Author

Neil Perry

12 papers · 1986–2026

1986peak 3 in 20222026

Frequent co-authors

Papers

showing 1–12 of 12 RSS

Do Users Write More Insecure Code with AI Assistants?

Neil Perry, Megha Srivastava, Deepak Kumar +1 more

cs.CR · November 2022 · cited 457× · arXiv ↗ · more like this ·

We conduct the first large-scale user study examining how users interact with an AI Code assistant to solve a variety of security related tasks across different programming languages. Overall, we find that participants who had access to an AI assistant based on OpenAI's codex-davinci-002 model wrote significantly less secure code than those without access. Additionally, participants with access to an AI assistant were more likely to believe they wrote secure code than those without access to the AI assistant. Furthermore, we find that participants who trusted the AI less and engaged more with the language and format of their prompts (e.g. re-phrasing, adjusting temperature) provided code with fewer security vulnerabilities. Finally, in order to better inform the design of future AI-based Code assistants, we provide an in-depth analysis of participants' language and interaction behavior…

Articulating Value in Cooperative Housing: International and Methodological Review

Louise Crabtree, Sidsel Grimstad, Joanne McNeill +2 more

Urban Studies · Figshare · 2019 · cited 14× · DOI ↗ · more like this ·

Housing cooperatives are a growing presence in Australia’s housing system, providing a diversity of housing forms to a variety of household types across the income spectrum, typically serving low- and moderate-income households. International evidence shows that housing cooperatives can provide a range of housing from very low price points through to market rate in both non-urban and urban contexts. The research presented in this report reviewed a selection of international cooperative housing sectors in addition to the Australian context, with two aims: 1. Compile the current evidence for the social and financial benefits of housing cooperatives, to develop a framework to assess this in Australia; and, 2. Identify preliminary issues regarding the growth and diversification of housing cooperatives in Australia.

Strong Anonymity for Mesh Messaging

Neil Perry, Bruce Spang, Saba Eskandarian +1 more

cs.CR · July 2022 · cited 4× · arXiv ↗ · more like this ·

Messaging systems built on mesh networks consisting of smartphones communicating over Bluetooth have been used by protesters around the world after governments have disrupted Internet connectivity. Unfortunately, existing systems have been shown to be insecure; most concerningly by not adequately hiding metadata. This is further complicated by the fact that wireless communication such as Bluetooth is inherently a broadcasting medium. In this paper, we present a new threat model that captures the security requirements of protesters in this setting. We then provide a solution that satisfies the required security properties, hides all relevant metadata, scales to moderately sized protests, and supports group messaging. This is achieved by broadcasting all messages in a way that limits the overhead of duplicate messages, ensuring that ciphertexts do not leak metadata, and limiting what can…

Cybench: A Framework for Evaluating Cybersecurity Capabilities and Risks of Language Models

Andy K. Zhang, Neil Perry, Riya Dulepet +24 more

cs.CR · August 2024 · cited 1× · arXiv ↗ · more like this ·

Language Model (LM) agents for cybersecurity that are capable of autonomously identifying vulnerabilities and executing exploits have potential to cause real-world impact. Policymakers, model providers, and researchers in the AI and cybersecurity communities are interested in quantifying the capabilities of such agents to help mitigate cyberrisk and investigate opportunities for penetration testing. Toward that end, we introduce Cybench, a framework for specifying cybersecurity tasks and evaluating agents on those tasks. We include 40 professional-level Capture the Flag (CTF) tasks from 4 distinct CTF competitions, chosen to be recent, meaningful, and spanning a wide range of difficulties. Each task includes its own description, starter files, and is initialized in an environment where an agent can execute commands and observe outputs. Since many tasks are beyond the capabilities of…

Performative Media Policy: Section 230’s Evolution from Regulatory Statute to Loyalty Oath

Aram Sinnreich, Mariana Sánchez, Neil W. Perry +1 more

Sociology and Political Science · Communication Law and Policy · 2 Oct 2022 · cited 1× · DOI ↗ · more like this ·

This study analyzes 84 pieces of legislation between 1996 and January 20, 2021 proposing to modify “Section 230,” the clause in the Communications Act that protects Internet platforms from third-party liability for its users’ actions. Patterns in that legislation align with media coverage of Section 230. The study shows that in recent years, such legislation has shifted from bipartisan, policy-focused law to Republican partisan bills intended as a gesture of support for President Trump, who had attacked the clause believing that it permitted platforms to moderate against his interests. Thus, legislation was often designed not only as a “messaging bill,” but as a message to a particular person, whom legislators believed held the keys to their own electoral futures.

