Search

Penetration testing, a critical component of cybersecurity, typically requires extensive time and effort to find vulnerabilities. Beginners in this field often benefit from collaborative approaches with the community or experts. To address this, we develop CIPHER (Cybersecurity Intelligent Penetration-testing Helper for Ethical Researchers), a large language model specifically trained to assist in penetration testing tasks. We trained CIPHER using over 300 high-quality write-ups of vulnerable machines, hacking techniques, and documentation of open-source penetration testing tools. Additionally, we introduced the Findings, Action, Reasoning, and Results (FARR) Flow augmentation, a novel method to augment penetration testing write-ups to establish a fully automated pentesting simulation benchmark tailored for large language models. This approach fills a significant gap in traditional cybersecurity Q\&A benchmarks and provides a realistic and rigorous standard for evaluating AI's technical knowledge, reasoning capabilities, and practical utility in dynamic penetration testing scenarios. In our assessments, CIPHER achieved the best overall performance in providing accurate suggestion responses compared to other open-source penetration testing models of similar size and even larger state-of-the-art models like Llama 3 70B and Qwen1.5 72B Chat, particularly on insane difficulty machine setups. This demonstrates that the current capabilities of general LLMs are insufficient for effectively guiding users through the penetration testing process. We also discuss the potential for improvement through scaling and the development of better benchmarks using FARR Flow augmentation results. Our benchmark will be released publicly at https://github.com/ibndias/CIPHER., Comment: 28 pages, github available

Adding superconducting (SC) electron pairing via the proximity effect to pristinely non-superconducting materials can lead to a variety of interesting physical phenomena. Particular interest has recently focused on inducing SC into two-dimensional surface states (SSs), potentially also combined with non-trivial topology. We study the mechanism of proximity-induced SC into the Shockley-type SSs of the noble metals Ag(111) and Cu(111) grown on the elemental SC Nb(110) using scanning tunneling spectroscopy. The tunneling spectra exhibit an intriguing multitude of sharp states at low energies. Their appearance can be explained by Andreev bound states (ABS) formed by the weakly proximitized SSs subject to lateral finite-size confinement. We study systematically how the proximity gap in the bulk states of both Ag(111) and Cu(111) persists up to island thicknesses of several times the bulk coherence length of Nb. We find that even for thick islands, the SSs acquire a gap, with the gap size for Cu being consistently larger than for Ag. Based on this, we argue that the SC in the SS is not provided through direct overlap of the SS wavefunction with the SC host but can be understood to be mediated by step edges inducing electronic coupling to the bulk. Our work provides important input for the microscopic understanding of induced superconductivity in heterostructures and its spectral manifestation. Moreover, it lays the foundation for more complex SC heterostructures based on noble metals.

This research paper entails an examination of the Enhanced Wi-Fi protocol, focusing on its control command reverse-engineering analysis and subsequent demonstration of a hijacking attack. Our investigation discovered vulnerabilities in the Enhanced Wi-Fi control commands, rendering them susceptible to hijacking attacks. Notably, the study established that even readily available and cost-effective commercial off-the-shelf Wi-Fi routers could be leveraged as effective tools for executing such attacks. To illustrate this vulnerability, a proof-of-concept remote hijacking attack was carried out on a DJI Mini SE drone, whereby we intercepted the control commands to manipulate the drone's flight trajectory. The findings of this research emphasize the critical necessity of implementing robust security measures to safeguard unmanned aerial vehicles against potential hijacking threats. Considering that civilian drones are now used as war weapons, the study underscores the urgent need for further exploration and advancement in the domain of civilian drone security., Comment: Open source PoC available at Github https://github.com/ibndias/dji-drone-hijacking, 10 pages

Adversarial camouflage has garnered attention for its ability to attack object detectors from any viewpoint by covering the entire object's surface. However, universality and robustness in existing methods often fall short as the transferability aspect is often overlooked, thus restricting their application only to a specific target with limited performance. To address these challenges, we present Adversarial Camouflage for Transferable and Intensive Vehicle Evasion (ACTIVE), a state-of-the-art physical camouflage attack framework designed to generate universal and robust adversarial camouflage capable of concealing any 3D vehicle from detectors. Our framework incorporates innovative techniques to enhance universality and robustness, including a refined texture rendering that enables common texture application to different vehicles without being constrained to a specific texture map, a novel stealth loss that renders the vehicle undetectable, and a smooth and camouflage loss to enhance the naturalness of the adversarial camouflage. Our extensive experiments on 15 different models show that ACTIVE consistently outperforms existing works on various public detectors, including the latest YOLOv7. Notably, our universality evaluations reveal promising transferability to other vehicle classes, tasks (segmentation models), and the real world, not just other vehicles., Comment: Accepted for ICCV 2023. Main Paper with Supplementary Material. Project Page: https://islab-ai.github.io/active-iccv2023/

