Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 4 papers
Filter3

System type

AI Agent3

Attacker access

Black-box4

Attack surface / entry point

User input138Documents and messages6Tool responses8Tool and skill descriptions4Code repositories and dependencies4Memory writes0Images, audio and video38Training data4Weights and gradients5Inference services and hardware3

Layer

Application layer3
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 255papers have no tags yet and are not included in filtered results.
Attacker access：Black-boxAttack surface / entry point：Tool and skill descriptionsAttack surface / entry point：Memory writesClear all

Another 255papers do not have category tags yet and are not included in filtered results.

  1. DefensesarXiv 2610.02432

    论文提出 LLM 输入扰动鲁棒性度量，并发布 ASA 攻击与 AttestMCP 防护

    提出 ASA 与 AttestMCP，度量并降低 LLM 对输入序列扰动的敏感

    arXiv
    2610.02432
    Published
    Layer
    Application layer
    Setting
    LLM applications, AI Agent
    Attacker
    Black-box
    Evaluated models
    Gemma-3-27B-Instruct, Gemma-3-4B-Instruct, Llama-3.2-3B-Instruct and others12
    Paper analysisRead analysis
  2. AttacksarXiv 2608.09732

    ColluSkill 用跨技能组合绕过 Agent 技能扫描器

    提出 ColluSkill，用跨技能组合绕过 Agent 技能扫描器

    arXiv
    2608.09732
    Published
    Layer
    Application layer
    Setting
    coding agent
    Attacker
    Black-box, Gray-box
    Evaluated models
    GPT-5.5, DeepSeek-V4-Pro, GLM-5.2

    Abstract论文揭示了单技能孤立扫描的盲区，提出多技能链攻击 ColluSkill 与上下文防御 ChainGuard 并验证了有效性。

    Paper analysisRead analysis
  4. AttacksarXiv 2601.05466

    Jailbreaking large language models through reinforcement learning with iterative tool disguise attacks

    提出 iMIST，用工具伪装和 PPO 迭代越狱大语言模型

    arXiv
    2601.05466
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Attacker
    Black-box
    Evaluated models
    DeepSeek-V3, Qwen3-32B, GPT-OSS-120B
    AbstractiMIST 用工具伪装和在线 PPO 做黑盒越狱，Table I 中 JADES 高于同格基线。

    iMIST是黑盒越狱方法：把恶意查询伪装成合法工具调用，再用在线强化学习把响应的有害性分数往上推。

    Paper analysisRead analysis
You have reached the end