arXiv subjects

Yong Fang

Publications and source records attributed to Yong Fang.

At least 19 recordsLinked to original sources

arXiv2026

MalSkillBench: A Runtime-Verified Benchmark of Malicious Agent Skills

AI coding agents such as Claude Code and Gemini CLI increasingly extend themselves with third-party skills: markdown packages bundling natural-language instructions, executable scripts, and tool permissions. Because a skill is at once code and agent-facing instruction, it introduces a supply chain dependency whose risk is neither pure code nor pure prompt. Detection tools have never been measured against verified ground truth spanning this hybrid space, leaving their effectiveness unknown and wild-only evaluations biased. We present MalSkillBench, the first runtime-verified benchmark of malicious agent skills: 3,944 malicious skills labeled along a three-dimensional taxonomy of 108 cells. Of these, 3,214 come from a closed-loop Generate-Verify-Feedback pipeline admitting only samples whose malicious behavior fires inside a Docker sandbox under system-call monitoring and an LLM judge; we add 703 in-the-wild and 4,000 matched benign skills. Our measurements are consistent: code injection reaches 94.5% verification yield but prompt injection only 75.8%, the same fragility that later makes it hard to detect; the wild sample is narrow, dominated by one cryptocurrency-theft campaign (86.6% one behavior, 81% from two accounts) with a small but architecturally new tail attacking the agent control plane; the strongest skill-specific detector reaches 98.4% recall on code injection yet collapses on prompt-injection and agent-control attacks, and wild-only scoring swings the ranking by up to 66 recall points; supply-chain scanners and prompt-injection defenses each see only half of a skill, and no combination recovers the code-instruction relationship. Detecting malicious skills therefore requires reasoning jointly over task intent, code, and instructions. We release the dataset, pipeline, baselines, and results.

cs.CR↗

arXiv2026

StreamShield: A Production-Proven Resiliency Solution for Apache Flink at ByteDance

Distributed Stream Processing Systems (DSPSs) form the backbone of real-time processing and analytics at ByteDance, where Apache Flink powers one of the largest production clusters worldwide. Ensuring resiliency, the ability to withstand and rapidly recover from failures, together with operational stability, which provides consistent and predictable performance under normal conditions, is essential for meeting strict Service Level Objectives (SLOs). However, achieving resiliency and stability in large-scale production environments remains challenging due to the cluster scale, business diversity, and significant operational overhead. In this work, we present StreamShield, a production-proven resiliency solution deployed in ByteDance's Flink clusters. Designed along complementary perspectives of the engine and cluster, StreamShield introduces key techniques to enhance resiliency, covering runtime optimization, fine-grained fault-tolerance, hybrid replication strategy, and high availability under external systems. Furthermore, StreamShield proposes a robust testing and deployment pipeline that ensures reliability and robustness in production releases. Extensive evaluations on a production cluster demonstrate the efficiency and effectiveness of techniques proposed by StreamShield.

cs.DB↗

arXiv2026

Okara: Detection and Attribution of TLS Man-in-the-Middle Vulnerabilities in Android Apps with Foundation Models

Transport Layer Security (TLS) is fundamental to secure online communication, yet vulnerabilities in certificate validation that enable Man-in-the-Middle (MitM) attacks remain a pervasive threat in Android apps. Existing detection tools are hampered by low-coverage UI interaction, costly instrumentation, and a lack of scalable root-cause analysis. We present Okara, a framework that leverages foundation models to automate the detection and deep attribution of TLS MitM Vulnerabilities (TMVs). Okara's detection component, TMV-Hunter, employs foundation model-driven GUI agents to achieve high-coverage app interaction, enabling efficient vulnerability discovery at scale. Deploying TMV-Hunter on 37,349 apps from Google Play and a third-party store revealed 8,374 (22.42%) vulnerable apps. Our measurement shows these vulnerabilities are widespread across all popularity levels, affect critical functionalities like authentication and code delivery, and are highly persistent with a median vulnerable lifespan of over 1,300 days. Okara's attribution component, TMV-ORCA, combines dynamic instrumentation with a novel LLM-based classifier to locate and categorize vulnerable code according to a comprehensive new taxonomy. This analysis attributes 41% of vulnerabilities to third-party libraries and identifies recurring insecure patterns, such as empty trust managers and flawed hostname verification. We have initiated a large-scale responsible disclosure effort and will release our tools and datasets to support further research and mitigation.

cs.CR↗

arXiv2025

Multivariate Time Series Forecasting with Hybrid Euclidean-SPD Manifold Graph Neural Networks

