arXiv subjects

Hongming Fei

Publications and source records attributed to Hongming Fei.

9 recordsLinked to original sources

arXiv2026

Selection Integrity for LLM Graph Memory: An Accumulability Criterion for Information-Flow-Blind Retrieval

Agent memory is moving to graphs, and the provenance defenses now being built for it all check one thing: the provenance of the records an agent retrieves. We show that this entire class of defense is blind by construction. A long-term graph memory runs a global selection step over writable graph structure, so structure that an untrusted principal writes changes \emph{which} authenticated facts are selected while the cited evidence stays fully authenticated; faithful information-flow control (IFC), checking the provenance of what the reader uses (all of it authenticated), makes the byte-identical decision to no defense at all, across document-QA substrates and real multi-session agent memory. In the most consequential instance, a no-source structural write silently misdirects $28$ irreversible ledger transfers over $499$ live actions: faithful IFC permits every one, and \authselect\ prevents every one. We then characterize exactly which memories are exposed: a selector admits the channel when its structural term can reallocate an $\Omega(1)$ share of top-$k$ membership past a selected fact's margin. Personalized PageRank can, since a sourceless write reroutes conserved random-walk mass; a content-fixed reranker cannot, and Graphiti's node-distance, which leans on structure \emph{more} than PageRank does, stays immune. Reallocatability, not reliance, is the predictor. We prove the immune case in general and the open case under a chokepoint condition we verify. Closing the channel forces any provenance defense to recompute selection on the authenticated subgraph, which is what \authselect\ does, at zero over-block and $2$--$3\%$ latency.

cs.CR↗

arXiv2026

Quantifying Memory Cells Vulnerability for DRAM Security

Dynamic Random Access Memory (DRAM) is pervasive in computer systems. Cell vulnerabilities caused by unintended phenomena (forced retention failure, latency alteration, rowhammer and rowpress) lead to unintended bit flips in memory. These phenomena have been explored as attacks to violate data integrity and confidentiality during normal operation, but also exploited as a benefit in security systems as a method to generate random secret keys and unique device fingerprints (e.g. Physically Unclonable Functions). In both cases, attackers may wish to exploit knowledge of individual cell flip vulnerability to predict the current/future data contents of a set of cells, which can be utilised to break security systems. In this work, we develop a quantitative, cell-level circuit framework that models DRAM vulnerability directly from its physical charge leakage and disturbance pathways. By linking these device-layer behaviours to system-level security properties, our framework enables systematic evaluation of DRAM with respect to volatility (retention), integrity (disturbance-induced modification), and confidentiality (pattern-dependent leakage). We further demonstrate how the framework can be applied to well-known failure modes, revealing non-uniform and context-dependent vulnerability patterns. This work provides both theoretical foundations and practical evaluation tools for evaluating the suitability of DRAM use within security applications.

cs.CR↗

arXiv2026

Unified Framework for Qualifying Security Boundary of PUFs Against Machine Learning Attacks

Physical Unclonable Functions (PUFs) serve as lightweight, hardware-intrinsic entropy sources widely deployed in IoT security applications. However, delay-based PUFs are vulnerable to Machine Learning Attacks (MLAs), undermining their assumed unclonability. There are no valid metrics for evaluating PUF MLA resistance, but empirical modelling experiments, which lack theoretical guarantees and are highly sensitive to advances in machine learning techniques. To address the fundamental gap between PUF designs and security qualifications, this work proposes a novel, formal, and unified framework for evaluating PUF security against modelling attacks by providing security lower bounds, independent of specific attack models or learning algorithms. We mathematically characterise the adversary's advantage in predicting responses to unseen challenges based solely on observed challenge-response pairs (CRPs), formulating the problem as a conditional probability estimation over the space of candidate PUFs. We present our analysis on previous "broken" PUFs, e.g., Arbiter PUFs, XOR PUFs, Feed-Forward PUFs, and for the first time compare their MLA resistance in a formal way. In addition, we evaluate the currently "secure" CT PUF, and show its security boundary. We demonstrate that the proposed approach systematically quantifies PUF resilience, captures subtle security differences, and provides actionable, theoretically grounded security guarantees for the practical deployment of PUFs.

cs.CR↗

arXiv2025

Broadband source-surrounded cloak for on-chip antenna radiation pattern protection

As the frequency range of electromagnetic wave communication continues to expand and the integration of integrated circuits increases, electromagnetic waves emitted by on-chip antennas are prone to scattering from electronic components, which limits further improvements in integration and the protection of radiation patterns. Cloaks can be used to reduce electromagnetic scattering; however, they cannot achieve both broadband and omnidirectional effectiveness simultaneously. Moreover, their operating modes are typically designed for scenarios where the source is located outside the cloak, making it difficult to address this problem. In this work, we propose a dispersionless air-impedance-matched metamaterial over the 2-8 GHz bandwidth that achieves an adjustable effective refractive index ranging from 1.1 to 1.5, with transmittance maintained above 93%. Based on this metamaterial, we introduce a broadband source-surrounded cloak that can guide electromagnetic waves from a broadband source surrounded by the cloak in any propagation direction to bypass obstacles and reproduce the original wavefronts outside the cloak. Thereby protecting the radiation pattern from distortion due to scattering caused by obstacles. Our work demonstrates significant potential for enhancing the integration density of integrated circuits and improving the operational stability of communication systems.

