14 papers
Beyond Detection: Evaluating Defensive LLMs Against AI-Generated Social Engineering in Live Turn-by-Turn Interaction
Yuqiao Xu, Osama Zafar, Alexander Nemecek +1
Generative AI makes social-engineering attacks more fluent, adaptive, and scalable, increasing the need for LLM-based de- fenders that can protect users during ongoing interactions…
Who Gets Flagged? The Pluralistic Evaluation Gap in AI Content Watermarking
Alexander Nemecek, Osama Zafar, Yuqiao Xu +2
Watermarking is becoming the default mechanism for AI content authentication, with governance policies and frameworks referencing it as infrastructure for content provenance. Yet a…
Privacy Policy Enforcement Guardrails for Data-Sensitive Retrieval-Augmented Generation
Osama Zafar, Alexander Nemecek, Yiqian Zhang +5
Standard PII filters often miss contextual data leakage in RAG systems, such as non-regulated attribute clusters that collectively identify individuals. We introduce a Privacy Poli…
CausalGuard: Conformal Inference under Graph Uncertainty
Vikash Singh, Weicong Chen, Debargha Ganguly +12
Estimating treatment effects from observational data requires choosing an adjustment set, but valid adjustment depends on an unknown causal graph. Graph misspecification can cause…
The End of Trust: How Agentic AI Breaks Security Assumptions
Osama Zafar, Alexander Nemecek, Erman Ayday
For decades, the security of digital interaction has rested on an unacknowledged economic constraint. Attackers faced a tradeoff between the fidelity of a deception and the scale a…
Authenticated Contradictions from Desynchronized Provenance and Watermarking
Alexander Nemecek, Hengzhi He, Guang Cheng +1
Cryptographic provenance standards such as C2PA and invisible watermarking are positioned as complementary defenses for content authentication, yet the two verification layers are…