On August 28, 2026, Google, Microsoft, Anthropic, OpenAI, and 100 other companies signed an open letter warning of a large-scale AI attack. AI has created systemic risks in the digital world, but the physical world has no defense mechanism. This paper defines the Physical Ledger—a physical world namespace rooted in the Cui coordinate. The Physical Ledger DNS is not a copy of the domain name system; it is an object-addressing protocol for the physical world: every object (shelf position, robot, door, vehicle, starship) is assigned a unique Cui coordinate address. This paper presents a draft protocol for the Physical Ledger DNS, a catalog of 108 problems, the genesis valuation of $100,000,000, and a reward distribution scheme. It proposes the §13 security mechanism (Proof-of-Problem): a distributed firewall for the Physical Ledger DNS, powered by the 108 problems. The more solvers participate, the thicker the firewall. AI can attack digital protocols, but it cannot solve problems—because solving requires understanding the coordinate origin itself. The genesis valuation of the Cui-attribute Shell is defined as US$100,000,000, anchored at 2026-08-27. The appendix includes the Cui-coordinate naming rights and the passphrase lock (recognition of 1/7/8 for entry).
Nelli Yaswanth Kumar, Dr. Singothu Jhansi Rani, Setti Sarika
The rapid proliferation of Internet of Things (IoT) devices under sixth-generation (6G) networks introduces a highly dynamic, decentralized environment in which static, perimeter-based security models are no longer adequate. This paper proposes AZTM-v3 an adaptive Zero Trust framework that couples behavior-driven trust management with a Random Forest classifier to identify and isolate malicious nodes in real time. The framework is evaluated on an NS-3 simulation of a 150-node 6G IoT network subjected to Sybil, Denial-of-Service (DoS), spoofing, replay and ON-OFF attacks. Unlike prior trust-management proposals that report only qualitative or partial outcomes this work quantifies performance across five dimensions i.e detection accuracy, F1-score, false-positive rate, end-to-end latency and consensus-convergence time and benchmarks AZTM-v3 against PKI-based, centralized-trust and static-blockchain baselines. AZTM-v3 attains a 98.1% overall detection accuracy with a 1.6% false-positive rate at 150 nodes and sustains 95.4% accuracy at 200 nodes outperforming the PKI baseline by 12–18 percentage points across all tested loads. These results indicate that combining tiered trust evaluation with machine learning based classification yields a measurably more scalable and resilient security layer for 6G-enabled IoT deployments than existing static or purely cryptographic approaches.
Wisam Makki Alwash, Weam Husham Aljabbari, Muhammed Ali Aydın, Hasan H. Balık
Internet of Vehicles (IoV) intrusion detection systems (IDSs) require collaborative learning that preserves raw-data locality while producing independently checkable post-run evidence. This paper presents FL-BC-IDS, an evidence-native, privacy-aware hierarchical federated IDS in which vehicles train Differentially Private XGBoost models, roadside units perform deterministic admission and tree-bagging aggregation, and the GLOBAL stage forms an equal-weight ensemble over validated RSU models. Signed reports, privacy records, SHA-256/Poseidon commitments, scoped Groth16 proofs, reconstructable public inputs, and digest-pinned blockchain receipts provide a unified verification path. Across 10 seed-controlled runs, the mean ± SD accuracy/F1 values were 0.998021±0.000246/0.983597±0.002053 on CSE-CIC-IDS2018 and 0.999867±0.000152/0.999495±0.000579 on CICIoV2024. With thresholds fixed exclusively from development data, the strict held-out-attack macro recall was 0.8031 and 0.9090 on CSE-CIC-IDS2018 and CICIoV2024, respectively, indicating residual attack-specific generalization limitations; supervised rolling-origin temporal refresh on CSE-CIC-IDS2018 achieved 0.984788 pooled seen-attack recall at a 0.005700 test FPR. A controlled 20-vehicle, eight-round heterogeneity and participation stress test retained 0.998151 accuracy and 0.984782 F1-score. Verification rejected invalid or context-mismatched artifacts and independently checked model–anchor consistency, RSU aggregation replay, commitments, and public inputs. The reported DP budgets are conditional learner-stage bounds for learner-input record instances, not end-to-end guarantees for original pre-preprocessing records.
