A Survey on Reconfigurable Intelligent Surfaces
Towards Practical Deployments: Security and Privacy Perspectives

arXiv Preprint 2025
1University of Hawaii at Manoa, 2University of South Florida,
3Florida International University, 4Auburn University

Awesome RIS Attacks and Defenses

This repository contains a collection of papers and resources on security and privacy issues related to reconfigurable intelligent surfaces (RISs).

Table of Contents

📃Survey

Application Focus

Year Publication Paper
2016 Reports on progress in physics A review of metasurfaces: physics and applications
2020 IEEE TCCN Reconfigurable intelligent surfaces for wireless communications: Principles, challenges, and opportunities
2022 IEEE STSP An overview of signal processing techniques for RIS/IRS-aided wireless systems
2022 Intelligent and Converged Networks Reconfigurable intelligent surfaces for wireless communications: Overview of hardware designs, channel models, and estimation techniques
2023 IET Communications A survey on reconfigurable intelligent surfaces: Wireless communication perspective
2023 IEEE Wireless Communications Integrated sensing and communication with reconfigurable intelligent surfaces: Opportunities, applications, and future directions
2022 Proceedings of the IEEE Toward ubiquitous sensing and localization with reconfigurable intelligent surfaces
2025 IEEE Communications Surveys & Tutorials The emergence of multi-functional and hybrid reconfigurable intelligent surfaces for integrated sensing and communications-a survey
2025 arXiv A Survey on Reconfigurable Intelligent Surfaces in Practical Systems: Security and Privacy Perspectives

Security Focus

Year Publication Paper
2025 IEEE Internet of Things Journal RIS-based physical layer security for integrated sensing and communication: A comprehensive survey
2023 IEEE OJ-COMS Security and privacy for reconfigurable intelligent surface in 6G: A review of prospective applications and challenges
2025 Discover Internet of Things A comprehensive survey on 6G-security: physical connection and service layers
2024 IEEE Communications Surveys & Tutorials Ris-assisted physical layer security in emerging rf and optical wireless communication systems: A comprehensive survey
2024 IEEE Open Journal of Vehicular Technology A survey on reconfigurable intelligent surface for physical layer security of next-generation wireless communications

Tutorials, Standards & Technical Reports

Tutorial

Year Publication Document
2022 IEEE Signal Processing Magazine Reconfigurable Intelligent Surfaces: A Signal Processing Perspective with Wireless Applications

ETSI ISG RIS Deliverables

Year Organization Document
2023 ETSI GR RIS 001 V1.2.1: Use Cases, Deployment Scenarios and Requirements
2023 ETSI GR RIS 002 V1.2.1: Technological Challenges, Architecture and Impact on Standardization
2023 ETSI GR RIS 003 V1.2.1: Communication Models, Channel Models, Channel Estimation and Evaluation Methodology
2025 ETSI GR RIS 004 V1.1.1: Implementation and Practical Considerations
2025 ETSI GR RIS 005 V1.1.1: Diversity and Multiplexing of RIS-Aided Communications
2025 ETSI GR RIS 006 V1.1.1: Multi-Functional RIS—Modelling, Optimization, and Operation
2026 ETSI GR RIS 007 V1.1.1: Near-Field Channel Modelling and Mechanics
2026 ETSI GS RIS 008 V1.1.1: Standardized Testing for Reconfigurable Intelligent Surfaces

Supporting 3GPP and ITU Documents

These documents provide general channel, security, and IMT-2030 baselines; they are not dedicated 3GPP RIS specifications.

Year Organization Document
Continuously updated 3GPP TR 38.901: Study on Channel Model for Frequencies from 0.5 to 100 GHz
Continuously updated 3GPP TS 33.501: Security Architecture and Procedures for the 5G System
2022 ITU-R Report M.2516-0: Future Technology Trends of Terrestrial IMT Systems Towards 2030 and Beyond
2023 ITU-R Recommendation M.2160-0: Framework and Overall Objectives of IMT for 2030 and Beyond

Industry White Papers

Year Organization Document
2023 RIS TECH Alliance (RISTA) Reconfigurable Intelligent Surface Technology White Paper
2025 FuTURE Forum / RISTA White Paper on Channel Modeling and Simulation for Reconfigurable Intelligent Surface
2025 FuTURE Forum / RISTA White Paper on Prototyping of Reconfigurable Intelligent Surface
2025 FuTURE Forum / RISTA White Paper on Potential Standardization Work for Reconfigurable Intelligent Surface
2025 FuTURE Forum / RISTA 6G Near-Field Technologies White Paper 2.0

⚔️Attacks

The attack taxonomy follows the adversary's position relative to the network operator's trust domain. Attacks on RIS systems exploit or compromise a legitimate RIS deployment, whereas attacks leveraging the RIS weaponize an unauthorized RIS or a fully compromised legitimate RIS against the broader wireless system. A paper may appear in both categories when it explicitly supports both deployment models.

