Federated Learning (FL) over 5G cellular networks protects raw data but remains vulnerable to side-channel leakage. Prior fingerprinting attacks assume packet-level network visibility, an assumption that does not hold at the 5G Physical (PHY) layer, where user payloads are encrypted and Radio Network Temporary Identifiers (RNTIs) may change over time.
The paper introduces SAFA-MZ, a secure adaptive framework for physical‑layer authentication in non‑terrestrial networks. It fuses multiple spatial, angular, combiner, subspace, and Doppler‑delay features into a distributed fingerprint and employs a causal meta‑learning strategy with invariant risk minimization to adapt quickly to new environments. A two‑stage authentication process combines local recognition with selective TDOA localization using a graph attention network, reducing backhaul overhead while achieving 92% accuracy and 96% AUC in simulations.
By Parsa Rajabi, Mohammad Reza Abedi, Nader Mokari, Paeiz Azmi, Halim Yanikomeroglu
The paper proposes a Learnware-based framework for deploying scene‑specific CSI feedback models in 6G systems. A centralized AI data center maintains a catalog of pre‑trained models, each tagged with semantic and statistical specifications. Base stations retrieve the most relevant model using only statistical fingerprints, which reduces data privacy risks, lowers retrieval latency, and cuts fine‑tuning effort, achieving up to 57.7% performance gains over a general model.
By Xiangyi Li, Jiajia Guo, Chao-Kai Wen, Xin Geng, Shi Jin, Zhi-Hua Zhou
The paper presents a channel-informed neural network for physical-layer key generation (PKG) that extracts binary key features directly from IQ measurements while grounding the representation in the multipath channel. The multi-task recurrent network jointly learns reciprocity-preserving features and an auxiliary channel estimate, using deep metric learning and channel-informed supervision. Experiments on indoor and outdoor software-defined-radio data show lower bit disagreement for legitimate users, improved key diversity with ray-traced augmentation, and successful NIST randomness tests after SHA-3 privacy amplification.
By Jose Angel Sanchez Viloria, George Sklivanitis, Dimitris Pados, Elizabeth Serena Bentley
arXiv:2606. 07857v1 Announce Type: cross Abstract: The rise of edge-based machine learning has enabled distributed adaptation of language models across mobile and IoT devices, offering privacy preservation and real-time responsiveness.
By Stefan Behfar, Richard Mortier
arXiv:2510. 13817v2 Announce Type: replace Abstract: The growth of IoT devices in shared environments has outpaced our ability to identify them, posing urgent risks to privacy, safety, and accountability.
By Rameen Mahmood, Tousif Ahmed, Sai Teja Peddinti, Danny Yuxing Huang
arXiv:2607. 01313v1 Announce Type: cross Abstract: In practice, most commercial LLM providers do not publicly release details of underlying LLM architectures.
By Christopher Ellis, Shreyas Chaudhari, Mei-Yu Wang, Leighton Barnes, Giulia Fanti, Jos\'e M. F. Moura
arXiv:2608. 14591v1 Announce Type: cross Abstract: The integration of artificial intelligence (AI) and wireless communications is widely regarded as a core objective of sixth-generation (6G) systems.
By Shugong Xu, Jun Jiang, Yuan Gao
arXiv:2607. 09798v1 Announce Type: cross Abstract: Sixth-generation (6G) networks are moving toward AI-native operation, where learning modules are embedded across the radio access network (RAN), edge, and core.
By Sheikh Salman Hassan, Irshad A. Meer, Almoatssimbillah Saifaldawla, Yan Kyaw Tun, Mustafa Ozger, Madyan Alsenwi, Nguyen Van Huynh, Woong-Hee Lee, Cedomir Stefanovic, Mathini Sellathurai, Henk Wymeersch, Tharmalingam Ratnarajah
The paper investigates how federated learning (FL) updates in vehicular edge networks can reveal client identities through gradient-based attacks on inertial sensor data, using the UCI Human Activity Recognition benchmark as a proxy. Experiments show that an honest-but-curious server can identify clients with near-perfect accuracy from unprotected updates. The authors evaluate lightweight defenses—clipping followed by Gaussian noise and ensemble FL—to mitigate this privacy risk while preserving model utility, reporting differential‑privacy budgets and empirical results across multiple attack classifiers and data partitions.
By Ali Akarma (Islamic University of Madinah, Madinah, Saudi Arabia, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia), Toqeer Ali Syed (Islamic University of Madinah, Madinah, Saudi Arabia), Muhammad Khan (University of the West of England, Bristol, U.K), Qurat-ul-ain Mastoi (University of the West of England, Bristol, U.K), Adeel Ahmad (Islamic University of Madinah, Madinah, Saudi Arabia)
arXiv:2606. 00155v1 Announce Type: cross Abstract: Modern network intrusion detection systems (NIDS) are caught in a structural contradiction: the protocols carrying the highest threat intelligence are precisely those encrypted under TLS 1.
By Vivek Kumar Sharma
arXiv:2304. 03388v2 Announce Type: replace Abstract: Deep Neural Networks (DNNs) have become ubiquitous for their ability to solve problems across various domains, including computer vision, natural language processing, and speech recognition.
By Raja Hasnain Anwar, Jonah O'Brien Weiss, Tiago Alves, Sandip Kundu