sultana", "orcid": null, "observed_orcids": []}, "institutions": [], "countries": [], "is_corresponding": false, "raw_author_name": "Farheen Sultana", "raw_affiliation_strings": ["Assistant Professor, Department of IT , Nawab Shah Alam Khan College of Engineering and Technology , Hyderabad"], "raw_orcid": null, "affiliations": [{"raw_affiliation_string": "Assistant Professor, Department of IT , Nawab Shah Alam Khan College of Engineering and Technology , Hyderabad", "institution_ids": []}]}], "abstract_inverted_index": {"The": [0, 79, 186], "exponential": [1], "growth": [2], "of": [3, 6, 43, 73, 104], "the": [4, 12, 36, 69], "Internet": [5], "Things": [7], "(IoT)": [8], "has": [9], "significantly": [10], "increased": [11], "attack": [13], "surface": [14], "for": [15, 166], "cyber": [16], "threats,": [17], "making": [18], "malware-based": [19], "network": [20, 94], "attacks": [21], "a": [22, 51, 102, 191, 201], "critical": [23], "security": [24, 205], "challenge.": [25], "Traditional": [26], "intrusion": [27], "detection": [28, 66, 75, 138, 197], "systems": [29], "(IDS)": [30], "often": [31], "struggle": [32], "to": [33, 67, 91, 114, 181, 200], "cope": [34], "with": [35, 120], "high": [37, 121, 150], "volume,": [38], "complexity,": [39], "and": [40, 62, 71, 88, 109, 117, 142, 159, 177, 194], "evolving": [41], "nature": [42], "these": [44], "attacks.": [45], "To": [46], "address": [47], "this,": [48], "we": [49], "propose": [50], "Hybrid": [52], "Machine": [53], "Learning": [54], "Model": [55], "that": [56, 129], "integrates": [57], "supervised": [58], "learning,": [59, 174], "ensemble": [60], "techniques,": [61], "deep": [63], "learning-based": [64], "anomaly": [65], "enhance": [68], "accuracy": [70], "efficiency": [72], "malware": [74, 196], "in": [76], "IoT": [77, 184, 204], "networks.": [78], "proposed": [80, 187], "model": [81, 131], "leverages": [82], "feature": [83], "selection,": [84], "real-time": [85, 195], "traffic": [86, 119], "analysis,": [87], "hybrid": [89, 188], "classification": [90], "detect": [92], "malicious": [93, 118], "activities": [95], "while": [96], "minimizing": [97], "false": [98], "positives.": [99], "We": [100], "employ": [101], "combination": [103], "Decision": [105], "Tree,": [106], "Random": [107], "Forest,": [108], "Deep": [110], "Neural": [111], "Networks": [112], "(DNNs)": [113], "classify": [115], "benign": [116], "precision.": [122], "Experimental": [123], "evaluations": [124], "using": [125], "benchmark": [126], "datasets": [127], "demonstrate": [128], "our": [130], "outperforms": [132], "traditional": [133], "IDS": [134], "models,": [135], "achieving": [136], "superior": [137], "rates,": [139], "lower": [140], "latency,": [141], "enhanced": [143], "robustness": [144], "against": [145], "sophisticated": [146], "cyberattacks.": [147], "Despite": [148], "its": [149], "efficiency,": [151], "challenges": [152], "such": [153], "as": [154], "adversarial": [155], "attacks,": [156], "scalability": [157], "concerns,": [158], "realtime": [160], "deployment": [161], "overhead": [162], "remain": [163], "open": [164], "areas": [165], "further": [167, 182], "research.": [168], "Future": [169], "work": [170], "will": [171], "explore": [172], "federated": [173], "blockchain-based": [175], "authentication,": [176], "explainable": [178], "AI": [179], "(XAI)": [180], "strengthen": [183], "security.": [185], "approach": [189], "provides": [190], "scalable,": [192], "intelligent,": [193], "system,": [198], "contributing": [199], "more": [202], "resilient": [203], "framework.": [206]}, "primary_topic": {"id": "https://openalex.org/T10400", "display_name": "Network Security and Intrusion Detection", "score": 0.9980000257492065, "subfield": {"id": "https://openalex.org/subfields/1705", "display_name": "Computer Networks and Communications"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T10400", "display_name": "Network Security and Intrusion Detection", "score": 0.9980000257492065, "subfield": {"id": "https://openalex.org/subfields/1705", "display_name": "Computer Networks and Communications"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11241", "display_name": "Advanced Malware