arXiv Machine Learning By Ryan Swift

CPU-Auth: Device Fingerprinting for Authentication via DVFS Side-Channel

Read the original on arXiv Machine Learning →

CPU-Auth is a novel authentication method that uses unique variations in a device’s CPU, measured via the Dynamic Voltage and Frequency Scaling (DVFS) governor from a browser, to create a hardware-based device fingerprint. The approach is evaluated on over 50,000 data traces using distance‑based and deep learning techniques. The study highlights how CPU-Auth could serve as a secondary authentication factor, addressing flaws in existing methods such as SMS, biometrics, and token‑based systems.

Machine-generated by The Flow from the publisher's headline and feed description — not written or checked by a human. The full article lives at arXiv Machine Learning.

arXiv Computer Vision
Aug 28

Binding Biometrics with AI Agent Identifiers for Delegation of Authority

The paper introduces BIND, a framework that binds a human’s biometric data to an AI agent’s identity and task-specific authority, enabling secure, real‑time delegation of control. By generating a token that an AI agent presents to an Identity Auditor, the system performs biometric authentication and recovers the agent’s ID and scope, providing non‑repudiable proof of human oversight. A practical implementation using face features and a fuzzy commitment scheme with turbo error‑correcting codes achieves a 96% true match rate at zero false match rate and supports 1024‑bit agent tokens.

By Joseph Geo Benjamin, Anil K Jain, Karthik Nandakumar
arXiv Machine Learning
Aug 24

RouteScan: A Non-Intrusive Approach to Auditing MoE LLMs Safety via Expert Routing Telemetry

RouteScan is a non‑intrusive auditing framework that detects harmful behavior in Mixture‑of‑Experts (MoE) large language models by analyzing expert‑routing telemetry captured from GPU execution. It uses the number of active GPU threads during the prefilling phase as a micro‑architectural fingerprint to isolate cross‑domain risk indicators and precisely identify malicious prompts. Evaluations on four open‑source MoE LLMs show strong generalization with AUROC > 0.91 on unseen harmful domains, while privacy tests indicate that full prompts cannot be reliably recovered from aggregated telemetry.

By Bo Lv, Zhiheng Xu, KeDong Xiu, Ruyi Ding, Tianhang Zheng, Zhibo Wang, Kui Ren