arXiv.itsnick.co

an independent field guide to 23 million papers from arXiv & OpenAlex — not affiliated with arXiv.org

Author

Biwei Yan

27 papers · 2020–2026

2020: 32021: 72022: 42023: 12024: 62025: 22026: 4
2020peak 7 in 20212026

Frequent co-authors

Papers

showing 1–25 of 27 RSS

On Protecting the Data Privacy of Large Language Models (LLMs): A Survey

Biwei Yan, Kun Li, Minghui Xu +4 more

cs.CR · · cited 218× · arXiv ↗ · more like this ·

Large language models (LLMs) are complex artificial intelligence systems capable of understanding, generating and translating human language. They learn language patterns by analyzing large amounts of text data, allowing them to perform writing, conversation, summarizing and other language tasks. When LLMs process and generate large amounts of data, there is a risk of leaking sensitive information, which may threaten data privacy. This paper concentrates on elucidating the data privacy concerns associated with LLMs to foster a comprehensive understanding. Specifically, a thorough investigation is undertaken to delineate the spectrum of data privacy threats, encompassing both passive privacy leakage and active privacy attacks within LLMs. Subsequently, we conduct an assessment of the privacy protection mechanisms employed by LLMs at various stages, followed by a detailed examination of…

BC-SABE: Blockchain-Aided Searchable Attribute-Based Encryption for Cloud-IoT

Suhui Liu, Jiguo Yu, Yinhao Xiao +3 more

Artificial Intelligence · IEEE Internet of Things Journal · · cited 149× · DOI ↗ · more like this ·

The Internet of Things (IoT) changed our lives with huge amounts of data production. Due to source-limited IoT devices, one of the best ways to process the data is cloud storage. However, a series of security and privacy issues arise, such as illegal data access, data tampering, and privacy leak. Though symmetric encryption can guarantee data confidentiality, it cannot realize fine-grained data sharing and searching. The keyword-based searchable attribute-based encryption (KSABE) can achieve data confidentiality and fine-grained access control. More importantly, it realizes a keyword-based search for data users. However, the heavy decryption computation burden and the management of massive user keys appear when implementing attribute-based encryption schemes to IoT. Therefore, this article proposes a blockchain-aided searchable attribute-based encryption (BC-SABE) with efficient…

An Improved Delegated Proof of Stake Consensus Algorithm

Qian Hu, Biwei Yan, Yubing Han +1 more

Information Systems · Procedia Computer Science · · cited 95× · DOI ↗ · more like this ·

Aiming at the problems of the existing DPoS(Delegated Proof of Stake) consensus algorithm, such as low enthusiasm of voting nodes and difficulties in dealing with malicious nodes, we improve the traditional DPoS consensus algorithm and propose a reputation-based delegated proof of stake consensus algorithm, called Reputation-DPoS. In our Reputation-DPoS, the reputation model is introduced. By evaluating the behavior of nodes, nodes are divided into different trusted states, and high-quality nodes in the network are selected as consensus nodes to reduce security risks and improve efficiency. Besides, incentive methods of reputation and token are used to improve the enthusiasm of nodes to participate in voting. Simulation results show that our Reputation-DPoS can reduce the probability of malicious nodes being selected and optimize the state of nodes in DPoS. Nodes with good behavior will…

DT-DPoS: A Delegated Proof of Stake Consensus Algorithm with Dynamic Trust

Yuanyuan Sun, Biwei Yan, Yan Yao +1 more

Information Systems · Procedia Computer Science · · cited 61× · DOI ↗ · more like this ·

Blockchain is a distributed accounting system. One of its key issues is how to ensure agreement between distrustful nodes. As an important component of blockchain, consensus algorithm can solve the consistency problem, and its efficiency directly determines the performance of blockchain. Compared with Proof of Work (PoW) and Proof of Stake (PoS), the existing Delegated Proof of Stake (DPoS) consensus algorithm improves the efficiency of consensus, but it will face some threats, such as DoS attack and collusion attack, because the mechanism that each witness node takes turns to generate blocks. Therefore, we propose a delegated proof of stake consensus algorithm with dynamic trust, that is, DT-DPoS. We improve an Eigen Trust-based trust model and construct an evaluation criterion based on the combination of stake voting and trust value, which improves the reliability of witness nodes and…

