Preparing an AI-Augmented SIEM for the EU Cyber Resilience Act: A Practitioner Case Study
The EU Cyber Resilience Act (CRA), Regulation (EU) 2024/2847, makes product cybersecurity a lifecycle obligation for pro
#cs.CY
共收录 157 条相关情报。
← 返回所有主题The Amplifier Effect: Human-Factor Risks of AI-Suggested Correlation and Auto-Propagation in Multi-Framework GRC Self-Assessment
Multi-framework Governance, Risk and Compliance (GRC) platforms increasingly automate the link between an organisation's
Not What a Child Expressed: Auditing the Sign-to-Text Safety Interface in Child-Facing AI
Automatic sign language translation (SLT) has entered consumer products, turning American Sign Language into English tex
Can Power Draw Constrain Covert Compute? Limits of Analogue Verification for AI Governance
Frontier AI treaties or agreements on limiting computation require external verification; an external auditor must be ab
Visual Grounding Safety in Vision-Language Models
Vision-language models (VLMs) are increasingly trained to generate structured outputs like points and bounding boxes tha
AgentDoxx: Agentic Re-identification of Anonymized Text with Web Search
As Large Language Models (LLMs) gain tool use capabilities such as web search, they can retrieve and cross-reference pub
Large Language Models and Augmented Democracy
Artificial intelligence enables computational agents to represent political preferences and take part in collective deci
Modeling Deletion Requests in Machine Unlearning
Machine unlearning is seen as a promising approach to enable users to exercise the "right to erasure" in the context of
Quantifying Ethereum Energy Consumption via Network Mapping
以太坊从工作量证明（PoW）转向权益证明（PoS）后，全网电力消耗下降约 99.95%，但加密资产服务商仍须按欧盟《加密资产市场监管条例》（MiCAR）等要求报告运营能耗。既有估算方法存在两类缺陷：一是对每个节点套用同一个典型功耗值，二是从
The Fragility of Trigger-Tag Mechanisms for Misuse Detection in Open-Weight LLMs
该论文关注开放权重语言模型的安全防护问题。由于开放权重模型可被任意下载、修改并部署在开发者控制范围之外，中心化强制保护措施的效果有限。近期研究提出 trigger-tag 机制：当模型在目标条件下被使用（如生成钓鱼内容）时，产生可检测信号。
A Systematization of Knowledge on DeFi Vaults: Architectures, Curation Mechanisms, and Strategy Design
本文是一篇关于去中心化金融（DeFi）金库（Vault）的系统化知识梳理（Systematization of Knowledge）论文。作者指出，DeFi 金库是基于智能合约的资产管理系统：它汇集用户存款、执行可编程策略，并铸造代表对底层
AuraForge: Scaling Security Supervision for Training Coding Agents
该论文关注的是一个正在快速浮现的安全盲区：随着编码智能体（coding agents）能力增强到可以从单条提示词直接生成复杂软件应用，人类监督方式已从逐行代码审查转向对最终运行结果的黑盒式验收。已有研究指出，这种转变带来关键风险——功能正确
What Does It Mean to Forget a Person? Individual-Level Unlearning in Vision-Language Models
这篇论文关注视觉-语言模型(VLM)中的隐私删除问题,指出现有研究与评测体系存在一个关键盲区。作者认为,从 VLM 中抹除某个具体个人的身份信息,远比抹除单条属性困难,因为个人数据并非以孤立字段形式存储,而是跨图像、文本等多种模态相互纠缠、
Coordinated Electromagnetic Side-Channel Attacks for Voter--Ballot Linking: A Case Study of the Brazilian E-Polling System
本文研究的是电子投票机（EVM）在物理侧信道层面的选民—选票关联（voter-ballot linking）风险，作者以巴西电子投票系统为案例，构造了一个由两名攻击者协同完成的电磁侧信道攻击场景。攻击模型设定为：攻击者 Eve 能够进入投票
Verifiable Randomness for Blockchain-Based Lottery Systems
该论文聚焦于区块链彩票等高风险去中心化应用所依赖的链上随机数生成（RNG）问题。作者指出，当前缺乏一种既能保证不可预测性、又能被所有参与者公开验证的链上随机数方案，这仍是一个关键开放问题。论文首先系统梳理了历年出现的各类区块链随机数生成方法
Fast Frame Rate Estimation in Electromagnetic Side-Channel Attacks on Public Systems
本文研究的是电磁侧信道分析中的一个前置环节：目标系统显示帧刷新率的估计。在电磁侧信道攻击流程里，只有先确定显示器（或其它周期性数字电路）的帧刷新率，分析者才能定位出携带信息的"泄漏谐波频率"，后续的采集与解调才有意义，因此帧率估计是整个分析
Do Electromagnetic Side-Channel Attacks Threaten Electronic Polling Stations? Scenarios and Recommendations
该论文研究巴西电子投票机（UEB，Urna Eletrônica Brasileira）面临的电磁侧信道攻击（即 TEMPEST 攻击）对投票保密性的威胁。TEMPEST 攻击的核心原理是：设备视频信号在传输与显示过程中会产生非预期的电磁辐
Decoding the Legalese: A Scalable and Quantitative Framework for Analyzing Corporate Privacy Policies
隐私政策是组织披露其如何收集、处理与共享个人数据的主要机制，但这类文档往往冗长、法律语言密集，普通用户难以解读，论文作者认为这种难读性可能是刻意设计的结果。更关键的是，目前除了「是否满足监管条文」之外，业界缺乏能够刻画隐私政策关键质量的标准
Trust in Edge-Enabled IoT Security: Features, Challenges and Research Directions
该论文是一篇系统性综述，聚焦边缘计算赋能物联网（Edge-Enabled IoT）环境下的信任管理（Trust Management）问题。研究背景在于：物联网为人类生活与工业生产提供了自主智能、泛在连接与易用性，而为了支撑时延敏感、资源受
A Global Readiness and Sovereignty Capability Model for Post-Quantum Cryptography Migration
该论文针对后量子密码（PQC）迁移这一战略窗口，指出现有成熟度模型仅评估“准备度”，而主权文献虽讨论“密码主权”却缺乏可操作测量。作者提出“准备度-主权能力模型”（RSCM），将PQC准备度与密码主权整合为国家层面的测量框架。RSCM把主权