Multivariate Time Series (MTS) forecasting plays a vital role in various real-world applications, such as traffic management and predictive maintenance. Existing approaches typically model MTS data in either Euclidean or Riemannian space, limiting their ability to capture the diverse geometric structures and complex spatio-temporal dependencies inherent in real-world data. To overcome this limitation, we propose the Hybrid Symmetric Positive-Definite Manifold Graph Neural Network (HSMGNN), a novel graph neural network-based model that captures data geometry within a hybrid Euclidean-Riemannian framework. To the best of our knowledge, this is the first work to leverage hybrid geometric representations for MTS forecasting, enabling expressive and comprehensive modeling of geometric properties. Specifically, we introduce a Submanifold-Cross-Segment (SCS) embedding to project input MTS into both Euclidean and Riemannian spaces, thereby capturing spatio-temporal variations across distinct geometric domains. To alleviate the high computational cost of Riemannian distance, we further design an Adaptive-Distance-Bank (ADB) layer with a trainable memory mechanism. Finally, a Fusion Graph Convolutional Network (FGCN) is devised to integrate features from the dual spaces via a learnable fusion operator for accurate prediction. Experiments on three benchmark datasets demonstrate that HSMGNN achieves up to a 13.8 percent improvement over state-of-the-art baselines in forecasting accuracy.

cs.LG↗

arXiv2025

The Agent Behavior: Model, Governance and Challenges in the AI Digital Age

Advancements in AI have led to agents in networked environments increasingly mirroring human behavior, thereby blurring the boundary between artificial and human actors in specific contexts. This shift brings about significant challenges in trust, responsibility, ethics, security and etc. The difficulty in supervising of agent behaviors may lead to issues such as data contamination and unclear accountability. To address these challenges, this paper proposes the "Network Behavior Lifecycle" model, which divides network behavior into 6 stages and systematically analyzes the behavioral differences between humans and agents at each stage. Based on these insights, the paper further introduces the "Agent for Agent (A4A)" paradigm and the "Human-Agent Behavioral Disparity (HABD)" model, which examine the fundamental distinctions between human and agent behaviors across 5 dimensions: decision mechanism, execution efficiency, intention-behavior consistency, behavioral inertia, and irrational patterns. The effectiveness of the model is verified through real-world cases such as red team penetration and blue team defense. Finally, the paper discusses future research directions in dynamic cognitive governance architecture, behavioral disparity quantification, and meta-governance protocol stacks, aiming to provide a theoretical foundation and technical roadmap for secure and trustworthy human-agent collaboration.

cs.AI↗

arXiv2025

Overlapped Arithmetic Codes

Arithmetic codes are usually deemed as the most important means to implement lossless source coding, whose principle is mapping every source symbol to a sub-interval in [0, 1). For every source symbol, the length of its mapping sub-interval is exactly equal to its probability. With this symbol-interval mapping rule, the interval [0,1) will be fully covered and there is neither overlapped sub-interval (corresponds to more than one source symbol) nor forbidden sub-interval (does not correspond to any source symbol). It is well-known that there is a duality between source coding and channel coding, so every good source code may also be a good channel code meanwhile, and vice versa. Inspired by this duality, arithmetic codes can be easily generalized to address many coding problems beyond source coding by redefining the source-interval mapping rule. If every source symbol is mapped to an enlarged sub-interval, the mapping sub-intervals of different source symbols will be partially overlapped and we obtain overlapped arithmetic codes, which can realize distributed source coding. On the contrary, if every source symbol is mapped to a narrowed sub-interval, there will be one or more forbidden sub-intervals in [0, 1) that do not correspond to any source symbol and we obtain forbidden arithmetic codes, which can implement joint source-channel coding. Furthermore, by allowing the coexistence of overlapped sub-intervals and forbidden sub-intervals, we will obtain hybrid arithmetic codes, which can cope with distributed joint source-channel coding.

cs.IT↗

arXiv2025

Axial Behaviour of Pre-Damaged RC Short Columns Retrofitted with Square Corrugated Steel Jackets