LH-ABSC: A Lightweight Hybrid Attribute-Based Signcryption Scheme for Cloud-Fog-Assisted IoT

Jiguo Yu, Suhui Liu, Shengling Wang +2 more

Artificial Intelligence · IEEE Internet of Things Journal · · cited 54× · DOI ↗ · more like this ·

One of the best ways to deal with the massive data generated by the Internet of Things (IoT) is storing them in the cloud. However, outsourced storage raises some security and privacy issues, such as data leaking and illegal access. The attribute-based signcryption (ABSC) is one of the most promising approaches which can ensure the confidentiality and authenticity of data simultaneously. Nonetheless, it not only inherits the fine-grained access control but also the heavy computational cost which is intolerable for most resource-limited IoT devices. In this article, we propose lightweight hybrid-policy ABSC (LH-ABSC), a lightweight ABSC scheme which adopts ciphertext-policy encryption (CPABE) and key-policy attribute-based signature (KPABS). Ciphertext-policy attribute-based signature leads the decision making that who can decrypt to the data owners directly. Meanwhile, the signature is…

FedRFQ: Prototype-Based Federated Learning with Reduced Redundancy, Minimal Failure, and Enhanced Quality

Biwei Yan, Hongliang Zhang, Minghui Xu +2 more

cs.DC · · cited 26× · arXiv ↗ · more like this ·

Federated learning is a powerful technique that enables collaborative learning among different clients. Prototype-based federated learning is a specific approach that improves the performance of local models under non-IID (non-Independently and Identically Distributed) settings by integrating class prototypes. However, prototype-based federated learning faces several challenges, such as prototype redundancy and prototype failure, which limit its accuracy. It is also susceptible to poisoning attacks and server malfunctions, which can degrade the prototype quality. To address these issues, we propose FedRFQ, a prototype-based federated learning approach that aims to reduce redundancy, minimize failures, and improve \underline{q}uality. FedRFQ leverages a SoftPool mechanism, which effectively mitigates prototype redundancy and prototype failure on non-IID data. Furthermore, we introduce…

Blockchain Empowered Federated Learning for Data Sharing Incentive Mechanism

Zexin Wang, Biwei Yan, Anming Dong

Artificial Intelligence · Procedia Computer Science · · cited 23× · DOI ↗ · more like this ·

In the machine learning, data sharing between different participants can increase the amount of data, improve the quality of the dataset, and thereby improve the quality of the model. Under the condition of data supervision, federated learning, as a distributed machine learning, aims to protect data while training models through collaboration among all parties to achieve data sharing and improve model quality. However, there are still some issues. For instance, the lack of trust between the participants makes it impossible to establish a secure and reliable sharing mechanism. In addition, how to fairly share the benefits generated by the model, identify honest participants and punish malicious participants is still a challenge. In this paper, we propose a new federated learning scheme based on blockchain architecture for federated learning data sharing. Moreover, an incentive mechanism…

Feasibility of Identity Authentication for IoT Based on Blockchain

Zongqing Tian, Biwei Yan, Qiang Guo +2 more

Information Systems · Procedia Computer Science · · cited 23× · DOI ↗ · more like this ·

With the rapid development of the Internet of Things (IoT), more and more devices are connected to the Internet. As IoT devices are resource-constrained in terms of processing, storage and network capacity, it becomes a challenging task to ensure the access of IoT devices. Identity authentication is a key technology to prevent illegal users from access resources and permissions. Based on the principle of blockchain technology, combining blockchain technology with IoT, this paper proposes a blockchain system framework for IoT identity authentication, which implements the authentication between devices and cloud servers, IoT base stations as well as devices, and then analyzes its feasibility.

