Skip to content

Translation in progress Some entries still include text in the original language.

Oct 13 · Tuesday

All papers

Found 3 papers
Filter6

Attack type

Prompt injection3

System type

AI Agent9coding agent0science agent0web agent6Browser and computer use3

Attack surface / entry point

Web pages and interfaces3Images, audio and video4

Layer

Application layer3

System component

Monitors3Permissions and sandboxing3Vision3Multimodal3
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 201papers have no tags yet and are not included in filtered results.
System type：coding agentSystem type：science agentSystem type：Browser and computer useAttack surface / entry point：Web pages and interfacesSystem component：VisionSystem component：MultimodalClear all

Another 201papers do not have category tags yet and are not included in filtered results.

  2. Evaluation and benchmarksarXiv 2610.06898

    DIBench：面向移动 GUI 智能体多候选选择决策完整性的安全基准

    用 DIBench 评测移动 GUI 智能体被 UI 注入后的决策完整性

    arXiv
    2610.06898
    Published
    Layer
    Application layer
    Setting
    Browser and computer use
    Evaluated models
    Qwen2.5-VL(32B), Qwen3-VL(32B), GUI-Owl(32B) and others7

    Abstract论文提出移动智能体决策完整性基准 DIBench，发现欺诈 UI 注入诱导目标选择并推高完成率，通用防御收益不稳定。

    Paper analysisRead analysis
  3. DefensesarXiv 2602.10915

    Blind Gods and Broken Screens: Building a Secure, Intent-Centric Mobile Agent Operating System

    Proposes Aura, which uses a trusted kernel to mediate the identity, perception, and action control of mobile agents

    arXiv
    2602.10915
    Published
    Layer
    Application layer
    Setting
    Browser and computer use
    Evaluated models
    Gemini-3-Flash
    AbstractAura mediates structured interactions via the Agent Kernel.

    Aura uses kernel-mediated structured agent interaction, replacing screen-interface mobile assistants..

    Paper analysisRead analysis
You have reached the end