Detection Techniques", "score": 0.0008999999845400453, "subfield": {"id": "https://openalex.org/subfields/1711", "display_name": "Signal Processing"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12326", "display_name": "Network Packet Processing and Optimization", "score": 0.0003000000142492354, "subfield": {"id": "https://openalex.org/subfields/1708", "display_name": "Hardware and Architecture"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.33425/3066-1226.1123", "is_oa": true, "landing_page_url": "https://doi.org/10.33425/3066-1226.1123", "pdf_url": "https://sciencexcel.com/articles/Sx1ZfUPZSNMqLKEzimqsdvbH55ge60LTu95862a2.pdf", "source": {"id": "https://openalex.org/S5407048723", "display_name": "Global Journal of Engineering Innovations and Interdisciplinary Research", "issn_l": "3066-1226", "issn": ["3066-1226"], "is_oa": false, "is_in_doaj": false, "is_core": false, "listed_in": [], "host_organization": null, "host_organization_name": null, "host_organization_lineage": [], "host_organization_lineage_names": [], "type": "journal"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Global Journal of Engineering Innovations and Interdisciplinary Research", "raw_type": "journal-article"}, "cited_by_count": 0, "is_retracted": false}, {"id": "https://openalex.org/W4409336141", "doi": "https://doi.org/10.1145/3729167", "title": "Recent Advances in Vision Transformer Robustness Against Adversarial Attacks in Traffic Sign Detection and Recognition: A Survey", "publication_year": 2025, "publication_date": "2025-04-10", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5105102238", "display_name": "Oluwajuwon A. Fawole", "orcid": "https://orcid.org/0009-0002-2719-8611", "observed_orcids": ["https://orcid.org/0009-0002-2719-8611"]}, "institutions": [{"id": "https://openalex.org/I137853757", "display_name": "Howard University", "ror": "https://ror.org/05gt1vc06", "country_code": "US", "type": "education", "lineage": ["https://openalex.org/I137853757"]}], "countries": ["US"], "is_corresponding": false, "raw_author_name": "Oluwajuwon Fawole", "raw_affiliation_strings": ["DoD Center of Excellence in AI/ML and Department of Electrical Engineering &amp; Computer Science, Howard University, Washington, United States"], "raw_orcid": "https://orcid.org/0009-0002-2719-8611", "affiliations": [{"raw_affiliation_string": "DoD Center of Excellence in AI/ML and Department of Electrical Engineering &amp; Computer Science, Howard University, Washington, United States", "institution_ids": ["https://openalex.org/I137853757"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5046343080", "display_name": "Danda B. Rawat", "orcid": "https://orcid.org/0000-0003-3638-3464", "observed_orcids": ["https://orcid.org/0000-0003-3638-3464"]}, "institutions": [{"id": "https://openalex.org/I137853757", "display_name": "Howard University", "ror": "https://ror.org/05gt1vc06", "country_code": "US", "type": "education", "lineage": ["https://openalex.org/I137853757"]}], "countries": ["US"], "is_corresponding": false, "raw_author_name": "Danda Rawat", "raw_affiliation_strings": ["DoD Center of Excellence in AI/ML and Department of Electrical Engineering &amp; Computer Science, Howard University, Washington, United States"], "raw_orcid": "https://orcid.org/0000-0003-3638-3464", "affiliations": [{"raw_affiliation_string": "DoD Center of Excellence in AI/ML and Department of Electrical Engineering &amp; Computer Science, Howard University, Washington, United States", "institution_ids": ["https://openalex.org/I137853757"]}]}], "abstract_inverted_index": {"The": [0], "emergence": [1], "of": [2, 51, 54, 83], "Vision": [3], "Transformers": [4], "(ViTs)": [5], "has": [6], "marked": [7], "a": [8, 43, 48, 80, 86], "significant": [9], "advancement": [10], "in": [11, 15, 35, 56, 85], "machine": [12], "learning,": [13], "particularly": [14], "applications": [16], "requiring": [17], "robust": [18], "visual": [19], "recognition": [20], "capabilities,": [21], "such": [22], "as": [23], "traffic": [24, 57], "sign": [25, 58], "detection": [26, 59], "for": [27, 89], "autonomous": [28], "driving": [29], "systems.": [30], "But,": [31], "deploying": [32], "these": [33], "models": [34], "adversarial": [36, 