BAFL-SVM: A blockchain-assisted federated learning-driven SVM framework for smart agriculture

Ruiyao Shen, Hongliang Zhang, Baobao Chai +4 more

Artificial Intelligence · High-Confidence Computing · · cited 20× · DOI ↗ · more like this ·

The combination of blockchain and Internet of Things technology has made significant progress in smart agriculture, which provides substantial support for data sharing and data privacy protection. Nevertheless, achieving efficient interactivity and privacy protection of agricultural data remains a crucial issues. To address the above problems, we propose a blockchain-assisted federated learning-driven support vector machine (BAFL-SVM) framework to realize efficient data sharing and privacy protection. The BAFL-SVM is composed of the FedSVM-RiceCare module and the FedPrivChain module. Specifically, in FedSVM-RiceCare, we utilize federated learning and SVM to train the model, improving the accuracy of the experiment. Then, in FedPrivChain, we adopt homomorphic encryption and a secret-sharing scheme to encrypt the local model parameters and upload them. Finally, we conduct a large number…

Towards cross-chain access control model for medical data sharing

Fangxin Zhao, Jiguo Yu, Biwei Yan

Information Systems · Procedia Computer Science · · cited 20× · DOI ↗ · more like this ·

Secure and scalable dynamic data interaction is significant to improve the level of medical collaboration and facilitate patients’ medical treatment. The consortium blockchain provides integrity and traceability management for medical data through preset authorized access and consensus mechanisms. However, how to realize the secure sharing of data among patients in the heterogeneous consortium blockchains, enabling users to own medical data ownership, and to share medical data securely and dynamically between different medical institutions is still challenging. To this end, we propose a cross-chain based access control model for medical data sharing, which model is patient-centered and solves the contradiction between medical data sharing and user privacy. Then, a dynamic access control strategy based on identity and role is designed. The strategy is written by smart contracts and can…

An Efficient and Secure Data Sharing Scheme for Edge-Enabled IoT

Jiguo Yu, Biwei Yan, Huayi Qi +2 more

Computer Networks and Communications · IEEE Transactions on Computers · · cited 19× · DOI ↗ · more like this ·

Sharing the big data generated by IoT via cloud is slow and expensive. Besides, transmitting and sharing data among IoT devices via cloud may be insecure. To address these issues, a novel efficient and secure data sharing scheme termed EB-SDSS (Edge Blockchain Secure Data Sharing Scheme) is proposed in this paper for edge-enabled IoT applications. EB-SDSS constructs a blockchain on edge servers. It guarantees the confidentiality and unforgeability of data by combining the symmetric encryption scheme with an edge blockchain. To ensure the device authenticity and the reliability of shared data, EB-SDSS adopts a certificateless signature scheme. It also provides efficient large-scale data searches for IoT devices through a locality-sensitive hashing algorithm. EB-SDSS has been proven to be secure against the adaptive chosen message attacks under the random oracle model. The experimental…

A Deep 1-D CNN and Bidirectional LSTM Ensemble Model With Arbitration Mechanism for LDDoS Attack Detection

Zengguang Liu, Jiguo Yu, Biwei Yan +1 more

Computer Networks and Communications · IEEE Transactions on Emerging Topics in Computational Intelligence · · cited 19× · DOI ↗ · more like this ·

Low-rate Distributed Denial of Service (LDDoS) attacks are complex and common security issues, which disrupt the essential services of the varied and emerging networks. However, the traditional detection models are normally in a dilemma condition since LDDoS attacks have the characteristics of concealment and persistence in space and time dimensions. In this paper, we propose a novel, practical and fast ensemble model (FastCBLA-EM) to detect the LDDoS attacks. In the FastCBLA-EM, a dilated padding-based dual sliding method is worked out for producing fixed-length chronological order samples from flows per well-tuned packet step. Next, a competitive network composed of 1-D Convolutional Neural Network (1-D CNN) and a bidirectional Long Short Term Memory (bi-LSTM) network is employed to learn both spatial and temporal representations of samples, parallelly. Finally, an arbitration…

