LATIDIA · Ciberseguridad

CESBench: Evaluación comparativa de grandes modelos de lenguaje sobre seguridad de ingeniería criptográfica para dispositivos IoT

arXiv:2609.21344v1 Tipo de anuncio: nuevo Resumen: Para los dispositivos de Internet de las cosas (IoT), un algoritmo seguro por sí solo no es suficiente: un atacante con acceso físico puede atacar la implementación directamente y sus fallas son har

La noticia

arXiv:2609.21344v1 Announce Type: new Abstract: For Internet of Things (IoT) devices, a secure algorithm alone is not enough: an attacker with physical access can attack the implementation directly, and its flaws are hard to fix once deployed. Large language models (LLMs) are now used to build and analyze such implementations. LLM benchmarks exist for cryptography and general cybersecurity, but none covers cryptographic engineering. In this paper, we present CESBench, 380 expert-written items across six sub-domains of cryptographic engineering security for IoT devices: side-channel, fault injection, implementation, countermeasures, evaluation, and integration. Four task types target different competences: 209 multiple-choice items test recall, 67 judgment items require a security verdict and its