arXiv AI

From Network Intrusion Detection to Blockchain-Backed Endpoint Detection and Response: Mapping the Landscape of Decentralized Detection-and-Response Architectures

This paper reviews blockchain-assisted intrusion detection and prevention systems for IoT and IIoT, noting that prior studies ignore the shift toward modern Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR) architectures and lump blockchain’s roles together. It proposes a three‑axis taxonomy—detection‑system class, blockchain functional role, and response‑automation maturity—to classify recent research (2019‑2026). The authors identify gaps such as the lack of per‑endpoint blockchain‑anchored response loops due to latency, deployment, and community mismatches, and highlight cross‑cutting challenges like consensus latency, post‑quantum cryptography, smart‑contract vulnerabilities, and LLM‑based detection risks, concluding with a research agenda for hybrid on‑chain/off‑chain orchestration.

arXiv AI
Sep 25

Blockchain-Enabled Artificial Intelligence and AI Agents for Secure Data Sharing and Cybersecurity Applications

The paper reviews four studies that combine blockchain and AI to secure data sharing, model integrity, and autonomous decision-making in distributed systems. It highlights how blockchain’s immutability, decentralized consensus, and verifiable provenance can address trust gaps in training data, real‑time monitoring, and automated code remediation. The authors propose a layered architecture integrating hardened models, blockchain‑anchored provenance, AI anomaly detection, and smart‑contract‑governed multi‑agent remediation, and outline open challenges in scalability, privacy‑transparency trade‑offs, and governance.

By Harsh Verma
arXiv AI
Jul 3

Generative AI and Federated Learning for Intrusion Detection Systems: A Survey

arXiv:2607. 01305v1 Announce Type: cross Abstract: Intrusion Detection Systems (IDSs) are essential for monitoring network traffic and identifying malicious activities in modern cyber-physical, Internet of Things (IoT), enterprise, and distributed network environments.

By Jiefei Liu, Abu Saleh Md Tayeen, Pratyay Kumar, Qixu Gong, Wenbin Jiang, Huiping Cao, Satyajayant Misra, Jayashree Harikumar
arXiv AI
Jun 9

Blockchain Infrastructure for Intelligent Cyber--Physical--Social Systems:Post-Quantum Security, Interoperability, and Trustworthy Data Economies in the Era of Embodied AI

arXiv:2606. 06895v1 Announce Type: cross Abstract: The deployment of embodied artificial intelligence via world-model-based robotics presents a transformative opportunity for blockchain infrastructure, establishing urgent demand for trustworthy data provenance, cross-organizational governance, and incentive-compatible sharing across decentralized ecosystems.

By Song Guo, Huawei Huang, Dongping Liu, Aoyu Zhang, Luyao Zhang
arXiv AI
Aug 19

When Agents Act on Web3: An Attack-Surface Survey of MCP, Skills, and Tool Calling

The paper surveys the growing use of AI agents that modify external state via the Model Context Protocol (MCP) ecosystem, noting an increase from 27% to 65% of tool use. It argues that when such agents operate on public blockchains, the blockchain execution layer’s properties—irreversibility, signing authority, continuous autonomy, and sequence-level composition—reshape the threat model, making failures irreversible. The authors organize existing MCP-security literature into an attack-surface taxonomy, present a Web3 risk-mapping matrix linking attack classes to amplified impacts and mitigations, and conclude that current defenses are inadequate, stopping fewer than 30% of attacks and less than 3% of model-level safety failures. whyItMatters":"The study highlights that AI agents acting on Web3 introduce irreversible risks that conventional software security cannot address, underscoring the need for stronger, blockchain-aware safeguards."

By Rabimba Karanjai (Larry), Yang Lu (Larry), Nour Diallo (Larry), Wujie Xiong (Larry), Lei Xu (Larry), Weidong (Larry), Shi
arXiv AI
Jul 9

Large Language Models (LLMs) and Generative AI in Cybersecurity and Privacy: A Survey of Dual-Use Risks, AI-Generated Malware, Explainability, and Defensive Strategies

arXiv:2607. 06963v1 Announce Type: cross Abstract: Large Language Models (LLMs) and generative AI (GenAI) systems, such as ChatGPT, Claude, Gemini, LLaMA, Copilot, Stable Diffusion by OpenAI, Anthropic, Google, Meta, Microsoft, Stability AI, respectively, are revolutionizing cybersecurity, enabling both automated defense and sophisticated attacks.

By Kiarash Ahi, Saeed Valizadeh
Hugging Face Trending Papers
Jul 8

Large Language Models (LLMs) and Generative AI in Cybersecurity and Privacy: A Survey of Dual-Use Risks, AI-Generated Malware, Explainability, and Defensive Strategies

Large Language Models (LLMs) and generative AI (GenAI) systems, such as ChatGPT, Claude, Gemini, LLaMA, Copilot, Stable Diffusion by OpenAI, Anthropic, Google, Meta, Microsoft, Stability AI, respectively, are revolutionizing cybersecurity, enabling both automated defense and sophisticated attacks. These technologies power real-time threat detection, phishing defense, secure code generation, and vulnerability exploitation at unprecedented scales.

arXiv AI
Jul 14

Closing the Loop: An Access-Control Architecture for Automated, Anomaly-Driven Network Revocation in IoT Deployments

arXiv:2607. 11649v1 Announce Type: cross Abstract: Network-based anomaly detection for IoT devices has matured to the point of reporting strong detection accuracy, yet most published systems stop at raising an alert and leave the question of automated enforcement to future work or to a programmable data plane that few real networks operate.

By Muhammet Emir Korkmaz, Kemal Bicakci, Yusuf Uzunay
arXiv Machine Learning
Sep 14

Self-Verifying Anomaly Detection using Explainable AI for Cybersecurity of DER Networks

The paper introduces ExCYDER, an explainable AI framework for anomaly detection in Distributed Energy Resource (DER) networks. It combines LightGBM with SHAP to self-verify alerts, ensuring that each detection aligns with feature‑attribution evidence. Experiments on a realistic DNP3 dataset show over 98% detection accuracy, 44.6% rule‑SHAP consistency, 14.5 ms SHAP latency per alert, and minimal confidence deviation, while distinguishing coherent from inconsistent alerts without sacrificing accuracy.

By Damilola Popoola, Souradeep Bhattacharya, Manimaran Govindarasu
arXiv Machine Learning
Jun 18

Automated Byzantine-Resilient Clustered Decentralized Federated Learning for Battery Intelligence in Connected EVs

arXiv:2605. 21115v2 Announce Type: replace-cross Abstract: Federated learning (FL) has emerged as a promising paradigm for managing electric vehicle (EV) battery data in intelligent transportation systems (ITS), enabling privacy-preserving tasks such as anomaly detection and capacity estimation.

By Mouhamed Amine Bouchiha, Abdelaziz Amara Korba, Yacine Ghamri-Doudane
arXiv Machine Learning
Jun 29

Decentralized Orchestration Architecture for Fluid Computing: A Secure Distributed AI Use Case

arXiv:2603. 12001v2 Announce Type: replace-cross Abstract: Distributed AI and IoT applications increasingly execute across heterogeneous resources spanning end devices, edge/fog infrastructure, and cloud platforms, often under different administrative domains.

By Diego Cajaraville-Aboy, Ana Fern\'andez-Vilas, Rebeca P. D\'iaz-Redondo, Manuel Fern\'andez-Veiga, Pablo Picallo-L\'opez