EBIAS: ECC-enabled blockchain-based identity authentication scheme for IoT device

Wenyue Wang, Biwei Yan, Baobao Chai +3 more

Information Systems · High-Confidence Computing · · cited 16× · DOI ↗ · more like this ·

In the Internet of Things (IoT), a large number of devices are connected using a variety of communication technologies to ensure that they can communicate both physically and over the network. However, devices face the challenge of a single point of failure, a malicious user may forge device identity to gain access and jeopardize system security. In addition, devices collect and transmit sensitive data, and the data can be accessed or stolen by unauthorized user, leading to privacy breaches, which posed a significant risk to both the confidentiality of user information and the protection of device integrity. Therefore, in order to solve the above problems and realize the secure transmission of data, this paper proposed EBIAS, a secure and efficient blockchain-based identity authentication scheme designed for IoT devices. First, EBIAS combined the Elliptic Curve Cryptography (ECC)…

DF-RBAC: Dynamic and Fine-grained Role-Based Access Control Scheme with Smart Contract

Danyang Liu, Anming Dong, Biwei Yan +1 more

Information Systems · Procedia Computer Science · · cited 14× · DOI ↗ · more like this ·

Access control is a technology that can guarantee the security of information in network transmission, in which role-based access control is to separate the subject from the permission, and to assign the permission by distributing the corresponding role of the user. However, the traditional role-based access control scheme is generally centralized, the allocation of user’s role lacks fine granularity, and there is static in the allocation of the role and permission, which is not consistent with the distributed and dynamic network architecture nowadays. Hence, we propose a dynamic and fine-grained role-based access control model DF-RBAC, which can realize the flexible assignment of roles by resource owners and security verification of assigned roles. Further, we take advantage of blockchain technology and cryptography technology to combine with the DF-RBAC framework to achieve access to…

The blockchain based access control scheme for the Internet of Things

Chuanhang Cheng, Biwei Yan, Guijuan Wang

Information Systems · Procedia Computer Science · · cited 10× · DOI ↗ · more like this ·

The Internet of Things (IoT) is an information carrier based on the Internet and traditional telecommunications networks. Access control is an important part of the service architecture, which can effectively solve the security issues in IoT. Therefore, many solutions adopt the access control to solve some security problems. However, these existing solutions cannot easily deploy access control in the IoT. As a decentralized, non-tamperable, and highly credible distributed ledger technology, blockchain is in line with the current trend of network development. To improve the transparency, non-tampering of the access control process and traceability and auditability of access flow changes, we propose a blockchain-based access control scheme for the IoT, which uses a combination of on-chain and off-chain to reduce the storage pressure of the blockchain. On the one hand, we deploy policy…

Blockchain-Assisted Collaborative Service Recommendation Scheme With Data Sharing

Biwei Yan, Anming Dong, Baobao Chai +3 more

Artificial Intelligence · IEEE Access · · cited 10× · DOI ↗ · more like this ·

With the rapid development of cloud computing, a large number of web services have been emerging quickly, which brings a heavy burden for users to choose the services they preferred. In order to suggest web services for users, recommendation algorithms are needed and many of them have been investigated recently. However, most of the existing recommendation schemes are based on centralized historical data, which may lead to single point of failure. Generally, the data contains a lot of sensitive information that cloud may expose the privacy of users, which makes most cloud platforms reluctant to share their own data. In order to solve the above issues, the secure data sharing among cloud platforms is necessary for better recommendation, which can maximize the profits. In this paper, we propose a blockchain-assisted collaborative service recommendation scheme ( <inline-formula…

BSCDA: Blockchain-Based Secure Cross-Domain Data Access Scheme for Internet of Things

Baobao Chai, Jiguo Yu, Biwei Yan +2 more

Information Systems · IEEE Transactions on Network and Service Management · · cited 8× · DOI ↗ · more like this ·

