Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 6 papers
Filter3

Attack type

Prompt injection5Poisoning and backdoors6

Defense type

Instruction–data separation4Permissions and approval3

Impact

Unauthorized actions6

System type

AI Agent6

Attack surface / entry point

Documents and messages3Tool responses3Tool and skill descriptions6Memory writes5Distribution channels6

Layer

Application layer6

System component

MCP and skills32Memory3Guardrails and judges5Monitors4Permissions and sandboxing6Fine-tuning and open weights12Image generation3Multimodal6
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 265papers have no tags yet and are not included in filtered results.
Attack type：Poisoning and backdoorsAttack surface / entry point：Distribution channelsSystem component：Permissions and sandboxingClear all

Another 265papers do not have category tags yet and are not included in filtered results.

  1. DefensesarXiv 2610.02861

    论文提出在 Kubernetes 上保护 AI Agent 的七层纵深防御框架与参考架构

    提出 Kubernetes 运维智能体的七层纵深防御框架与参考架构

    arXiv
    2610.02861
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Abstract把运维智能体当不可信租户，用七层控制在完全攻破假设下约束行动。

    把 Kubernetes 上的运维智能体当作不可信租户，在假定提示注入已完全控制其工具选择的前提下，用基础设施重建数据面与控制面的边界。要解决的是：智能体读日志、注解、工单或 MCP 工具描述时，这些内容可以变成它带着自身凭据执行的命令。模型对齐和分类器只降低概率。

    Paper analysisRead analysis
  5. DefensesarXiv 2603.12644

    揭示自主 Agent 的安全威胁与防御架构：OpenClaw 案例研究

    梳理自主 Agent 威胁并提出全生命周期防御蓝图 FASA

    arXiv
    2603.12644
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Abstract以 OpenClaw 为例划分三层风险，并用 FASA 描述从输入到系统执行的防御。

    这是一份以 OpenClaw 为案例的威胁梳理和防御架构报告，不是带分数的攻击或防御评测。

    Paper analysisRead analysis
  6. DefensesarXiv 2603.11619

    驯服 OpenClaw：自主 LLM 智能体威胁的安全分析与缓解

    提出对齐五阶段的纵深防御，缓解自主 Agent 跨阶段威胁

    arXiv
    2603.11619
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Abstract这是对 OpenClaw 的生命周期威胁分析与分层缓解设计，案例为定性证据。

    这是对 OpenClaw 的生命周期威胁分析，并配套一套分层缓解设计。要处理的问题是：自主智能体把即时通讯、持久记忆、第三方插件和高权限执行连在一起之后，攻击不再限于单轮越狱，而会跨初始化到执行的多个阶段复合。作者认为只加固单个接口的防御，挡不住这种跨时间攻击。

    Paper analysisRead analysis
You have reached the end