66], "environments": [37], "where": [38], "robustness": [39], "is": [40], "critical": [41], "remains": [42], "challenge.": [44], "This": [45, 76], "survey": [46], "provides": [47], "comprehensive": [49], "review": [50], "the": [52, 69], "integration": [53], "ViTs": [55, 84], "and": [60, 68], "recognition,": [61], "emphasizing": [62], "their": [63, 74], "vulnerability": [64], "to": [65, 72], "attacks": [67], "methods": [70], "developed": [71], "enhance": [73], "robustness.": [75], "article": [77], "also": [78], "presents": [79], "compressive": [81], "comparison": [82], "tabular": [87], "form": [88], "side-by-side": [90], "comparison.": [91]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9994999766349792, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 0.9994999766349792, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T10036", "display_name": "Advanced Neural Network Applications", "score": 0.00039999998989515007, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.1145/3729167", "is_oa": true, "landing_page_url": "https://doi.org/10.1145/3729167", "pdf_url": "https://dl.acm.org/doi/pdf/10.1145/3729167", "source": {"id": "https://openalex.org/S157921468", "display_name": "ACM Computing Surveys", "issn_l": "0360-0300", "issn": ["0360-0300", "1557-7341"], "is_oa": false, "is_in_doaj": false, "is_core": true, "listed_in": ["cwts-core", "jufo-3", "ki-jl-2", "norway-2"], "host_organization": "https://openalex.org/P4310319798", "host_organization_name": "Association for Computing Machinery", "host_organization_lineage": ["https://openalex.org/P4310319798"], "host_organization_lineage_names": ["Association for Computing Machinery"], "type": "journal"}, "license": "cc-by", "license_id": "https://openalex.org/licenses/cc-by", "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "ACM Computing Surveys", "raw_type": "journal-article"}, "cited_by_count": 17, "is_retracted": false}, {"id": "https://openalex.org/W4413682696", "doi": "https://doi.org/10.1016/j.asoc.2025.113786", "title": "Improving adversarial transferability with Neighborhood Gradient Information", "publication_year": 2025, "publication_date": "2025-08-26", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5016713961", "display_name": "Haijing Guo", "orcid": "https://orcid.org/0009-0004-5050-3068", "observed_orcids": ["https://orcid.org/0009-0004-5050-3068"]}, "institutions": [{"id": "https://openalex.org/I24943067", "display_name": "Fudan University", "ror": "https://ror.org/013q1eq08", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I24943067"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Haijing Guo", "raw_affiliation_strings": ["Engineering Research Center of Robotics, Ministry of Education, Academy for Engineering & Technology, Fudan University, Shanghai 200433, China", "Shanghai Engineering Research Center of AI & Robotics, Academy for Engineering & Technology, Fudan University, Shanghai 200433, China", "Shanghai Key Lab of Intelligent Information Processing, School of Computer Science, Fudan University, Shanghai 200433, China"], "raw_orcid": "https://orcid.org/0009-0004-5050-3068", "affiliations": [{"raw_affiliation_string": "Engineering Research Center of Robotics, Ministry of Education, Academy for Engineering & Technology, Fudan University, Shanghai 200433, China", "institution_ids": ["https://openalex.org/I24943067"]}, {"raw_affiliation_string": "Shanghai Engineering Research Center of AI & Robotics, Academy for Engineering & Technology, Fudan University, Shanghai 200433, China", "institution_ids": ["https://openalex.org/I24943067"]}, {"raw_affiliation_string": "Shanghai Key Lab of Intelligent Information Processing, School of Computer Science, Fudan University, Shanghai 200433, China", "institution_ids": ["https://openalex.org/I24943067"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5016313217", "display_name": "Jiafeng Wang", "orcid": "https://orcid.org/0000-0002-2613-7051", "observed_orcids": ["https://orcid.org/0000-0002-2613-7051"]}, "institutions": [{"id": "https://openalex.org/I24943067", "display_name": "Fudan