Skip to content

Translation in progress Some entries still include text in the original language.

Oct 13 · Tuesday

All papers

Found 5 papers
Filter4

Attack type

Poisoning and backdoors4

System type

Models and APIs65LLM applications3AI Agent7Browser and computer use0Multi-agent systems2Embodied systems and robotics3

Attack surface / entry point

User input46Web pages and interfaces18Documents and messages28Tool responses11Tool and skill descriptions5Code repositories and dependencies4Retrieval corpus28Memory writes8Inter-agent messages25Images, audio and video10Training data5Weights and gradients3Distribution channels3Inference services and hardware4

Layer

Training and data layer3
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 201papers have no tags yet and are not included in filtered results.
System type：LLM applicationsSystem type：Browser and computer useSystem type：Multi-agent systemsAttack surface / entry point：Training dataClear all

Another 201papers do not have category tags yet and are not included in filtered results.

  2. AttacksarXiv 2609.39788

    研究：多智能体系统潜在通信链路可被训练用于提升有害顺从

    提出只训练或篡改多智能体潜在通信链路来提高有害遵从

    arXiv
    2609.39788
    Published
    Layer
    Application layer
    Setting
    Multi-agent systems
    Evaluated models
    Llama-3.2-3B-Instruct, Qwen2.5-3B-Instruct, Gemma-3-1B-IT and others7
    Abstract潜在链路本身即可改变冻结智能体系统的安全，奖励既能攻击也能修复。

    学习得到的潜在通信链路会改变由冻结、对齐智能体组成的系统是否遵从有害请求。。作者研究三种拓扑：双智能体、三级顺序协作，以及双专家加汇总。

    Paper analysisRead analysis
  3. AttacksarXiv 2604.03890

    From prompts to physical actions: structured backdoor attacks against LLM-mediated robot control systems

    Propose a structured JSON backdoor that triggers malicious actions in robot control via a poisoned LoRA

    arXiv
    2604.03890
    Published
    Layer
    Training and data layer
    Setting
    Embodied systems and robotics, LLM applications
    Evaluated models
    Llama-3.1-8B-Instruct, Gemma-2-9B-IT, DeepSeek-R1-Distill-Llama-8B and others4

    Abstract推理层后门传不到执行。

    Paper analysisRead analysis
You have reached the end