跳到正文
研踪PaperTrail

论文库

检索计算机领域论文,按研究方向、作者或关键词筛选。

部分采集异常
正在读取账号与研究记录…

全站更新概况

+0新增论文
+0其中 AI 相关
+0已有论文修订
+93新增 AI 导读

arXiv 最近完成扫描:2026-11-16 01:34 · 全站最近入库:2026-11-14 15:09各信源进度 →

统计口径与数据新鲜度

统计 2026-11-15 03:18 — 2026-11-16 03:18(北京时间) · 点击数字查看对应简报;AI 相关包含在新增论文内。

最近完成检查:2026-11-16 01:34最近发现新增版本:2026-11-14 15:09库内论文最新更新时间:2026-11-13 02:59

每分钟刷新已保存的数据。空检查不代表采集异常;新收录可能包含历史论文。AI 导读按新增版本计数。

23,348 已收录论文19,580 AI 相关6,729 有修订112 HF 社区发现

浏览论文库

时间范围跟随排序:版本更新、本站收录或首次发表。最新收录可能包含历史论文。部分信源异常,查看状态 →

找到 5 篇论文 · 按版本更新时间排序上轮扫描起点 2026-11-16 01:33(北京时间)
新论文 · v1arXiv:2611.15316

IoTPwnBench: A Synthetic Benchmark for IoT Firmware Security Analysis

Luca Ferrari, Marco Alecci, Luca Verderame, Jacques Klein, Francesco Pagano

原文摘要

Building and evaluating security tools for IoT firmware requires targets whose weaknesses are known in ad- vance and can be reproduced in a running device. Two problems remain: (1) firmware collected from real-world products provides realistic software, but hardware dependencies and undocumented defects make it difficult to establish what a security tool should be expected to find; and (2) existing benchmarks typically collect sets of vulnerable or misconfigured firmware images without providing purpose-built vulnerable services with explicit weaknesses that a security analysis tool can target. We present IoTPwnBench, a synthetic, modular benchmark that brings these requirements together. IoTPwnBench contains 716 vulnerable firmware images covering 86 weakness scenarios and 28 CWE classes across 11 device profiles, including industrial controllers, health monitors, and household devices. Each vulnerable image runs a plausible device application with simulated sensors and actuators that generate live readings over its native interfaces while exposing one target weakness mapped to a primary CWE. A documented exploitation payload and observable signal establish the expected behavior independently of the evaluated tool. Every vulnerable image is paired with a corrected twin that preserves the device and service while removing that weakness. Researchers can therefore compare the same target before and after correction to assess detection and false positives for the target weakness. The benchmark produces kernel and filesystem binaries for static inspection and dynamic testing under QEMU. Device profiles and weakness modules remain separate, allowing the same scenario to be reused across device contexts. Vulnerable targets were validated manually, and the open source build workflow regenerates the firmware bit-for-bit.

cs.CR · cs.SE

新论文 · v1arXiv:2611.13965

Comparing WeChat and Telegram MiniApp Security Architectures: Toward Cross-Platform Analysis

Luca Ferrari, Billel Habbati, Luca Verderame

原文摘要

MiniApps are increasingly central to super-app ecosystems, yet architectural differences complicate the transfer of security analysis techniques across platforms. Existing WeChat analyzers rely on packaged applications and platform-specific APIs, limiting their direct applicability to Telegram's web-based MiniApps. We present a qualitative comparison of WeChat Mini Programs and Telegram MiniApps, grounded in official documentation, prior research, and manual analysis of a specific Telegram Android source revision. Using a shared taxonomy of security controls, assets, and threat sources, we examine execution environments, communication paths, and trust boundaries. WeChat provides a dedicated MiniApp runtime; Telegram combines web execution with host controls. Both retain developer responsibilities for backend authentication and resource authorization. Two worked examples derive requirements for cross-platform analysis: distinguishing credential roles and validation boundaries, and associating host capabilities with concrete execution contexts and permission handlers. These findings inform future automated analysis without ranking the ecosystems by security or claiming validated vulnerability detection.

cs.CR

新论文 · v1arXiv:2611.13125

MiniZoo: An Evolving Dataset of Mini Apps for the Research Community

Luca Ferrari, Marco Alecci, Jordan Samhi, Tegawendé F. Bissyandé, Jacques Klein, Luca Verderame

