v299: Proceedings of CAMLIS 2025
Summary
The 2025 Conference on Applied Machine Learning for Information Security (PMLR 299), held October 22-24, 2025, at Sands Capital, Arlington VA, presents 14 papers edited by Edward Raff and Ethan M. Rudd. This volume covers a broad spectrum of topics at the intersection of machine learning and cybersecurity. Key research includes adversarial ML attacks on financial reporting, evaluating Visual Language Model (VLM) alignment training using Text2VLM, and a self-sustained attack detection framework for enterprise security. Other contributions address red teaming AI red teaming, developing generalizable cyber defense agents, causal reinforcement learning for cyber anomaly detection, and automatic restoration of poisoned ML examples via PD-AutoR. Additionally, papers explore backdoors in whitebox LLMs (ShadowLogic), AI agents simulating scam calls (ScamAgents), frameworks for rapid LLM attack protection, explainable detection of AWS role chaining attacks (RoleSentry), efficient continual learning for malware analysis (MADAR), and GraphRAG-inspired agentic cloud infrastructure (RIG-RAG).
Key takeaway
For AI Security Engineers and ML practitioners developing secure systems, this conference volume underscores the critical need to integrate advanced adversarial ML defenses and robust detection frameworks. You should prioritize evaluating LLM and VLM vulnerabilities, implementing solutions like ShadowLogic for backdoor detection, and exploring causal reinforcement learning for anomaly detection to proactively counter sophisticated cyber threats.
Key insights
The 2025 AMLIS conference highlights diverse advancements and threats at the intersection of machine learning and information security.
Principles
- ML security requires continuous adaptation.
- Adversarial robustness is multi-faceted.
- Explainability enhances attack detection.
Method
The conference presents methods like Maximum Violated Multi-Objective Attack, Text2VLM for VLM alignment evaluation, PD-AutoR for poisoned example restoration, and MADAR for continual malware analysis.
In practice
- Implement ShadowLogic to detect LLM backdoors.
- Use RoleSentry for AWS role chaining attack detection.
- Apply RIG-RAG for agentic cloud infrastructure.
Topics
- Applied Machine Learning
- Information Security
- Adversarial ML
- Cyber Anomaly Detection
- Large Language Models
- Visual Language Models
- Cloud Security
Code references
Best for: Research Scientist, CTO, VP of Engineering/Data, AI Scientist, AI Security Engineer, Machine Learning Engineer
Related on AIssential
Editorial summary, takeaway, and curation by AIssential. Original article published by Proceedings of Machine Learning Research.