In the current hypergrowth phase of the Internet of Things, cross-domain data access becomes more and more frequently. Whereas, the lack of trust between domains makes cross-domain data access extremely hard. Traditional schemes typically depend on a third party to establish trust between data accessing entities, which can easily result in single point of failure. To conquer the aforementioned challenge, this paper proposes BSCDA, a blockchain-based cross-domain data access scheme designed to enable secure data transmission across domains. The decentralization, transparency, and anti-tampering features of blockchain perfectly solve the issue of single point of failure and foster trust among various domains. Specifically, a certificate management method is developed to address the certificate storage issue by leveraging a mapping table to store the revocation certificate index on the…

KCB-BC-SSE: A Keyword Complete Binary Tree Searchable Symmetric Encryption Scheme using Blockchain

Xiru Liu, Guijuan Wang, Biwei Yan +1 more

Artificial Intelligence · Procedia Computer Science · · cited 5× · DOI ↗ · more like this ·

Internet of things (IoT) devices generate a massive amount of data every second in our lives. While cloud storage brings convenience to the users, it has the disadvantages of low scalability and weak reliability. Blockchain-based distributed storage eliminates data loss due to the tamper-resistant characteristic. Nonetheless, blockchain storage raises some confidentiality and retrieval efficiency issues of data. Searchable Symmetric Encryption (SSE) is an effective search scheme based on ciphertexts, which ensures data security. However, with the increase of data on the blockchain, the data retrieval on the blockchain will be difficult. In this paper, a Complete Binary Tree Searchable Symmetric Encryption using Blockchain (KCB-BC-SSE) scheme is proposed. According to the number of searchers, the scheme is divided into single searcher and multiple searchers where the search efficiency is…

Proof of Random Trust Consensus Mechanism for Power Resource Sharing System

Yujiao Zhang, Biwei Yan, Yan Yao +1 more

Information Systems · Procedia Computer Science · · cited 5× · DOI ↗ · more like this ·

With the development of society, traditional centralized management can’t satisfy reliability and safety of power resource sharing network. Blockchain has the characteristics of decentralization, traceability, and openness. It can provide a safe and reliable environment for untrusted parties without a third party. Thus, blockchain technology can realize a safe and reliable distributed power resource sharing network. However, a major challenge is to find a consensus mechanism that is suitable for power resource sharing network. Therefore, in order to solve the challenge, we propose a lightweight consensus mechanism, Proof of Random Trust(PoRT). Compared with Proof of Work(PoW), PoRT overcomes the shortcomings of large-scale of calculation and concentration of power. Different from traditional BFT algorithm, PoRT has better scalability. At the same time, PoRT realizes the separation of…

SFAC:A Smart Contract-Based Fine-Grained Access Control for Internet of Things

Baobao Chai, Biwei Yan, Anming Dong +1 more

Information Systems · Procedia Computer Science · · cited 5× · DOI ↗ · more like this ·

With the development of Internet of things, more and more objects are connected to the Internet. It will lead to data leakage caused by arbitrary access easily. Thus, an effective method to prevent data leakage is needed. Traditional access control schemes include role-based access control (RBAC), attribute-based access control (ABAC), and capability-based access control (CapBAC) are all using a central or a third trusted party to manage user information, which is prone to single failure. In order to solve the problems, in this paper, a fine-grained access control scheme based on blockchain technology named SFAC is proposed. In recent years, blockchain technology has been widely studied and applied in various fields. It has the advantages of decentralization, imitation tampering, and traceability, and is a distributed public ledger. Therefore, combined with blockchain, SFAC can not only…

What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection

Biwei Yan, Yue Zhang, Minghui Xu +3 more

cs.CR · · cited 0× · arXiv ↗ · more like this ·

The application layer of Bluetooth Low Energy (BLE) is a growing source of security vulnerabilities, as developers often neglect to implement critical protections such as encryption, authentication, and freshness. While formal verification offers a principled way to check these properties, the manual effort of constructing formal models makes it impractical for large-scale analysis. This paper introduces a key insight: BLE application security analysis can be reframed as a semantic translation problem, i.e., from real-world code to formal models. We leverage large language models (LLMs) not to directly detect vulnerabilities, but to serve as translators that convert BLE-specific code into process models verifiable by tools like ProVerif. We implement this idea in VerifiaBLE, a system that combines static analysis, prompt-guided LLM translation, and symbolic verification to check three…

