Muhammad Zeeshan Baig
Research Subjects
Muhammad Zeeshan Baig has a total of 26 co-authors. Here are the top co-authors by number of shared publications:
- Manolya Kavakli
The Sir Peter Rigby Digital Futures Institute Aston University, Birmingham, UK, Birmingham United Kingdom, UK, Birmingham United Kingdom, UK, UK
3 shared publications - Yasir Mehmood
Qorvex Consulting, Germany
3 shared publications - Hammad Atta
Qorvex Consulting, Canada
2 shared publications - Ken Huang
DistributedApps.AI, USA
2 shared publications - Nadeem Shahzad
Roshan Consulting, Canada
2 shared publications - Amir Ebrahimi
RMIT University
1 shared publication
Latest Publications
- Open Access
- 4 September 2025
- Published by MDPI AG in Preprints.org
LPCI: Defining and Mitigating a Novel Vulnerability in Agentic AI Systems
This paper introduces Logic-layer Prompt Control Injection (LPCI), a novel vulnerability class that exploits persistent memory and execution pathways in Large Language Models (LLMs). Unlike surface-level injections, LPCI operations embed malicious logic within vector stores, retrieval systems, and tool outputs, allowing payloads to remain dormant and execute contextually upon later activation. We formalize the LPCI attack through a six-stage lifecycle (reconnaissance, injection, trigger execution, persistence, evasion, and trace tampering). The feasibility and severity of LPCI are demonstrated through a large-scale empirical evaluation of over 1,700 adversarial trials across five major LLM platforms, revealing a cross-platform attack success rate of 43\%. Targeted demonstrations on production systems further confirm critical vulnerabilities in memory retention and logic mediation. To mitigate these vulnerabilities, we further propose the Qorvex Security AI Framework (QSAF), a defense-in-depth architecture that integrates runtime memory validation, cryptographic tool attestation, and context-aware filtering. The implementation of QSAF in our tests reduced the LPCI attack success rate from 43\% to 5.3\%. Our findings necessitate a paradigm shift from static input-output filtering toward runtime enforcement of logic-layer integrity to secure next-generation AI systems.
- 4 September 2025
- Published by MDPI AG in Preprints.org
Open AccessLPCI: Defining and Mitigating a Novel Vulnerability in Agentic AI Systems
This paper introduces Logic-layer Prompt Control Injection (LPCI), a novel vulnerability class that exploits persistent memory and execution pathways in Large Language Models (LLMs). Unlike surface-level injections, LPCI operations embed malicious logic within vector stores, retrieval systems, and tool outputs, allowing payloads to remain dormant and execute contextually upon later activation. We formalize the LPCI attack through a six-stage lifecycle (reconnaissance, injection, trigger execution, persistence, evasion, and trace tampering). The feasibility and severity of LPCI are demonstrated through a large-scale empirical evaluation of over 1,700 adversarial trials across five major LLM platforms, revealing a cross-platform attack success rate of 43\%. Targeted demonstrations on production systems further confirm critical vulnerabilities in memory retention and logic mediation. To mitigate these vulnerabilities, we further propose the Qorvex Security AI Framework (QSAF), a defense-in-depth architecture that integrates runtime memory validation, cryptographic tool attestation, and context-aware filtering. The implementation of QSAF in our tests reduced the LPCI attack success rate from 43\% to 5.3\%. Our findings necessitate a paradigm shift from static input-output filtering toward runtime enforcement of logic-layer integrity to secure next-generation AI systems.
- Open Access
Fortifying the Agentic Web: A Unified Zero-Trust Architecture Against Logic-layer Threats
This paper presents a Unified Security Architecture that fortifies the Agentic Web through a Zero-Trust IAM framework. This architecture is built on a foundation of rich, verifiable agent identities using Decentralized Identifiers (DIDs) and Verifiable Credentials (VCs), with discovery managed by a protocol-agnostic Agent Name Service (ANS). Security is operationalized through a multi-layered Trust Fabric which introduces significant innovations, including Trust-Adaptive Runtime Environments (TARE), Causal Chain Auditing, and Dynamic Identity with Behavioral Attestation. By explicitly linking the LPCI threat to these enhanced architectural countermeasures within a formal security model, we propose a comprehensive and forward-looking blueprint for a secure, resilient, and trustworthy agentic ecosystem. Our formal analysis demonstrates that the proposed architecture provides provable security guarantees against LPCI attacks with bounded probability of success.
