コロキアムB発表

日時: 06月12日 (金) 3限目(13:30-15:00)


会場: Group A (Presentation Session: 13:30 - 14:15, Viewing Session: 14:15 - 15:00)

司会: TBD
宗片 吉史 M, 1回目発表 コンピューティング・アーキテクチャ 中島 康彦 林 優一 張 任遠 KAN Yirong PHAM HOAI LUAN Le Vu Trung Duong
title: *** Effective Data Allocation with 3D Stacked DRAM for LLM Acceleration on CGLA ***
abstract: *** CGLA, which combines programmability, short compilation time, and energy efficiency, has shown potential as a new dataflow computing platform capable of supporting diverse AI workloads such as LLM inference, speech recognition, and image generation. On the other hand, when executing large-scale Transformer models, the limited local memory capacity of each PE and limited bandwidth cause DMA access overhead to accumulate, resulting in a memory bottleneck. 3D-stacked DRAM is expected to serve as a technology for significantly expanding both DRAM capacity and bandwidth as semiconductor scaling approaches its limits. However, efficient memory architectures designed for TSVs and dataflow architectures remain an active area of research. In this study, we investigate an optimal data allocation method for accelerating computation using 3D-stacked DRAM, based on execution traces of Transformer-based LLM inference on CGLA. Specifically, we focus on the access frequencies of weights, activations, KV cache, and TSV bandwidth utilization. Based on these factors, frequently accessed data are preferentially placed in high-bandwidth regions. Furthermore, by introducing efficient data transfer scheduling, this study aims to reduce DMA access overhead. ***
language of the presentation: *** English ***
発表題目: *** CGLA上でのLLM推論の高速化に向けた3D積層DRAMを用いた効率的データアロケーション ***
発表概要: *** プログラマビリティ、短いコンパイル時間、省電力性を兼ね備えたCGLAは、LLM推論、音声認識、画像生成といった多様なAIワークロードに対応可能な新たなデータフロー型計算基盤としての可能性を示している。一方で、大規模なTransformerモデルを実行する際には、各PEのローカルメモリ容量の制約によりDMAアクセスのオーバーヘッドが蓄積し、メモリ律速となる問題が存在する。 3D積層DRAMは、半導体微細化が限界に近づきつつある中で、DRAMの容量および帯域を大幅に拡張する技術として期待されている。しかし、TSVやデータフローアーキテクチャを前提とした効率的なメモリアーキテクチャについては、依然として研究途上である。 本研究では、CGLA上におけるTransformer LLM推論の実行トレースを基に、3D積層DRAMを用いた計算処理の高速化に向けて、最適なデータアロケーション手法を検討する。具体的には、重み、Activation、KV cacheへのアクセス頻度およびTSV帯域の利用効率に着目し、頻繁にアクセスされるデータを広帯域領域に優先的に配置する。さらに、効率的なデータ転送スケジューリングを導入することで、DMAアクセスオーバーヘッドの削減を目指す。 ***
 
BUI NGOC THANH BINH M, 1回目発表 コンピューティング・アーキテクチャ 中島 康彦 林 優一 張 任遠 KAN Yirong PHAM HOAI LUAN Le Vu Trung Duong
title: *** Protocol-Aware MQTT Security and Anomaly Mitigation in a P4 Data Plane for Edge IoT Systems ***
abstract: *** MQTT is the dominant lightweight publish-subscribe protocol for IoT deployments yet edge security remains inadequate. Cloud-based intrusion detection systems add latency unsuitable for real-time control while CPU-bound firewalls and generic SDN controllers lack MQTT awareness to enforce session validation topic-based authorization and behavioral anomaly detection. We propose a P4-based data-plane enforcement scheme for protocol-aware MQTT security and anomaly detection at the network edge. The design combines parser-safe MQTT header extraction with session-order validation byte-level topic-prefix authorization with per-client rate limiting and soft-cap enforcement and lightweight anomaly detection based on KeepAlive and Remaining Length screening with clone-to-CPU diagnostics. The scheme leverages BMv2 stateful primitives including registers meters and direct counters to enable runtime policy adaptation with minimal per-packet latency. Experiments on a Mininet-BMv2 testbed demonstrate high policy enforcement accuracy of 99.8% within 95% CI strong anomaly detection sensitivity of 98% true-positive rate and high packet delivery of greater than 99.9% for 100 to 5 kpps 99.8% at 10 kpps and 99.6% at 16 kpps with sub-millisecond per-packet latency. These results show that protocol-aware MQTT filtering can be efficiently realized in the programmable data plane providing a practical foundation for edge IoT security. Future work will validate the design on production P4 hardware and integrate machine learning-based threshold adaptation. ***
language of the presentation: *** English ***
 
