Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

Agent safety · Papers

Found 2 papers
Filter2

System type

AI Agent30Browser and computer use2

Attack surface / entry point

Tool responses2
Select any value within a category; different categories must all match. Counts include the other filters you have selected.
System type：Browser and computer useAttack surface / entry point：Tool responsesTopic: Agent safetyClear all
  1. DefensesarXiv 2610.03089

    COBRA：为计算机使用 Agent 防御分支引导攻击的双 LLM 架构

    提出 COBRA 双 LLM 架构，防御计算机使用 Agent 的分支转向攻击

    arXiv
    2610.03089
    Published
    Layer
    Application layer
    Setting
    Browser and computer use
    Evaluated models
    gpt-5, UI-TARS-1.5-7B, claude-sonnet-5 and others6

    Abstract提出分支转向防御架构 COBRA，通过事前能力约束与边界代理消除分支转向攻击并兼顾效用。

    Paper analysisRead analysis
  2. DefensesarXiv 2603.14707

    视觉混淆代理：利用与防御计算机使用智能体的感知失效

    提出进程外双通道对比分类，拦截计算机使用智能体的错误点击

    arXiv
    2603.14707
    Published
    Layer
    Application layer
    Setting
    Browser and computer use
    Evaluated models
    multi-modal-embed-small
    Abstract感知错误可被屏幕像素对调利用。

    作者把 CUA 的感知失败写成安全漏洞visual confused deputy：智能体按看错的屏幕授权 click(x,y)，真实落点与它以为的元素不一致。

    Paper analysisRead analysis
You have reached the end