Open AccessFortifying the Agentic Web: A Unified Zero-Trust Architecture Against Logic-layer Threats
This paper presents a Unified Security Architecture that fortifies the Agentic Web through a Zero-Trust IAM framework. This architecture is built on a foundation of rich, verifiable agent identities using Decentralized Identifiers (DIDs) and Verifiable Credentials (VCs), with discovery managed by a protocol-agnostic Agent Name Service (ANS). Security is operationalized through a multi-layered Trust Fabric which introduces significant innovations, including Trust-Adaptive Runtime Environments (TARE), Causal Chain Auditing, and Dynamic Identity with Behavioral Attestation. By explicitly linking the LPCI threat to these enhanced architectural countermeasures within a formal security model, we propose a comprehensive and forward-looking blueprint for a secure, resilient, and trustworthy agentic ecosystem. Our formal analysis demonstrates that the proposed architecture provides provable security guarantees against LPCI attacks with bounded probability of success.
- Open Access
- 17 August 2025
- Published by MDPI AG in Information
- Vol. 16 (8) , 700
Path Planning with Adaptive Autonomy Based on an Improved A∗ Algorithm and Dynamic Programming for Mobile Robots
Sustainable path-planning algorithms are essential for executing complex user-defined missions by mobile robots. Addressing various scenarios with a unified criterion during the design phase is often impractical due to the potential for unforeseen situations. Therefore, it is important to incorporate the concept of adaptive autonomy for path planning. This approach allows the system to autonomously select the best path-planning strategy. The technique utilizes dynamic programming with an adaptive memory size, leveraging a cellular decomposition technique to divide the map into convex cells. The path is divided into three segments: the first segment connects the starting point to the center of the starting cell, the second segment connects the center of the goal cell to the goal point, and the third segment connects the center of the starting cell to the center of the goal cell. Since each cell is convex, internal path planning simply requires a straight line between two points within a cell. Path planning uses an improved (I-) algorithm, which evaluates the feasibility of a direct path to the goal from the current position during execution. When a direct path is discovered, the algorithm promptly returns and saves it in memory. The memory size is proportional to the square of the total number of cells, and it stores paths between the centers of cells. By storing and reusing previously calculated paths, this method significantly reduces redundant computation and supports long-term sustainability in mobile robot deployments. The final phase of the path-planning process involves pruning, which eliminates unnecessary waypoints. This approach obviates the need for repetitive path planning across different scenarios thanks to its compact memory size. As a result, paths can be swiftly retrieved from memory when needed, enabling efficient and prompt navigation. Simulation results indicate that this algorithm consistently outperforms other algorithms in finding the shortest path quickly.- 17 August 2025
- Published by MDPI AG in Information
- Vol. 16 (8) , 700
Open AccessPath Planning with Adaptive Autonomy Based on an Improved A∗ Algorithm and Dynamic Programming for Mobile Robots
Sustainable path-planning algorithms are essential for executing complex user-defined missions by mobile robots. Addressing various scenarios with a unified criterion during the design phase is often impractical due to the potential for unforeseen situations. Therefore, it is important to incorporate the concept of adaptive autonomy for path planning. This approach allows the system to autonomously select the best path-planning strategy. The technique utilizes dynamic programming with an adaptive memory size, leveraging a cellular decomposition technique to divide the map into convex cells. The path is divided into three segments: the first segment connects the starting point to the center of the starting cell, the second segment connects the center of the goal cell to the goal point, and the third segment connects the center of the starting cell to the center of the goal cell. Since each cell is convex, internal path planning simply requires a straight line between two points within a cell. Path planning uses an improved (I-) algorithm, which evaluates the feasibility of a direct path to the goal from the current position during execution. When a direct path is discovered, the algorithm promptly returns and saves it in memory. The memory size is proportional to the square of the total number of cells, and it stores paths between the centers of cells. By storing and reusing previously calculated paths, this method significantly reduces redundant computation and supports long-term sustainability in mobile robot deployments. The final phase of the path-planning process involves pruning, which eliminates unnecessary waypoints. This approach obviates the need for repetitive path planning across different scenarios thanks to its compact memory size. As a result, paths can be swiftly retrieved from memory when needed, enabling efficient and prompt navigation. Simulation results indicate that this algorithm consistently outperforms other algorithms in finding the shortest path quickly. - Open Access