LE TRAN XUAN HIEU M, 1回目発表 コンピューティング・アーキテクチャ 中島 康彦 林 優一 張 任遠 KAN Yirong PHAM HOAI LUAN Le Vu Trung Duong
title: *** Second-Order Regularized Optimization for Sparse-View CT Reconstruction ***
abstract: *** Sparse-view computed tomography (CT) reduces radiation exposure by acquiring fewer projection views, but it also makes image reconstruction highly ill-posed and prone to severe streak artifacts. In this work, we propose CG-GLORE, a compact second-order deep unrolling framework for sparse-view CT reconstruction. Each reconstruction stage is formulated as a Newton-Raphson-inspired update, where the curvature of the data-fidelity term is efficiently exploited through a Conjugate Gradient solver without explicitly constructing or inverting the Hessian. To provide effective learned regularization, we introduce a Global-Local Regularization Network (GLORE), which combines convolutional local feature extraction with long-range dependency modeling based on sparse patchification and Nyström attention. This design enables the model to preserve fine anatomical details while maintaining global structural consistency. Experiments on AAPM and DeepLesion datasets under multiple sparse-view and noisy acquisition settings demonstrate that CG-GLORE achieves strong quantitative performance, stable convergence, reduced residual noise, and improved visual fidelity compared with representative reconstruction methods. Ablation studies further confirm that the CG-based second-order update and the global-local regularization module provide complementary benefits. Overall, CG-GLORE offers an effective balance between model-based optimization and learned regularization for robust sparse-view CT reconstruction. ***
language of the presentation: *** English ***
 
LI LINGWEI M, 1回目発表 コンピューティング・アーキテクチャ 中島 康彦 林 優一 張 任遠 KAN Yirong PHAM HOAI LUAN Le Vu Trung Duong
title: A Fine-Grained Token Compression Mechanism for Efficient EEG Model Inferencing
abstract: Recent adaptations of Transformers for EEG tasks, such as sleep staging and seizure detection, have shown great promise. However, the quadratic computational complexity of the self-attention mechanism poses a significant challenge: processing long-duration, multi-channel EEG signals generates an excessive number of tokens, making real-time inference computationally prohibitive. To alleviate this, we propose a fine-grained token compression framework tailored for the unique properties of EEG signals. We argue that existing single-strategy methods are sub-optimal for EEG data due to its low signal-to-noise ratio: redundancy-based pruning may lead to the loss of sparse but critical neurological features, while importance-based merging risks burying meaningful information under dominant noise. To bridge this gap, our framework categorizes tokens into four distinct quadrants by jointly evaluating their importance and redundancy, subsequently applying specialized processing strategies to each category. This approach ensures a precise balance between computational efficiency and the preservation of essential diagnostic information.
language of the presentation: English
 
大越 涼太 M, 1回目発表 サイバーレジリエンス構成学 門林 雄基 林 優一 妙中 雄三
title: An Investigation of Living off the Agent Attacks and Defense Mechanisms in AI Agent Systems
abstract: Large Language Model (LLM)-based AI agents have recently been integrated with external tools, memory systems, and web services to automate complex tasks. However, these capabilities introduce new security risks. In particular, Living off the Agent (LoTA) attacks exploit legitimate agent functions and tool interactions to achieve malicious objectives without relying on traditional software vulnerabilities. Existing guardrail mechanisms primarily focus on filtering user inputs and model outputs, which may be insufficient for detecting risks emerging from multi-step agent workflows. This study investigates the characteristics of LoTA attacks in AI agent environments and analyzes the limitations of current defense mechanisms. Through the analysis of representative attack scenarios, we aim to identify security challenges specific to AI agent workflows and discuss requirements for effective countermeasures.
language of the presentation: *** English or Japanese (choose one) ***
English 発表題目: AI AgentにおけるLiving off the Agent(LoTA)攻撃とその対策に関する検討
発表概要: 近年,大規模言語モデル(LLM)を活用したAI Agentは,外部ツールやWebサービスと連携することで複雑なタスクを自律的に実行できるようになっている。一方で,これらの機能を悪用した新たな攻撃手法が報告されており,その一つとしてLiving off the Agent(LoTA)攻撃が注目されている。LoTA攻撃は,従来のソフトウェア脆弱性を利用するのではなく,AI Agentが本来備える機能や権限を悪用することで攻撃を実現する特徴を持つ。 本研究では,AI Agent環境におけるLoTA攻撃の特徴を整理するとともに,既存のガードレール機構や防御手法の課題について分析する。さらに,代表的な攻撃シナリオを通じて,AI Agentのワークフローにおいて発生し得るセキュリティ上の問題点を明らかにし,今後必要となる対策について検討する。
 
