1.5k citations · 2.3k across the 133 of their papers we have counts for
98 papers · 1 filter
JANUS: Denial-of-Service Attack Against Beam Hopping in LEO Satellite Networks
Yuval Aviv, Roee Idan, Roy Peled +2
Low Earth orbit (LEO) satellite networks are increasingly used to provide global connectivity. However, each satellite has limited resources that need to be allocated according to…
HYDRA: Quantifying Botnet Resource Thresholds for Efficient Link-Flooding Attacks on LEO Satellite Networks
Roee Idan, Rami Puzis, Asaf Shabtai +1
Low Earth orbit (LEO) satellite constellations, such as Starlink and Kuiper, are rapidly emerging as a critical backbone for low-latency global connectivity. As these systems expan…
An Empirical Security Analysis of Open-Source Software Used in Onboard Satellite Systems
Roee Idan, Tomer Cohen Galor, Asaf Shabtai +1
The use of open-source software (OSS) in satellite flight systems is increasing as missions adopt reusable frameworks, shared libraries, and community-maintained components. While…
Beyond the Mandate: A Systematic Security Analysis of the Agent Payments Protocol (AP2)
Avital Aviv, Parth A. Gandh, Ron Bitton +1
The Agent Payments Protocol (AP2), introduced by Google, enables large language model (LLM)-driven shopping agents to authorize and execute payments on behalf of users. Its signed…
(EC)2: Event-Centric Explainability for Cybersecurity Through Multi-Agent LLM Investigations
Neta Kirmayer, David Tayouri, Andrés Murillo +3
Security operations centers rely on anomaly detection systems to flag suspicious events. Feature-level explanations for anomaly detectors offer limited value for operational invest…
Data Leakage Prevention in Agentic Applications via Preemptive Hardening
Akansha Shukla, Emily Bellov, Parth Atulbhai Gandhi +2
Agentic systems integrate LLM driven planning with interfaces to external tools, making data leakage and tool misuse feasible via instruction/data boundary failures and prompt inje…
SecMate: Multi-Agent Adaptive Cybersecurity Troubleshooting with Tri-Context Personalization
Yair Meidan, Omri Haller, Yulia Moshan +4
Recent advances in large language models and agentic frameworks have enabled virtual customer assistants (VCAs) for complex support. We present SecMate, a multi-agent VCA for cyber…
ConGISATA: A Framework for Continuous Gamified Information Security Awareness Training and Assessment
Ofir Cohen, Ron Bitton, Asaf Shabtai +1
The incidence of cybersecurity attacks utilizing social engineering techniques has increased. Such attacks exploit the fact that in every secure system, there is at least one indiv…
FreakOut-LLM: The Effect of Emotional Stimuli on Safety Alignment
Daniel Kuznetsov, Ofir Cohen, Karin Shistik +2
Safety-aligned LLMs go through refusal training to reject harmful requests, but whether these mechanisms remain effective under emotionally charged stimuli is unexplored. We introd…
From Tool Orchestration to Code Execution: A Study of MCP Design Choices
Yuval Felendler, Parth A. Gandhi, Idan Habler +2
Model Context Protocols (MCPs) provide a unified platform for agent systems to discover, select, and orchestrate tools across heterogeneous execution environments. As MCP-based sys…
Real-World Adversarial Attacks on RF-Based Drone Detectors
Omer Gazit, Yael Itzhakev, Yuval Elovici +1
Radio frequency (RF) based systems are increasingly used to detect drones by analyzing their RF signal patterns, converting them into spectrogram images which are processed by obje…
AgentGuardian: Learning Access Control Policies to Govern AI Agent Behavior
Nadya Abaev, Denis Klimov, Gerard Levinov +3
Artificial intelligence (AI) agents are increasingly used in a variety of domains to automate tasks, interact with users, and make decisions based on data inputs. Ensuring that AI…
Peacock: UEFI Firmware Runtime Observability Layer for Detection and Response
Hadar Cochavi Gorelik, Orel Fadlon, Denis Klimov +3
Modern computing platforms rely on the Unified Extensible Firmware Interface (UEFI) to initialize hardware and coordinate the transition to the operating system. Because this execu…
SCyTAG: Scalable Cyber-Twin for Threat-Assessment Based on Attack Graphs
David Tayouri, Elad Duani, Abed Showgan +8
Understanding the risks associated with an enterprise environment is the first step toward improving its security. Organizations employ various methods to assess and prioritize the…
MIA-EPT: Membership Inference Attack via Error Prediction for Tabular Data
Eyal German, Daniel Samira, Yuval Elovici +1
Synthetic data generation plays an important role in enabling data sharing, particularly in sensitive domains like healthcare and finance. Recent advances in diffusion models have…
KubeGuard: LLM-Assisted Kubernetes Hardening via Configuration Files and Runtime Logs Analysis
Omri Sgan Cohen, Ehud Malul, Yair Meidan +3
The widespread adoption of Kubernetes (K8s) for orchestrating cloud-native applications has introduced significant security challenges, such as misconfigured resources and overly p…
SoK: Cybersecurity Assessment of Humanoid Ecosystem
Priyanka Prakash Surve, Asaf Shabtai, Yuval Elovici
Humanoids are progressing toward practical deployment across healthcare, industrial, defense, and service sectors. While typically considered cyber-physical systems (CPSs), their d…
LumiMAS: A Comprehensive Framework for Real-Time Monitoring and Enhanced Observability in Multi-Agent Systems
Ron Solomon, Yarin Yerushalmi Levi, Lior Vaknin +8
The incorporation of LLMs in multi-agent systems (MASs) has the potential to significantly improve our ability to autonomously solve complex problems. However, such systems introdu…
Tab-MIA: A Benchmark Dataset for Membership Inference Attacks on Tabular Data in LLMs
Eyal German, Sagiv Antebi, Daniel Samira +2
Large language models (LLMs) are increasingly trained on tabular data, which, unlike unstructured text, often contains personally identifiable information (PII) in a highly structu…
ATAG: AI-Agent Application Threat Assessment with Attack Graphs
Parth Atulbhai Gandhi, Akansha Shukla, David Tayouri +4
Evaluating the security of multi-agent systems (MASs) powered by large language models (LLMs) is challenging, primarily because of the systems' complex internal dynamics and the ev…
FAA Framework: A Large Language Model-Based Approach for Credit Card Fraud Investigations
Shaun Shuster, Eyal Zloof, Asaf Shabtai +1
Credit card fraud mitigation plays a significant role in modern society. While fraud detection systems are essential, they often struggle to keep pace with the constantly evolving…
Mind the Web: The Security of Web Use Agents
Avishag Shapira, Parth Atulbhai Gandhi, Edan Habler +1
Web-use agents are rapidly being deployed to automate complex web tasks with extensive browser capabilities. However, these capabilities create a critical and previously unexplored…
RuleGenie: SIEM Detection Rule Set Optimization
Akansha Shukla, Parth Atulbhai Gandhi, Yuval Elovici +1
SIEM systems serve as a critical hub, employing rule-based logic to detect and respond to threats. Redundant or overlapping rules in SIEM systems lead to excessive false alerts, de…
Rogue Cell: Adversarial Attack and Defense in Untrusted O-RAN Setup Exploiting the Traffic Steering xApp
Eran Aizikovich, Dudu Mimran, Edita Grolman +2
The Open Radio Access Network (O-RAN) architecture is revolutionizing cellular networks with its open, multi-vendor design and AI-driven management, aiming to enhance flexibility a…