Accepted Papers | IEEE TPS 2026

IEEE TPS 2026

The 8th IEEE International Conference on Trust, Privacy and Security in Intelligent Systems, and Applications

Embassy Suites by Hilton Milpitas Silicon Valley, Nov. 4-6, 2026, San Jose, CA, USA

Co-located with IEEE CIC 2026, IEEE CogMI 2026, IEEE RISC 2026.

IEEE TPS 2026 Research Track

  • ORCAGen: Orchestrating Context-Aware Malware Deception with RAG-Guided Generative AI
    Shihab Ahmed, Md Sajidul Islam Sajid, Teryl Taylor, Frederico Araujo, Tariqul Islam
  • Enhancing Security of Template-Less Biometric Authentication Against Geometric Inversion Attack
    Mahafujul Alam, Lan Zhang, Bertrand Cambou
  • Cross-Chain Detection of Pump-and-Dump Attacks in Permissionless Blockchains
    Abdulrahman Alhaidari, Bhavani Kalal, Balaji Palanisamy, Shamik Sural
  • VISTA: Visual Interpretation of Security and Trust Assessment for Satellite Constellations
    Quincy Bayer, Karthik Raja, Samuel Mergendahl, Mai Abdelhakim, Robert Cunningham
  • REVIVE: A Multi-Modal Framework for Vandalism Detection and Recovery in Autonomous Vehicles
    Abdullah Tariq Choudhry, Tapadhir Das
  • Gain-Dependent Entropy Characterization of a Zener Avalanche Noise TRNG via Dual NIST Standards: Toward Low-Cost Hardware Entropy for ICS Deployments
    Rishabh Das
  • Shortcut Learning in Early Intrusion Detection: Header Fingerprints Across Four Datasets
    Michele Guida, Stefano Iannucci, Raj Patel, Shahram Rahimi, Sudip Mittal, Paolo Merialdo
  • Auditing the Judge: Internal Signals for LLM Reasoning Assurance
    Mayank Gulati, Gerhard Wunder
  • File Localization in Firmware Image for Agentic Reverse Engineering
    Nathan Harrison, Samuel Mulder
  • IRENA: Intrusion Response by Expected-Utility Negotiation over Attack–Defense Trees
    Stefano Iannucci, Shahram Rahimi, Ioana Banicescu
  • Pre-Authorization Screening of Ethereum EIP-7702 Account Delegation under an Execution-Audited Adaptive Adversary
    M M Imran, Anik Tahabilder, Changxin Bai, Qiang Zhu, Shiyong Lu
  • Resource-Efficient Feature Selection for IoT Botnet Detection and Classification
    Md. Abid Jahan, Ashikur Rahman, Abderrahmane Leshob, Rakin Rahman, Raqeebir Rab
  • Web-Based Semantic Platform for IoT Privacy Policy Regulatory Coverage with Ad-Hoc Chatbot
    Heinrick Janiola, Lavanya Elluri, Dejarvis Oliver, Srujan Kotikela
  • WMDS: Contract-Linked Layered Watermarking for Attributable Provenance in Data Spaces
    Anhelina Kovach, Shuwen Liu, Yucong Li, Jorge Lanza, Leticia Montalvillo, Aitor Urbieta, George C. Polyzos
  • MPIDetector: Detecting Multi-modal Prompt Injection via LLM-based Reasoning
    Yiheng Li, Jingyue Li
  • Is Weight Tying Still Beneficial for Decoder-Only LLMs in Private Settings Under DP-SGD?
    Razan El Mais, Ali Chehab, Ibrahim Issa, Razane Tajeddine
  • Confidence-Calibrated Human Deferral for Trustworthy LLM Data Governance
    Muzakkiruddin Ahmed Mohammed, Shames Al Mandalawi, Mert Can Cakmak, John Talburt
  • PaTAS: A Framework for Trust Propagation in Neural Networks Using Subjective Logic
    Koffi Ismael Ouattara, Ioannis Krontiris, Theo Dimitrakos, Dennis Eisermann, Houda Labiod, Frank Kargl
  • Local Allow, Global Deny: Why Per-Action Authorization Does Not Compose in LLM Agents
    Anmol Pandey, Aditya Jain, Liang Chen, Carsten Maple
  • Compiling Semantic Guardrails for Autonomous Payment Agents: Deterministic, Auditable Prompt-Injection Defense at LLM-Level Detection
    Yash Rajeshbhai Parikh, Janaki Ram Goteti, Ashok Singamaneni
  • On the Robustness of Small Language Models for Smishing Detection Against Adversarial Text Perturbations
    Seyed Mohammad Sanjari Pirmahalleh, Mir Mehedi Ahsan Pritom, Maanak Gupta
  • Safety Graph: When Safety Responses Become Attack Surfaces in Cyber-Physical Systems
    Rakesh Podder, Philip D. Hopkins, Sarath Sreedharan, Indrakshi Ray, Indrajit Ray
  • TrustShiftProbe: Characterizing, Benchmarking, and Defending Staged Trust Attacks on MCP Servers
    Mehrdad Rostamzadeh, Sidhant Narula, Mohammad Ghasemigol, Daniel Takabi
  • Dynamic Trust Based Attribute-Centric Access Control for Smart Homes
    Hritik Thapa, Smriti Bhatt
  • Privacy Policy Enforcement Guardrails for Data-Sensitive Retrieval-Augmented Generation
    Osama Zafar, Alexander Nemecek, Yiqian Zhang, Wenbiao Li, Debargha Ganguly, Vikash Singh, Vipin Chaudhary, Erman Ayday
  • Fine Tuning LLM-Based Decompiler Backend for Output Code Quality and Trustworthiness
    Muqi Zou, Hongyu Cai, Hongwei Wu, Zion Leonahenahe Basque, Arslan Khan, Z. Berkay Celik, Dave Tian, Antonio Bianchi, Ruoyu Wang, Dongyan Xu

