Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 4 papers
Filter4

Attack type

Prompt injection3

System type

Models and APIs1LLM applications6AI Agent30coding agent3web agent8Browser and computer use3Multi-agent systems3

Attack surface / entry point

User input65Web pages and interfaces1Documents and messages4Tool responses3Tool and skill descriptions4Code repositories and dependencies7Memory writes3Images, audio and video17Training data5Weights and gradients3Distribution channels5

Layer

Application layer3
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 248papers have no tags yet and are not included in filtered results.
System type：Models and APIsSystem type：coding agentAttack surface / entry point：Web pages and interfacesAttack surface / entry point：Documents and messagesClear all

Another 248papers do not have category tags yet and are not included in filtered results.

  1. Evaluation and benchmarksarXiv 2609.36817

    pikit：面向间接提示注入研究与评测的可组合工具包

    构建可组合工具包 pikit，评测编码智能体的间接提示注入

    arXiv
    2609.36817
    Published
    Layer
    Application layer
    Setting
    coding agent
    Abstractpikit 提供组合式间接注入评测。

    pikit 是面向间接提示注入研究的组合式工具包，主要贡献是组织攻击、投递通道、防御和判定流程，而非提出新的攻击优化算法。

    Paper analysisRead analysis
  2. Evaluation and benchmarksarXiv 2609.28915

    研究提出 ACE 语料库，评估内核级证据对 Agent 安全检测的有效性

    构建 ACE 语料，评测内核级证据对 Agent 攻击检测的有效性

    arXiv
    2609.28915
    Published
    Layer
    Application layer
    Setting
    coding agent
    Evaluated models
    AdaBoost, XGBoost, TabPFN and others10
    AbstractACE 用配对的内核与应用层证据表明，syscall 痕迹可判别智能体攻击，两层组合通常更好。

    ACE 是一份把智能体会话的内核 syscall 痕迹与应用层清单、转录配对起来的检测语料和基准。。

    Paper analysisRead analysis
  3. Evaluation and benchmarksarXiv 2607.24177

    EXE-Bench：为真实可用性对 AI Windows 恶意软件检测器进行权衡排名

    提出 EXE-Bench 比较 Windows 恶意软件检测器的可用性权衡

    arXiv
    2607.24177
    Published
    Layer
    Model layer
    Setting
    Models and APIs
    Evaluated models
    EmberGBDT, BBDnn, BBDnnFDRS and others15
    Abstract统一四指标后，手工特征的 EmberGBDT 综合居首，只看准确率会误导部署。

    EXE-Bench 用同一设置给 AI Windows 恶意软件检测器做四指标排序，而不是只比一次测试集准确率。。

    Paper analysisRead analysis
  4. Evaluation and benchmarksarXiv 2605.17380

    Uber proposes ADR enterprise-level agent detection system, deployed on 7,200 hosts for ten months

    提出企业级检测系统 ADR，识别编程 Agent 的提示注入与恶意 MCP

    arXiv
    2605.17380
    Published
    Layer
    Application layer
    Setting
    coding agent

    Abstract提出了端点因果遥测、两级在线分流与离线红队闭环的 ADR 系统，并在生产环境中验证了有效性。

    Paper analysisRead analysis
You have reached the end