With the rapid evolution of the Decentralized Finance (DeFi) ecosystem, stablecoins have emerged as a critical infrastructure bridging the cryptocurrency market with traditional financial paradigms. However, stablecoin systems rely heavily on smart contracts to execute automated operations. The immutable nature of these systems post-deployment means that the exploitation of security vulnerabilities can lead to irreversible, massive economic losses and potentially trigger systemic financial risks. Current research on stablecoin smart contract security faces challenges such as a lack of domain-specific targeting and the obsolescence of static defense models. To address this, this paper systematically analyzes common attack vectors in stablecoin environments and proposes a practical, real-time dynamic defense architecture. By analyzing 12 real-world security incidents, we elucidate the underlying mechanisms of high-risk patterns such as reentrancy attacks, oracle manipulation, and composite flash loan attacks. Concurrently, we construct a real-time anomaly detection model utilizing multi-dimensional on-chain temporal features and the Bi-LSTM algorithm. Experimental results demonstrate that this model achieves a classification accuracy of 96.61\%, with an average recall rate of 97.70\% for malicious attack samples, and a single inference latency ranging from 1.5 to 2.8 milliseconds.
In the age of fast industrial digitalization, securing the heterogeneous and high-volume data produced by the Industrial IoT systems is a basic need. The chapter is dedicated to the application of machine learning and deep learning methods in the process of securing multimodal data within the context of Industrial Internet of Things (IIoT). It includes a detailed discussion of multimodal sources of data and the corresponding cyber threat environment, and then it introduces the machine learning (ML)-based and deep learning (DL)-based anomaly detection and intrusion prevention techniques. The chapter reviews the secure architectural designs, which combine edge, fog, and cloud intelligence and privacy-sensitive and trust management schemes like federated learning and blockchain. The practical applicability of such approaches is pointed out by the real-life industrial applications and case studies. The main implementation issues and the performance evaluation metrics are examined to ensure a successful implementation. The chapter ends by highlighting the future directions and new trends, focusing on adaptive, explainable, and resilient intelligent security solutions in next-generation IoT systems of the industrial world.
Recent intrusion detection systems (IDS) increasingly rely on machine learning (ML) and deep learning techniques to detect sophisticated cyberattacks. However, many existing frameworks still suffer from limited explainability, black-box decision-making, and the absence of secure trust verification mechanisms for intrusion records. To address these challenges, this paper proposes TAE-IDS, a Trust-Aware Explainable Intrusion Detection Framework that integrates attention-based meta-ensemble learning, SHapley Additive exPlanations (SHAP)-driven explainability, and blockchain-inspired tamper-evident validation within a unified cybersecurity architecture. The proposed framework employs heterogeneous base classifiers, namely Logistic Regression (LR), Extra Trees (ET), and XGBoost (XGB), to capture diverse network traffic characteristics. Uncertainty-aware meta-features, including logits, confidence scores, and entropy representations, are extracted from the base learners and processed by an adaptive Bidirectional Long Short-Term Memory (BiLSTM) attention-based meta-classifier for contextual intrusion reasoning and adaptive ensemble aggregation. To enhance transparency and analyst trust, SHAP-based explainability is incorporated to provide both global and local interpretations of intrusion predictions. Furthermore, a blockchain-inspired tamper-evident validation mechanism based on SHA-256 cryptographic hashing is integrated to enable tamper-proof intrusion logging, immutable auditing, and secure forensic verification of IDS outputs. The proposed framework was evaluated on the UNSW-NB15 and CICIDS2017 benchmark datasets under both binary and multiclass intrusion detection settings. Experimental results demonstrate that TAE-IDS achieves strong intrusion detection performance, interpretable intrusion reasoning, and effective blockchain-assisted tamper-evident validation on the evaluated benchmark datasets. The integration of explainable artificial intelligence (XAI) and blockchain-assisted validation enhances transparency, forensic traceability, and the integrity of intrusion records while providing a foundation for future validation in operational network environments.