In the past years, research on Shor's algorithm for solving elliptic curves for discrete logarithm problems (Shor's ECDLP), the basis for cracking elliptic curve-based cryptosystems (ECC), has started to garner more significant interest. To achieve this, most works focus on quantum point addition subroutines to realize the double scalar multiplication circuit, an essential part of Shor's ECDLP, whereas the point doubling subroutines are often overlooked. In this paper, we investigate the quantum point doubling circuit for the stricter assumption of Shor's algorithm when doubling a point should also be taken into consideration. In particular, we analyze the challenges on implementing the circuit and provide the solution. Subsequently, we design and optimize the corresponding quantum circuit, and analyze the high-level quantum resource cost of the circuit. Additionally, we discuss the implications of our findings, including the concerns for its integration with point addition for a complete double scalar multiplication circuit and the potential opportunities resulting from its implementation. Our work lays the foundation for further evaluation of Shor's ECDLP., Comment: first draft

Realizing hybrids of low-dimensional Kondo lattices and superconducting substrates leads to fascinating platforms for studying the exciting physics of strongly correlated electron systems with induced superconducting pairing. Here, we report a scanning tunneling microscopy and spectroscopy study of a new type of two-dimensional (2D) La-Ce alloy grown epitaxially on a superconducting Re(0001) substrate. We observe the characteristic spectroscopic signature of a hybridization gap evidencing the coherent spin screening in the 2D Kondo lattice realized by the ultrathin La-Ce alloy film on normal conducting Re(0001). Upon lowering the temperature below the critical temperature of rhenium, a superconducting gap is induced with an in-gap Shiba band arising from the interaction of residual unscreened magnetic moments with the superconducting substrate. A positive correlation between the Kondo hybridization gap and the binding energy of the subgap Shiba band maximum is found. Our results open up a promising route toward the design of artificial superconducting Kondo and heavy fermion systems., Comment: 18 pages, 4 figures, supplemental materials

Works on quantum computing and cryptanalysis has increased significantly in the past few years. Various constructions of quantum arithmetic circuits, as one of the essential components in the field, has also been proposed. However, there has only been a few studies on finite field inversion despite its essential use in realizing quantum algorithms, such as in Shor's algorithm for Elliptic Curve Discrete Logarith Problem (ECDLP). In this study, we propose to reduce the depth of the existing quantum Fermat's Little Theorem (FLT)-based inversion circuit for binary finite field. In particular, we propose follow a complete waterfall approach to translate the Itoh-Tsujii's variant of FLT to the corresponding quantum circuit and remove the inverse squaring operations employed in the previous work by Banegas et al., lowering the number of CNOT gates (CNOT count), which contributes to reduced overall depth and gate count. Furthermore, compare the cost by firstly constructing our method and previous work's in Qiskit quantum computer simulator and perform the resource analysis. Our approach can serve as an alternative for a time-efficient implementation., Comment: version 0.2

To perform adversarial attacks in the physical world, many studies have proposed adversarial camouflage, a method to hide a target object by applying camouflage patterns on 3D object surfaces. For obtaining optimal physical adversarial camouflage, previous studies have utilized the so-called neural renderer, as it supports differentiability. However, existing neural renderers cannot fully represent various real-world transformations due to a lack of control of scene parameters compared to the legacy photo-realistic renderers. In this paper, we propose the Differentiable Transformation Attack (DTA), a framework for generating a robust physical adversarial pattern on a target object to camouflage it against object detection models with a wide range of transformations. It utilizes our novel Differentiable Transformation Network (DTN), which learns the expected transformation of a rendered object when the texture is changed while preserving the original properties of the target object. Using our attack framework, an adversary can gain both the advantages of the legacy photo-realistic renderers including various physical-world transformations and the benefit of white-box access by offering differentiability. Our experiments show that our camouflaged 3D vehicles can successfully evade state-of-the-art object detection models in the photo-realistic environment (i.e., CARLA on Unreal Engine). Furthermore, our demonstration on a scaled Tesla Model 3 proves the applicability and transferability of our method to the real world., Comment: Accepted for CVPR 2022