DU CAN M, 1回目発表 生体画像知能 大竹 義人 金谷 重彦 Gu Yi Soufi Mazen
title: *** AI-Driven Registration-Based Multi-Task Model for 3D Muscle Fiber Orientation, Volume, and Intramuscular Fat Prediction from Routine CT/MRI with DTI ***
abstract: *** Sarcopenia and muscle degradation are critical factors impacting the independence of the aging population. While clinical CT/MRI can effectively assess muscle volume and fatty infiltration, they fail to directly predict muscle fiber orientation, which is fundamental to muscle strength and function. Although Diffusion Tensor Imaging (DTI) enables 3D visualization of muscle fibers, its clinical application is constrained by long scan times. This study aims to develop an AI-driven model that predicts 3D fiber orientation, muscle volume, and fat fraction from routine CT/MRI scans. We established a paired dataset of DTI and clinical CT/MRI scans, and developed:(1) automated segmentation of lower limb muscles from MRI to quantify volume and fat fraction; (2) construction of a registration-based musculoskeletal model integrated with DTI-derived diffusion directions to generate ground-truth 3D fiber orientation maps; and (3) a multi-task learning framework to map MRI data to these architectural metrics. This approach transforms routine clinical imaging into comprehensive functional assessments, offering a non-invasive, efficient tool for the objective evaluation of muscle quality and clinical decision-making. ***
language of the presentation: *** English ***
 
AFNAN SUKRI ANWAR ABDULLAH M, 1回目発表 ソーシャル・コンピューティング 荒牧 英治 Sakriani Sakti 若宮 翔子 西山 智弘
 
DAI NING M, 1回目発表 ソーシャル・コンピューティング 荒牧 英治 安本 慶一 若宮 翔子 久田 祥平
 
BAH SADIO M, 1回目発表 ソフトウェア工学 松本 健一 安本 慶一 嶋利 一真 Fan Youmei
 
LAOHAKANNIYOM PAKORN M, 1回目発表 ソフトウェア設計学 飯田 元 松本 健一 柏 祐太郎 Reid Brittany
title: Your Latest is Not My Latest! An Empirical Study of Latest Tags in Dockerfiles
abstract: The latest tag in Docker offers developers a convenient shorthand for referencing base images without track- ing explicit version numbers. However, because this tag is a mutable, shifting reference, Dockerfiles that depend on it are silently exposed to breaking changes whenever the upstream image is updated. This creates a reproducibility gap that directly undermines one of containerization core promises. Despite widespread recognition of version pinning as best practice, the prevalence and consequences of latest usage in real-world projects remain poorly understood. This paper presents an empirical study of latest tag usage across 21,481 Dockerfiles drawn from 9,179 open-source GitHub repositories. We find that 14.2% of all Dockerfiles and 24.0% of repositories depend on latest for actively maintained, multi- release projects. When developers do revise their tagging strategy, they are 64% likely to migrate away from latest toward a pinned version than in the opposite direction, suggesting awareness of the risks or necessity after failures are encountered. Additionally, through dynamic build analysis, we measure how quickly Dockerfile buildability degrades as base images evolve
language of the presentation: English
 
