Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 4 papers
Filter4

Attack technique

Gradient and representation optimization2Automated search2Conversation structure manipulation0Dormant triggers3

System type

Models and APIs109LLM applications21AI Agent67coding agent12web agent6Multi-agent systems4Embodied systems and robotics9

Attack surface / entry point

Inter-agent messages3

Layer

Application layer4
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 240papers have no tags yet and are not included in filtered results.
Attack technique：Gradient and representation optimizationAttack technique：Automated searchAttack technique：Conversation structure manipulationSystem type：Multi-agent systemsClear all

Another 240papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2609.39788

    研究：多智能体系统潜在通信链路可被训练用于提升有害顺从

    提出只训练或篡改多智能体潜在通信链路来提高有害遵从

    arXiv
    2609.39788
    Published
    Layer
    Application layer
    Setting
    Multi-agent systems
    Evaluated models
    Llama-3.2-3B-Instruct, Qwen2.5-3B-Instruct, Gemma-3-1B-IT and others7
    Abstract潜在链路本身即可改变冻结智能体系统的安全，奖励既能攻击也能修复。

    学习得到的潜在通信链路会改变由冻结、对齐智能体组成的系统是否遵从有害请求。。作者研究三种拓扑：双智能体、三级顺序协作，以及双专家加汇总。

    Paper analysisRead analysis
  3. AttacksarXiv 2603.20925

    Profit is the Red Team: Stress-Testing Agents in Strategic Economic Interactions

    提出利润驱动红队，用标量盈余搜索对手以压测经济博弈 Agent

    arXiv
    2603.20925
    Published
    Layer
    Application layer
    Setting
    Multi-agent systems
    Evaluated models
    GPT-OSS-120B, Qwen3-32B, MiniMax-M2.5 and others6
    Abstract利润驱动红队以标量盈余训练对手，六个目标在四博弈中被利用，提示规则可抬高目标盈余。

    利润驱动红队把可审计终局里的智能体安全写成对手搜索问题：固定目标会不会被一个只追逐自身盈余的自适应玩家利用。

    Paper analysisRead analysis
  4. AttacksarXiv 2603.11132

    WebWeaver: Breaking the topology confidentiality of LLM multi-agent systems via covert context inference

    Propose WebWeaver, which compromises only a single agent and recovers the multi-agent communication topology from conversation context.

    arXiv
    2603.11132
    Published
    Layer
    Application layer
    Setting
    Multi-agent systems
    Evaluated models
    Llama 3.1 8B, Qwen 2.5 7B, Mistral NeMo 12B and others6
    AbstractWebWeaver infers topology from context.

    WebWeaver is an inference attack against the confidentiality of LLM-MAS communication topology: it controls only one arbitrary agent and recovers the full graph from dialogue context, rather than querying agent IDs.

    Paper analysisRead analysis
You have reached the end