Attacks on RIS Systems

Year Publication Target Component Paper Code💻 / Demo✅
2022 HotMobile '22 Control Link Malicious mmWave reconfigurable surface: Eavesdropping through harmonic steering
2023 WiSec '23 Control Link Wavefront manipulation attack via programmable mmWave metasurfaces: from theory to experiments
2022 ASIA CCS '22 Control Link Mirror, mirror on the wall: Wireless environment reconfiguration attacks based on fast software-controlled surfaces
2022 IEEE ISIT 2022 RIS Controller Controller manipulation attack on reconfigurable intelligent surface aided wireless communication
2025 IEEE CSCN 2025 RIS Hardware MALRIS: Malicious Hardware in RIS-Assisted Wireless Communications
2020 IEEE Wireless Communications Letters RIS Surface IRS-based wireless jamming attacks: When jammers can attack without power
2025 NDSS 2025 RIS Surface Spatial-domain wireless jamming with reconfigurable intelligent surfaces

Attacks Leveraging the RIS

Year Publication Attack Type Paper Code💻 / Demo✅
2023 IEEE TWC Jamming Disco intelligent reflecting surfaces: Active channel aging for fully-passive jamming attack 💻
2025 NDSS 2025 Jamming Spatial-domain wireless jamming with reconfigurable intelligent surfaces
2020 IEEE TWC Pilot Contamination Intelligent reflecting surface aided pilot contamination attack and its countermeasure
2022 WiSec '22 Eavesdropping Metasurface-in-the-Middle Attack: From Theory to Experiment ✅
2022 HotMobile '22 Eavesdropping Malicious mmWave reconfigurable surface: Eavesdropping through harmonic steering
2023 WiSec '23 Eavesdropping Wavefront manipulation attack via programmable mmWave metasurfaces: from theory to experiments
2023 Nature Electronics Eavesdropping Metasurface-enabled smart wireless attacks at the physical layer
2023 HotMobile '23 Eavesdropping Remotely Positioned MetaSurface-Drone Attack
2024 IEEE S&P 2024 Eavesdropping MetaFly: Wireless Backhaul Interception via Aerial Wavefront Manipulation
2025 arXiv Spoofing RIS-Aided Positioning Under Adverse Conditions: Interference from Unauthorized RIS
2023 IEEE S&P 2023 Spoofing mmSpoof: Resilient Spoofing of Automotive Millimeter-Wave Radars Using Reflect Array ✅
2023 NDSS 2023 Spoofing MetaWave: Attacking mmWave Sensing with Meta-material-enhanced Tags
2023 SenSys '23 Spoofing RIStealth: Practical and Covert Physical-Layer Attack against WiFi-based Intrusion Detection via Reconfigurable Intelligent Surface
2024 CCS '24 Spoofing RISiren: Wireless Sensing System Attacks via Metasurface ✅
2025 arXiv Spoofing Sensing Safety Analysis for Vehicular Networks with Integrated Sensing and Communication (ISAC)
2024 Remote Sensing Spoofing & Jamming A broadband information metasurface-assisted target jamming system for synthetic aperture radar
2026 The Web Conference (WWW) Eavesdropping SuperEar: Eavesdropping on Mobile Voice Calls via Stealthy Acoustic Metamaterials 💻
2025 IEEE TIFS Spoofing A Portable and Stealthy Inaudible Voice Attack Based on Acoustic Metamaterials

🛡️Defenses

The defense taxonomy is determined by the role of the RIS in the protected architecture. Securing RIS-assisted systems assumes that a legitimate RIS is already part of the system. Countermeasures against malicious RISs address attacks in which the adversary controls an unauthorized or compromised RIS. RIS as a defensive tool covers systems that introduce an additional friendly RIS specifically for protection. A paper may appear in more than one category if it evaluates multiple architectures.