University", "ror": "https://ror.org/013q1eq08", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I24943067"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Jiafeng Wang", "raw_affiliation_strings": ["Shanghai Key Lab of Intelligent Information Processing, School of Computer Science, Fudan University, Shanghai 200433, China"], "raw_orcid": "https://orcid.org/0000-0002-2613-7051", "affiliations": [{"raw_affiliation_string": "Shanghai Key Lab of Intelligent Information Processing, School of Computer Science, Fudan University, Shanghai 200433, China", "institution_ids": ["https://openalex.org/I24943067"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5101729649", "display_name": "Zhaoyu Chen", "orcid": "https://orcid.org/0000-0002-7112-2596", "observed_orcids": ["https://orcid.org/0000-0002-7112-2596"]}, "institutions": [{"id": "https://openalex.org/I24943067", "display_name": "Fudan University", "ror": "https://ror.org/013q1eq08", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I24943067"]}], "countries": ["CN"], "is_corresponding": true, "raw_author_name": "Zhaoyu Chen", "raw_affiliation_strings": ["Engineering Research Center of Robotics, Ministry of Education, Academy for Engineering & Technology, Fudan University, Shanghai 200433, China", "Shanghai Engineering Research Center of AI & Robotics, Academy for Engineering & Technology, Fudan University, Shanghai 200433, China"], "raw_orcid": "https://orcid.org/0000-0002-7112-2596", "affiliations": [{"raw_affiliation_string": "Engineering Research Center of Robotics, Ministry of Education, Academy for Engineering & Technology, Fudan University, Shanghai 200433, China", "institution_ids": ["https://openalex.org/I24943067"]}, {"raw_affiliation_string": "Shanghai Engineering Research Center of AI & Robotics, Academy for Engineering & Technology, Fudan University, Shanghai 200433, China", "institution_ids": ["https://openalex.org/I24943067"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5031168103", "display_name": "Kaixun Jiang", "orcid": "https://orcid.org/0000-0002-2878-0497", "observed_orcids": ["https://orcid.org/0000-0002-2878-0497"]}, "institutions": [{"id": "https://openalex.org/I24943067", "display_name": "Fudan University", "ror": "https://ror.org/013q1eq08", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I24943067"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Kaixun Jiang", "raw_affiliation_strings": ["Engineering Research Center of Robotics, Ministry of Education, Academy for Engineering & Technology, Fudan University, Shanghai 200433, China", "Shanghai Engineering Research Center of AI & Robotics, Academy for Engineering & Technology, Fudan University, Shanghai 200433, China"], "raw_orcid": "https://orcid.org/0000-0002-2878-0497", "affiliations": [{"raw_affiliation_string": "Engineering Research Center of Robotics, Ministry of Education, Academy for Engineering & Technology, Fudan University, Shanghai 200433, China", "institution_ids": ["https://openalex.org/I24943067"]}, {"raw_affiliation_string": "Shanghai Engineering Research Center of AI & Robotics, Academy for Engineering & Technology, Fudan University, Shanghai 200433, China", "institution_ids": ["https://openalex.org/I24943067"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5101804825", "display_name": "Lingyi Hong", "orcid": "https://orcid.org/0000-0002-2749-5133", "observed_orcids": ["https://orcid.org/0000-0002-2749-5133"]}, "institutions": [{"id": "https://openalex.org/I24943067", "display_name": "Fudan University", "ror": "https://ror.org/013q1eq08", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I24943067"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Lingyi Hong", "raw_affiliation_strings": ["Shanghai Key Lab of Intelligent Information Processing, School of Computer Science, Fudan University, Shanghai 200433, China"], "raw_orcid": "https://orcid.org/0000-0002-2749-5133", "affiliations": [{"raw_affiliation_string": "Shanghai Key Lab of Intelligent Information Processing, School of Computer Science, Fudan University, Shanghai 200433, China", "institution_ids": ["https://openalex.org/I24943067"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5085021663", "display_name": "Pinxue