40 citations · 98 across the 13 of their papers we have counts for
15 papers
A2A-ForensicTrace: Offline Verification of Tamper-Evident A2A Runtime Evidence
Adil Alshammari, Sareh Assiri, Hayretdin Bahsi
Security-relevant Agent2Agent (A2A) executions can cross organizational boundaries, leaving investigators without live access to all participating systems. Offline investigation in…
A2A-CaseVerify: Merkle-Linked Case-Evidence Verification for Cross-Organization A2A Workflows
Adil Alshammari, Hayretdin Bahsi
Agent-to-Agent (A2A) communication enables large language model (LLM) agents to exchange tasks, messages, and artifacts across organizations. A valid message alone does not establi…
Offline-Verifiable Accountability for Cross-Organization Agent Messaging: A Preserved Evidence-Bundle Approach
Adil Alshammari, Hayretdin Bahsi
Cross-organization agent workflows require preserved evidence that remains independently verifiable during later audit or dispute review. They may involve multiple organizations, d…
When Prompts Control Robots: Prompt Injection Attacks in Multi-Agent Robotic Systems
Neha Nagaraja, Amisha Bagari, Hayretdin Bahsi
Large language models are increasingly integrated into autonomous robotic systems for task planning and control, but this integration exposes them to prompt injection attacks that…
From Prompt to Physical Actuation: Holistic Threat Modeling of LLM-Enabled Robotic Systems
Neha Nagaraja, Hayretdin Bahsi, Carlo R. da Cunha
As large language models are integrated into autonomous robotic systems for task planning and control, compromised inputs or unsafe model outputs can propagate through the planning…
Incremental Federated Learning for Intrusion Detection in IoT Networks under Evolving Threat Landscape
Muaan Ur Rehman, Hayretdin Bahsi, Rajesh Kalakoti
The expansion of Internet of Things (IoT) devices has increased the attack surface of networks, necessitating a robust and adaptive intrusion detection systems. Machine learning ba…
Where Do LLM-based Systems Break? A System-Level Security Framework for Risk Assessment and Treatment
Neha Nagaraja, Hayretdin Bahsi
Large Language Models (LLMs) are increasingly integrated into safety-critical workflows, yet existing security analyses remain fragmented and often isolate model behavior from the…
Goal-Driven Risk Assessment for LLM-Powered Systems: A Healthcare Case Study
Neha Nagaraja, Hayretdin Bahsi
While incorporating LLMs into systems offers significant benefits in critical application areas such as healthcare, new security challenges emerge due to the potential cyber kill c…
Enhancing Continual Learning for Software Vulnerability Prediction: Addressing Catastrophic Forgetting via Hybrid-Confidence-Aware Selective Replay for Temporal LLM Fine-Tuning
Xuhui Dou, Hayretdin Bahsi, Alejandro Guerra-Manzanares
Recent work applies Large Language Models (LLMs) to source-code vulnerability detection, but most evaluations still rely on random train-test splits that ignore time and overestima…
Enhancing Security in LLM Applications: A Performance Evaluation of Early Detection Systems
Valerii Gakh, Hayretdin Bahsi
Prompt injection threatens novel applications that emerge from adapting LLMs for various user tasks. The newly developed LLM-based software applications become more ubiquitous and…
Evaluating explainable AI for deep learning-based network intrusion detection system alert classification
Rajesh Kalakoti, Risto Vaarandi, Hayretdin Bahsi +1
A Network Intrusion Detection System (NIDS) monitors networks for cyber attacks and other unwanted activities. However, NIDS solutions often generate an overwhelming number of aler…
To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt
Zhilong Wang, Neha Nagaraja, Lan Zhang +3
LLM agents are widely used as agents for customer support, content generation, and code assistance. However, they are vulnerable to prompt injection attacks, where adversarial inpu…
A Systematic Literature Review of Cyber Security Monitoring in Maritime
Risto Vaarandi, Leonidas Tsiopoulos, Gabor Visky +2
In recent years, many cyber incidents have occurred in the maritime sector, targeting the information technology (IT) and operational technology (OT) infrastructure. One of the key…
Using Large Language Models for Template Detection from Security Event Logs
Risto Vaarandi, Hayretdin Bahsi
In modern IT systems and computer networks, real-time and offline event log analysis is a crucial part of cyber security monitoring. In particular, event log analysis techniques ar…
Harnessing Large Language Models for Software Vulnerability Detection: A Comprehensive Benchmarking Study
Karl Tamberg, Hayretdin Bahsi
Despite various approaches being employed to detect vulnerabilities, the number of reported vulnerabilities shows an upward trend over the years. This suggests the problems are not…