This study proposes a strengthening method employing square corrugated steel jackets as external confinement, which significantly enhances both the bearing capacity and ductility of existing reinforced concrete (RC) columns. Axial compression tests were conducted on ten short column specimens to evaluate the effects of corrugated steel thickness (1.6, 2.0, and 2.7 mm), preloading level before jacketing (40%, 60%, and 100% of the original capacity), and connection type (welding vs. bolting). A computational model was developed to predict the ultimate bearing capacity of the strengthened sections. The main findings are as follows: (1) The corrugated steel jackets increased the ultimate bearing capacity of the existing RC columns by 34.6% to 67.3%. (2) Given the relatively low confinement efficiency in square sections, thinner corrugated steel plates can be used in a material-efficient manner to achieve comparable strengthening effects. (3) Fully welded connections between corrugated plates induce less stress concentration and provide better transverse confinement effectiveness compared to bolted connections. (4) In a pre-unloaded column, greater existed damage causes concrete softening and increased lateral expansion under re-compression. This dilation promotes a tighter interaction between the core concrete and the outer jacket, activating stronger passive confinement after being jacketed. (5) The low longitudinal stresses in the jacket indicate that its primary role is to provide lateral confinement rather than to resist axial loads directly. (6) It is recommended to employ a calculation method that accounts for both pre-damage and confinement effects to ensure a conservative and reliable design of corrugated steel-jacketed RC columns with pre-damage.

math.NA↗

arXiv2024

SpearBot: Leveraging Large Language Models in a Generative-Critique Framework for Spear-Phishing Email Generation

Large Language Models (LLMs) are increasingly capable, aiding in tasks such as content generation, yet they also pose risks, particularly in generating harmful spear-phishing emails. These emails, crafted to entice clicks on malicious URLs, threaten personal information security. This paper proposes an adversarial framework, SpearBot, which utilizes LLMs to generate spear-phishing emails with various phishing strategies. Through specifically crafted jailbreak prompts, SpearBot circumvents security policies and introduces other LLM instances as critics. When a phishing email is identified by the critic, SpearBot refines the generated email based on the critique feedback until it can no longer be recognized as phishing, thereby enhancing its deceptive quality. To evaluate the effectiveness of SpearBot, we implement various machine-based defenders and assess how well the phishing emails generated could deceive them. Results show these emails often evade detection to a large extent, underscoring their deceptive quality. Additionally, human evaluations of the emails' readability and deception are conducted through questionnaires, confirming their convincing nature and the significant potential harm of the generated phishing emails.

cs.CR↗

arXiv2024

Room temperature quantum metric effect in TbMn6Sn6

Quantum geometry, including Berry curvature and the quantum metric, of the electronic Bloch bands has been studied via nonlinear responses in topological materials. Naturally, these material systems with intrinsic strong nonlinear responses also form the key component in nonlinear electronic devices. However, the previous reported quantum geometry effects are mainly observed at cryogenic temperatures, hindering their application in practical devices. Here we report the tuneable strong room-temperature second-harmonic transport response in a quantum magnet, TbMn6Sn6, which is governed by the quantum metric and can be tuned with applied magnetic fields. We show that around room temperature, which is close to the spontaneous spin-reorientation transition, the magnetic configurations, and therefore the related symmetry breaking phases, are easily controlled via magnetic fields. Our results also show that manipulation of the symmetries of the magnetic structure presents an effective route to tuneable quantum-geometry-based devices.

cond-mat.mtrl-sci↗

arXiv2024

Information Compression in the AI Era: Recent Advances and Future Challenges

This survey articles focuses on emerging connections between the fields of machine learning and data compression. While fundamental limits of classical (lossy) data compression are established using rate-distortion theory, the connections to machine learning have resulted in new theoretical analysis and application areas. We survey recent works on task-based and goal-oriented compression, the rate-distortion-perception theory and compression for estimation and inference. Deep learning based approaches also provide natural data-driven algorithmic approaches to compression. We survey recent works on applying deep learning techniques to task-based or goal-oriented compression, as well as image and video compression. We also discuss the potential use of large language models for text compression. We finally provide some directions for future research in this promising field.