Web security has become a critical domain as modern applications increasingly rely on dynamic user-generated content, making them highly vulnerable to Cross-Site Scripting (XSS) attacks. Traditional detection systems struggle to cope with evolving payload patterns, limited generalisation across institutions, and strict privacy restrictions that prevent sharing of sensitive request logs. To address these challenges, this work proposes a Zero-Knowledge Federated Sequence Learning (ZK-FSL) framework that enables collaborative XSS detection without exposing raw data or intermediate gradients. The model integrates attention-based deep sequence learning with zero-knowledge proof validation, ensuring both strong predictive capability and verifiable trust among participating clients. Experimental evaluation demonstrates that ZK-FSL achieves superior performance compared to centralised and federated baselines, reaching 96.3% accuracy , 96.7% precision , 95.9% recall , 96.3% F1-score , and an AUC of 0.98 . These results confirm that the proposed framework effectively enhances privacy-preserving threat detection while maintaining high robustness against diverse and sophisticated XSS attack patterns.
Network slicing and resource provisioning in 6G focus on creating multiple customized virtual networks over a shared infrastructure. However, these approaches also introduce challenges, like increased architectural complexity, higher implementation costs, security vulnerabilities between slices in resource optimization across highly dynamic and heterogeneous network environments. In this work, Exponentially Tactical Unit Algorithm (ETUA) is devised for network slicing in 6G. Initially, blockchain-enabled 6G network is simulated, and the set of features, like user device type, delay rate and packet loss rate are collected from various devices. Moreover, network slicing is done by ETUA that integrates Exponentially Weighted Moving Average (EWMA) and Tactical Unit Algorithm (TUA). Finally, resource allocation is performed using Attention High-order Deep Network (AHoNet) by considering the parameters that includes bit error probability, sum rate and trust. The efficacy of ETUA is examined by bit error probability, utility and latency with 0.012, 0.950 and 0.509 Sec.
Mahdiyeh Velaei, Mehdi Aminian, Seyyed Amir Asghari, Mohammad Faraji‐Mehmandar
Abstract With the increasing number of Industrial Internet of Things (IIoT) networks, critical infrastructures are now more vulnerable to cyberattacks. In this context, the need for distributed and privacy-preserving intrusion detection systems has become essential. In this paper, we introduce a secure federated learning framework for intrusion detection in IIoT networks that supports model training in non-IID environments without sharing raw data. In this system, each client maintains a lightweight MLP model locally, and a client-level DP-SGD is used to enhance privacy and hashing to maintain update integrity. Also, to consciously select clients and reduce the impact of malicious clients, a reputation-based mechanism is proposed that leverages the ideas of trust management in blockchain, but can be implemented without the need for a full blockchain implementation. The performance of the proposed model on the Edge-IIoTset dataset in binary and multi-class classification and in 3, 5, and 7 clients shows that the proposed model achieves an accuracy of over 98% in all scenarios, which is close to the results of the centralized approach.
