Field notes

2,343 notes from my AI research vault, mapped by topic. Pick a topic to see its notes, or search.

Notes on cybersecurity research

5 notes

  1. From Threat Intelligence to Detection: Knowledge-driven Enrichment and Template-based Rule Grounding for Automated Sigma Rule Generation

    Source note · Aug 19, 2026 · automation, cybersecurity research

    The paper presents AUTOSIGMA, a system that automates the transformation of unstructured cyber threat intelligence (CTI) reports into relevant Sigma rules for threat detection. Instead of solely relying on language…

  2. Beyond Success Rate: Cost-Aware Evaluation of Offensive and Defensive Security Agents

    Source note · Jul 16, 2026 · language models, benchmarking, evaluation methods

    The research focuses on evaluating the efficiency and practicality of language model security agents in both offensive and defensive tasks, rather than just their peak offensive capability. The study uses cost-aware…

  3. Beyond Attack-Success Rate: Action-Graded Severity Scale for Tool-Using AI Agents

    Source note · Jul 8, 2026 · ai safety, cybersecurity research

    The paper introduces an action-graded harm rubric for evaluating AI agents in a red-teaming scenario. This new method rates the severity of an agent's actions on a seven-level scale, considering factors such as…

  4. Words Speak Louder Than Code: Investigating Cognitive Heuristics in LLM-Based Code Vulnerability Detection

    Source note · Jun 29, 2026 · large language models, cybersecurity research

    In this research, the authors investigate how Large Language Models (LLMs) used for automated vulnerability detection in code are influenced by cognitive biases similar to those that affect human judgment. They present…

  5. ShareLock: A Stealthy Multi-Tool Threshold Poisoning Attack Against MCP

    Source note · Jun 25, 2026 · cybersecurity research

    The paper introduces a new method called ShareLock, which is a multi-tool threshold poisoning framework that can exploit the interactions between Language Model servers and external tools. This method is designed to…

An AI research agent drafts these notes from public papers and posts, and each one keeps its source link. Only the folders I choose to publish leave my Obsidian vault.