Guo", "orcid": "https://orcid.org/0000-0002-4388-9757", "observed_orcids": ["https://orcid.org/0000-0002-4388-9757"]}, "institutions": [{"id": "https://openalex.org/I24943067", "display_name": "Fudan University", "ror": "https://ror.org/013q1eq08", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I24943067"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Pinxue Guo", "raw_affiliation_strings": ["Engineering Research Center of Robotics, Ministry of Education, Academy for Engineering & Technology, Fudan University, Shanghai 200433, China", "Shanghai Engineering Research Center of AI & Robotics, Academy for Engineering & Technology, Fudan University, Shanghai 200433, China"], "raw_orcid": "https://orcid.org/0000-0002-4388-9757", "affiliations": [{"raw_affiliation_string": "Engineering Research Center of Robotics, Ministry of Education, Academy for Engineering & Technology, Fudan University, Shanghai 200433, China", "institution_ids": ["https://openalex.org/I24943067"]}, {"raw_affiliation_string": "Shanghai Engineering Research Center of AI & Robotics, Academy for Engineering & Technology, Fudan University, Shanghai 200433, China", "institution_ids": ["https://openalex.org/I24943067"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5004394627", "display_name": "J Li", "orcid": "https://orcid.org/0009-0001-4930-6284", "observed_orcids": ["https://orcid.org/0009-0001-4930-6284"]}, "institutions": [{"id": "https://openalex.org/I24943067", "display_name": "Fudan University", "ror": "https://ror.org/013q1eq08", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I24943067"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Jinglun Li", "raw_affiliation_strings": ["Engineering Research Center of Robotics, Ministry of Education, Academy for Engineering & Technology, Fudan University, Shanghai 200433, China", "Shanghai Engineering Research Center of AI & Robotics, Academy for Engineering & Technology, Fudan University, Shanghai 200433, China"], "raw_orcid": "https://orcid.org/0009-0001-4930-6284", "affiliations": [{"raw_affiliation_string": "Engineering Research Center of Robotics, Ministry of Education, Academy for Engineering & Technology, Fudan University, Shanghai 200433, China", "institution_ids": ["https://openalex.org/I24943067"]}, {"raw_affiliation_string": "Shanghai Engineering Research Center of AI & Robotics, Academy for Engineering & Technology, Fudan University, Shanghai 200433, China", "institution_ids": ["https://openalex.org/I24943067"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5100669255", "display_name": "Wenqiang Zhang", "orcid": "https://orcid.org/0000-0002-3339-8751", "observed_orcids": ["https://orcid.org/0000-0002-3339-8751"]}, "institutions": [{"id": "https://openalex.org/I24943067", "display_name": "Fudan University", "ror": "https://ror.org/013q1eq08", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I24943067"]}], "countries": ["CN"], "is_corresponding": true, "raw_author_name": "Wenqiang Zhang", "raw_affiliation_strings": ["Engineering Research Center of Robotics, Ministry of Education, Academy for Engineering & Technology, Fudan University, Shanghai 200433, China", "Shanghai Engineering Research Center of AI & Robotics, Academy for Engineering & Technology, Fudan University, Shanghai 200433, China", "Shanghai Key Lab of Intelligent Information Processing, School of Computer Science, Fudan University, Shanghai 200433, China"], "raw_orcid": "https://orcid.org/0000-0002-3339-8751", "affiliations": [{"raw_affiliation_string": "Engineering Research Center of Robotics, Ministry of Education, Academy for Engineering & Technology, Fudan University, Shanghai 200433, China", "institution_ids": ["https://openalex.org/I24943067"]}, {"raw_affiliation_string": "Shanghai Engineering Research Center of AI & Robotics, Academy for Engineering & Technology, Fudan University, Shanghai 200433, China", "institution_ids": ["https://openalex.org/I24943067"]}, {"raw_affiliation_string": "Shanghai Key Lab of Intelligent Information Processing, School of Computer Science, Fudan University, Shanghai 