~ similar to 2604.12834v1· 19 results
The paper proposes a two-stage robust aggregation framework to detect and mitigate stealthy backdoor attacks in Over-the-air Federated Learning (OTA-FL) systems, effectively maintaining main-task accu…
Yuhua Xu, Mingtao Jiang, Chenfei Hu, Yinglong Wang +4 more
The paper proposes VerFU, a client-verifiable federated unlearning framework for low-altitude wireless networks that allows devices to ensure the server accurately removes their historical data contri…
The paper introduces the Street-legal Physical Adversarial Rim (SPAR), a physically realizable and street-legal white-box attack that significantly degrades the accuracy of modern Automatic License Pl…
CSULoRA is a post-hoc method that corrects trained LoRA adapters by estimating a safety-aligned subspace and solving a penalized minimum-change problem to attenuate unsafe update directions while pres…
The paper proposes FedPower, a novel differentially private cross-silo Federated Learning framework that uses PowerDP to reconstruct and project client updates into a secure low-rank space, effectivel…
Yaopeng Wang, Qingliang Wang, Zhibo Wang, Huiyu Xu +4 more
LoRA-Key introduces a user-centric watermarking framework that attaches a recoverable ownership key to LoRA modules via a standalone Watermark LoRA, providing lightweight, plug-and-play copyright prot…
Han Liu, Shanghao Shi, Yevgeniy Vorobeychik, Chongjie Zhang +1 more
This paper demonstrates that adversarial perturbations possess a low-rank structure, and proposes a two-step method to leverage this property to significantly improve the efficiency and effectiveness…
This paper demonstrates that a proposed lightweight RFID authentication protocol is structurally insecure and susceptible to a multi-session algebraic attack, enabling full compromise of the secret ke…
LoREnc is a novel, training-free framework that secures Foundation Models (FMs) and LoRA adapters against intellectual property leakage and model recovery attacks by spectrally truncating weights and…
The paper introduces PINSIGHT, a novel methodology that rigorously assesses Wi-Fi PIN code inference attacks by separating environmental effects from typing effects, concluding that current state-of-t…
The paper introduces BFIAttack, a novel attack that exploits Beamforming Feedback Information (BFI) to reconstruct a user's Channel State Information (CSI), thereby compromising Wi-Fi physical-layer s…
The paper demonstrates that LoRA adapters can be backdoored via data poisoning, showing the backdoor generalizes at the token feature level, and proposes robust behavioral and weight-level detectors f…
This paper demonstrates that LoRA adapters can be backdoored via data poisoning, showing that the resulting backdoor generalizes at the token feature level, and proposes robust behavioral and weight-l…
Xin Wang, Peichun Hua, Chip Hong Chang, Wenye Liu +1 more
The paper proposes a scalable, helper-data-free open-set framework using an OpenGAN-based classifier to unify authentication for diverse and large populations of heterogeneous PUF-based IoT devices.
Pengyu Chen, Weiyang Li, Jin Xu, Jiacheng Wang +3 more
This paper surveys model forensics in AI-native wireless networks, detailing key security problems and demonstrating practical workflows for verifying model authenticity and detecting malicious functi…
The paper introduces NaRA, a noise-aware LoRA technique that dynamically adapts fine-tuning parameters based on the noise level during diffusion, significantly improving the performance of Diffusion L…
The paper proposes a channel prediction-based Physical Layer Authentication (PLA) framework using a Transformer module to maintain robust authentication accuracy against consecutive spoofing attacks i…
This paper proposes a federated learning framework using FedAvg to detect RF jamming attacks in 5G networks directly from over-the-air IQ samples, achieving high accuracy while maintaining user data p…
Taekkyung Oh, Duckwoo Kim, Hansung Bae, Beomseok Oh +7 more
The paper introduces Devilray, a comprehensive adversarial model that systematically tests the realistic operational space of fake base stations, revealing significant blind spots in existing detectio…