cs.IT↗

arXiv2024

Dissecting Open Edge Computing Platforms: Ecosystem, Usage, and Security Risks

Emerging in recent years, open edge computing platforms (OECPs) claim large-scale edge nodes, the extensive usage and adoption, as well as the openness to any third parties to join as edge nodes. For instance, OneThingCloud, a major OECP operated in China, advertises 5 million edge nodes, 70TB bandwidth, and 1,500PB storage. However, little information is publicly available for such OECPs with regards to their technical mechanisms and involvement in edge computing activities. Furthermore, different from known edge computing paradigms, OECPs feature an open ecosystem wherein any third party can participate as edge nodes and earn revenue for the contribution of computing and bandwidth resources, which, however, can introduce byzantine or even malicious edge nodes and thus break the traditional threat model for edge computing. In this study, we conduct the first empirical study on two representative OECPs, which is made possible through the deployment of edge nodes across locations, the efficient and semi-automatic analysis of edge traffic as well as the carefully designed security experiments. As the results, a set of novel findings and insights have been distilled with regards to their technical mechanisms, the landscape of edge nodes, the usage and adoption, and the practical security/privacy risks. Particularly, millions of daily active edge nodes have been observed, which feature a wide distribution in the network space and the extensive adoption in content delivery towards end users of 16 popular Internet services. Also, multiple practical and concerning security risks have been identified along with acknowledgements received from relevant parties, e.g., the exposure of long-term and cross-edge-node credentials, the co-location with malicious activities of diverse categories, the failures of TLS certificate verification, the extensive information leakage against end users, etc.

cs.CR↗

arXiv2024

Sliding-mediated ferroelectric phase transition in CuInP2S6 under pressure

Interlayer stacking order has recently emerged as a unique degree of freedom to control crystal symmetry and physical properties in two-dimensional van der Waals (vdW) materials and heterostructures. By tuning the layer stacking pattern, symmetry-breaking and electric polarization can be created in otherwise non-polar crystals, whose polarization reversal depends on the interlayer sliding motion. Herein, we demonstrate that in a vdW layered ferroelectric, its existing polarization is closely coupled to the interlayer sliding driven by hydrostatic pressure. Through combined structural, electrical, vibrational characterizations, and theoretical calculations, we clearly map out the structural evolution of CuInP2S6 under pressure. A tendency towards a high polarization state is observed in the low-pressure region, followed by an interlayer-sliding-mediated phase transition from a monoclinic to a trigonal phase. Along the transformation pathway, the displacive-instable Cu ion serves as a pivot point that regulates the interlayer interaction in response to external pressure. The rich phase diagram of CuInP2S6, which is enabled by stacking orders, sheds light on the physics of vdW ferroelectricity and opens an alternative route to tailoring long-range order in vdW layered crystals.

cond-mat.mtrl-sci↗

arXiv2023

Graph Mining for Cybersecurity: A Survey

The explosive growth of cyber attacks nowadays, such as malware, spam, and intrusions, caused severe consequences on society. Securing cyberspace has become an utmost concern for organizations and governments. Traditional Machine Learning (ML) based methods are extensively used in detecting cyber threats, but they hardly model the correlations between real-world cyber entities. In recent years, with the proliferation of graph mining techniques, many researchers investigated these techniques for capturing correlations between cyber entities and achieving high performance. It is imperative to summarize existing graph-based cybersecurity solutions to provide a guide for future studies. Therefore, as a key contribution of this paper, we provide a comprehensive review of graph mining for cybersecurity, including an overview of cybersecurity tasks, the typical graph mining techniques, and the general process of applying them to cybersecurity, as well as various solutions for different cybersecurity tasks. For each task, we probe into relevant methods and highlight the graph types, graph approaches, and task levels in their modeling. Furthermore, we collect open datasets and toolkits for graph-based cybersecurity. Finally, we outlook the potential directions of this field for future research.

cs.CR↗

arXiv2023

An Empirical Study of Malicious Code In PyPI Ecosystem

PyPI provides a convenient and accessible package management platform to developers, enabling them to quickly implement specific functions and improve work efficiency. However, the rapid development of the PyPI ecosystem has led to a severe problem of malicious package propagation. Malicious developers disguise malicious packages as normal, posing a significant security risk to end-users. To this end, we conducted an empirical study to understand the characteristics and current state of the malicious code lifecycle in the PyPI ecosystem. We first built an automated data collection framework and collated a multi-source malicious code dataset containing 4,669 malicious package files. We preliminarily classified these malicious code into five categories based on malicious behaviour characteristics. Our research found that over 50% of malicious code exhibits multiple malicious behaviours, with information stealing and command execution being particularly prevalent. In addition, we observed several novel attack vectors and anti-detection techniques. Our analysis revealed that 74.81% of all malicious packages successfully entered end-user projects through source code installation, thereby increasing security risks. A real-world investigation showed that many reported malicious packages persist in PyPI mirror servers globally, with over 72% remaining for an extended period after being discovered. Finally, we sketched a portrait of the malicious code lifecycle in the PyPI ecosystem, effectively reflecting the characteristics of malicious code at different stages. We also present some suggested mitigations to improve the security of the Python open-source ecosystem.