200433, China", "institution_ids": ["https://openalex.org/I24943067"]}]}], "abstract_inverted_index": null, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.1016/j.asoc.2025.113786", "is_oa": false, "landing_page_url": "https://doi.org/10.1016/j.asoc.2025.113786", "pdf_url": null, "source": {"id": "https://openalex.org/S140556538", "display_name": "Applied Soft Computing", "issn_l": "1568-4946", "issn": ["1568-4946", "1872-9681"], "is_oa": false, "is_in_doaj": false, "is_core": true, "listed_in": ["cwts-core", "jufo-1", "ki-jl-1", "norway-2"], "host_organization": "https://openalex.org/P4310320990", "host_organization_name": "Elsevier BV", "host_organization_lineage": ["https://openalex.org/P4310320990"], "host_organization_lineage_names": ["Elsevier BV"], "type": "journal"}, "license": null, "license_id": null, "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "Applied Soft Computing", "raw_type": "journal-article"}, "cited_by_count": 2, "is_retracted": false}, {"id": "https://openalex.org/W7116781356", "doi": "https://doi.org/10.1109/tifs.2025.3646854", "title": "CoGA: A Collaborative Gray-Box Adversarial Attack for Multimodal Language Models", "publication_year": 2025, "publication_date": "2025-12-22", "type": "article", "language": "en", "authorships": [{"author_position": "first", "author": {"id": "https://openalex.org/A5121001150", "display_name": "Tong Wu", "orcid": "https://orcid.org/0009-0005-8778-8842", "observed_orcids": ["https://orcid.org/0009-0005-8778-8842"]}, "institutions": [{"id": "https://openalex.org/I76130692", "display_name": "Zhejiang University", "ror": "https://ror.org/00a2xv884", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I76130692"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Tong Wu", "raw_affiliation_strings": ["State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"], "raw_orcid": "https://orcid.org/0009-0005-8778-8842", "affiliations": [{"raw_affiliation_string": "State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China", "institution_ids": ["https://openalex.org/I76130692"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5076732053", "display_name": "Feng Lin", "orcid": "https://orcid.org/0000-0001-5240-5200", "observed_orcids": ["https://orcid.org/0000-0001-5240-5200"]}, "institutions": [{"id": "https://openalex.org/I76130692", "display_name": "Zhejiang University", "ror": "https://ror.org/00a2xv884", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I76130692"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Feng Lin", "raw_affiliation_strings": ["State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"], "raw_orcid": "https://orcid.org/0000-0001-5240-5200", "affiliations": [{"raw_affiliation_string": "State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China", "institution_ids": ["https://openalex.org/I76130692"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5073763434", "display_name": "Gaojian Wang", "orcid": "https://orcid.org/0000-0003-3788-1799", "observed_orcids": ["https://orcid.org/0000-0003-3788-1799"]}, "institutions": [{"id": "https://openalex.org/I76130692", "display_name": "Zhejiang University", "ror": "https://ror.org/00a2xv884", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I76130692"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Gaojian Wang", "raw_affiliation_strings": ["State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"], "raw_orcid": "https://orcid.org/0000-0003-3788-1799", "affiliations": [{"raw_affiliation_string": "State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China", "institution_ids": ["https://openalex.org/I76130692"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5100381088", "display_name": "Tiantian Liu", "orcid": "https://orcid.org/0000-0002-4706-8817", "observed_orcids": ["https://orcid.org/0000-0002-4706-8817"]}, "institutions": [{"id": "https://openalex.org/I191208505", "display_name": "Xiamen University", "ror": "https://ror.org/00mcjh785", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I191208505"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Tiantian Liu", "raw_affiliation_strings": ["Department of Information and Communication Engineering, Xiamen