IEEE TPS 2026 Application Track

  • Beyond Timing Evasion: A Machine Learning Analysis of Evolving Internet-Wide Reconnaissance
    Citlalli Martinez Cervantes, Ramy Othman, Alex Carbajal, Shereen Ismail, Asma Jodeiri Akbarfam
  • Evidence-Grounded LLM-Assisted Android Mobile Forensic Reporting
    Madhab Chandra Das, Sajid Ahmed, Tasnia Tabassum, Qingzhong Liu
  • CROWN: Carbon- and Price-Aware Multi-Objective Reinforcement Learning for Battery Energy Management under Integrity Attacks
    Shengwen Ding, Mai Abdelhakim
  • Runtime Scope Composition for Secure Tool Invocation in Stateless Model Context Protocol Agents
    Vishnu Gatla, Pushpjeet Shrivastava
  • AppScopes: Fine-grained Access Control for App Collaboration on Android
    Sanket Goutam, Kasra Kakaee, Amir Rahmati
  • Trust-Boundary Architectures for Auditable LLM-Assisted Contract Risk Analysis: Threat Model, Enforcement, and Empirical Evaluation
    Santhosh Guntupalli
  • Livelock in the Agent Harness: Delegation-Induced Liveness Failure in LLM Systems
    Mohammad Hasan, Aciful Khan, Hadi Rashid, Md Motasim Billa, Shafkat Islam, Mariofanna Milanova
  • Truth, Permissiveness, and Silence: What a Database May Say When It Cannot Say Everything
    Hasan Jamil
  • Auditable Privacy-Preserving Data Usage for Trustworthy Intelligent Data Services
    Wei-Yu Liu, Ming-Yu Ho, Gwan-Hwan Hwang
  • Cyber-Attack Containment in Heat-Recovering Data Centers: Shifting the Resilience Frontier
    Hoda Mehrpouyan
  • Shortcut or Signature? A Confound-Controlled Reassessment of Network-Traffic Honeypot Detection
    Teresita Noelia Nunez Migliorisi, Michael De Lucia, Andrew Novocin
  • Identifying Multiple Security Patches for Complete Vulnerability Fixes
    Aarya Niraula, Weiliang Qi, W. Eric Wong, Xinda Wang
  • ONSET: Ontology-Supervised Extraction and Translation for Secure Natural-Language Policy Automation
    Indravadan Patel, Ram Dantu
  • VerifyBench: Auditing Public Verifiability in Responsible-AI Benchmarks for Foundation Models
    Anshima Srivastava
  • Auditable Yet Confidential: Machine-Verifiable Trust in Cross-Organizational Digital Ecosystems
    Christoph Stach, Iouliana Litou, Clémentine Gritti
  • VEXA IoT: Autonomous IoT Vulnerability EXploitation using AI Agents
    Katherine Swinea, Kshitiz Aryal, Lopamudra Praharaj, Maanak Gupta
  • What's Actually In the Models You Pull? A Registry-Wide Audit of Behavioral Supply-Chain Integrity in the Consumer GGUF Ecosystem
    Mike Wagner
  • Identity-by-Descent Membership Inference Attacks on Synthetic Genomic Data
    Xinyue Wang, Jaideep Vaidya
  • RLMS-Shield: The Abstention Frontier and Peer-Prediction Auditing for Automated LLM Red-Teaming
    Matias Zabaljauregui
  • SAFESHIELD: A Decision-Organization Framework for Deployment-Time Safety of Small Language Models
    Xingru Zhou, Luis Sentis, Aarti Choudhary

IEEE TPS 2026 Industry/Government Track

  • Unified Risk Budgets for Reliability, Security, and Compliance in Cloud-Native Operations
    Deepak Bhaskaran
  • Agent-Warden: eBPF-Based Kernel-Native Process-File Provenance Tracking for LLM Agents
    Dongxu Cui, Zhichao Gu, Ping Zheng, Simeng Han, Yong Liao
  • Tamper-Verifiable Audit Logs for Hardware Security Modules Using Merkle-Tree Integrity Anchored to Vendor Device Identity
    Neelakantam Gaddam
  • Scalable Detection of Adversarial Synthetic Slop and Coordinated Media Abuse: A LoRA-Enabled Multimodal Defense System
    Abhinav Mathur, Claire Liu, Kelvin Tan, Yifei Liu
  • SCOPE: Semantic & Context Oriented Prompted Extraction
    Ashwin Parameswaran, Soamar Homsi
  • A Threat Model for Agentic DevOps Assistants: Attack Surface, Trust Boundaries, and Least-Privilege Guardrails for LLM Agents in Cloud-Native Operations
    Parth Haresbhai Sabhadiya, Fenil Kanubhai Godhani, Vaikunth Desai
  • Permission Anomaly Detection in Salesforce Access Graphs: A Synthetic Benchmark and a Per-Archetype Diagnostic
    Sharan Sukesh
  • DynaToken: An AI-Driven Context-Aware Framework for Dynamic Least-Privilege Access Tokens
    Aniket Tendulkar, Kuldeep Marganache
  • Topology-Preserving Obfuscation of Network Configurations for LLM Analysis
    Giannis Tziakouris, Nadhem Al-Fardan
  • Code Over Prompts, Gates Over Judges: Deploying and Blindly Re-Evaluating an Autonomous Security-Bug Remediation Agent
    Shubhankar Unhale, Purshotam Shah

Ordering by last name of the first author alphabetically.