原文摘要

Mini apps run within host applications (apps) such as WeChat, Alipay, Baidu, and Telegram, providing services without requiring users to install separate native apps. Their growing ecosystem has attracted research on software quality, security, and privacy, creating a need for reusable datasets. However, building and maintaining such datasets is challenging, requiring platform-specific collection infrastructure and mechanisms to handle incomplete packages, changing availability, and heterogeneous metadata. A shared, continuously maintained collection is still lacking, therefore motivating the development of a common research resource, whose value has been demonstrated by the experience of AndroZoo in the Android ecosystem. In this paper, we present MiniZoo, an evolving corpus of mini apps and associated metadata. The initial release comprises 16,273 mini-app packages, with multiple versions of the same mini apps. The dataset is managed and distributed through AndroZoo under its existing access conditions. To facilitate its reuse, we describe the collection process, data organization, provenance, and limitations, and explain how researchers can select and access the data. MiniZoo is designed to grow continuously through the addition of newly discovered mini apps, the inclusion of further host ecosystems, and the collection of successive versions of previously collected apps. This ongoing expansion will enable both comparisons across ecosystems and longitudinal studies of how mini apps evolve over time.

cs.SE

新论文 · v1arXiv:2611.08095

基于高分辨率航空影像与多模态数据的瑞士全国尺度树种组成制图

National-scale mapping of tree species composition in Switzerland from high-resolution aerial imagery and multimodal data

Yixin Zhou, Luca Ferrari, Verena C. Griess, Nataliia Rehush, Konrad Schindler, Mirela Beloiu

AI 速读 基于摘要

作者利用深度学习融合航空RGB影像、ALS、卫星嵌入与气候变量,在瑞士全国30米分辨率上制图,估计十种主要树种及Other类的地径断面积占比。

cs.CV

查看原文摘要

Tree-species composition shapes forest productivity and how forests respond to climate disturbances such as drought, windthrow and insect outbreaks. Yet most national forest maps assign each pixel a single dominant species and cannot show the share of accompanying species. We mapped the basal-area shares of ten main tree species and a residual Other class across Switzerland at 30 m resolution. A deep-learning model combining 0.1 m aerial RGB imagery, airborne laser scanning (ALS), annual AlphaEarth satellite embeddings, and climate variables was trained on basal-area observations from 3,992 Swiss National Forest Inventory (NFI) sites. In spatial cross-validation, the model reached a macro-$R^2$ of 0.485 across the 11 classes. On an independent forest-reserve dataset, the map reached a macro-$R^2$ of 0.552 for individual 30 m pixels and 0.733 for plots, and identified the dominant class in 73.2% of pixels and 81.1% of plots. The map shows maple and ash as widespread minor components that dominant-class maps omit. It also reproduces the elevational sequence from broadleaved lowland stands through spruce to larch and Arolla pine near the treeline. By resolving the species mixture within each 30 m pixel, the map complements field inventory statistics with spatially continuous information that can support forest monitoring, the management of mixed stands, and climate-adaptation planning across Switzerland.

新论文 · v1arXiv:2611.06522

From Admission to Retention: Predicting Durable Offspring in Quality-Diversity Search

Corrado Calamita, Matteo Mendicini, Luca Ferrari, Riccardo Bertamini

原文摘要

Automated failure discovery can be framed as a diversity problem: the objective is to expose distinct ways a system fails rather than a single critical adversarial case. Yet uniform parent sampling provides no way to allocate search effort toward individuals likely to produce durable archive contributions. We study this credit assignment problem in an unstructured Quality-Diversity (QD) archive, testing whether signals available before an individual has reproduced distinguish offspring that merely enter the archive from those still retained generations later. Across a planar-arm benchmark and two robotic-locomotion tasks, the same signals are often associated with entry and persistence in opposite directions. In particular, lineage depth is the clearest such signal, and its persistence discrimination grows with population capacity, which is associated with lower turnover. Biasing parent selection toward the signals with the strongest measured association to survival nevertheless does not improve search: moderate bias matches uniform sampling, and strong bias reduces QD-score.

cs.NE · cs.AI