Vortices in topological superconductors are predicted to host Majorana bound states (MBSs) as exotic quasiparticles. In recent experiments, the spatially non-split zero-energy vortex bound state in topological superconductors has been regarded as an essential spectroscopic signature for the observation of MBSs. Here, we report the observation of anisotropic non-split zero-energy vortex bound states in a conventional elemental superconductor with a topologically trivial band structure using scanning tunneling microscopy and spectroscopy. The experimental results, corroborated by quasi-classical theoretical calculations, indicate that the non-split states directly reflect the quasiparticle trajectories governed by the surface electronic structure. Our study implies that non-split zero-energy states are not a conclusive signature of MBSs in vortex cores, stimulating a revision of the current understanding of such states.

Quantum mechanical systems with long-range interactions between quasiparticles provide a promising platform for coherent quantum information technology. Superconductors are a natural choice for solid-state based quantum devices, while magnetic impurities inside superconductors give rise to quasiparticle excitations of broken Cooper pairs that provide characteristic information about the host superconductor. Here, we reveal that magnetic impurities embedded below a superconducting La(0001) surface interact via quasiparticles extending to very large distances, up to several tens of nanometers. Using low-temperature scanning probe techniques, we observe the corresponding anisotropic and giant oscillations in the local density of states. Theoretical calculations indicate that the quasi-two-dimensional surface states with their strongly anisotropic Fermi surface play a crucial role for the focusing and long-range extension of the magnetic bound states. The quasiparticle focusing mechanism should facilitate the design of versatile magnetic structures with tunable and directed magnetic interactions over large distances, thereby paving the way toward the design of low-dimensional magnet-superconductor hybrid systems exhibiting topologically non-trivial quantum states as possible elements of quantum computation schemes based on Majorana quasiparticles., Comment: 20 pages, 4 figures

We have studied the Tamm-type surface state of La(0001) by tunneling spectroscopy within a wide range of tunneling currents from 0.1 nA to 8000 nA, thereby tuning the electric-field strength in a tip-vacuum-sample tunnel junction. We observe a significant shift of the unoccupied Tamm-type surface state toward the Fermi energy with increasing electric-field strength, accompanied by a broadening of the width of the resonance peak indicating a decrease of the surface-state lifetime. Our experimental results are contrary to previous reports for Stark-shifted Shockley-type surface states of noble metal (111) surfaces., Comment: 12 pages, 3 figures

Topological superconductors are predicted to harbor exotic boundary states - Majorana zero-energy modes - whose non-Abelian braiding statistics present a new paradigm for the realization of topological quantum computing. Using low-temperature scanning tunneling spectroscopy (STS), we here report on the direct real-space visualization of chiral Majorana edge states in a monolayer topological superconductor, a prototypical magnet-superconductor hybrid system comprised of nano-scale Fe islands of monoatomic height on a Re(0001)-O(2$\times$1) surface. In particular, we demonstrate that interface engineering by an atomically thin oxide layer is crucial for driving the hybrid system into a topologically non-trivial state as confirmed by theoretical calculations of the topological invariant, the Chern number., Comment: 26 pages, 9 figures

Orbital-related physics attracts growing interest in condensed matter research, but direct real-space access of the orbital degree of freedom is challenging. Here we report a first, real-space, imaging of a surface- assisted orbital ordered structure on a cobalt-terminated surface of the well-studied heavy fermion compound CeCoIn5. Within small tip-sample distances, the cobalt atoms on a cleaved (001) surface take on dumbbell shapes alternatingly aligned in the [100] and [010] directions in scanning tunneling microscopy topographies. First- principles calculations reveal that this structure is a consequence of the staggered dxz-dyz orbital order triggered by enhanced on-site Coulomb interaction at the surface. This so-far-overlooked surface-assisted orbital ordering may prevail in transition metal oxides, heavy fermion superconductors and other materials., Comment: 15 pages, 7 figures

