Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 4 papers
Filter3

Attack type

Prompt injection3

Defense type

Detection and filtering4Instruction–data separation2Permissions and approval2

Attack surface / entry point

User input24Web pages and interfaces22Documents and messages14Tool responses33Tool and skill descriptions14Code repositories and dependencies4Retrieval corpus4Memory writes9Inter-agent messages5Distribution channels7

Layer

Application layer4
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 265papers have no tags yet and are not included in filtered results.
Defense type：Instruction–data separationDefense type：Permissions and approvalAttack surface / entry point：Retrieval corpusClear all

Another 265papers do not have category tags yet and are not included in filtered results.

  1. DefensesarXiv 2610.05826

    研究者提出临时可见性协议，限制持续摄入 RAG 向量库的投毒暴露

    提出临时可见性协议，限制持续摄入 RAG 向量库的投毒暴露

    arXiv
    2610.05826
    Published
    Layer
    Application layer
    Setting
    LLM applications
    Abstract用截止期限制未核验可见时长。

    这篇工作给持续摄入的 RAG 向量库一个失败关闭的临时可见性协议，把协议能限制的未核验暴露和依赖检测器的中毒暴露分开。

    Paper analysisRead analysis
  4. DefensesarXiv 2609.17648

    多智能体 LLM 流水线中的信任传播与结构隔离

    用任务绑定令牌和策略预言机拦住多智能体流水线的未授权执行

    arXiv
    2609.17648
    Published
    Layer
    Application layer
    Setting
    Multi-agent systems
    Evaluated models
    gemma4:31b-cloud
    Abstract结构性授权拦住了记忆投毒的未授权执行，持密钥时承重的是策略预言机。

    作者在一条会改写沙箱邮件库的四智能体流水线上，检查低权限失陷会不会变成未授权的真实动作。

    Paper analysisRead analysis
You have reached the end