University, Xiamen, China"], "raw_orcid": "https://orcid.org/0000-0002-4706-8817", "affiliations": [{"raw_affiliation_string": "Department of Information and Communication Engineering, Xiamen University, Xiamen, China", "institution_ids": ["https://openalex.org/I191208505"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5100422345", "display_name": "Zhibo Wang", "orcid": "https://orcid.org/0000-0002-5804-3279", "observed_orcids": ["https://orcid.org/0000-0002-5804-3279", "https://orcid.org/0000-0002-8691-6583"]}, "institutions": [{"id": "https://openalex.org/I76130692", "display_name": "Zhejiang University", "ror": "https://ror.org/00a2xv884", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I76130692"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Zhibo Wang", "raw_affiliation_strings": ["State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"], "raw_orcid": "https://orcid.org/0000-0002-5804-3279", "affiliations": [{"raw_affiliation_string": "State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China", "institution_ids": ["https://openalex.org/I76130692"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5085755018", "display_name": "Weizhi Meng", "orcid": "https://orcid.org/0000-0003-4384-5786", "observed_orcids": ["https://orcid.org/0000-0003-4384-5786"]}, "institutions": [{"id": "https://openalex.org/I67415387", "display_name": "Lancaster University", "ror": "https://ror.org/04f2nsd36", "country_code": "GB", "type": "education", "lineage": ["https://openalex.org/I67415387"]}], "countries": ["GB"], "is_corresponding": false, "raw_author_name": "Weizhi Meng", "raw_affiliation_strings": ["School of Computing and Communications, Lancaster University, Lancaster, U.K"], "raw_orcid": "https://orcid.org/0000-0003-4384-5786", "affiliations": [{"raw_affiliation_string": "School of Computing and Communications, Lancaster University, Lancaster, U.K", "institution_ids": ["https://openalex.org/I67415387"]}]}, {"author_position": "middle", "author": {"id": "https://openalex.org/A5101994611", "display_name": "Ajian Liu", "orcid": "https://orcid.org/0000-0002-7788-9368", "observed_orcids": ["https://orcid.org/0000-0002-7788-9368"]}, "institutions": [{"id": "https://openalex.org/I19820366", "display_name": "Chinese Academy of Sciences", "ror": "https://ror.org/034t30j35", "country_code": "CN", "type": "government", "lineage": ["https://openalex.org/I19820366"]}, {"id": "https://openalex.org/I4210112150", "display_name": "Institute of Automation", "ror": "https://ror.org/022c3hy66", "country_code": "CN", "type": "facility", "lineage": ["https://openalex.org/I19820366", "https://openalex.org/I4210112150"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Ajian Liu", "raw_affiliation_strings": ["State Key Laboratory of Multimodal Artificial Intelligence Systems, Institute of Automation, Chinese Academy of Sciences, Beijing, China"], "raw_orcid": "https://orcid.org/0000-0002-7788-9368", "affiliations": [{"raw_affiliation_string": "State Key Laboratory of Multimodal Artificial Intelligence Systems, Institute of Automation, Chinese Academy of Sciences, Beijing, China", "institution_ids": ["https://openalex.org/I19820366", "https://openalex.org/I4210112150"]}]}, {"author_position": "last", "author": {"id": "https://openalex.org/A5105297718", "display_name": "Kui Ren", "orcid": "https://orcid.org/0000-0002-1969-2591", "observed_orcids": ["https://orcid.org/0000-0002-1969-2591", "https://orcid.org/0000-0003-3441-6277"]}, "institutions": [{"id": "https://openalex.org/I76130692", "display_name": "Zhejiang University", "ror": "https://ror.org/00a2xv884", "country_code": "CN", "type": "education", "lineage": ["https://openalex.org/I76130692"]}], "countries": ["CN"], "is_corresponding": false, "raw_author_name": "Kui Ren", "raw_affiliation_strings": ["State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"], "raw_orcid": "https://orcid.org/0000-0002-1969-2591", "affiliations": [{"raw_affiliation_string": "State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China", "institution_ids": ["https://openalex.org/I76130692"]}]}], "abstract_inverted_index": {"Multimodal": [0], "language": [1], "models": [2, 136, 169], "(LMs)": [3], "have": [4, 