Honeycomb structures of group IV elements can host massless Dirac fermions with non-trivial Berry phases. Their potential for electronic applications has attracted great interest and spurred a broad search for new Dirac materials especially in monolayer structures. We present a detailed investigation of the \beta 12 boron sheet, which is a borophene structure that can form spontaneously on a Ag(111) surface. Our tight-binding analysis revealed that the lattice of the \beta 12-sheet could be decomposed into two triangular sublattices in a way similar to that for a honeycomb lattice, thereby hosting Dirac cones. Furthermore, each Dirac cone could be split by introducing periodic perturbations representing overlayer-substrate interactions. These unusual electronic structures were confirmed by angle-resolved photoemission spectroscopy and validated by first-principles calculations. Our results suggest monolayer boron as a new platform for realizing novel high-speed low-dissipation devices., Comment: accepted for publication in Physical Review Letters

Using scanning tunneling microscopy, we reproducibly obtained electrical conductance spectra of superconductor- superconductor atomic point contacts formed on various atomic sites of the substrate. From the analysis of the subharmonic features due to the multiple Andreev reflection, spatial distributions of the number of the conduction channels and their transmission probabilities were obtained. It is found that the number of channels and the transmission probabilities strongly depend on an atomic site where the contact is formed. We also revealed how the conduction channels and their transmission probability evolve from the tunneling to contact regimes. The Josephson current also exhibits the atomic site dependence, which is explained by the site-dependent transmission probabilities. Our results demonstrate a crucial role of the atomic geometry in the conduction channels of the ultimately confined conductor for the first time experimentally., Comment: main text: 19 pages, 5 figures, supplemental materials: 6 pages, 4 figures

Using scanning tunneling microscopy (STM), we investigated the evolution of electrical conductance between a Pb tip and Pb(111) surface from tunneling to atomic point contact at a site that was defined with atomic precision. We found that the conductance evolution depended on the contact site, for instance, on-top, bridge, or hollow (hcp and fcc) sites in the Pb lattice. In the transition from tunneling to contact regimes, the conductance measured at the on-top site was enhanced. In the point contact regime, the hollow sites had conductances larger than those of the other sites, and between the hollow sites, the hcp site had a conductance larger than that of the fcc site. We also observed the enhancement and reversal of the apparent height in atomically resolved high-current STM images, consistent with the results of the conductance traces. Our results indicate the importance of atomic configuration in the conductance of atomic junctions and suggest that attractive chemical interactions have a significant role in electron transport between contacting atoms., Comment: main text: 22 pages, 4 figures, supplemental materials: 9 pages, 10 figures

The critical effect of disorder on the two-dimensional (2D) surface superconductor Si(111)-($\sqrt{7}\times\sqrt{3}$)-In is clarified by comparing two regions with different degrees of disorder. Low-temperature scanning tunneling microscopy measurements reveal that superconductivity is retained in the less disordered region, judging from the characteristic differential conductance ($dI/dV$) spectra and from the formation of vortices under magnetic fields. In striking contrast, the absence of those features in the highly disordered region shows that superconductivity is strongly suppressed there. Analysis of observed zero-bias anomalies in $dI/dV$ spectra allows us to estimate the reduction in the transition temperature $T_{\rm c}$, which explains the fate of superconductivity in each region., Comment: 6 pages, 3 figures

We have studied the superconducting Si(111)-(root7xroot3)-In surface using a 3He-based low-temperature scanning tunneling microscope (STM). Zero-bias conductance (ZBC) images taken over a large surface area reveal that vortices are trapped at atomic steps after magnetic fields are applied. The crossover behavior from Pearl to Josephson vortices is clearly identified from their elongated shapes along the steps and significant recovery of superconductivity within the cores. Our numerical calculations combined with experiments clarify that these characteristic features are determined by the relative strength of the interterrace Josephson coupling at the atomic step., Comment: 5 pages, 3 figures The title has been changed

Using low-temperature scanning tunneling microscopy and spectroscopy, we have studied the proximity effect at the interfaces between superconducting Pb island structures and metallic Pb-induced striped-incommensurate phase formed on a Si(111) substrate. Our real-space observation revealed that the step structures on the two-dimensional metallic layer exhibit significant roles on the propagation of the superconducting pair correlation; the proximity effect is terminated by the steps, and in the confined area by the interface and the steps the effect is enhanced. The observed results are explained quantitatively with an elastic reflection of electrons at the step edges based on calculations with the quasi-classical Green's function formulation using Usadel equation., Comment: Main: 16pages with 3 figures, Supplementary materials : 12 pages with 5figures