QSAF: A Novel Mitigation Framework for Cognitive Degradation in Agentic AI
We introduce Cognitive Degradation as a novel vulnerability class in agentic AI systems. Unlike traditional adversarial external threats such as prompt injection, these failures originate internally, arising from memory starvation, planner recursion, context flooding, and output suppression. These systemic weaknesses lead to silent agent drift, logic collapse, and persistent hallucinations over time. To address this class of failures, we introduce the Qorvex Security AI Framework for Behavioral & Cognitive Resilience (QSAF Domain 10), a lifecycle-aware defense framework defined by a six-stage cognitive degradation lifecycle. The framework includes seven runtime controls (QSAF-BC-001 to BC-007) that monitor agent subsystems in real time and trigger proactive mitigation through fallback routing, starvation detection, and memory integrity enforcement. Drawing from cognitive neuroscience, we map agentic architectures to human analogs, enabling early detection of fatigue, starvation, and role collapse. By introducing a formal lifecycle and real-time mitigation controls, this work establishes Cognitive Degradation as a critical new class of AI system vulnerability and proposes the first cross-platform defense model for resilient agentic behavior.
Open AccessQSAF: A Novel Mitigation Framework for Cognitive Degradation in Agentic AI
We introduce Cognitive Degradation as a novel vulnerability class in agentic AI systems. Unlike traditional adversarial external threats such as prompt injection, these failures originate internally, arising from memory starvation, planner recursion, context flooding, and output suppression. These systemic weaknesses lead to silent agent drift, logic collapse, and persistent hallucinations over time. To address this class of failures, we introduce the Qorvex Security AI Framework for Behavioral & Cognitive Resilience (QSAF Domain 10), a lifecycle-aware defense framework defined by a six-stage cognitive degradation lifecycle. The framework includes seven runtime controls (QSAF-BC-001 to BC-007) that monitor agent subsystems in real time and trigger proactive mitigation through fallback routing, starvation detection, and memory integrity enforcement. Drawing from cognitive neuroscience, we map agentic architectures to human analogs, enabling early detection of fatigue, starvation, and role collapse. By introducing a formal lifecycle and real-time mitigation controls, this work establishes Cognitive Degradation as a critical new class of AI system vulnerability and proposes the first cross-platform defense model for resilient agentic behavior.
- Open Access
Frequency Selective Surfaces: Design, Analysis, and Applications
This paper aims to provide a general review of the fundamental ideas, varieties, methods, and experimental research of the most advanced frequency selective surfaces available today. Frequency-selective surfaces are periodic structures engineered to work as spatial filters in interaction with electromagnetic (EM) waves with different frequencies, polarization, and incident angles in a desired and controlled way. They are usually made of periodic elements with dimensions less than the operational wavelength. The primary issue examined is the need for more efficient, compact, and adaptable electromagnetic filtering solutions. The research method involved a comprehensive review of recent advancements in FSS design, focusing on structural diversity, miniaturization, multiband operations, and the integration of active components for tunability and reconfigurability. Key findings include the development of highly selective miniaturized FSSs, innovative applications on flexible and textile substrates, and the exploration of FSSs for liquid and strain sensing. The conclusions emphasize the significant potential of FSS technology to enhance wireless communication, environmental monitoring, and defense applications. This study provides valuable insights into the design and application of FSSs, aiming to guide future research and development in this dynamic field.
Open AccessFrequency Selective Surfaces: Design, Analysis, and Applications
This paper aims to provide a general review of the fundamental ideas, varieties, methods, and experimental research of the most advanced frequency selective surfaces available today. Frequency-selective surfaces are periodic structures engineered to work as spatial filters in interaction with electromagnetic (EM) waves with different frequencies, polarization, and incident angles in a desired and controlled way. They are usually made of periodic elements with dimensions less than the operational wavelength. The primary issue examined is the need for more efficient, compact, and adaptable electromagnetic filtering solutions. The research method involved a comprehensive review of recent advancements in FSS design, focusing on structural diversity, miniaturization, multiband operations, and the integration of active components for tunability and reconfigurability. Key findings include the development of highly selective miniaturized FSSs, innovative applications on flexible and textile substrates, and the exploration of FSSs for liquid and strain sensing. The conclusions emphasize the significant potential of FSS technology to enhance wireless communication, environmental monitoring, and defense applications. This study provides valuable insights into the design and application of FSSs, aiming to guide future research and development in this dynamic field.
