Collaborative Streaming Anomaly Detection with Interactive Explanations and Ensemble Consensus
该研究提出了一种结合人类分析师的协作流式异常检测系统,通过集成异构检测器和基于归一化的加权共识来处理高速数据流中的异常检测问题。
该研究提出了一种结合人类分析师的协作流式异常检测系统,通过集成异构检测器和基于归一化的加权共识来处理高速数据流中的异常检测问题。
研究针对RAG系统的分布式攻击,通过在多个文档中分散虚假信息而非集中于一处,评估了不同配置下的攻击效果及防御策略。
This work addresses the gap in machine unlearning research by introducing XGBoost-Forget, the first unlearning method tailored for XGBoost models in tabular network intrusion detection scenarios. Unlike existing approaches primarily designed for deep learning and image data, XGBoost-Forget efficiently removes specified intrusion data points without requiring full model retraining. The method incorporates a customized unlearning mechanism specifically designed for tabular network traffic data and is validated on real-world datasets such as IoT-23 and GeNIS. Experimental results demonstrate that XGBoost-Forget achieves substantial gains in unlearning efficiency while preserving predictive performance nearly equivalent to that of the original model, thereby offering a practical unlearning solution for security applications driven by tabular data.
This study systematically investigates the sources of vulnerability in Retrieval-Augmented Generation (RAG) systems under poisoning attacks. Through a comprehensive full-factorial experiment encompassing 432 configurations, it evaluates the impact of datasets, retriever types (dense, graph-based, and BM25), retrieval depth, knowledge base composition, chunking strategies, and generation models on system robustness. The findings reveal that RAG’s susceptibility arises from complex interactions among retrieval, generation, and knowledge base configurations rather than from any single component’s deficiency. Dense and graph-based retrievers significantly outperform BM25, while increasing retrieval depth or replicating poisoned content across multiple knowledge sources substantially elevates attack success rates. Conversely, incorporating clean data from diverse sources effectively mitigates such attacks. This work is the first to uncover the key factors governing RAG’s robustness against poisoning and their underlying coupling mechanisms.
This work addresses a critical vulnerability in existing homomorphic encryption–based federated learning (HHE-FL) systems, which rely on a single key pair and are thus susceptible to privacy breaches by malicious clients. To mitigate this risk, the paper introduces two novel key protection mechanisms—homomorphic masking and RSA-based public-key encapsulation—thereby elevating the security of HHE-FL to a strong threat model resilient against adversarial participants for the first time. The proposed methods are implemented within the Flower framework using the PASTA/BFV hybrid homomorphic encryption scheme. Experimental evaluation on MNIST with 12 clients demonstrates that both mechanisms preserve model accuracy while incurring minimal overhead: homomorphic masking adds negligible computational cost, and RSA encapsulation introduces only modest communication and runtime overhead.
该研究提出了一种结合人类分析师的协作流式异常检测系统,通过集成异构检测器和基于归一化的加权共识来处理高速数据流中的异常检测问题。
研究针对RAG系统的分布式攻击,通过在多个文档中分散虚假信息而非集中于一处,评估了不同配置下的攻击效果及防御策略。
This work addresses the gap in machine unlearning research by introducing XGBoost-Forget, the first unlearning method tailored for XGBoost models in tabular network intrusion detection scenarios. Unlike existing approaches primarily designed for deep learning and image data, XGBoost-Forget efficiently removes specified intrusion data points without requiring full model retraining. The method incorporates a customized unlearning mechanism specifically designed for tabular network traffic data and is validated on real-world datasets such as IoT-23 and GeNIS. Experimental results demonstrate that XGBoost-Forget achieves substantial gains in unlearning efficiency while preserving predictive performance nearly equivalent to that of the original model, thereby offering a practical unlearning solution for security applications driven by tabular data.
This study systematically investigates the sources of vulnerability in Retrieval-Augmented Generation (RAG) systems under poisoning attacks. Through a comprehensive full-factorial experiment encompassing 432 configurations, it evaluates the impact of datasets, retriever types (dense, graph-based, and BM25), retrieval depth, knowledge base composition, chunking strategies, and generation models on system robustness. The findings reveal that RAG’s susceptibility arises from complex interactions among retrieval, generation, and knowledge base configurations rather than from any single component’s deficiency. Dense and graph-based retrievers significantly outperform BM25, while increasing retrieval depth or replicating poisoned content across multiple knowledge sources substantially elevates attack success rates. Conversely, incorporating clean data from diverse sources effectively mitigates such attacks. This work is the first to uncover the key factors governing RAG’s robustness against poisoning and their underlying coupling mechanisms.
This work addresses a critical vulnerability in existing homomorphic encryption–based federated learning (HHE-FL) systems, which rely on a single key pair and are thus susceptible to privacy breaches by malicious clients. To mitigate this risk, the paper introduces two novel key protection mechanisms—homomorphic masking and RSA-based public-key encapsulation—thereby elevating the security of HHE-FL to a strong threat model resilient against adversarial participants for the first time. The proposed methods are implemented within the Flower framework using the PASTA/BFV hybrid homomorphic encryption scheme. Experimental evaluation on MNIST with 12 clients demonstrates that both mechanisms preserve model accuracy while incurring minimal overhead: homomorphic masking adds negligible computational cost, and RSA encapsulation introduces only modest communication and runtime overhead.