Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 2 papers
Filter4

Attack type

Jailbreaks23Prompt injection73Poisoning and backdoors21Extraction and theft2Detection evasion3Malicious use5

Defense type

Model hardening11Inference-time intervention5Instruction–data separation2Permissions and approval1Monitoring and auditing0Watermarking and provenance3
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 261papers have no tags yet and are not included in filtered results.
Attack type：Extraction and theftDefense type：Instruction–data separationDefense type：Permissions and approvalDefense type：Monitoring and auditingClear all

Another 261papers do not have category tags yet and are not included in filtered results.

  1. DefensesarXiv 2609.01677

    Skill-as-API：面向智能体软件工程的机密多智能体协作协议

    提出 Skill-as-API，隔离多智能体协作中的 skill 正文与系统提示词

    arXiv
    2609.01677
    Published
    Layer
    Application layer
    Setting
    Multi-agent systems, coding agent
    Abstract协议把 skill 正文留在所有者侧，四层限制发现内容、权限期限和注入拼接。

    Skill-as-API 是面向智能体软件工程的协调协议，用来在跨组织调用时把 skill 的代码和系统提示词留在所有者进程。作者针对三条威胁：经通道或命名空间抽取专有方法，用注入让被调用模型输出系统提示词，以及协作结束后权限继续保留。

    Paper analysisRead analysis
  2. DefensesarXiv 2608.25431

    GIFT: Enforcing User Data Isolation in LLM Serving via GPU Information Flow Tracking

    Propose GIFT, isolating user data in shared LLM serving using encryption and GPU information flow tracking

    arXiv
    2608.25431
    Published
    Layer
    Infrastructure layer
    Setting
    Models and APIs
    Evaluated models
    Qwen2.5-14B, Qwen2.5-32B, Qwen2.5-72B and others6
    AbstractGIFT uses cryptographic isolation plus GPU information flow rules to enforce user data isolation on vLLM and DistServe, and reports throughput overhead.

    GIFT is the authors' user data isolation system for shared LLM serving, with GIFT-CC enabling confidential computing. In the conclusion, the authors state it is the first IFT design for this scenario.

    Paper analysisRead analysis
You have reached the end