Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 2 papers
Filter4

Impact

Unauthorized actions2

Attack surface / entry point

User input6Web pages and interfaces2Documents and messages4Tool responses10Tool and skill descriptions5Code repositories and dependencies0

System component

MCP and skills5Memory6Guardrails and judges3Monitors2Permissions and sandboxing14Vision6Multimodal6
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 233papers have no tags yet and are not included in filtered results.
Impact：Unauthorized actionsAttack surface / entry point：Web pages and interfacesAttack surface / entry point：Code repositories and dependenciesSystem component：MonitorsClear all

Another 233papers do not have category tags yet and are not included in filtered results.

  1. DefensesarXiv 2610.09793

    用时序逻辑监控工具 Agent

    提出 MFOTL 离线时序验证以监控工具 Agent 的危险动作链

    arXiv
    2610.09793
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Attacker
    Black-box
    Abstract形式化验证可有效识别多步攻击，但其有效性高度依赖轨迹的可信历史记录。

    这篇论文对工具调用大语言模型智能体的安全监控进行了形式化时序验证研究。

    Paper analysisRead analysis
  2. DefensesarXiv 2602.20708

    ICON：基于推理时纠正的 Agent 间接提示注入防御

    Proposes inference-time defense ICON, which detects attention over-focusing and redirects to correct indirect prompt injection in agents.

    arXiv
    2602.20708
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    Qwen-3-8B, Llama-3.1-8B, Mistral-8B and others6
    AbstractICON detects over-focusing and redirects at inference time to balance IPI safety and task utility.

    ICON detects attention over-focusing from IPI at inference time and redirects, avoiding refusal that would terminate the agent trajectory.

    Paper analysisRead analysis
You have reached the end