Cryptographic Data Exchange for Nuclear Warheads

Neil Perry, Daniil Zhukov

cs.CR · July 2025 · cited 0× · arXiv ↗ · more like this ·

Nuclear arms control treaties have historically focused on strategic nuclear delivery systems, indirectly restricting strategic nuclear warhead numbers and leaving nonstrategic nuclear warheads (NSNWs) outside formal verification frameworks. This paper presents a cryptographic protocol for secure and verifiable warhead tracking, addressing challenges in nuclear warhead verification without requiring intrusive physical inspections. Our system leverages commitment schemes and zero-knowledge succinct non-interactive arguments of knowledge (zkSNARKs) to ensure compliance with treaty constraints while preserving the confidentiality of sensitive nuclear warhead data. We propose a cryptographic "Warhead Passport" tracking system that chains commitments to individual warheads over their life cycle, enabling periodic challenges and real-time verification of treaty compliance. Our implementation…

Robust Steganography from Large Language Models

Neil Perry, Sanket Gupte, Nishant Pitta +1 more

cs.CR · 11 Apr 2025 · cited 0× · arXiv ↗ · more like this ·

Recent steganographic schemes, starting with Meteor (CCS'21), rely on leveraging large language models (LLMs) to resolve a historically-challenging task of disguising covert communication as ``innocent-looking'' natural-language communication. However, existing methods are vulnerable to ``re-randomization attacks,'' where slight changes to the communicated text, that might go unnoticed, completely destroy any hidden message. This is also a vulnerability in more traditional encryption-based stegosystems, where adversaries can modify the randomness of an encryption scheme to destroy the hidden message while preserving an acceptable covertext to ordinary users. In this work, we study the problem of robust steganography. We introduce formal definitions of weak and strong robust LLM-based steganography, corresponding to two threat models in which natural language serves as a covertext…

PERFORMATIVE MEDIA POLICY: SECTION 230’S EVOLUTION FROM FOOTNOTE TO LOYALTY OATH

Aram Sinnreich, Patricia Aufderheide, Neil W. Perry

Sociology and Political Science · AoIR Selected Papers of Internet Research · 15 Sep 2021 · cited 0× · DOI ↗ · more like this ·

This study examines the legislative evolution of Section 230 of the Communications Act of 1934, a widely discussed and frequently misunderstood dimension of American telecommunications policy that provides a “safe harbor” provisionally shielding internet companies from liability for law-breaking content published by third parties who use their platforms and networks. Though this provision originated in the mid-1990s as an effort to minimize the legal and economic risks facing fledgling internet startups, we argue that efforts to reform it during the Trump era reflected an unprecedented transformation of an arcane policy point into a highly public subject for “messaging bills” intended principally to signal political loyalty to the president.

Developing Computer-Assisted Interactive Video Courseware for Instruction

Pei‐Lee Teh, Neil R. Perry

Computer Vision and Pattern Recognition · Singapore Journal of Education · 1988 · cited 0× · DOI ↗ · more like this ·

This study reports the results of a funded project aimed at the production and evaluation of instructional materials suitable for use on an interactive videodisc system. More specifically, this project involved the development of visual materials on a videodisc, preparation of a computer-assisted interactive videodisc courseware on the concept of weather forecasting using these materials, reporting on the process of development, and testing the product with a group drawn from the intended audience.

Computer based training in the commercial sector

Neil R. Perry, Jane S. Hemstrich

Education · Australasian Journal of Educational Technology · June 1986 · cited 0× · DOI ↗ · more like this ·

This paper presents an interpretation of computer based training in the commercial sector in Australia. It outlines a number of issues that organisations considering the application of computer based training might consider. These issues include the selection of systems, administrative matters, in house issues and learning principles.

How Vulnerable Are AI Agents to Indirect Prompt Injections? Insights from a Large-Scale Public Competition

Mateusz Dziemian, Maxwell Lin, Xiaohan Fu +28 more

cs.CR · 16 Mar 2026 · arXiv ↗ · more like this ·

LLM based agents are increasingly deployed in high stakes settings where they process external data sources such as emails, documents, and code repositories. This creates exposure to indirect prompt injection attacks, where adversarial instructions embedded in external content manipulate agent behavior without user awareness. A critical but underexplored dimension of this threat is concealment: since users tend to observe only an agent's final response, an attack can conceal its existence by presenting no clue of compromise in the final user facing response while successfully executing harmful actions. This leaves users unaware of the manipulation and likely to accept harmful outcomes as legitimate. We present findings from a large scale public red teaming competition evaluating this dual objective across three agent settings: tool calling, coding, and computer use. The competition…

Comparing AI Agents to Cybersecurity Professionals in Real-World Penetration Testing

Justin W. Lin, Eliot Krzysztof Jones, Donovan Julian Jasper +10 more

cs.AI · December 2025 · arXiv ↗ · more like this ·

We present the first comprehensive evaluation of AI agents against human cybersecurity professionals in a live enterprise environment. We evaluate ten cybersecurity professionals alongside six existing AI agents and ARTEMIS, our new agent scaffold, on a large university network consisting of ~8,000 hosts across 12 subnets. ARTEMIS is a multi-agent framework featuring dynamic prompt generation, arbitrary sub-agents, and automatic vulnerability triaging. In our comparative study, ARTEMIS placed second overall, discovering 9 valid vulnerabilities with an 82% valid submission rate and outperforming 9 of 10 human participants. While existing scaffolds such as Codex and CyAgent underperformed relative to most human participants, ARTEMIS demonstrated technical sophistication and submission quality comparable to the strongest participants. We observe that AI agents offer advantages in…