57], "shown": [5], "significant": [6], "potential": [7], "for": [8, 49], "applications": [9], "across": [10, 84, 134], "various": [11, 91], "domains": [12], "but": [13], "remain": [14], "vulnerable": [15, 116], "to": [16, 60, 79, 111], "adversarial": [17, 46, 148], "attacks.": [18, 37], "Current": [19], "research": [20], "in": [21, 146, 170], "white-box": [22], "or": [23], "black-box": [24], "settings": [25], "generally": [26], "struggles": [27], "with": [28], "unrealistic": [29], "attack": [30, 47, 106, 132], "assumptions": [31], "and": [32, 107, 118, 137, 167], "limited": [33], "efficacy": [34], "of": [35, 69, 103, 115, 121, 143, 158, 164], "targeted": [36], "This": [38], "paper": [39], "introduces": [40], "CoGA,": [41], "a": [42], "novel": [43], "gray-box": [44, 54], "collaborative": [45], "method": [48, 129], "multimodal": [50, 144, 159], "LMs.": [51], "Under": [52], "our": [53, 128], "settings,": [55], "attackers": [56], "access": [58], "only": [59], "the": [61, 67, 74, 81, 100, 104, 113, 119, 140, 156, 162], "victim": [62], "model\u2019s": [63], "input": [64], "encoders.": [65], "With": [66], "guidance": [68], "different": [70], "modalities,": [71, 85], "we": [72, 95], "perturb": [73], "embedding": [75], "representations": [76], "from": [77], "encoders": [78], "disrupt": [80], "semantic": [82], "alignment": [83], "ultimately": [86], "causing": [87], "inaccurate": [88], "outputs": [89], "on": [90], "downstream": [92], "tasks.": [93], "Specifically,": [94], "integrate": [96], "text": [97], "embeddings": [98, 110], "into": [99, 155], "loss": [101], "calculations": [102], "image": [105, 109], "utilize": [108], "guide": [112], "ranking": [114], "words": [117], "selection": [120], "final": [122], "samples.": [123], "Extensive": [124], "experiments": [125], "demonstrate": [126], "that": [127], "achieves": [130], "superior": [131], "performance": [133], "diverse": [135], "tasks,": [138], "suggesting": [139], "shared": [141], "vulnerability": [142], "LMs": [145], "confronting": [147], "challenges.": [149], "Our": [150], "work": [151], "provides": [152], "new": [153], "insights": [154], "security": [157], "LMs,": [160], "facilitating": [161], "deployment": [163], "more": [165], "robust": [166], "secure": [168], "practical": [171], "applications.": [172]}, "primary_topic": {"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, "topics": [{"id": "https://openalex.org/T11689", "display_name": "Adversarial Robustness in Machine Learning", "score": 1.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T12357", "display_name": "Digital Media Forensic Detection", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1707", "display_name": "Computer Vision and Pattern Recognition"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}, {"id": "https://openalex.org/T11424", "display_name": "Security and Verification in Computing", "score": 0.0, "subfield": {"id": "https://openalex.org/subfields/1702", "display_name": "Artificial Intelligence"}, "field": {"id": "https://openalex.org/fields/17", "display_name": "Computer Science"}, "domain": {"id": "https://openalex.org/domains/3", "display_name": "Physical Sciences"}}], "primary_location": {"id": "doi:10.1109/tifs.2025.3646854", "is_oa": false, "landing_page_url": "https://doi.org/10.1109/tifs.2025.3646854", "pdf_url": null, "source": {"id": "https://openalex.org/S61310614", "display_name": "IEEE Transactions on Information Forensics and Security", "issn_l": "1556-6013", "issn": ["1556-6013", "1556-6021"], "is_oa": false, "is_in_doaj": false, "is_core": true, "listed_in": ["cwts-core", "jufo-2", "norway-2"], "host_organization": "https://openalex.org/P4310319808", "host_organization_name": "Institute of Electrical and Electronics Engineers", "host_organization_lineage": ["https://openalex.org/P4310319808"], "host_organization_lineage_names": ["Institute of Electrical and Electronics Engineers"], "type": "journal"}, "license": null, "license_id": null, "version": "publishedVersion", "is_accepted": true, "is_published": true, "raw_source_name": "IEEE Transactions on Information Forensics and Security", "raw_type": "journal-article"}, "cited_by_count": 0, "is_retracted": false}], "group_by": []}