DAMARHAFNI RAHMANNABEL NADIM PRAMONO M, 1回目発表 ヒューマンAIインタラクション Sakriani Sakti 渡辺 太郎 大内 啓樹 Faisal Mehmood Bagus Tris Atmaja
title: *** Multi-Stream Artifact Detection for Audio Deepfake Detection via Temporal, Spectral, and Phase Cues ***
abstract: *** Audio deepfakes produced by modern text-to-speech and voice-conversion systems pose growing threats to digital security and media trust. While existing detection methods often rely on a single feature domain, they frequently fail to generalize across diverse synthesis algorithms and acoustic conditions. We propose the Artifact Detection Model (ADM), a lightweight multi-stream neural classifier that decomposes deepfake detection into three complementary artifact domains: temporal, spectral, and phase. Each domain is processed by a dedicated residual MLP sub-module operating on mean-pooled, utterance-level features derived from self-supervised learning embeddings, mel-filterbank energies, and STFT phase features. We systematically investigate multiple stream-fusion strategies across four diverse benchmarks: ASVspoof 2019 LA, ASVspoof 2021 LA, ASVspoof 2021 DF, and the In-the-Wild dataset. While the temporal branch serves as the strongest individual stream, a three-branch fusion utilizing element-wise max aggregation achieves superior robustness, yielding highly competitive Equal Error Rates (EERs) across both controlled benchmarks and unconstrained real-world datasets. These results demonstrate that fusing low-level hand-crafted phase cues with high-level temporal embeddings successfully mitigates performance degradation across unseen acoustic conditions. ***
language of the presentation: *** English ***
 
RUDY ONG M, 1回目発表 ヒューマンAIインタラクション Sakriani Sakti 渡辺 太郎 大内 啓樹 Faisal Mehmood Bagus Tris Atmaja
title: *** ASR-Based Detection of Vowel Devoicing in Japanese Speech Corpora ***
abstract: *** The Japanese-Language Proficiency Test (JLPT) is widely recognized among foreign workers in Japan. However, it limited to only evaluates reading and listening skills and does not assess spoken proficiency. As effective workplace communication relies heavily on accurate speech production and pronunciation, additional tools are needed to support learners' verbal language development. Computer-Assisted Pronunciation Training (CAPT) systems leverage Automatic Speech Recognition (ASR) to provide pronunciation support for second-language (L2) learners. A key requirement for effective pronunciation feedback is the accurate detection of specific pronunciation phenomena. Despite its importance in Japanese speech, vowel devoicing has received limited attention in CAPT research.Therefore, this study proposes a method for detecting Japanese vowel devoicing from input speech by representing devoiced vowels as explicit IPA tokens within lexical representations. To evaluate detection performance, we introduce two metrics: Devoicing Event Occurrence (DEO) and Context-Conditioned Devoicing Accuracy (CCDA). Experimental results demonstrate strong performance on both metrics. These findings suggest that explicit detection of vowel devoicing can serve as a foundation for incorporating pronunciation feedback on vowel devoicing into Japanese CAPT systems. ***
language of the presentation: *** English ***
 
AN MINHYOUNG M, 1回目発表 ユビキタスコンピューティングシステム 安本 慶一 荒牧 英治 諏訪 博彦 佐々木 航
title: Establishing a Grounded Context Inference Method for Large Language Models
abstract: Advances in large language models (LLMs) have made it possible to infer context from sensor data in natural language. However, such inference is typically evaluated by its agreement with a ground truth described by the users themselves (user annotation). Let the real context R denote the set of information that can be regarded as true in a given situation. In the real world, R is multifaceted, and the annotation S cannot fully cover R due to cognitive and temporal constraints (omission). Meanwhile, the model output M contains outputs not included in R (hallucination). Because the omission in S and the hallucination in M occur simultaneously, the outputs outside the annotation (M−S) contain a mixture of outputs that are included in R (grounded inferences) and hallucinations, and the two cannot be distinguished. This study focuses on the set (M−S)∩R, which can compensate for both limitations, and defines it as the grounding region. Starting from this grounding region, the research proceeds in two directions. First, we identify the grounding region and clarify its structure. Second, without increasing the number of user responses or the volume of model output, we construct a bidirectional framework that uses the grounding region as a foothold to bring both S and M closer to the real context R. Through this, we aim to enable context inference that reaches even the aspects users have not verbalized, contributing to natural interaction between people and systems.
language of the presentation: Japanese
発表題目: 接地領域に基づく大規模言語モデルのコンテキスト推論手法の確立
発表概要: 大規模言語モデル(LLM)の発展により,センサデータからコンテキストを自然言語で推論することが可能となった.しかしその評価は,ユーザ自身が記述する正解(ユーザアノテーション)との一致に依存している.ここで,実コンテキストR を対象状況において真とみなせる情報の集合とすると,実世界の R は多面的であり,アノテーション S は認知的・時間的制約から R を網羅できない(欠落).一方,モデル出力 M は R に含まれない出力(ハルシネーション)を伴う.S の欠落と Mのハルシネーションが同時に存在するため,アノテーション外の出力 (M−S) には,R に含まれる出力(接地した推論)とハルシネーションが混在し,両者を区別できない. 本研究は,この両者の限界を補い得る集合 (M−S)∩R に着目し,これを「接地領域」と定義する.接地領域を起点として,本研究は二つの方向から研究を進める.第一に,接地領域を特定し,その構造を明らかにする.第二に,ユーザの回答数とモデルの出力量を増やすことなく,接地領域を足がかりにS と M の双方を実コンテキストR へ接近させる双方向フレームワークを構築する.これにより,本人が言語化していない側面にまで踏み込んだコンテキスト推論を実現し,人とシステムの自然なインタラクションに寄与する.
 
