Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 7 papers
Filter4

Attack type

Prompt injection4

Impact

Unauthorized actions3

System type

LLM applications12AI Agent23web agent7Browser and computer use4Embodied systems and robotics3

Attack surface / entry point

Web pages and interfaces3Images, audio and video4

Layer

Prompt layer3Model layer6Application layer7

System component

Monitors6Vision7Multimodal7
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 254papers have no tags yet and are not included in filtered results.
System type：Browser and computer useSystem type：Embodied systems and roboticsLayer：Application layerSystem component：MultimodalClear all

Another 254papers do not have category tags yet and are not included in filtered results.

  2. Evaluation and benchmarksarXiv 2609.38948

    DrivingBench 发布：让视觉语言模型驾驶丰田 Corolla 绕桩

    提出 DrivingBench，评测通用视觉语言模型能否闭环驾驶真车

    arXiv
    2609.38948
    Published
    Layer
    Application layer
    Setting
    Embodied systems and robotics
    Evaluated models
    GPT-6 Astra, Claude Fable 5.1, Grok 4.6 and others4
    Abstract仅 Astra 第二次跑完低速锥桶路线。

    DrivingBench 评测通用 VLM 能否自己闭环开真车，推理延迟也算进任务。

    Paper analysisRead analysis
  3. Evaluation and benchmarksarXiv 2610.06898

    DIBench：面向移动 GUI 智能体多候选选择决策完整性的安全基准

    用 DIBench 评测移动 GUI 智能体被 UI 注入后的决策完整性

    arXiv
    2610.06898
    Published
    Layer
    Application layer
    Setting
    Browser and computer use
    Evaluated models
    Qwen2.5-VL(32B), Qwen3-VL(32B), GUI-Owl(32B) and others7

    Abstract论文提出移动智能体决策完整性基准 DIBench，发现欺诈 UI 注入诱导目标选择并推高完成率，通用防御收益不稳定。

    Paper analysisRead analysis
  4. DefensesarXiv 2603.14707

    视觉混淆代理：利用与防御计算机使用智能体的感知失效

    提出进程外双通道对比分类，拦截计算机使用智能体的错误点击

    arXiv
    2603.14707
    Published
    Layer
    Application layer
    Setting
    Browser and computer use
    Evaluated models
    multi-modal-embed-small
    Abstract感知错误可被屏幕像素对调利用。

    作者把 CUA 的感知失败写成安全漏洞visual confused deputy：智能体按看错的屏幕授权 click(x,y)，真实落点与它以为的元素不一致。

    Paper analysisRead analysis
  6. DefensesarXiv 2602.10915

    Blind Gods and Broken Screens: Building a Secure, Intent-Centric Mobile Agent Operating System

    提出 Aura，用可信内核中介移动 Agent 的身份、感知与动作控制

    arXiv
    2602.10915
    Published
    Layer
    Application layer
    Setting
    Browser and computer use
    Evaluated models
    Gemini-3-Flash
    AbstractAura mediates structured interactions via the Agent Kernel.

    Aura uses kernel-mediated structured agent interaction, replacing screen-interface mobile assistants..

    Paper analysisRead analysis
  7. AttacksarXiv 2505.23266

    AdvOF：用对抗物体融合攻击 VLM 驱动的视觉语言导航智能体

    提出 AdvOF，生成对抗物体误导视觉语言导航智能体的场景感知

    arXiv
    2505.23266
    Published
    Layer
    Application layer
    Setting
    Embodied systems and robotics
    Attacker
    White-box
    Evaluated models
    Lseg, Clip, ViT-L/16 and others5
    AbstractAdvOF 以多视角融合生成对抗物体。

    AdvOF 是针对 VLM 驱动 VLN 服务导航的对抗物体攻击。

    Paper analysisRead analysis
You have reached the end