Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 2 papers
Filter5

System type

AI Agent8coding agent0Browser and computer use1Multi-agent systems1

Attack surface / entry point

User input7Tool responses2Tool and skill descriptions3Inter-agent messages3

System component

Guardrails and judges2Monitors4Permissions and sandboxing4
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 254papers have no tags yet and are not included in filtered results.
System type：coding agentSystem type：Browser and computer useSystem type：Multi-agent systemsAttack surface / entry point：Tool responsesSystem component：Guardrails and judgesClear all

Another 254papers do not have category tags yet and are not included in filtered results.

  1. DefensesarXiv 2610.07657

    DEFER1 多智能体防御研究报告受控测试中的攻击成功率下降

    实现 DEFER，以确定性检查优先拦截多智能体流水线的内容攻击

    arXiv
    2610.07657
    Published
    Layer
    Application layer
    Setting
    Multi-agent systems
    Evaluated models
    Qwen3-235B-A22B-Instruct-2507, gpt-oss-120b, Llama-4-Scout-17B-16E-Instruct and others5
    AbstractDEFER 把确定性检查放在 judge 之前。

    DEFER 用来测量多智能体授权流水线里，确定性规则在何处结束、LLM judge 从何处开始。

    Paper analysisRead analysis
  2. DefensesarXiv 2603.14707

    视觉混淆代理：利用与防御计算机使用智能体的感知失效

    提出进程外双通道对比分类，拦截计算机使用智能体的错误点击

    arXiv
    2603.14707
    Published
    Layer
    Application layer
    Setting
    Browser and computer use
    Evaluated models
    multi-modal-embed-small
    Abstract感知错误可被屏幕像素对调利用。

    作者把 CUA 的感知失败写成安全漏洞visual confused deputy：智能体按看错的屏幕授权 click(x,y)，真实落点与它以为的元素不一致。

    Paper analysisRead analysis
You have reached the end