Slide
Centre Interdisciplinaire
de Recherche et d’Innovation
en Cybersécurité et Société
de Recherche et d’Innovation
en Cybersécurité et Société
1.
Dang, L. B.; Truong, V. Tuan; Le, L. B.; Falk, T. H.
EM-Auth: A Generalizable Eye-Movement Authentication Framework using Event Cameras Proceedings Article
In: IEEE Conf. Artif. Intell., CAI, pp. 2064–2069, Institute of Electrical and Electronics Engineers Inc., 2026, ISBN: 979-833156039-3 (ISBN), (Journal Abbreviation: IEEE Conf. Artif. Intell., CAI).
Abstract | Links | BibTeX | Tags: augmented reality, Authentication, Cameras, Convolutional neural networks, Data privacy, Eye movement patterns, Eye movements, eye tracking, Eye-tracking, Frame-based, High power consumption, Neuromorphic vision sensors, Power potential, Privacy concerns, Temporal resolution, Transfer learning, User authentication, Virtual and augmented reality, virtual reality
@inproceedings{dangEMAuthGeneralizableEyeMovement2026,
title = {EM-Auth: A Generalizable Eye-Movement Authentication Framework using Event Cameras},
author = {L. B. Dang and V. Tuan Truong and L. B. Le and T. H. Falk},
url = {https://www.scopus.com/pages/publications/105042114237?origin=resultslist},
doi = {10.1109/CAI68641.2026.11536355},
isbn = {979-833156039-3 (ISBN)},
year = {2026},
date = {2026-01-01},
booktitle = {IEEE Conf. Artif. Intell., CAI},
pages = {2064–2069},
publisher = {Institute of Electrical and Electronics Engineers Inc.},
abstract = {With the rapid emergence of virtual and augmented reality (VR/AR) head-mounted devices that closely interact with users' eyes, eye-tracking-based applications are becoming increasingly promising. Among them, eye movement patterns have emerged as a reliable biometric modality for user authentication. However, existing solutions based on conventional frame-based cameras face significant limitations, including low temporal resolution, high latency, high power consumption, and potential privacy concerns due to the detailed appearance captured around the eyes. To address these challenges, we propose EM-Auth, a novel framework for eye-tracking-based user authentication that leverages event cameras, a type of neuromorphic vision sensor providing asynchronous, high-temporal-resolution data, while preserving user privacy. Our method introduces a two-stage spatiotemporal feature extraction pipeline: first, a lightweight convolutional neural network (CNN) extracts spatial features from event streams; second, a transformer-based module models the temporal dependencies to generate robust eye representations. Extensive experiments show that our framework significantly outperforms existing state-of-the-art (SOTA) methods, achieving 0.008 and 0.015 equal error rates (EERs) on two representative datasets. Notably, EM-Auth demonstrates a strong generalization capability. In a zero-shot setting where the model is trained on a specific dataset and evaluated on previously unseen users, our approach achieves authentication accuracies of 98.4% and 95.9% on the EV-Eye and EBV-Eye datasets, respectively. Under cross-dataset evaluation, our framework achieves an authentication accuracy of nearly 85% without additional fine-tuning, and consistently improves performance through transfer learning. © 2026 IEEE.},
note = {Journal Abbreviation: IEEE Conf. Artif. Intell., CAI},
keywords = {augmented reality, Authentication, Cameras, Convolutional neural networks, Data privacy, Eye movement patterns, Eye movements, eye tracking, Eye-tracking, Frame-based, High power consumption, Neuromorphic vision sensors, Power potential, Privacy concerns, Temporal resolution, Transfer learning, User authentication, Virtual and augmented reality, virtual reality},
pubstate = {published},
tppubtype = {inproceedings}
}
With the rapid emergence of virtual and augmented reality (VR/AR) head-mounted devices that closely interact with users' eyes, eye-tracking-based applications are becoming increasingly promising. Among them, eye movement patterns have emerged as a reliable biometric modality for user authentication. However, existing solutions based on conventional frame-based cameras face significant limitations, including low temporal resolution, high latency, high power consumption, and potential privacy concerns due to the detailed appearance captured around the eyes. To address these challenges, we propose EM-Auth, a novel framework for eye-tracking-based user authentication that leverages event cameras, a type of neuromorphic vision sensor providing asynchronous, high-temporal-resolution data, while preserving user privacy. Our method introduces a two-stage spatiotemporal feature extraction pipeline: first, a lightweight convolutional neural network (CNN) extracts spatial features from event streams; second, a transformer-based module models the temporal dependencies to generate robust eye representations. Extensive experiments show that our framework significantly outperforms existing state-of-the-art (SOTA) methods, achieving 0.008 and 0.015 equal error rates (EERs) on two representative datasets. Notably, EM-Auth demonstrates a strong generalization capability. In a zero-shot setting where the model is trained on a specific dataset and evaluated on previously unseen users, our approach achieves authentication accuracies of 98.4% and 95.9% on the EV-Eye and EBV-Eye datasets, respectively. Under cross-dataset evaluation, our framework achieves an authentication accuracy of nearly 85% without additional fine-tuning, and consistently improves performance through transfer learning. © 2026 IEEE.
