Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 3 papers
Filter5

Attack type

Prompt injection3Poisoning and backdoors3

Defense type

Instruction–data separation3Permissions and approval3Monitoring and auditing4

Impact

Unauthorized actions3

System type

AI Agent3

Attack surface / entry point

Web pages and interfaces3Documents and messages3Tool responses4Tool and skill descriptions3Code repositories and dependencies0Memory writes5Distribution channels3

Layer

Application layer3

System component

MCP and skills4Memory3Monitors0Permissions and sandboxing10
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 240papers have no tags yet and are not included in filtered results.
Defense type：Instruction–data separationAttack surface / entry point：Web pages and interfacesAttack surface / entry point：Code repositories and dependenciesSystem component：MemorySystem component：MonitorsClear all

Another 240papers do not have category tags yet and are not included in filtered results.

  2. DefensesarXiv 2603.12644

    Revealing security threats and defense architectures for autonomous agents: an OpenClaw case study

    Reviews threats to autonomous agents and proposes a full-lifecycle defense blueprint, FASA

    arXiv
    2603.12644
    Published
    Layer
    Application layer
    Setting
    AI Agent
    AbstractUsing OpenClaw as an example, it divides risks into three layers and uses FASA to describe defense from input to system execution.

    This is a threat review and defense architecture report using OpenClaw as a case study, not a scored attack or defense evaluation.

    Paper analysisRead analysis
  3. DefensesarXiv 2603.11619

    Taming OpenClaw: Security Analysis and Mitigation of Threats in Autonomous LLM Agents

    Proposes a defense-in-depth aligned with the five stages to mitigate cross-stage threats to autonomous agents

    arXiv
    2603.11619
    Published
    Layer
    Application layer
    Setting
    AI Agent
    AbstractThis is a lifecycle threat analysis and layered mitigation design for OpenClaw, with the cases serving as qualitative evidence.

    This is a lifecycle threat analysis of OpenClaw, accompanied by a set of layered mitigation designs. The problem addressed is: when autonomous agents connect instant messaging, persistent memory, third-party plugins, and high-privilege execution, attacks are no longer limited to single-turn jailbreaks but can compound across multiple stages from initialization to execution. The authors argue that defenses hardening only individual interfaces cannot stop such cross-temporal attacks.

    Paper analysisRead analysis
You have reached the end