arXiv AI By Firas Bayram, Maxime Cordy

Feature-Context Consistency: Unsupervised Adversarial Detection with Drift Stability on Attributed Graphs

Read the original on arXiv AI →

The Flow has not summarised this story yet — read it at arXiv AI.

arXiv AI
Sep 15

A Three-Axis Stress Test of LLM vs Classical ML for Network Intrusion Detection under Distribution Shift and Adversarial Evasion

The study compares XGBoost and RoBERTa‑LoRA for network intrusion detection across three evaluation axes: same‑dataset performance, cross‑dataset transfer, and adversarial evasion. Both models perform similarly on the same dataset, but XGBoost outperforms RoBERTa‑LoRA by 15 F1 points and 25 balanced accuracy points when transferred to a different network, while RoBERTa‑LoRA wins by about 17 F1 points under adversarial evasion. Feature‑leakage ablation shows that cross‑dataset transfer improvements are non‑monotonic and directional, suggesting leakage is spread across features rather than isolated. "whyItMatters":"The findings demonstrate that a model’s superiority depends on the specific robustness axis evaluated, underscoring the need for multi‑axis, multi‑metric testing in network intrusion detection research."

By Muhammad Ebad Atif, Muhammad Haider Ali
arXiv AI
Sep 24

Backdoors Leave Structural Traces: FedMAST for Backdoor Detection and Containment in Federated Learning

The paper introduces FedMAST, a Federated Multi‑Axis Structural Tracing defense designed to detect and contain backdoor attacks in federated learning. FedMAST evaluates client updates through complementary structural, spectral, and historical evidence, applying tiered filtering and round‑level containment. In experiments across six backdoor attacks, FedMAST consistently achieves lower attack success rates while preserving high main‑task accuracy.

By Srinivasan Subramanian, Kazi Aminul Islam, Md. Abdullah Al Hafiz Khan
arXiv Machine Learning
Oct 9

Evi-VN: Hard Region Guided Virtual Node Evidence Injection for GNN-Based Fraud Detection

Evi-VN is a new framework for graph neural network (GNN) fraud detection that injects evidence from diverse modalities—structured records, text, images, and audio—into virtual node representations. It targets shared hard regions where standard GNNs fail to distinguish well‑disguised fraudsters from legitimate users, correcting blind spots without disrupting reliable predictions. Experiments on bot, fake‑review, refund‑evidence, and telecom‑fraud datasets demonstrate its effectiveness across generic, fraud‑specific, and unseen GNNs.

By Jiran Tao, Yifan Wu, Binyan Jiang