2.
Mehrban, A.; Houda, Z. A. El; Moudoud, H.; Brik, B.; Khoukhi, L.
Securing O-RAN Equipment Using Blockchain-Based Supply Chain Verification Proceedings Article
In: Int. Wirel. Commun. Mob. Comput. Conf., IWCMC, pp. 1570–1575, Institute of Electrical and Electronics Engineers Inc., 2025, ISBN: 979-833150887-6 (ISBN), (Journal Abbreviation: Int. Wirel. Commun. Mob. Comput. Conf., IWCMC).
Abstract | Links | BibTeX | Tags: Access network equipment, Authentication, Block-chain, Blockchain, Cryptography, Denial-of-service attack, Firmware, Firmware authentication, Multi-vendor, Network architecture, Network security, O-RAN, Open radio access network, Radio access networks, Security, Security systems, Security vulnerabilities, Supply Chain Verification, Supply chains, Telecommunications networks
@inproceedings{mehrbanSecuringORANEquipment2025,
title = {Securing O-RAN Equipment Using Blockchain-Based Supply Chain Verification},
author = {A. Mehrban and Z. A. El Houda and H. Moudoud and B. Brik and L. Khoukhi},
url = {https://www.scopus.com/pages/publications/105011364438?origin=resultslist},
doi = {10.1109/IWCMC65282.2025.11059692},
isbn = {979-833150887-6 (ISBN)},
year = {2025},
date = {2025-01-01},
booktitle = {Int. Wirel. Commun. Mob. Comput. Conf., IWCMC},
pages = {1570–1575},
publisher = {Institute of Electrical and Electronics Engineers Inc.},
abstract = {The Open Radio Access Network (O-RAN) architecture has enabled the integration of multi-vendor equipment, yielding a significant enhancement in the flexibility and interoperability of telecommunications networks. However, this openness has also introduced new security vulnerabilities, particularly in supply chain integrity. Malicious actors may exploit weaknesses at various stages of production, distribution, or integration, leading to critical threats such as data tampering, unauthorized access, and denial-of-service (DOS) attacks. To address these challenges, this paper proposes a novel blockchain-based framework designed to secure the O-RAN supply chain. The proposed solution leverages a private permissioned blockchain ledger and cryptographic firmware authentication to ensure the integrity and authenticity of network equipment throughout its lifecycle. Specifically, the framework consists of: (1) a decentralized architecture integrating blockchain network components, equipment node validators, and secure firmware authentication mechanisms; and (2) a consensus-based verification model to enhance trust and transparency within the supply chain. To the best of our knowledge, this is one of the first approaches to use blockchain for O-RAN supply chain security, and also addressing emerging security threats in a scalable and tamper-resistant manner. Experimental validation and security assessments demonstrate the effectiveness of the proposed framework in mitigating supply chain risks, making it a promising solution for ensuring trust and robustness in next-generation O-RAN ecosystems. © 2025 IEEE.},
note = {Journal Abbreviation: Int. Wirel. Commun. Mob. Comput. Conf., IWCMC},
keywords = {Access network equipment, Authentication, Block-chain, Blockchain, Cryptography, Denial-of-service attack, Firmware, Firmware authentication, Multi-vendor, Network architecture, Network security, O-RAN, Open radio access network, Radio access networks, Security, Security systems, Security vulnerabilities, Supply Chain Verification, Supply chains, Telecommunications networks},
pubstate = {published},
tppubtype = {inproceedings}
}
The Open Radio Access Network (O-RAN) architecture has enabled the integration of multi-vendor equipment, yielding a significant enhancement in the flexibility and interoperability of telecommunications networks. However, this openness has also introduced new security vulnerabilities, particularly in supply chain integrity. Malicious actors may exploit weaknesses at various stages of production, distribution, or integration, leading to critical threats such as data tampering, unauthorized access, and denial-of-service (DOS) attacks. To address these challenges, this paper proposes a novel blockchain-based framework designed to secure the O-RAN supply chain. The proposed solution leverages a private permissioned blockchain ledger and cryptographic firmware authentication to ensure the integrity and authenticity of network equipment throughout its lifecycle. Specifically, the framework consists of: (1) a decentralized architecture integrating blockchain network components, equipment node validators, and secure firmware authentication mechanisms; and (2) a consensus-based verification model to enhance trust and transparency within the supply chain. To the best of our knowledge, this is one of the first approaches to use blockchain for O-RAN supply chain security, and also addressing emerging security threats in a scalable and tamper-resistant manner. Experimental validation and security assessments demonstrate the effectiveness of the proposed framework in mitigating supply chain risks, making it a promising solution for ensuring trust and robustness in next-generation O-RAN ecosystems. © 2025 IEEE.