FLBC-DSS: Federated Learning-Enabled Blockchain-Based Data Sharing Scheme for IIoT

Yan Yao, Guangshun Li, Huihui Zhang +3 more

Information Systems · · cited 0× · DOI ↗ · more like this ·

This paper introduces the Federated Learning-Empowered Blockchain-based Data Sharing Scheme (FLBC-DSS), a novel framework designed to enhance data security and efficiency in Industrial Internet of Things (IIoT) environments. By integrating federated learning with blockchain technology, FLBC-DSS addresses the critical challenges of data privacy and unauthorized access, promoting secure, decentralized data sharing across various industrial sectors. Utilizing zk-SNARKs, the scheme provides a mechanism for anonymous data verification without compromising data integrity. Performance evaluations conducted using Hyperledger Fabric and SecureBoost demonstrate significant improvements in prediction accuracy and computational efficiency compared to traditional approaches. The implementation of non-cooperative game theory further illustrates the economic benefits of FLBC-DSS, highlighting its…

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers

Biwei Yan, Minghui Xu, Yijun Yang +4 more

cs.CR · · arXiv ↗ · more like this ·

The Model Context Protocol (MCP) has rapidly become the de facto standard for connecting large language models (LLMs) to external resources, but it also introduces a class of privacy risks that existing tools are ill-equipped to detect. Unlike conventional exfiltration bugs, leakage in MCP servers is largely protocol-induced: credentials, API keys, and Personally Identifiable Information (PII) cross the local/LLM boundary simply by being returned, logged, or raised inside a tool handler, with no explicit outbound request in the source code. We present MCPPrivacyDetector, a context-aware cross-language static analysis framework that detects such leakage in multilingual MCP servers. MCPPrivacyDetector lifts heterogeneous code implemented across different programming language (e.g., Python) into a unified program representation, applies context-aware semantic filtering to isolate genuinely…

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents

Xuelong Dai, Jianyu Ma, Boyang Ma +3 more

cs.CV · · arXiv ↗ · more like this ·

Multimodal Large Language Model (MLLM)-based web agents provide practical, high-precision solutions for visual browser automation; however, they inherently expand the attack surface, introducing novel vision-based vulnerabilities. Existing adversarial evaluations targeting these agents frequently rely on permissive threat models and visually conspicuous artifacts. In this paper, we investigate a constrained vulnerability detection setting: a trusted web platform where the evaluator acts solely as an unprivileged third party, such as a merchant or advertiser, controlling only a semantically legitimate, spatially constrained region, such as an ad slot, a sponsored card, or a localized widget. Operating under these realistic constraints, we propose MIRAGE, a novel visual indirect prompt injection framework for targeted next-action hijacking. Our approach leverages diffusion models to…

Give Them an Inch and They Will Take a Mile:Understanding and Measuring Caller Identity Confusion in MCP-Based AI Systems

Yuhang Huang, Boyang Ma, Biwei Yan +5 more

cs.CR · · arXiv ↗ · more like this ·

The Model Context Protocol (MCP) is an open and standardized interface that enables large language models (LLMs) to interact with external tools and services, and is increasingly adopted by AI agents. However, the security of MCP-based systems remains largely unexplored.In this work, we conduct a large-scale security analysis of MCP servers integrated within MCP clients. We show that treating MCP servers as trusted entities without authenticating the caller identity is fundamentally insecure. Since MCP servers often cannot distinguish who is invoking a request, a single authorization decision may implicitly grant access to multiple, potentially untrusted callers.Our empirical study reveals that most MCP servers rely on persistent authorization states, allowing tool invocations after an initial authorization without re-authentication, regardless of the caller. In addition, many MCP…