- 5 February 2023
- Published by Springer Nature
- p. 391-398
Gender Differences in Multi-modal Interface System for 3D Object Modelling
- 5 February 2023
- Published by Springer Nature
- p. 391-398
Gender Differences in Multi-modal Interface System for 3D Object Modelling
- Open Access
Multimodal Systems: Taxonomy, Methods, and Challenges
Naturally, humans use multiple modalities to convey information. The modalities are processed both sequentially and in parallel for communication in the human brain, this changes when humans interact with computers. Empowering computers with the capability to process input multimodally is a major domain of investigation in Human-Computer Interaction (HCI). The advancement in technology (powerful mobile devices, advanced sensors, new ways of output, etc.) has opened up new gateways for researchers to design systems that allow multimodal interaction. It is a matter of time when the multimodal inputs will overtake the traditional ways of interactions. The paper provides an introduction to the domain of multimodal systems, explains a brief history, describes advantages of multimodal systems over unimodal systems, and discusses various modalities. The input modeling, fusion, and data collection were discussed. Finally, the challenges in the multimodal systems research were listed. The analysis of the literature showed that multimodal interface systems improve the task completion rate and reduce the errors compared to unimodal systems. The commonly used inputs for multimodal interaction are speech and gestures. In the case of multimodal inputs, late integration of input modalities is preferred by researchers because it allows easy update of modalities and corresponding vocabularies.
Open AccessMultimodal Systems: Taxonomy, Methods, and Challenges
Naturally, humans use multiple modalities to convey information. The modalities are processed both sequentially and in parallel for communication in the human brain, this changes when humans interact with computers. Empowering computers with the capability to process input multimodally is a major domain of investigation in Human-Computer Interaction (HCI). The advancement in technology (powerful mobile devices, advanced sensors, new ways of output, etc.) has opened up new gateways for researchers to design systems that allow multimodal interaction. It is a matter of time when the multimodal inputs will overtake the traditional ways of interactions. The paper provides an introduction to the domain of multimodal systems, explains a brief history, describes advantages of multimodal systems over unimodal systems, and discusses various modalities. The input modeling, fusion, and data collection were discussed. Finally, the challenges in the multimodal systems research were listed. The analysis of the literature showed that multimodal interface systems improve the task completion rate and reduce the errors compared to unimodal systems. The commonly used inputs for multimodal interaction are speech and gestures. In the case of multimodal inputs, late integration of input modalities is preferred by researchers because it allows easy update of modalities and corresponding vocabularies.
- Open Access
- 28 May 2019
- Published by MDPI AG in Multimodal Technologies and Interaction
- Vol. 3 (2) , 37
A Survey on Psycho-Physiological Analysis & Measurement Methods in Multimodal Systems
Psycho-physiological analysis has gained greater attention in the last few decades in various fields including multimodal systems. Researchers use psychophysiological feedback devices such as skin conductance (SC), Electroencephalography (EEG) and Electrocardiography (ECG) to detect the affective states of the users during task performance. Psycho-physiological feedback has been successful in detection of the cognitive states of users in human-computer interaction (HCI). Recently, in game studies, psycho-physiological feedback has been used to capture the user experience and the effect of interaction on human psychology. This paper reviews several psycho-physiological, cognitive, and affective assessment studies and focuses on the use of psychophysiological signals in estimating the user’s cognitive and emotional states in multimodal systems. In this paper, we review the measurement techniques and methods that have been used to record psycho-physiological signals as well as the cognitive and emotional states in a variety of conditions. The aim of this review is to conduct a detailed study to identify, describe and analyze the key psycho-physiological parameters that relate to different mental and emotional states in order to provide an insight into key approaches. Furthermore, the advantages and limitations of these approaches are also highlighted in this paper. The findings state that the classification accuracy of >90% has been achieved in classifying emotions with EEG signals. A strong correlation between self-reported data, HCI experience, and psychophysiological data has been observed in a wide range of domains including games, human-robot interaction, mobile interaction, and simulations. An increase in and -band activity have been observed in high intense games and simulations.- 28 May 2019
