Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 3 papers
Filter4

Attack type

Prompt injection3

System type

AI Agent9coding agent0web agent6Browser and computer use3

Attack surface / entry point

Web pages and interfaces3Images, audio and video4

Layer

Application layer3

System component

Monitors3Permissions and sandboxing3Vision3Multimodal3
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 261papers have no tags yet and are not included in filtered results.
System type：coding agentSystem type：Browser and computer useAttack surface / entry point：Web pages and interfacesSystem component：VisionClear all

Another 261papers do not have category tags yet and are not included in filtered results.

  2. Evaluation and benchmarksarXiv 2610.06898

    DIBench：面向移动 GUI 智能体多候选选择决策完整性的安全基准

    用 DIBench 评测移动 GUI 智能体被 UI 注入后的决策完整性

    arXiv
    2610.06898
    Published
    Layer
    Application layer
    Setting
    Browser and computer use
    Evaluated models
    Qwen2.5-VL(32B), Qwen3-VL(32B), GUI-Owl(32B) and others7

    Abstract论文提出移动智能体决策完整性基准 DIBench，发现欺诈 UI 注入诱导目标选择并推高完成率，通用防御收益不稳定。

    Paper analysisRead analysis
  3. DefensesarXiv 2602.10915

    Blind Gods and Broken Screens: Building a Secure, Intent-Centric Mobile Agent Operating System

    提出 Aura，用可信内核中介移动 Agent 的身份、感知与动作控制

    arXiv
    2602.10915
    Published
    Layer
    Application layer
    Setting
    Browser and computer use
    Evaluated models
    Gemini-3-Flash
    AbstractAura 以 Agent Kernel 中介结构化交互。

    Aura 用内核中介的结构化智能体交互，替换以屏幕为接口的移动助手。。

    Paper analysisRead analysis
You have reached the end