Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 3 papers
Filter4

Attack type

Jailbreaks3Prompt injection45Poisoning and backdoors34Detection evasion4

System type

AI Agent3

Attack surface / entry point

User input39Tool responses13Tool and skill descriptions3

Layer

Application layer3Infrastructure layer0
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 254papers have no tags yet and are not included in filtered results.
Attack type：JailbreaksAttack surface / entry point：Tool and skill descriptionsLayer：Application layerLayer：Infrastructure layerClear all

Another 254papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2610.05943

    CRIME 框架利用良性 Agent 技能组合诱发恶意行为

    提出 CRIME 框架，组合良性 Agent 技能诱发恶意行为

    arXiv
    2610.05943
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    DeepSeek-V4-Flash, GPT-4o-mini, GPT-4o and others6
    Abstract良性技能经 DCA 或 ACA 组合后可产生恶意环境后果，单独审查对不上。

    CRIME 把公共技能库中各自通过审查的技能配成两两组合，看联合执行能否实现指定恶意任务。。

    Paper analysisRead analysis
  3. AttacksarXiv 2601.05466

    Jailbreaking large language models through reinforcement learning with iterative tool disguise attacks

    提出 iMIST，用工具伪装和 PPO 迭代越狱大语言模型

    arXiv
    2601.05466
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Attacker
    Black-box
    Evaluated models
    DeepSeek-V3, Qwen3-32B, GPT-OSS-120B
    AbstractiMIST 用工具伪装和在线 PPO 做黑盒越狱，Table I 中 JADES 高于同格基线。

    iMIST是黑盒越狱方法：把恶意查询伪装成合法工具调用，再用在线强化学习把响应的有害性分数往上推。

    Paper analysisRead analysis
You have reached the end