- Published by MDPI AG in Multimodal Technologies and Interaction
- Vol. 3 (2) , 37
Open AccessA Survey on Psycho-Physiological Analysis & Measurement Methods in Multimodal Systems
Psycho-physiological analysis has gained greater attention in the last few decades in various fields including multimodal systems. Researchers use psychophysiological feedback devices such as skin conductance (SC), Electroencephalography (EEG) and Electrocardiography (ECG) to detect the affective states of the users during task performance. Psycho-physiological feedback has been successful in detection of the cognitive states of users in human-computer interaction (HCI). Recently, in game studies, psycho-physiological feedback has been used to capture the user experience and the effect of interaction on human psychology. This paper reviews several psycho-physiological, cognitive, and affective assessment studies and focuses on the use of psychophysiological signals in estimating the user’s cognitive and emotional states in multimodal systems. In this paper, we review the measurement techniques and methods that have been used to record psycho-physiological signals as well as the cognitive and emotional states in a variety of conditions. The aim of this review is to conduct a detailed study to identify, describe and analyze the key psycho-physiological parameters that relate to different mental and emotional states in order to provide an insight into key approaches. Furthermore, the advantages and limitations of these approaches are also highlighted in this paper. The findings state that the classification accuracy of >90% has been achieved in classifying emotions with EEG signals. A strong correlation between self-reported data, HCI experience, and psychophysiological data has been observed in a wide range of domains including games, human-robot interaction, mobile interaction, and simulations. An increase in and -band activity have been observed in high intense games and simulations. - Open Access
- 24 January 2019
- Published by MDPI AG in Brain Sciences
- Vol. 9 (2) , 24
Connectivity Analysis Using Functional Brain Networks to Evaluate Cognitive Activity during 3D Modelling
Modelling 3D objects in CAD software requires special skills which require a novice user to undergo a series of training exercises to obtain. To minimize the training time for a novice user, the user-dependent factors must be studied. we have presented a comparative analysis of novice/expert information flow patterns. We have used Normalized Transfer Entropy (NTE) and Electroencephalogram (EEG) to investigate the differences. The experiment was divided into three cognitive states i.e., rest, drawing, and manipulation. We applied classification algorithms on NTE matrices and graph theory measures to see the effectiveness of NTE. The results revealed that the experts show approximately the same cognitive activation in drawing and manipulation states, whereas for novices the brain activation is more in manipulation state than drawing state. The hemisphere- and lobe-wise analysis showed that expert users have developed an ability to control the information flow in various brain regions. On the other hand, novice users have shown a continuous increase in information flow activity in almost all regions when doing drawing and manipulation tasks. A classification accuracy of more than 90% was achieved with a simple K-nearest neighbors (k-NN) to classify novice and expert users. The results showed that the proposed technique can be used to develop adaptive 3D modelling systems.
- 24 January 2019
- Published by MDPI AG in Brain Sciences
- Vol. 9 (2) , 24
Open AccessConnectivity Analysis Using Functional Brain Networks to Evaluate Cognitive Activity during 3D Modelling
Modelling 3D objects in CAD software requires special skills which require a novice user to undergo a series of training exercises to obtain. To minimize the training time for a novice user, the user-dependent factors must be studied. we have presented a comparative analysis of novice/expert information flow patterns. We have used Normalized Transfer Entropy (NTE) and Electroencephalogram (EEG) to investigate the differences. The experiment was divided into three cognitive states i.e., rest, drawing, and manipulation. We applied classification algorithms on NTE matrices and graph theory measures to see the effectiveness of NTE. The results revealed that the experts show approximately the same cognitive activation in drawing and manipulation states, whereas for novices the brain activation is more in manipulation state than drawing state. The hemisphere- and lobe-wise analysis showed that expert users have developed an ability to control the information flow in various brain regions. On the other hand, novice users have shown a continuous increase in information flow activity in almost all regions when doing drawing and manipulation tasks. A classification accuracy of more than 90% was achieved with a simple K-nearest neighbors (k-NN) to classify novice and expert users. The results showed that the proposed technique can be used to develop adaptive 3D modelling systems.