arXiv AI September 10, 2026 By Heba Osama, Zeyad Ahmed, Mohamed Amgad, Ahmed Saafan, Jana Elfeky, Mariam Abdelati, Haitham Ghalwash

WAPP: Safe Learning of Positive Security WAF Policies from Live Traffic

Read the original on arXiv AI →

The paper introduces WAPP, a framework for safely learning positive security Web Application Firewall (WAF) policies from live traffic. It combines trust filtering, deterministic rule synthesis, confidence scoring, and validation to protect against poisoned training data. Experiments on controlled applications show that WAPP improves poisoning resilience and blocks confirmed CRS bypasses, though free‑text fields still pose precision challenges.

Machine-generated by The Flow from the publisher's headline and feed description — not written or checked by a human. The full article lives at arXiv AI.

arXiv Machine Learning

2d ago

ModSec-Learn: Boosting ModSecurity with Machine Learning

arXiv:2406.13547v2 Announce Type: replace Abstract: ModSecurity is widely recognized as the standard open-source Web Application Firewall (WAF), maintained by the OWASP Foundation. It detects malicio...

By Christian Scano, Giuseppe Floris, Biagio Montaruli, Luca Demetrio, Andrea Valenza, Luca Compagna, Davide Ariu, Luca Piras, Davide Balzarotti, Battista Biggio

arXiv AI

Jun 9

Safe-RULE: Safe Reinforcement UnLEarning

arXiv:2606. 09559v1 Announce Type: cross Abstract: Offline safe reinforcement learning (Safe RL) enables policy learning without online interactions, making it suitable for safety-critical systems such as robotics systems.

By Shixiong Jiang, Taozheng Zhu, Fanxin Kong

reinforcement-learning robotics benchmarks safety

arXiv Computation and Language

Aug 27

A Layered Security Framework Against Prompt Injection in RAG-Based Chatbots

The paper introduces a three‑layer security framework designed to protect retrieval‑augmented generation (RAG) chatbots from both direct and indirect prompt injection attacks. Layer 1 filters user input with rule‑based patterns and a semantic anomaly classifier; Layer 2 enforces a provenance‑based instruction hierarchy during context assembly; Layer 3 audits model output with a policy rule engine and semantic drift detector. Evaluations on GPT‑4o, Llama 3, and Mistral 7B demonstrate a reduction in attack success rate from 71.4 % to 11.3 %, outperforming existing single‑layer defenses while keeping false positives low and latency acceptable.

By Gulshan Saleem, Nisar Ahmed, Muhammad Imran Zaman, Ali Hassan, Umar Mujahid

llms rag fine-tuning multimodal benchmarks safety

arXiv AI

Sep 10

SRD-GUARD: A Defense Framework of LLMs via Semantic Rewriting and Joint Multi-Model Scoring for Latent Intent Exposure

arXiv:2609.06540v1 Announce Type: cross Abstract: Large language models (LLMs) are increasingly deployed in safety-critical applications, yet jailbreak attacks can conceal harmful intent through role...

By Qi Wang, Chengcheng Wan, Jiangtao Wang

llms benchmarks safety

arXiv AI

Jun 6

GenTI: Benchmarking LLMs for Autonomous IDPS Rule Generation for Unseen Attacks

arXiv:2606. 05844v1 Announce Type: cross Abstract: Rule-based Intrusion Detection and Prevention Systems (IDPS) offer precise attack detection as well as mitigation, however their manually crafted, signature-driven rules limit adaptability to emerging and zero-day threats.

By Hassan Jalil Hadi, Rehana Yasmin, Ali Shoker

llms agents benchmarks

arXiv Machine Learning

Jul 30

Adaptively Robust LLM Monitoring via Activation Watermarking

arXiv:2603. 23171v3 Announce Type: replace-cross Abstract: Providers monitor deployed large language models (LLMs) to detect misuse that they cannot prevent.

By Toluwani Aremu, Daniil Ognev, Samuele Poppi, Nils Lukas

llms fine-tuning benchmarks safety

One email a morning, machine-written

Related stories

ModSec-Learn: Boosting ModSecurity with Machine Learning

Safe-RULE: Safe Reinforcement UnLEarning

A Layered Security Framework Against Prompt Injection in RAG-Based Chatbots

SRD-GUARD: A Defense Framework of LLMs via Semantic Rewriting and Joint Multi-Model Scoring for Latent Intent Exposure

GenTI: Benchmarking LLMs for Autonomous IDPS Rule Generation for Unseen Attacks

Adaptively Robust LLM Monitoring via Activation Watermarking