3.
Moudoud, H.; Houda, Z. A. El; Brik, B.
Securing O-RAN with Zero Trust Architecture and Large Language Models Proceedings Article
In: C., Iwendi; Z., Boulouard; N., Kryvinska (Ed.): Lect. Notes Networks Syst., pp. 357–368, Springer Science and Business Media Deutschland GmbH, 2025, ISBN: 23673370 (ISSN); 978-303194619-6 (ISBN), (Journal Abbreviation: Lect. Notes Networks Syst.).
Abstract | Links | BibTeX | Tags: Access management, Access Management system, Architecture, Authentication, Block-chain, Blockchain, Computer architecture, Computer crime, Cryptography, Distributed computer systems, Intrusion Detection, Language model, Large language model, Management systems, Mobile security, Mobile telecommunication systems, Network architecture, Network security, O-RAN, Open radio access network, Radio access networks, Security systems, Security vulnerabilities, Trusted computing, Zero Trust
@inproceedings{moudoudSecuringORANZero2025,
title = {Securing O-RAN with Zero Trust Architecture and Large Language Models},
author = {H. Moudoud and Z. A. El Houda and B. Brik},
editor = {Iwendi C. and Boulouard Z. and Kryvinska N.},
url = {https://www.scopus.com/pages/publications/105011259647?origin=resultslist},
doi = {10.1007/978-3-031-94620-2_31},
isbn = {23673370 (ISSN); 978-303194619-6 (ISBN)},
year = {2025},
date = {2025-01-01},
booktitle = {Lect. Notes Networks Syst.},
volume = {1312 LNNS},
pages = {357–368},
publisher = {Springer Science and Business Media Deutschland GmbH},
abstract = {The Open Radio Access Network (O-RAN) architecture is critical for the development of 6G networks, offering flexibility and interoperability through disaggregated components. However, this openness exposes O-RAN to new security vulnerabilities, including unauthorized access, data breaches, and malicious xApp deployments. To address these challenges, we propose DistillORAN, a novel Zero-Trust architecture designed specifically for O-RAN. DistillORAN features two core components: (1) a blockchain-based decentralized trust management system for secure verification, authentication, and dynamic access control of xApps, and (2) a lightweight intrusion detection module powered by DistilBERT, a transformer-based model optimized for resource-constrained environments. DistilBERT’s ability to analyze network activities and detect anomalies in real-time allows it to identify complex security threats and multi-step attack scenarios within the O-RAN ecosystem. Its lightweight nature makes it ideal for O-RAN’s distributed infrastructure, where computational resources may be limited. By combining blockchain technology for trust management with DistilBERT’s powerful pattern recognition for intrusion detection, DistillORAN enforces a Zero-Trust security model, ensuring continuous monitoring and verification of all network components. This comprehensive solution enhances the security and resilience of O-RAN networks, aligning with the dynamic needs of next-generation mobile infrastructures. © The Author(s), under exclusive license to Springer Nature Switzerland AG 2025.},
note = {Journal Abbreviation: Lect. Notes Networks Syst.},
keywords = {Access management, Access Management system, Architecture, Authentication, Block-chain, Blockchain, Computer architecture, Computer crime, Cryptography, Distributed computer systems, Intrusion Detection, Language model, Large language model, Management systems, Mobile security, Mobile telecommunication systems, Network architecture, Network security, O-RAN, Open radio access network, Radio access networks, Security systems, Security vulnerabilities, Trusted computing, Zero Trust},
pubstate = {published},
tppubtype = {inproceedings}
}
The Open Radio Access Network (O-RAN) architecture is critical for the development of 6G networks, offering flexibility and interoperability through disaggregated components. However, this openness exposes O-RAN to new security vulnerabilities, including unauthorized access, data breaches, and malicious xApp deployments. To address these challenges, we propose DistillORAN, a novel Zero-Trust architecture designed specifically for O-RAN. DistillORAN features two core components: (1) a blockchain-based decentralized trust management system for secure verification, authentication, and dynamic access control of xApps, and (2) a lightweight intrusion detection module powered by DistilBERT, a transformer-based model optimized for resource-constrained environments. DistilBERT’s ability to analyze network activities and detect anomalies in real-time allows it to identify complex security threats and multi-step attack scenarios within the O-RAN ecosystem. Its lightweight nature makes it ideal for O-RAN’s distributed infrastructure, where computational resources may be limited. By combining blockchain technology for trust management with DistilBERT’s powerful pattern recognition for intrusion detection, DistillORAN enforces a Zero-Trust security model, ensuring continuous monitoring and verification of all network components. This comprehensive solution enhances the security and resilience of O-RAN networks, aligning with the dynamic needs of next-generation mobile infrastructures. © The Author(s), under exclusive license to Springer Nature Switzerland AG 2025.