cs.SE↗

arXiv2023

Bridging Hamming Distance Spectrum with Coset Cardinality Spectrum for Overlapped Arithmetic Codes

Overlapped arithmetic codes, featured by overlapped intervals, are a variant of arithmetic codes that can be used to implement Slepian-Wolf coding. To analyze overlapped arithmetic codes, we have proposed two theoretical tools: Coset Cardinality Spectrum (CCS) and Hamming Distance Spectrum (HDS). The former describes how source space is partitioned into cosets (equally or unequally), and the latter describes how codewords are structured within each coset (densely or sparsely). However, until now, these two tools are almost parallel to each other, and it seems that there is no intersection between them. The main contribution of this paper is bridging HDS with CCS through a rigorous mathematical proof. Specifically, HDS can be quickly and accurately calculated with CCS in some cases. All theoretical analyses are perfectly verified by simulation results.

cs.IT↗

arXiv2023

Coexistence of Logarithmic and SdH Quantum Oscillations in Ferromagnetic Cr-doped Tellurium Single Crystals

We report the synthesis of transition-metal-doped ferromagnetic elemental single-crystal semiconductors with quantum oscillations using the physical vapor transport method. The 7.7 atom% Cr-doped Te crystals (Cr_Te) show ferromagnetism, butterfly-like negative magnetoresistance in the low temperature (< 3.8 K) and low field (< 0.15 T) region, and high Hall mobility, e.g., 1320 cm2 V-1 s-1 at 30 K and 350 cm2 V-1 s-1 at 300 K, implying that Cr_Te crystals are ferromagnetic elemental semiconductors. When B // c // I, the maximum negative MR is -27% at T = 20 K and B = 8 T. In the low temperature semiconducting region, Cr_Te crystals show strong discrete scale invariance dominated logarithmic quantum oscillations when the direction of the magnetic field B is parallel to the [100] crystallographic direction and show Landau quantization dominated Shubnikov-de Haas (SdH) oscillations for B // [210] direction, which suggests the broken rotation symmetry of the Fermi pockets in the Cr_Te crystals. The findings of coexistence of multiple quantum oscillations and ferromagnetism in such an elemental quantum material may inspire more study of narrow bandgap semiconductors with ferromagnetism and quantum phenomena.

cond-mat.mtrl-sci↗

arXiv2023

Antiferromagnetic topological insulating state in Tb$_{0.02}$Bi$_{1.08}$Sb$_{0.9}$Te$_2$S single crystals

Topological insulators are emerging materials with insulating bulk and symmetry protected nontrivial surface states. One of the most fascinating transport behaviors in a topological insulator is the quantized anomalous Hall insulator, which has been observed inmagnetic-topological-insulator-based devices. In this work, we report a successful doping of rare earth element Tb into Bi$_{1.08}$Sb$_{0.9}$Te$_2$S topological insulator single crystals, in which the Tb moments are antiferromagnetically ordered below ~10 K. Benefiting from the in-bulk-gap Fermi level, transport behavior dominant by the topological surface states is observed below ~ 150 K. At low temperatures, strong Shubnikov-de Haas oscillations are observed, which exhibit 2D-like behavior. The topological insulator with long range magnetic ordering in rare earth doped Bi$_{1.08}$Sb$_{0.9}$Te$_2$S single crystal provides an ideal platform for quantum transport studies and potential applications.

cond-mat.mtrl-sci↗

arXiv2021

Topological quantum phase transition in the magnetic semimetal HoSb

Magnetic topological semimetals, a novel state of quantum matter with nontrivial band topology, have emerged as a new frontier in physics and materials science. An external stimulus like temperature or magnetic field could be expected to alter their spin states and thus the Fermi surface anisotropies and topological features. Here, we perform the angular magnetoresistance measurements and electronic band structure calculations to reveal the evolution of HoSb's Fermi surface anisotropies and topological nature in different magnetic states. The angular magnetoresistance results manifest that its Fermi surface anisotropy is robust in the paramagnetic state but is significantly modulated in the antiferromagnetic and ferromagnetic states. More interestingly, a transition from the trivial (nontrivial) to nontrivial (trivial) topological electronic phase is observed when HoSb undergoes a magnetic transition from the paramagnetic (antiferromagnetic) to antiferromagnetic (ferromagnetic) state induced by temperature (applied magnetic field). Our studying suggests that HoSb provides an archetype platform to study the correlations between magnetism and topological states of matter.

cond-mat.mtrl-sci↗