Securing RIS-Assisted Systems

Year Publication Threat Type Paper Code💻 / Demo✅
2022 IEEE Access Jamming Anti-jamming RIS communications using DQN-based algorithm
2023 GLOBECOM 2023 Jamming An anti-jamming strategy for disco intelligent reflecting surfaces based fully-passive jamming attacks
2023 Electronics Jamming & Eavesdropping RIS-assisted robust beamforming for UAV anti-jamming and eavesdropping communications: A deep reinforcement learning approach
2026 IEEE TWC Eavesdropping Hiding in Plain Sight: RIS-Aided Target Obfuscation in ISAC
2022 IEEE Transactions on Vehicular Technology Eavesdropping Reconfigurable intelligent surface-assisted secure mobile edge computing networks
2022 IEEE Wireless Communications Eavesdropping Secure beamforming for IRS-enhanced NOMA networks
2024 Sensors Eavesdropping An Underwater source location privacy protection scheme based on game theory in a multi-attacker cooperation scenario
2024 Photonics Eavesdropping Reconfigurable Intelligent Surface-Aided Security Enhancement for Vehicle-to-Vehicle Visible Light Communications
2022 The Journal of Supercomputing Eavesdropping Security performance analysis of RIS-assisted UAV wireless communication in industrial IoT
2022 ICC 2022 Eavesdropping Robust design for STAR-RIS secured Internet of Medical Things
2024 IEEE Transactions on Communications Eavesdropping Security Enhancement for RIS-Aided MEC Systems with Deep Reinforcement Learning
2025 ICNC 2025 Eavesdropping Secure-IRS: Defending Against Adversarial Physical-Layer Sensing in ISAC System ✅
2023 IEEE Transactions on Industrial Informatics Eavesdropping Deep reinforcement learning for RIS-aided secure mobile edge computing in industrial Internet of Things
2022 Physical Communication Eavesdropping Deep reinforcement learning based IRS-assisted mobile edge computing under physical-layer security
2025 IEEE Transactions on Vehicular Technology Eavesdropping RIS Assisted Near-Field NOMA Communications: A Security-Fairness Trade-Off
2025 IEEE TWC Eavesdropping Double-RIS-Assisted Orbital Angular Momentum Near-Field Secure Communications
2024 Frontiers of Information Technology & Electronic Engineering Jamming & Eavesdropping XL-RIS Empowered Near-Field Physical Layer Security Against Jamming and Eavesdropping Attacks
2025 Drones Eavesdropping Cooperative Jamming for RIS-Assisted UAV-WSN Against Aerial Malicious Eavesdropping

Countermeasures Against Malicious RISs

Early Detection of Unauthorized RIS

Year Publication Paper Code💻 / Demo✅
2023 Optics Express Detection and mapping of specular surfaces using multibounce lidar returns
2025 ICC 2025 On the Detection of Non-Cooperative RISs: Scan B-Testing via Deep Support Vector Data Description
2025 arXiv Analysis and Detection of RIS-based Spoofing in Integrated Sensing and Communication (ISAC)
2022 IEEE Pervasive Computing See no evil: Discovering covert surveillance devices using thermal imaging
2025 IEEE TIFS MRIS-SAD: Malicious RIS Spoofing Attack Detection Based on Hybrid Deep Autoencoder

System-level Defenses

Year Publication Paper Code💻 / Demo✅
2020 IEEE TWC Intelligent Reflecting Surface Aided Pilot Contamination Attack and Its Countermeasure
2024 IEEE SPAWC 2024 Benign and Malicious Reconfigurable Intelligent Surfaces in MISO Wiretap Channels
2023 IEEE Wireless Communications Letters A Countermeasure Against RIS Jamming Attack in Physical-Layer Key Generation
2023 IEEE OJ-COMS Counteracting eavesdropper attacks through reconfigurable intelligent surfaces: A new threat model and secrecy rate optimization
2024 IEEE Wireless Communications Letters Malicious RIS Versus Massive MIMO: Securing Multiple Access Against RIS-Based Jamming Attacks

