paper-with-me

홈 › Papers

Real-time ML-based Defense Against Malicious Payload in Reconfigurable Embedded Systems

2025-09-02 · Rye Stahle-Smith, Rasha Karakchi arxiv

The growing use of FPGAs in reconfigurable systems introducessecurity risks through malicious bitstreams that could cause denial-of-service (DoS), data leakage, or covert attacks. We investigated chip-level hardware malicious payload in embedded systems and proposed a supervised machine learning method to detect malicious bitstreams via static byte-level features. Our approach diverges from existing methods by analyzing bitstreams directly at the binary level, enabling real-time detection without requiring access to source code or netlists. Bitstreams were sourced from state-of-the-art (SOTA) benchmarks and re-engineered to target the Xilinx PYNQ-Z1 FPGA Development Board. Our dataset included 122 samples of benign and malicious configurations. The data were vectorized using byte frequency analysis, compressed using TSVD, and balanced using SMOTE to address class imbalance. The evaluated classifiers demonstrated that Random Forest achieved a macro F1-score of 0.97, underscoring the viability of real-time Trojan detection on resource-constrained systems. The final model was serialized and successfully deployed via PYNQ to enable integrated bitstream analysis.

📄 PDF Abstract BibTeX arXiv:2509.02387

Code (0)

등록된 구현이 없습니다.

Similar Papers 제목 키워드 기반

Invisible Threats from Model Context Protocol: Generating Stealthy Injection Payload via Tree-based Adaptive Search

2026-03-25 · Yulin Shen, Xudong Pan, Geng Hong, Min Yang arxiv

Recent advances in the Model Context Protocol (MCP) have enabled large language models (LLMs) to invoke external tools with unprecedented ease. This creates a new class of powerful and tool augmented agents. Unfortunatel…

Benchmarking Autonomous Agents against Temporal, Spatial, and Semantic Evasions

2026-05-21 · Jianan Ma, Xiaohu Du, Ruixiao Lin, Yaoxiang Bian 외 arxiv

As autonomous agents (e.g., OpenClaw) increasingly operate with deep system-level privileges to execute complex tasks, they introduce severe, unmitigated security risks. Current vulnerability analyses overwhelmingly focu…

EVOMAL: Self-Poisoning in Self-Evolving Coding Agents

2026-08-26 · Xiaodong Wu, Yu Shi, Qi Li, Zhimin Zhao 외 arxiv

Self-evolving LLM coding agents write their own tools by imitating retrieved skills from shared skill libraries. We identify a vulnerability in this loop: during authoring, a retrieved malicious skill can become the temp…

Safe to Check, Unsafe to Use: Relinking at the Compression Boundary of LLM Agents

2026-06-19 · Zesen Liu, Zihan Zhang, Dongdong She arxiv

Summarization-based prompt compression is increasingly used by LLM agents to shorten long, distributed contexts, but it shifts the security boundary: filters inspect the pre-compression prompt while the backend acts on a…

AegisUI: Behavioral Anomaly Detection for Structured User Interface Protocols in AI Agent Systems

2026-03-05 · Mohd Safwan Uddin, Saba Hajira arxiv

AI agents that build user interfaces on the fly assembling buttons, forms, and data displays from structured protocol payloads are becoming common in production systems. The trouble is that a payload can pass every schem…

Anomaly Detection