arXiv AI

SIDE: Sensor Impersonation Detection at the Edge via Sequence Prediction

arXiv Machine Learning
Sep 4

Selfie-Capture Dynamics as an Auxiliary Signal Against Deepfakes and Injection Attacks for Mobile Identity Verification

The paper investigates whether passive motion traces recorded during selfie capture can serve as an auxiliary signal for detecting spoofing and verifying users in mobile remote identity verification systems. It introduces the CanSelfie dataset, comprising 375 multi‑sensor sequences from 30 participants, and evaluates seven time‑series classifiers and eight anomaly detectors across various sensor configurations. Results show that accelerometer‑only classifiers achieve very low false rejection rates, while certain models achieve low false acceptance rates and high verification accuracy, indicating that selfie‑capture motion is a promising low‑friction evidence channel.

By Erkka Rantahalvari, Olli Silv\'en, Zinelabidine Boulkenafet, Constantino \'Alvarez Casado
arXiv Statistics ML
Sep 10

Accountable and uncertainty-aware evaluation of sensor-based AI under distribution shift: devices, subjects, and nearly three years underground

arXiv:2609.09257v1 Announce Type: cross Abstract: Sensor-based AI systems are rarely operated under the conditions under which they were trained: devices, personnel and recording epochs change, and e...

By Benny Platte (Mittweida University of Applied Sciences), Rico Thomanek (Mittweida University of Applied Sciences), Christian Roschke (Mittweida University of Applied Sciences), Marc Ritter (Mittweida University of Applied Sciences)
arXiv Machine Learning
Jun 16

Continual Backdoor Training in IoT/CPS

arXiv:2606. 14987v1 Announce Type: cross Abstract: Internet of Things (IoT) and Cyber-physical systems (CPS) increasingly rely on continual learning (CL) to adapt to evolving environments, device heterogeneity, and concept drift, thereby improving overall utility.

By Oxana Salish, Kuniyilh S
arXiv Machine Learning
Sep 7

Privacy Failure in Split-LLM Training, The Returned Gradient Nullifies the Decoys

The paper reports a privacy breach in a two-node split‑LLM training system where the returned gradient reveals which data rows were real, despite the system passing standard privacy checks. By exploiting the fact that decoy rows produce zero gradients, an attacker can identify real rows with 100% accuracy across multiple runs. The authors demonstrate that adding gradient clipping and noise can mitigate the leak, but the system remains vulnerable to several untested attack vectors.

By Georgios Politis, Evangelos Pappas
arXiv AI
Jul 14

Closing the Loop: An Access-Control Architecture for Automated, Anomaly-Driven Network Revocation in IoT Deployments

arXiv:2607. 11649v1 Announce Type: cross Abstract: Network-based anomaly detection for IoT devices has matured to the point of reporting strong detection accuracy, yet most published systems stop at raising an alert and leave the question of automated enforcement to future work or to a programmable data plane that few real networks operate.

By Muhammet Emir Korkmaz, Kemal Bicakci, Yusuf Uzunay
arXiv Machine Learning
Sep 4

Privacy Leakage in Federated Learning: Gradient-Based Client Identity Inference and Defenses for Inertial Sensing in Vehicular Edge Networks

The paper investigates how federated learning (FL) updates in vehicular edge networks can reveal client identities through gradient-based attacks on inertial sensor data, using the UCI Human Activity Recognition benchmark as a proxy. Experiments show that an honest-but-curious server can identify clients with near-perfect accuracy from unprotected updates. The authors evaluate lightweight defenses—clipping followed by Gaussian noise and ensemble FL—to mitigate this privacy risk while preserving model utility, reporting differential‑privacy budgets and empirical results across multiple attack classifiers and data partitions.

By Ali Akarma (Islamic University of Madinah, Madinah, Saudi Arabia, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia), Toqeer Ali Syed (Islamic University of Madinah, Madinah, Saudi Arabia), Muhammad Khan (University of the West of England, Bristol, U.K), Qurat-ul-ain Mastoi (University of the West of England, Bristol, U.K), Adeel Ahmad (Islamic University of Madinah, Madinah, Saudi Arabia)