1.5k citations · 2.3k across the 133 of their papers we have counts for
149 papers
JANUS: Denial-of-Service Attack Against Beam Hopping in LEO Satellite Networks
Yuval Aviv, Roee Idan, Roy Peled +2
Low Earth orbit (LEO) satellite networks are increasingly used to provide global connectivity. However, each satellite has limited resources that need to be allocated according to…
HYDRA: Quantifying Botnet Resource Thresholds for Efficient Link-Flooding Attacks on LEO Satellite Networks
Roee Idan, Rami Puzis, Asaf Shabtai +1
Low Earth orbit (LEO) satellite constellations, such as Starlink and Kuiper, are rapidly emerging as a critical backbone for low-latency global connectivity. As these systems expan…
An Empirical Security Analysis of Open-Source Software Used in Onboard Satellite Systems
Roee Idan, Tomer Cohen Galor, Asaf Shabtai +1
The use of open-source software (OSS) in satellite flight systems is increasing as missions adopt reusable frameworks, shared libraries, and community-maintained components. While…
Beyond the Mandate: A Systematic Security Analysis of the Agent Payments Protocol (AP2)
Avital Aviv, Parth A. Gandh, Ron Bitton +1
The Agent Payments Protocol (AP2), introduced by Google, enables large language model (LLM)-driven shopping agents to authorize and execute payments on behalf of users. Its signed…
Learning What to Fail On: Failure-Mode Contextual Bandits for Adversarial Data Curation
Roie Kazoom, Ofir Cohen, Rami Puzis +2
We introduce a failure-aware adversarial retrieval-augmented framework for improving robustness in natural language understanding. Rather than selecting synthetic examples with a f…
(EC)2: Event-Centric Explainability for Cybersecurity Through Multi-Agent LLM Investigations
Neta Kirmayer, David Tayouri, Andrés Murillo +3
Security operations centers rely on anomaly detection systems to flag suspicious events. Feature-level explanations for anomaly detectors offer limited value for operational invest…
Data Leakage Prevention in Agentic Applications via Preemptive Hardening
Akansha Shukla, Emily Bellov, Parth Atulbhai Gandhi +2
Agentic systems integrate LLM driven planning with interfaces to external tools, making data leakage and tool misuse feasible via instruction/data boundary failures and prompt inje…
COHORT: Collaborative Orchestration for Hardening via Offensive Replay on Emulated Topologies
Chen Frydman, Aviram Zilberman, Rubin Krief +6
Mitigating an observed adversary in an enterprise network typically takes weeks of expert work: an analyst derives a mitigation tailored to that adversary, validates it without bre…
CEDAR-42001: From ISO/IEC 42001 Conformity to Architecture-Aware, Audit-Visible Assurance Posture for AI Cyber-Physical Systems
Priyanka Prakash Surve, Asaf Shabtai, Yuval Elovici
AI-enabled cyber-physical systems (AI-CPS) turn data-driven decisions into physical actions, creating assurance challenges across sensing, computation, control, human oversight, an…
RogueRover: Autonomous Rogue Device Localization for Incident Response
Priyanka Prakash Surve, Asaf Shabtai, Yuval Elovici
Physically localizing unauthorized wireless devices remains a critical bottleneck in cyber-physical security operations, where rogue access points can provide entry points for late…
SecMate: Multi-Agent Adaptive Cybersecurity Troubleshooting with Tri-Context Personalization
Yair Meidan, Omri Haller, Yulia Moshan +4
Recent advances in large language models and agentic frameworks have enabled virtual customer assistants (VCAs) for complex support. We present SecMate, a multi-agent VCA for cyber…
SAFEdit: Does Multi-Agent Decomposition Resolve the Reliability Challenges of Instructed Code Editing?
Noam Tarshish, Nofar Selouk, Daniel Hodisan +4
Instructed code editing is a significant challenge for large language models (LLMs). On the EditBench benchmark, 39 of 40 evaluated models obtain a task success rate (TSR) below 60…
ConGISATA: A Framework for Continuous Gamified Information Security Awareness Training and Assessment
Ofir Cohen, Ron Bitton, Asaf Shabtai +1
The incidence of cybersecurity attacks utilizing social engineering techniques has increased. Such attacks exploit the fact that in every secure system, there is at least one indiv…
FreakOut-LLM: The Effect of Emotional Stimuli on Safety Alignment
Daniel Kuznetsov, Ofir Cohen, Karin Shistik +2
Safety-aligned LLMs go through refusal training to reject harmful requests, but whether these mechanisms remain effective under emotionally charged stimuli is unexplored. We introd…
From Tool Orchestration to Code Execution: A Study of MCP Design Choices
Yuval Felendler, Parth A. Gandhi, Idan Habler +2
Model Context Protocols (MCPs) provide a unified platform for agent systems to discover, select, and orchestrate tools across heterogeneous execution environments. As MCP-based sys…
Provably Protecting Fine-Tuned LLMs from Training Data Extraction while Preserving Utility
Tom Segal, Asaf Shabtai, Yuval Elovici
Fine-tuning large language models (LLMs) on sensitive datasets raises privacy concerns, as training data extraction (TDE) attacks can expose highly confidential information. Existi…
Real-World Adversarial Attacks on RF-Based Drone Detectors
Omer Gazit, Yael Itzhakev, Yuval Elovici +1
Radio frequency (RF) based systems are increasingly used to detect drones by analyzing their RF signal patterns, converting them into spectrogram images which are processed by obje…
AgentGuardian: Learning Access Control Policies to Govern AI Agent Behavior
Nadya Abaev, Denis Klimov, Gerard Levinov +3
Artificial intelligence (AI) agents are increasingly used in a variety of domains to automate tasks, interact with users, and make decisions based on data inputs. Ensuring that AI…
Peacock: UEFI Firmware Runtime Observability Layer for Detection and Response
Hadar Cochavi Gorelik, Orel Fadlon, Denis Klimov +3
Modern computing platforms rely on the Unified Extensible Firmware Interface (UEFI) to initialize hardware and coordinate the transition to the operating system. Because this execu…
SCyTAG: Scalable Cyber-Twin for Threat-Assessment Based on Attack Graphs
David Tayouri, Elad Duani, Abed Showgan +8
Understanding the risks associated with an enterprise environment is the first step toward improving its security. Organizations employ various methods to assess and prioritize the…
Training-Free Policy Violation Detection via Activation-Space Whitening in LLMs
Oren Rachmil, Avishag Shapira, Roy Betser +5
As organizations increasingly deploy LLMs in sensitive domains such as legal, financial, and medical settings, ensuring alignment with internal organizational policies has become a…
MIA-EPT: Membership Inference Attack via Error Prediction for Tabular Data
Eyal German, Daniel Samira, Yuval Elovici +1
Synthetic data generation plays an important role in enabling data sharing, particularly in sensitive domains like healthcare and finance. Recent advances in diffusion models have…
KubeGuard: LLM-Assisted Kubernetes Hardening via Configuration Files and Runtime Logs Analysis
Omri Sgan Cohen, Ehud Malul, Yair Meidan +3
The widespread adoption of Kubernetes (K8s) for orchestrating cloud-native applications has introduced significant security challenges, such as misconfigured resources and overly p…
SoK: Cybersecurity Assessment of Humanoid Ecosystem
Priyanka Prakash Surve, Asaf Shabtai, Yuval Elovici
Humanoids are progressing toward practical deployment across healthcare, industrial, defense, and service sectors. While typically considered cyber-physical systems (CPSs), their d…