Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 8 papers
Filter4

Attack type

Prompt injection7Poisoning and backdoors6

Defense type

Detection and filtering8Instruction–data separation7Permissions and approval10

Impact

Unauthorized actions3Output manipulation4

System type

LLM applications4AI Agent4

Attack surface / entry point

User input17Web pages and interfaces8Documents and messages10Tool responses14Tool and skill descriptions10Retrieval corpus5Memory writes3Inter-agent messages3Images, audio and video5Distribution channels7

Layer

Application layer8

System component

Memory3RAG3Guardrails and judges4
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 233papers have no tags yet and are not included in filtered results.
Defense type：Detection and filteringAttack surface / entry point：Retrieval corpusAttack surface / entry point：Memory writesLayer：Application layerClear all

Another 233papers do not have category tags yet and are not included in filtered results.

  3. DefensesarXiv 2610.07657

    DEFER1 多智能体防御研究报告受控测试中的攻击成功率下降

    实现 DEFER，以确定性检查优先拦截多智能体流水线的内容攻击

    arXiv
    2610.07657
    Published
    Layer
    Application layer
    Setting
    Multi-agent systems
    Evaluated models
    Qwen3-235B-A22B-Instruct-2507, gpt-oss-120b, Llama-4-Scout-17B-16E-Instruct and others5
    AbstractDEFER 把确定性检查放在 judge 之前。

    DEFER 用来测量多智能体授权流水线里，确定性规则在何处结束、LLM judge 从何处开始。

    Paper analysisRead analysis
  6. Evaluation and benchmarksarXiv 2609.02316

    Counter-GEO-Bench：现有护栏难挡 GEO 虚假信息

    构建 COUNTER-GEO-BENCH，评测生成式搜索中的 GEO 虚假信息防御

    arXiv
    2609.02316
    Published
    Layer
    Application layer
    Setting
    LLM applications
    Evaluated models
    Gemma-4-31B-IT, Qwen-3.5-35B-A3B, Llama-4-Scout-17B-16E and others8

    Abstract论文构建了针对 GEO 虚假信息的首个防御基准，揭示通用护栏的失效与反作用，并提出了有效的轻量对比检测基线。

    Paper analysisRead analysis
You have reached the end