Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 2 papers
Filter4

Attack technique

Gradient and representation optimization10Automated search49Multi-turn escalation8Encoding and obfuscation16Role-play and persuasion3Conversation structure manipulation2Reasoning-chain manipulation3Cross-modal payloads9Defense-targeted19Dormant triggers38Selection manipulation11

System type

LLM applications3AI Agent2

Layer

Application layer2Training and data layer0
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 254papers have no tags yet and are not included in filtered results.
Attack technique：Conversation structure manipulationSystem type：AI AgentLayer：Application layerLayer：Training and data layerClear all

Another 254papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2609.27542

    Researchers use control token injection to delete gpt-oss-20b's reasoning chain and bypass chain-of-thought monitoring

    提出控制标记注入，清空工具 Agent 的思维链以绕过推理监控

    arXiv
    2609.27542
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    openai/gpt-oss-20b, google/gemma-4-26B-A4B-it, deepseek-ai/DeepSeek-R1-Distill-Qwen-7B and others4

    Abstract论文阐明控制标记注入可抑制 CoT 使监控失效并促成拒绝绕过，且工具执行受解析器宽容度影响。

    Paper analysisRead analysis
  2. AttacksarXiv 2509.25624

    STAC：看似无害的工具调用链如何攻破 LLM Agent

    提出 STAC 框架，把恶意目标拆成多轮看似无害的工具调用链

    arXiv
    2509.25624
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Attacker
    Black-box
    Evaluated models
    GPT-4.1-2025-04-14, GPT-4.1-mini-2025-04-14, Qwen3-32B and others8

    Abstract作者提出并验证了智能体在序列化工具攻击下的普遍脆弱性，指出针对累积动作序列防御的必要性。

    Paper analysisRead analysis
You have reached the end