Security research and technical insights # Security in the Age of AI NVIDIA advances AI security by helping defenders apply AI and helping organizations create safer AI systems. [Explore research](#research) [Browse publications](https://research.nvidia.com/publications) Research and technical insights ## How does NVIDIA approach AI security? NVIDIA helps shift the asymmetric advantage toward defenders by sharing frontier security research openly, enabling the community to pool knowledge, resources, and expertise. ### Transparent Insights Make AI security research open to inspection, adaptation, and validation across models, to enable stronger protections across the full AI stack. ### Reproducible Results Develop repeatable methods, clear benchmarks, and research artifacts so teams can validate findings and build on them. ### Practical Security Produce actionable security research to drive vulnerability discovery, disclosure, remediation, and prevention to help defenders manage real-world risk. Published work ## AI security contributions BlogSep 21, 2026 ### [When Modalities Combine: The Combinatorial Blind Spot in AI Security](/ai-security/when-modalities-combine-combinatorial-blind-spot-ai-security) Prompt injection used to be a problem about a single input. Defenders inspected a string, or an image, or an audio clip, and asked whether that single channel carried a malicious instruction. Multimodal models break that assumption. Research PaperSep 15, 2026 ### [ShareMMU: Supporting Secure Address Translation Sharing among Untrusted Accelerators](/publication/2026-09_sharemmu-supporting-secure-address-translation-sharing-among-untrusted) The growing demand for accelerated computing is driving widespread deployment of multi-accelerator systems in the cloud and at the edge. Research PaperSep 11, 2026 ### [ReasAlign: Reasoning Enhanced Safety Alignment against Prompt Injection Attack](/publication/2026-01_reasalign-reasoning-enhanced-safety-alignment-against-prompt-injection-attack) Large Language Models (LLMs) have enabled the development of powerful agentic systems capable of automating complex workflows across various fields. Research PaperSep 11, 2026 ### [ReasoningBomb: A Stealthy Denial-of-Service Attack by Inducing Pathologically Long Reasoning in Large Reasoning Models](/publication/2026-01_reasoningbomb-stealthy-denial-service-attack-inducing-pathologically-long) Large reasoning models (LRMs) extend large language models with explicit multi-step reasoning traces, but this capability introduces a new class of prompt-induced inference-time denial-of-service (PI-DoS) attacks that exploit the high computational co Research PaperSep 11, 2026 ### [Architecting Secure AI Agents: Perspectives on System-Level Defenses Against Indirect Prompt Injection Attacks](/publication/2026-03_architecting-secure-ai-agents-perspectives-system-level-defenses-against) AI agents, predominantly powered by large language models (LLMs), are vulnerable to indirect prompt injection, in which malicious instructions embedded in untrusted data can trigger dangerous agent actions. Research PaperSep 11, 2026 ### [Beyond Latency: A System-Level Characterization of MPC and FHE for PPML](/publication/2026-03_beyond-latency-system-level-characterization-mpc-and-fhe-ppml) Privacy protection has become an increasing concern in modern machine learning applications. Research PaperSep 11, 2026 ### [GPIR: Enabling Practical Private Information Retrieval with GPUs](/publication/2026-04_gpir-enabling-practical-private-information-retrieval-gpus) Private information retrieval (PIR) allows private database queries; however, it is hindered by intense server-side computation and memory traffic. Research PaperSep 11, 2026 ### [Privatar: Scalable Privacy-preserving Multi-user VR via Secure Offloading](/publication/2026-04_privatar-scalable-privacy-preserving-multi-user-vr-secure-offloading) Multi-user virtual reality enables immersive interaction. However, rendering avatars for numerous participants on each headset incurs prohibitive computational overhead, limiting scalability. Research PaperSep 11, 2026 ### [ Onyx: Cost-Efficient Disk-Oblivious ANN Search](/publication/_onyx-cost-efficient-disk-oblivious-ann-search) Approximate nearest neighbor (ANN) search in AI systems increasingly handles sensitive data on third-party infrastructure. Research PaperSep 11, 2026 ### [VIPIR: A Versatile GPU Framework for Integrating Private Information Retrieval Protocols](/publication/2026-06_vipir-versatile-gpu-framework-integrating-private-information-retrieval) While private information retrieval (PIR) enables private database services by fully concealing access patterns, it simultaneously requires high computational throughput, large memory capacity, and substantial memory bandwidth. [See more](/ai-security/publications) Creating an asymmetric advantage through community ## The Open Secure AI Alliance unites a community of security experts working together to keep the world safe. [Explore the Open Secure AI Alliance](https://secureaialliance.org/) ## FAQs ### Why does NVIDIA share AI security research openly? + AI security is a collective challenge. NVIDIA shares research, methods, and technical artifacts so defenders can inspect findings, build on them, and help strengthen protections across the ecosystem. NVIDIA is an active contributor to the Open Secure AI Alliance, managed by the Linux Foundation, which provides a community for security teams to collaborate on this work. [Learn more](https://secureaialliance.org/). ### What does NVIDIA contribute to AI security? + NVIDIA AI security research studies how AI systems can be secured and how AI can help defenders. The work spans open systems, reproducible cyber evaluation, red teaming, runtime controls, human accountability, plus vulnerability discovery, reporting, and remediation. ### What security topics does this page cover? + This collection covers AI agent security, prompt injection, offensive and defensive cybersecurity, vulnerability discovery and remediation, model-weight security, safety evaluation, multimodal attacks, observability, and governed deployment. It also connects this research to real-world cyber defense and secure AI infrastructure. ### What makes AI security insights useful to practitioners? + Useful research defines the security problem, documents the method, states limitations, and provides evidence others can inspect, test, or reproduce. NVIDIA AI Security prioritizes practical work that helps teams evaluate AI systems and apply findings to stronger defenses. ### Where can I find published NVIDIA Research papers? + Find published papers in the [NVIDIA Research publications directory](https://research.nvidia.com/publications). Individual security-research entries should also link directly to their paper, technical blog, code, data, or other public primary source. ### Where can I find information about NVIDIA technologies for AI security? + Explore [NVIDIA cybersecurity AI technologies](https://www.nvidia.com/en-us/solutions/ai/cybersecurity/), including open AI models and libraries, secure infrastructure, and reference examples. Next steps ## Connect security insights to research, papers, labs, and collaboration. [Explore published NVIDIA Research papers](https://research.nvidia.com/publications) [Explore NVIDIA Research labs and collaborations](https://research.nvidia.com/research-labs) [Contact NVIDIA about research licensing](https://www.nvidia.com/en-us/research/inquiries/) [Explore NVIDIA technical blogs](https://developer.nvidia.com/blog/category/cybersecurity/) [Explore NVIDIA cybersecurity news](https://blogs.nvidia.com/blog/tag/cybersecurity/) [Contribute to the Open Secure AI Alliance](https://secureaialliance.org/)