cs.CR · 2026-09-03 · No. 104

Cryptography and Security, 2026-09-03.

6 new papers in cs.CR. Titles, authors, abstracts. Links to arXiv. Want this in your inbox every morning? Subscribe →

01 — The papers

6 entries
  1. 01

    When Does Authorization End? Effect Closure at Provider Boundaries

    Igor Santos-Grueiro

    cs.CR · cs.DC

    Revocation completion, clean state, or operation success can leave authorized work able to cause an effect the application rejects while the provider stays within its contract. We call the absence of all such paths policy-relative effect closure, or effect closure for short. Thus, a grant is closed when its existing authorizations retain no such path, and it cannot issue any new ones. We present EFFECTBOUND, which uses an evidence-supported...

    arxiv.org/abs/2609.02866 · PDF

  2. 02

    CodePoisonRAG: Knowledge Poisoning Attacks on Retrieval-Augmented Code Generation

    Varun Gadey, Ziad Marey, Alexandra Dmitrienko

    cs.CR · cs.LG

    Retrieval-Augmented Code Generation (RACG) improves LLM-based software development by retrieving external code artifacts, documentation, and patches, and incorporating them into the generation context. This reliance on external knowledge introduces a critical trust boundary: poisoned artifacts can influence generated code without modifying the underlying LLM. Prior work shows that selecting existing vulnerable examples can increase the...

    arxiv.org/abs/2609.02774 · PDF

  3. 03

    SPADE: SPaT Attack Detection from the Connected Vehicle's Perspective

    James Di Novo, Hany Ragab, Sylvain P. Leblanc

    cs.CR · cs.LG

    Signal Phase and Timing (SPaT) messages are a cornerstone of connected vehicle (CV) safety, enabling CVs to perceive and respond to intersection state through Vehicle-to-Infrastructure (V2I) and Vehicle-to-Vehicle (V2V) communication. The integrity of these messages is threatened by a range of application-layer attacks that can bypass conventional authentication when a roadside unit or peer vehicle is compromised. Existing intrusion detection...

    arxiv.org/abs/2609.02741 · PDF

  4. 04

    Learning-Based Reconstruction Attacks on Coordinate-Obfuscated Point Clouds

    Mohammad Waquas Usmani, Susmit Shannigrahi, Michael Zink

    cs.CR · cs.LG

    Volumetric video based on point cloud representations enables immersive virtual and augmented reality applications but introduces significant challenges for efficient and secure content delivery. Prior work proposed a selective coordinate encryption framework for point clouds that encrypts only a subset of coordinates, reducing computational costs while visually degrading unauthorized content. However, it remains unclear whether the remaining...

    arxiv.org/abs/2609.02568 · PDF

  5. 05

    Retrosynthesis of Synthetic Media for Explainable AI Provenance Forensics

    Yijie Lin, Ching-Chun Chang, Isao Echizen, Hui Li, Chin-Chen Chang

    cs.CR · cs.AI · cs.CV · cs.MM

    With the rapid proliferation of generative models on Machine Learning as a Service (MLaaS) platforms, reliably tracing the provenance of synthetic media without modifying generator architectures or parameters remains a major challenge. In this work, we propose a self-referential retrosynthesis framework for explainable AI provenance forensics under a fixed-generator setting. The framework leverages a jointly optimized encoder-decoder pair to...

    arxiv.org/abs/2609.02268 · PDF

  6. 06

    WeaveMark: Robust and Scalable Multi-bit LLM Watermarking via Coded Payload Spreading

    Gang-Hyun Park, Ju-Hyeong Lee, Hee-Youl Kwak, Dae-Young Yun

    cs.CR · cs.LG

    Multi-bit watermarking for large language models (LLMs) enables content source tracing by embedding user-identifiable messages into generated text. Existing methods face a fundamental trade-off among extraction accuracy, text quality, and payload capacity. We propose WeaveMark, a robust and scalable multi-bit LLM watermarking scheme based on coded payload spreading. WeaveMark shifts this trade-off frontier by improving payload capacity...

    arxiv.org/abs/2609.02177 · PDF

This edition is part of The Daily Abstract — cs.CR archive. Subscribe to receive these in your inbox each morning, automatically translated to Spanish, with reply-to-PDF: arxivdaily.ignorelist.com.

Colophon Set in Georgia, with system sans for interface chrome and a monospaced stack for code and paper identifiers. Sole accent: amber #D99C5E. Built and served on an always-free VM. The masthead is set 14% letterspaced because newspapers do that and it works.