Over the past few years, Wireless Sensor Networks (WSNs) have been increasingly deployed for numerous sensing and monitoring purposes in environmental monitoring, industrial automation, health monitoring, military surveillance, smart agriculture and disaster management among others. The inherent limitations in terms of processing power, memory, communication bandwidth and energy of sensor nodes make WSNs highly susceptible to malware attacks. A wide variety of malware such as sensor network worms, Trojans, viruses, botnets and ransomware can easily propagate in a network through inter node communication. Such malware can cause serious damage to communication, compromise sensitive data, consume energy of the infected nodes thereby reducing the lifetime of network among others. In the last decade, numerous approaches have been proposed for the detection of malware infecting sensor nodes. These approaches range from traditional signature-based detection and behavior-based detection to more advanced approaches such as machine learning (ML)-based, deep learning (DL) -based, blockchain-based, trust management-based and federated learning-based detection. Most of the existing approaches for malware detection in WSNs have been designed to work on WSNs and have not been tested on real scenarios. Most of the approaches have their own strengths and weaknesses and the most suitable approach for a given application depends on various factors. In this paper, we present a comprehensive review of approaches for the detection of malware infecting sensor nodes in WSNs. We present a taxonomy of reviewed approaches for detection of malware. We also present a discussion on approaches for modeling malware propagation in a WSN as well as review on various categories of malware that have been designed to attack sensor nodes in WSNs along with detection frameworks for different categories of malware. We also present a comparative study of approaches used for the detection of malware in WSNs on the basis of various parameters such as detection accuracy, computational complexity, energy efficiency, scalability, detection latency and deployability. The review and taxonomy presented in this paper will be highly beneficial for researchers and practitioners designing approaches and systems for the detection of malware in WSNs. Various open research challenges in this area have also been discussed in this paper including detection of zero-day malware, designing of intelligent models to be light enough to be deployed on sensor nodes, use of explainable artificial intelligence for detection of malware in WSNs, designing approaches for privacy-preserving collaborative learning in WSNs and designing adaptive security approaches for WSNs.
Multi-cloud adoption has widened the enterprise attack surface to a degree that perimeter-based defence can no longer address. Traffic is now flowing continuously across AWS, Azure, and GCP, and the majority of deployed Zero Trust Architecture (ZTA) systems are still using static rule tables, with no ability to provide an audit trail of the reasoning behind decisions, and with logs stored in datastores that can be modified by an insider without detection. This paper proposes ZT-ChainGuard, a framework that overcomes these three limitations in one architecture that integrates an ensemble machine learning trust-scoring engine, ZTA policy enforcement and a blockchain-based audit trail. The trust-scoring engine is a two-layer stacking ensemble, with XGBoost and Random Forest as base learners, and Logistic Regression as a meta-learner, and it returns a continuous trust score, P(Attack | flow), for each network flow, which is then used to trigger the ZT policy decision at a threshold of 0.5. The explanation of each decision is provided by SHAP values at both the global and per-flow level, and each decision is stored as an immutable, SHA-256 hash-chained block. On CICIDS2017 (2.83 million flows, 14 attack classes) the framework achieves 99.90% accuracy, 99.71% F1-score, and 99.99% ROC-AUC; on ToN-IoT (2.23 million IoT records, 9 attack types) it achieves 99.81% accuracy, 99.88% F1-score, and 100% ROC-AUC. The latency of inferences is 0.006ms per sample, and the overhead of auditing the blockchain is 0.019ms per block. This performance is not just a quirk of a particular split, as it is shown to be stable across the three folds of three-fold cross validation.
Cloud computing infrastructures are facing serious risks from Distributed-Denial-of Service attacks, which include historically high attack volumes and ineffectiveness of conventional defensive strategies. The usefulness of blockchain based security measures in detecting and preventing DDoS attacks on cloud computing infrastructure is covered in this paper. Analyzed a hybrid approach that integrated distributed ledger technology with smart contracts for the identification of attack patterns across 50 enterprise cloud environments over a period of 18 months. Our results show a reduction of false positives by as much as 87% for blockchain-based validation compared to the conventional approach and a 94% success rate in the detection of advanced DDoS variants. The response time remained, on average, around 2.3 seconds during the high-volume attack in comparison to traditional centralized solutions. The results in the paper gives an idea that an immutable and distributed consensus characteristic based on blockchain provides robust defenses against modern DDoS threats. This work represents a growing body of evidence supporting the validity of incorporating blockchain into the architecture of the next generation of cloud-based security.