arXiv Machine Learning
Jul 13
Regression-aware Continual Learning for Android Malware Detection
arXiv:2507. 18313v2 Announce Type: replace Abstract: Malware evolves rapidly, forcing machine learning-based detectors to be continuously updated.
Continual Backdoor Training in IoT/CPS
arXiv:2606. 14987v1 Announce Type: cross Abstract: Internet of Things (IoT) and Cyber-physical systems (CPS) increasingly rely on continual learning (CL) to adapt to evolving environments, device heterogeneity, and concept drift, thereby improving overall utility.
Related stories
arXiv AI
Jul 1
An AI-Based Solution for Secure Service Provisioning in IoT
arXiv:2606. 30701v1 Announce Type: cross Abstract: As the Internet of Things (IoT) continues its rapid expansion, the attack surface grows accordingly, with emerging threats targeting smart objects and their interactions.
arXiv Machine Learning
Sep 24
Reliable Federated TinyML Deployment for IoT Security
The paper explores how to combine Federated Learning with TinyML model compression techniques—such as knowledge distillation, structured pruning, and quantization—to create lightweight, privacy‑preserving intrusion detection systems for IoT devices. It evaluates these strategies within a federated training pipeline and finds that training stability is crucial; a server‑coordinated cosine learning‑rate schedule boosts Attack Recall from 46.7% to 93.85% while still allowing significant model compression and efficient edge deployment.
arXiv Machine Learning
Sep 10
Robust Dynamic Expansion for Continual Learning under Backdoor Attacks via Purification and Selective Recovery
arXiv:2609.06346v1 Announce Type: new Abstract: Continual learning (CL) enables models to acquire new knowledge from sequentially arriving tasks while retaining previously learned knowledge. However,...
arXiv AI
Aug 25
Adapter-Based Few-Shot Continual Learning for Malicious Packet Recognition
The paper addresses the challenge of adapting malware detection systems to new threats without retraining from scratch, focusing on the Few-Shot Class-Incremental Learning (FSCIL) setting. It proposes a hybrid framework that uses a self-supervised learning backbone pre-trained on malware packets, incorporates Low-Rank Adaptation (LoRA) to adapt the model while preserving core representations, and employs a prototype-based classification head for incremental sessions. Experiments on multiple datasets show that this approach consistently outperforms existing FSCIL baselines and achieves state-of-the-art performance.
arXiv AI
Aug 18
Retrofit: Continual Learning with Controlled Forgetting for Binary Security Detection and Analysis
arXiv:2511. 11439v3 Announce Type: replace-cross Abstract: Binary security has increasingly relied on deep learning to reason about malware behavior and program semantics.
arXiv AI
Jul 14
Closing the Loop: An Access-Control Architecture for Automated, Anomaly-Driven Network Revocation in IoT Deployments
arXiv:2607. 11649v1 Announce Type: cross Abstract: Network-based anomaly detection for IoT devices has matured to the point of reporting strong detection accuracy, yet most published systems stop at raising an alert and leave the question of automated enforcement to future work or to a programmable data plane that few real networks operate.
arXiv AI
Aug 21
Teacher-free Latent Self-distillation and Class-separable Representations for Lightweight IoT Attack Detection
arXiv:2403. 15509v3 Announce Type: replace-cross Abstract: Knowledge distillation (KD) has been widely used to improve lightweight AI models by transferring soft-label knowledge from a large teacher model to a student model.
Hugging Face Trending Papers
Jun 17
Lifecycle-Aware Dynamic Analysis for Secure ML Model Execution
The growing reliance on pre-trained Machine Learning (ML) models has introduced new attack surfaces. Recent vulnerabilities demonstrate that malicious behavior can be embedded within model artifacts, often bypassing existing defenses.
arXiv AI
Jun 9
Model Poisoning Against Federated Model Adaptation with Chain of Bit-Flips
arXiv:2606. 09548v1 Announce Type: cross Abstract: Federated Learning (FL) allows a set of clients to collectively train a global model without sharing local training data.
arXiv Machine Learning
Jun 18
Lifecycle-Aware Dynamic Analysis for Secure ML Model Execution
arXiv:2606. 19023v1 Announce Type: cross Abstract: The growing reliance on pre-trained Machine Learning (ML) models has introduced new attack surfaces.
arXiv AI
Jul 23
OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks
arXiv:2607. 19351v1 Announce Type: new Abstract: LLM-based multi-agent systems (LLM-MAS) are increasingly deployed in safety-critical applications, where adversaries inject malicious instructions through inter-agent communication to propagate harmful behaviors.