ADNAN IMRANUL ISLAM M, 1回目発表 光メディアインタフェース 向川 康博 安本 慶一 藤村 友貴 北野 和哉
 
HASAN S M MEHEDI M, 1回目発表 自然言語処理学 渡辺 太郎 荒牧 英治 上垣外 英剛 坂井 優介
 

日時: 06月12日 (金) 3限目(13:30-15:00)


会場: Group B (Viewing Session: 13:30 - 14:15, Presentation Session: 14:15 - 15:00)

司会: TBD
LIU TIANYU M, 1回目発表 コンピューティング・アーキテクチャ 中島 康彦 林 優一 張 任遠 KAN Yirong PHAM HOAI LUAN Le Vu Trung Duong
title: Accuracy and Reliability Evaluation of Low-Bit Spiking Quantized Large Language Models under Hardware Faults
abstract: Low-bit quantization is an important technique for reducing the memory footprint and inference cost of large language models. In my previous work, I studied teacher-guided saliency refinement for low-bit spiking quantized LLMs, where full-precision layer outputs are used as teacher signals to refine channel-wise saliency estimation and improve high-precision channel allocation. Experimental results on LLaMA-2-7B under the W4A4 setting showed that this method can improve perplexity on WikiText2 and C4, as well as average accuracy on several zero-shot reasoning tasks. Based on this work, my current research focuses on the reliability of low-bit spiking quantized LLMs under hardware transient faults. Since spiking-inspired quantization represents activations through temporal or branch-based encoding, it may change the error propagation behavior compared with conventional quantized LLMs. I plan to construct a fault-injection evaluation framework and analyze how different layers, modules, fault probabilities, and fault types affect model outputs and task accuracy. The goal of this research is to clarify the relationship among low-bit quantization, saliency-aware precision allocation, and hardware fault tolerance, and to explore whether spiking-based LLM quantization can provide a better accuracy, efficiency, and reliability trade-off.
language of the presentation: English
 
PHAM ANH KIET M, 1回目発表 コンピューティング・アーキテクチャ 中島 康彦 林 優一 張 任遠 KAN Yirong PHAM HOAI LUAN Le Vu Trung Duong
title: *** HMSA: High-Performance Multi-Mode SPHINCS+ Accelerator With a 16-Core SHA-256 Engine on FPGA SoC ***
abstract: *** SPHINCS+ is a stateless hash-based digital signature scheme for post-quantum security, but its practical use on embedded platforms is limited by the large amount of repeated hashing required across key generation, signing, and verification. This paper presents HMSA, a high-performance multi-mode SPHINCS+ accelerator for FPGA SoCs. HMSA supports the complete SPHINCS+ flow, including key generation, signature generation, and signature verification, for the six SHA-256 simple parameter sets: 128f, 128s, 192f, 192s, 256f, and 256s. The proposed architecture uses a shared 16-core SHA-256 engine with a unified control and data path, allowing independent hash tasks from WOTS+, FORS, and XMSS to be processed in parallel while keeping the design scalable across parameter modes. We implemented HMSA on a Xilinx ZCU102 FPGA SoC and compared it with single-core, 4-core, and 8-core architectures. Experimental results show that HMSA reduces signing cycles by 7.1x-13.0x over the single-core baseline, 3.1x-3.6x over the 4-core design, and 1.8x-2.2x over the 8-core design. Across the supported modes, key generation and verification are also accelerated by up to 14.7x and 7.6x, respectively. These results demonstrate that HMSA provides an efficient and scalable hardware platform for full SPHINCS+ acceleration on FPGA SoCs. ***
language of the presentation: *** English ***
 