RIS as a Defensive Tool

Year Publication Threat Type Paper Code💻 / Demo✅
2025 IEEE PIMRC 2025 Eavesdropping Optimizing Indoor RIS-Aided Physical-Layer Security: A Codebook-Generation Methodology and Measurement-Based Analysis
2024 GLOBECOM 2024 Eavesdropping Online DRL-based Beam Selection for RIS-Aided Physical Layer Security: An Experimental Study
2023 IEEE OJ-COMS Eavesdropping Counteracting eavesdropper attacks through reconfigurable intelligent surfaces: A new threat model and secrecy rate optimization
2024 Photonics Eavesdropping Reconfigurable Intelligent Surface-Aided Security Enhancement for Vehicle-to-Vehicle Visible Light Communications
2022 IEEE S&P 2022 Eavesdropping IRShield: A countermeasure against adversarial physical-layer wireless sensing 💻
2022 MobiCom '22 Eavesdropping Protego: securing wireless communication via programmable metasurface
2023 Applied Physics Letters Eavesdropping Physical-level secure wireless communication using random-signal-excited reprogrammable metasurface
2025 Nature Communications Eavesdropping Chaotic information metasurface for direct physical-layer secure communication
2026 arXiv Eavesdropping Invisible Walls: Privacy-Preserving ISAC Empowered by Reconfigurable Intelligent Surfaces
2024 Optica Eavesdropping Audio misinformation encoding via an on-phone sub-terahertz metasurface
2025 IEEE S&P 2025 Eavesdropping Spoofing eavesdroppers with audio misinformation ✅
2023 IEEE CNS 2023 Eavesdropping RMDM: Using Random Meta-Atoms to Send Directional Misinformation to Eavesdroppers
2024 IEEE Wireless Communications Letters Eavesdropping Intelligent reflecting surface-aided radar spoofing
2025 IEEE CNS 2025 Eavesdropping MetaHeart: Spoofing Vibrational Biometrics via Dynamic Metasurfaces
2025 Nature Communications Eavesdropping Anti-radar based on metasurface ✅
2024 IEEE Systems Journal Jamming Self-Sustainable Active Reconfigurable Intelligent Surfaces for Antijamming in Wireless Communications
2023 Entropy Jamming A communication anti-jamming scheme assisted by RIS with angular response
2023 Electronics Jamming & Eavesdropping RIS-assisted robust beamforming for UAV anti-jamming and eavesdropping communications: A deep reinforcement learning approach
2023 IEEE Access Spoofing Mitigating inaudible ultrasound attacks on voice assistants with acoustic metamaterials
2023 JASA Spoofing 3D printed acoustic metamaterial filters for the mitigation of inaudible ultrasound attacks on smart speakers
2025 MobiCom 2025 Spoofing MetaGuardian: Enhancing Voice Assistant Security through Advanced Acoustic Metamaterials 💻

Physical-Layer Authentication

Year Publication Threat Type Paper Code💻 / Demo✅
2024 IEEE TWC Spoofing RIS-Assisted Wireless Link Signatures for Specific Emitter Identification
2025 IEEE Transactions on Consumer Electronics Spoofing Efficient Gaussian Process Classification-Based Physical-Layer Authentication with Configurable Fingerprints for 6G-Enabled IoT
2024 IEEE TIFS Spoofing Analysis of Challenge-Response Authentication with Reconfigurable Intelligent Surfaces
2025 IEEE Internet of Things Journal Spoofing & Eavesdropping A Robust Reconfigurable Intelligent Surface-Aided Physical Layer Authentication Scheme Under Confidentiality Constraints
2025 IEEE Internet of Things Journal Spoofing Voltage Profile-Driven Physical Layer Authentication for RIS-Aided Backscattering Tag-to-Tag Networks

🛠️Tools

Year Publication / Organization Resources
2024 Mathworks Introduction to Reconfigurable Intelligent Surfaces (RIS)
2024 Mathworks Radar Sensing with Reconfigurable Intelligent Surfaces (RIS)
2024 Mathworks Model Reconfigurable Intelligent Surfaces with CDL Channels
2019 ASU Wireless Intelligence Lab DeepMIMO
2020 Koç University CoreLab SimRIS Channel Simulator v2.0
2022 NVIDIA Sionna RT v0.19.2 (RIS-supported release)
2024 InterDigital NeoRadium
2023 ISAP 2023 Open Source RIS
2024 University of Trento CoopeRIS: RIS Simulation for Cooperative Driving
2026 Telefónica Scientific Research DDRD: Data-Driven RIS Deployment
Continuously updated GitHub RIS-Codes-Collection