AttacksarXiv 2602.07379
Aegis: Governance, Integrity, and Security for AI Voice Agents
Proposes the Aegis red-teaming framework for multi-turn attacks on high-risk voice agents.
- arXiv
- 2602.07379
- Published
- Layer
- Application layer
- Setting
- AI Agent
- Evaluated models
- GPT-4o, GPT-4o-mini, Gemini-1.5 Pro and others7
- AttacksDenial of service
- TechniqueMulti-turn escalation
- ComponentAudio
AbstractAegis red-teams three types of voice agents: query-based access eliminates authentication and leakage successes, but behavioral attacks remain.
Aegis uses multi-turn red-teaming evaluation on ALLM voice agents already integrated into business systems. The authors call this the first systematic red-teaming framework in this setting.