SHENG GUAN M, 1回目発表 コンピューティング・アーキテクチャ 中島 康彦 林 優一 張 任遠 KAN Yirong PHAM HOAI LUAN Le Vu Trung Duong
title: LoRA-based LLM Reliable Deployment on Memristor Crossbars
abstract: Memristor crossbars provide a promising platform for energy-efficient deployment of large language models (LLMs) by performing matrix-vector multiplication directly in memory. However, analog devices has limited precision and analog peripheral circuits such as analog-to-digital converters (ADCs) may introduce additional noises. And the conductance may variant when voltage press on it for computation, which may cause the outputs of LLMs totally changed. Low Rank Adaptation (LoRA) was used for LLM finetune and recently are used for enhance the reliability of analog devices by adding noise to W and training LoRA to recover. My research is aiming to measure the performance after the adaptive training and exploring the possibility of proposing better software-hardware co-design solutions.
language of the presentation: English
 
YUCHANG HUANG M, 1回目発表 コンピューティング・アーキテクチャ 中島 康彦 林 優一 張 任遠 KAN Yirong PHAM HOAI LUAN Le Vu Trung Duong
title: A Topology-Aware Spiking Transformer for Sparse sEMG-Based Gesture Recognition
abstract: Surface electromyography-based hand gesture recognition plays an important role in prosthetic control, rehabilitation assistance, and human–computer interaction. Although CNNs, TCNs, and Transformers have improved recognition accuracy, their high computational cost and energy consumption remain challenging for wearable and embedded applications. This research explores a topology-aware Spiking Transformer framework for sparse sEMG-based gesture recognition. The proposed research focuses on three aspects. First, a spike encoder with explicit rules is investigated to stabilize spike activities at both the channel level and the local patch-token level. Second, topology-aware analysis is introduced to address the irregular electrode layout of sparse sEMG, where meaningful tokens are not naturally defined. By constructing a virtual electrode topology, local spike tokens can better preserve spatial relationships among electrodes. Third, lightweight spike attention mechanisms are explored to reduce redundant token interactions and improve computational efficiency.
language of the presentation: English
 
GOTMARE YUGANT RAJKUMAR M, 1回目発表 生体画像知能 大竹 義人 冨谷茂隆(物質) Gu Yi Soufi Mazen
title: Seeing Joints in Motion: Articulated 2D-3D Fluoroscopy and CT Registration for Knee Kinematics Estimation with Biomechanical Constraints
abstract: Understanding how the knee moves during activities such as standing, bending, and squatting is important for studying joint function and supporting medical research. One common approach is to align 2D fluoroscopic X-ray images with 3D models created from CT scans; however, achieving accurate and stable alignment throughout a motion sequence remains a challenging task. In this project, we present an articulated 2D–3D fluoroscopy-to-CT registration method for estimating knee joint motion. The method tracks the movement of the femur, tibia, and patella throughout a motion sequence. To improve registration stability and maintain anatomically realistic motion, biomechanical constraints are incorporated into the optimization process. A sequential tracking strategy is also used, allowing information from previous frames to guide the registration of subsequent frames. The framework is currently under development, and preliminary experiments indicate that incorporating biomechanical constraints can help produce more consistent joint motion estimates while reducing anatomically unrealistic solutions. Ongoing work focuses on further improving registration robustness and evaluating the method on dynamic knee motion datasets.
language of the presentation: English
 
