certificate-of-compromise

Сертификат компрометации SoK/Документация по наступательным операциям против службы сертификации Active Directory v1.0.0 Живой документ и вклад сообщества Этот документ — живой документ. Исследования ADCS не статичны: методы получают исправления, открываются новые условия, а анализ сообщества...

A SoK for SoCs: Reading the TI Leaves on AI for Cyber Threat Intelligence Generation and Sharing

Cyber Threat Intelligence CTI is essential for defending mission-critical infrastructure, yet the process of transforming raw attack evidence into shareable CTI remains fragmented and understudied. We conduct a literature survey of academic papers, organizing the CTI lifecycle into three stages:...

SoK: Federated Learning for Intrusion Detection in Vehicular Networks

Modern vehicular networks face an expanding attack surface across internal Electronic Control Units ECUs and external Vehicle-to-Everything V2X communication. Federated Learning FL has emerged as a decentralized paradigm to deploy Intrusion Detection Systems IDS without compromising data privacy...

SoK: Security and Privacy of Foundation-Model-Powered Robots

Foundation models are reshaping robotics by enabling robots to interpret open-ended instructions, reason over multimodal contexts, and operate in complex, open-world environments. However, their integration also introduces security and privacy S&P risks that extend beyond the FMs themselves to...

Hackers or Hallucinators? A Comprehensive Analysis of LLM-Based Automated Penetration Testing

The rapid advancement of Large Language Models LLMs has created new opportunities for Automated Penetration Testing AutoPT, spawning numerous frameworks aimed at achieving end-to-end autonomous attacks. However, despite the proliferation of related studies, existing research generally lacks...

A Taxonomy of Attacks and Defenses in Split Learning

Split Learning SL has emerged as a promising paradigm for distributed deep learning, allowing resource-constrained clients to offload portions of their model computation to servers while maintaining collaborative learning. However, recent research has demonstrated that SL remains vulnerable to a...

Arbitrary File Deletion Vulnerability in Library Cluster Management System of Guangzhou Tutron Computer Software Development Co. Ltd (CNVD-2021-51296)

Guangzhou Tutron Computer Software Development Co., Ltd. is the leader of all kinds of library service systemization construction software, is a high-tech enterprise integrating consulting service, product development, application integration, digital resource service, form design and technical...