physics.optics↗

arXiv2024

PhenoAuth: A Novel PUF-Phenotype-based Authentication Protocol for IoT Devices

Physical Unclonable Functions (PUFs) have been shown to be a highly promising solution for enabling high security systems tailored for low-power devices. Commonly, PUFs are utilised to generate cryptographic keys on-the-fly, replacing the need to store keys in vulnerable, non-volatile memories. Due to the physical nature of PUFs, environmental variations cause noise, manifesting themselves as errors which are apparent in the initial PUF measurements. This necessitates expensive active error correction techniques which can run counter to the goal of lightweight security. ML-based techniques for authenticating noisy PUF measurements were explored as an alternative to error correction techniques, bringing about the concept of a PUF Phenotype, where PUF identity is considered as a structure agnostic representation of the PUF, with relevant noise encoding. This work proposes a full noise-tolerant authentication protocol based on the PUF Phenotype concept and methodology for an Internet-of-Things (IoT) network, demonstrating mutual authentication and forward secrecy in a setting suitable for device-to-device communication. Upon conducting security and performance analyses, it is evident that our proposed scheme demonstrates resilience against various attacks compared to the currently existing PUF protocols.

cs.CR↗

arXiv2024

Attacking Delay-based PUFs with Minimal Adversary Model

Physically Unclonable Functions (PUFs) provide a streamlined solution for lightweight device authentication. Delay-based Arbiter PUFs, with their ease of implementation and vast challenge space, have received significant attention; however, they are not immune to modelling attacks that exploit correlations between their inputs and outputs. Research is therefore polarized between developing modelling-resistant PUFs and devising machine learning attacks against them. This dichotomy often results in exaggerated concerns and overconfidence in PUF security, primarily because there lacks a universal tool to gauge a PUF's security. In many scenarios, attacks require additional information, such as PUF type or configuration parameters. Alarmingly, new PUFs are often branded `secure' if they lack a specific attack model upon introduction. To impartially assess the security of delay-based PUFs, we present a generic framework featuring a Mixture-of-PUF-Experts (MoPE) structure for mounting attacks on various PUFs with minimal adversarial knowledge, which provides a way to compare their performance fairly and impartially. We demonstrate the capability of our model to attack different PUF types, including the first successful attack on Heterogeneous Feed-Forward PUFs using only a reasonable amount of challenges and responses. We propose an extension version of our model, a Multi-gate Mixture-of-PUF-Experts (MMoPE) structure, facilitating multi-task learning across diverse PUFs to recognise commonalities across PUF designs. This allows a streamlining of training periods for attacking multiple PUFs simultaneously. We conclude by showcasing the potent performance of MoPE and MMoPE across a spectrum of PUF types, employing simulated, real-world unbiased, and biased data sets for analysis.

cs.CR↗

arXiv2022

High-performance chiral all-optical logic gate based on topological edge states of valley photonic crystal

For all-optical communication and information processing, it is necessary to develop all-optical logic gates based on photonic structures that can directly perform logic operations. All-optical logic gates have been demonstrated based on conventional waveguides and interferometry, as well as photonic crystal structures. Nonetheless, any defects in those structures will introduce high scattering loss, which compromises the fidelity and contrast ratio of the information process. Based on the spin-valley locking effect that can achieve defect-immune unidirectional transmission of topological edge states in valley photonic crystals (VPCs), we propose a high-performance all-optical logic OR gate based on a VPC structure. By tuning the working bandwidth of the two input channels, we prevent interference between the two channels to achieve a stable and high-fidelity output. The transmittance of both channels is higher than 0.8, and a high contrast ratio of 28.8 dB is achieved. Moreover, the chirality of the logic gate originated from the spin-valley locking effect allows using different circularly polarized light as inputs, representing "1" or "0", which is highly desired in quantum computing. The device's footprint is small, allowing high-density on-chip integration. In addition, this design can be experimentally fabricated using current nanofabrication techniques and will have potential applications in optical communication, information processing, and quantum computing.

physics.optics↗

arXiv2022

On-chip ultra-compact hexagonal boron nitride topological ring-resonator in visible region

Ultra-compact topological ring-resonators with chirality are important devices for quantum optics. However, there are limited demonstrations of chiral resonators, especially in the visible region. We proposed a topological photonic ring-resonator based on hexagonal boron nitride (hBN) valley photonic crystal (VPC). The spin-valley locking effect in VPC allows achieving robust unidirectional transmission of edge states in the visible region (600 nm-650 nm). As a result, a high quality factor (679.3) with a free spectral range of 15.2 nm in the visible region can be achieved in a hBN all-pass filter with a compact size. In addition, we investigated the transmission properties of hBN ring-resonators with different shapes and combinations, confirming the flexibility of designing topological ring-resonators based on this principle. This design can be readily integrated with quantum photonic chips for broad applications.

physics.optics↗

arXiv2018

A nanophotonic all-optical diode for non-reciprocal transmission of circularly polarized lights

All optical diodes (AODs) play an important role in quantum optics and information processing, in which the information is encoded by photons. Only circularly polarized lights are able to carry the spin states of photons, which has been intensively used in quantum computing and information processing and enable new research fields, such as chiral quantum optics. An ideal AOD should be able to work with arbitrary polarizations states, including circularly polarized lights, which has not been demonstrated yet. In this paper, we theoretically demonstrate for the first time a nanophotonic AOD that is able to work with circularly polarized lights. The AOD nanostructure is based on a heterostructure of two-dimension silica and silicon photonic crystals (PhCs). By controlling the effective refractive indices of the PhCs and using an inclined interface, we are able to exploit generalized total reflection principle to achieve non-reciprocal transmission of circularly polarized lights. In addition, the nanophotonic AOD is able to achieve high forward transmittance greater than 0.6 and high contrast ratio close to 1 in a broad wavelength range of 1497 nm to 1666 nm. The designed nanophotonic AOD will find broad applications in optical quantum information processing and computing.

physics.optics↗