JIN YEDONG M, 1回目発表 ソーシャル・コンピューティング 荒牧 英治 渡辺 太郎 若宮 翔子 PENG SHAOWEN
 
MARPENA ADRIANNA M, 1回目発表 ソフトウェア工学 松本 健一 安本 慶一 嶋利 一真 Fan Youmei
 
SONPEE SILA M, 1回目発表 ソフトウェア設計学 飯田 元 松本 健一 柏 祐太郎 Reid Brittany
 
XIA SISI M, 1回目発表 ソフトウェア設計学 飯田 元 松本 健一 柏 祐太郎 Reid Brittany
title: Do Agent Context Files Provide Security Guardrails? An Empirical Study of Agentic AI Software Repositories
abstract: Agentic AI coding tools increasingly rely on repository-level context files to guide agent behavior during software development. These files often contain project-specific instructions, coding conventions, and operational constraints that influence how AI agents generate and modify code. As AI coding agents gain greater autonomy, security-related guidance within context files may play an important role in shaping secure development practices. However, little is currently known about the extent to which these artifacts contain explicit security guardrails. In this paper, we present an empirical study of security guardrails in agent context files collected from open-source software repositories. Using a large-scale dataset of agentic AI coding tool configurations, we investigate whether and how security-related constraints are specified in context files. We develop a classification framework based on security best practices and OWASP risk categories to identify and characterize security guardrails embedded in these artifacts. Our study aims to provide insights into the prevalence and characteristics of security guidance in agent context files and to establish a foundation for future research on secure agentic software engineering.
language of the presentation:Japanese
Agent Context Filesにおけるセキュリティガードレールの実態分析:Agentic AIソフトウェアリポジトリを対象とした実証研究
近年、Claude CodeやCodex、CursorなどのAgentic AIコーディングツールが急速に普及している。これらのツールでは、AIエージェントの振る舞いを制御するために、リポジトリレベルのContext Files(例:AGENTS.md、CLAUDE.md、copilot-instructions.md)が利用されている。これらのファイルには、コーディング規約や開発プロセス、プロジェクト固有の制約などが記述されており、AIエージェントによるコード生成や修正に影響を与える。 AIエージェントの自律性が高まるにつれ、Context Filesに記載されたセキュリティ関連の指示は、エージェントの不適切な行動を抑制するための「セキュリティガードレール」として機能する可能性がある。しかし、既存研究では、Context Filesにどの程度セキュリティガードレールが含まれているのか、またどのようなセキュリティリスクに対応しているのかについて十分に明らかになっていない。 本研究では、オープンソースソフトウェアリポジトリから収集されたAgentic AIツール設定データセットを用いて、Context Filesに含まれるセキュリティガードレールの実態を大規模に調査する。具体的には、OWASP Top 10 for LLM Applicationsおよび既存のセキュリティガイドラインを基に分類基準を構築し、Context Filesに記述されたセキュリティ関連制約を識別・分析する。これにより、Agent Context Filesにおけるセキュリティガードレールの普及状況と特徴を明らかにし、安全なAgentic Software Engineeringに関する今後の研究基盤を提供することを目指す。
 
SULTANA NAYMA M, 1回目発表 ディペンダブルシステム学 井上 美智子 門林 雄基 笹田 大翔
 
SHEN XIULIN M, 1回目発表 ヒューマンAIインタラクション Sakriani Sakti 渡辺 太郎 大内 啓樹 Faisal Mehmood Bagus Tris Atmaja
 
LIU YUEXIAO M, 1回目発表 ユビキタスコンピューティングシステム 安本 慶一 岡田 実 諏訪 博彦 松井 智一
 
ZHANG YUANZHUO M, 1回目発表 計算システムズ生物学 金谷 重彦 松本 健一 MD.Altaf-Ul-Amin Ahmad Kamal Nasution
title: Dynamics and Modulation of Slow-Wave Sleep in a Whole-Brain Mode
abstract: Slow-wave sleep (SWS) is an important physiological brain state characterized by large-scale synchronized neural oscillations and is closely associated with memory consolidation, information processing, and neural plasticity. However, many questions remain regarding how slow-wave activity emerges from local neuronal dynamics to form synchronized activity across the whole brain, and how external stimulation may influence these dynamics. The aim of this research is to develop a whole-brain computational model for investigating the dynamical mechanisms of slow-wave sleep and its modulation. The study is based on the large-scale neural model proposed by Goldman et al., which combines biologically inspired neural population models with the human structural connectome to simulate brain activity under different states. At the current stage, the simulation environment has been established, and the model structure as well as key parameters have been analyzed. Wake-like and sleep-like dynamical states have been successfully generated, including the characteristic Up-Down state transitions observed during slow-wave sleep. Future work will focus on the analysis of slow-wave characteristics, stimulus-response dynamics, and the development of modulation strategies. Ultimately, this research aims to investigate the mechanisms through which external stimulation influences slow-wave activity and to provide a foundation for future studies on closed-loop neuromodulation.
language of the presentation: English
 
LI CHUYANG M, 1回目発表 自然言語処理学 渡辺 太郎 Sakriani Sakti 上垣外 英剛 坂井 優介