This paper identifies and characterizes NTP Pool servers that harvest IPv6 client addresses and uses them for reconnaissance, port scanning, and service enumeration.

The paper proposes a quantum-resilient session-key establishment scheme that fragments a new key across multiple, independently encrypted Tor circuits, requiring an adversary to compromise many circui…

This paper presents a longitudinal study on the adoption of anonymisation protocols in the Bitcoin network, identifying over 5.94 million CoinJoin and 23.3 million CoinSwap transactions, and revealing…

The paper introduces 'Routing Hijacking,' a severe attack where malicious clients forge semantic profiles in Federated RAG systems to misroute target queries, and proposes a trust-aware post-routing f…

The paper introduces PrivacyPeek, a new benchmark that audits the acquisition stage of LLM-based agents to demonstrate that unnecessary acquisition of sensitive data is a widespread and critical priva…

The paper introduces PrivacyPeek, a new benchmark that audits the acquisition stage of LLM-based agents to show that unnecessary and sensitive data acquisition is a widespread and critical privacy vul…

This paper presents an architecture for private and verifiable electronic voting using the Paillier cryptosystem, without a trusted key dealer, and proves its correctness under certain assumptions.

The paper proposes NTSSL, a novel semi-supervised method that combines network traffic analysis and transaction clustering to significantly improve the deanonymization of Bitcoin transactions.

The paper proposes GroundedCache, an evidence-validated cache router that significantly improves the safety of reusing cached semantic answers in RAG systems by requiring multiple gates to validate th…

The paper empirically investigates the lead marketing ecosystem, revealing a highly non-compliant system that aggressively collects, shares, and monetizes sensitive personal data through deceptive bro…

The paper introduces Secret Scanner Agent (SSA), a multi-agent system that extracts both secrets and their associated doors from unstructured documents, improving precision and recall over traditional…

The paper demonstrates a class of steganographic exfiltration attacks against vector databases by hiding data within embeddings, and proposes VectorPin, a cryptographic provenance protocol to detect s…

CachePrune introduces a privacy-aware, fine-grained KV cache sharing mechanism that allows LLM inference systems to safely reuse cache entries across users' requests, significantly improving efficienc…

The paper proposes RPSG, a method that uses private seeds and differential privacy to generate highly realistic and strongly privacy-preserving synthetic data replicas of private text for LLMs.

BRASP is a searchable encryption scheme that enables private Boolean range queries over encrypted spatial data while robustly protecting both the search pattern and access pattern.

This techreport evaluates a Tor-based protocol, Tor push, demonstrating that it can significantly enhance the location privacy of Ethereum validators by unlinking their identities from their IP addres…

The paper introduces xDup, a fast and privacy-preserving system that enables humanitarian organizations to deduplicate aid recipient records across multiple organizations, thereby optimizing resource…

This paper presents a cryptanalytic attack demonstrating that a specific code-based Private Information Retrieval (PIR) scheme can be broken, allowing the server to efficiently determine the requested…

RASER introduces a family of cheap, router-based systems that selectively decide whether to perform expensive multi-hop retrieval, significantly reducing LLM token costs while maintaining state-of-the…

LIPPEN introduces a novel hardware-software co-design that provides strong, zero-overhead pointer encryption for enhanced memory safety, achieving comprehensive pointer integrity and confidentiality.