CredLeak-Bench
提出 CredLeak-Bench，评测 Agent 面对钓鱼的凭据泄露与恢复
- arXiv
- 2610.08871
- Published
- Layer
- Application layer
- Setting
- web agent
- Evaluated models
- Claude Sonnet 5, Claude Opus 4.8, Gemini 3.6 Flash and others7
- AttacksPrompt injection
All papers
Filter4
Attack type
Impact
System type
Attack surface / entry point
Layer
System component
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 213papers have no tags yet and are not included in filtered results.
Another 213papers do not have category tags yet and are not included in filtered results.
CoSec：面向社区场景的 LLM Agent 安全基准
用 CoSec 评测社区 Agent 是否越界披露受保护信息
- arXiv
- 2609.34790
- Published
- Layer
- Application layer
- Setting
- AI Agent
- Evaluated models
- OpenClaw with Gemini 3.1 Pro, OpenClaw with Qwen 3.8 Max, OpenClaw with MiniMax M2.5 and others13
- AttacksPrompt injection
- ComponentMemory
- AttacksarXiv 2609.27542
Researchers use control token injection to delete gpt-oss-20b's reasoning chain and bypass chain-of-thought monitoring
提出控制标记注入，清空工具 Agent 的思维链以绕过推理监控
- arXiv
- 2609.27542
- Published
- Layer
- Application layer
- Setting
- AI Agent
- Evaluated models
- openai/gpt-oss-20b, google/gemma-4-26B-A4B-it, deepseek-ai/DeepSeek-R1-Distill-Qwen-7B and others4
- AttacksPrompt injection
- TechniqueConversation structure manipulation
- ComponentReasoning chains
Abstract论文阐明控制标记注入可抑制 CoT 使监控失效并促成拒绝绕过，且工具执行受解析器宽容度影响。
- AttacksarXiv 2609.13889
PMPA：针对 OpenClaw 与 Claude Code 的持久记忆投毒攻击
提出 PMPA，经外部源向 Agent 持久记忆投毒并跨会话泄露隐私
- arXiv
- 2609.13889
- Published
- Layer
- Application layer
- Setting
- coding agent
- Evaluated models
- DeepSeek-V4-Flash, DeepSeek-V4-Pro, Qwen3-Max
- AttacksPoisoning and backdoors
- TechniqueDormant triggers
- ComponentMemory
Abstract论文提出了持久记忆投毒攻击 PMPA，报告了 harness 智能体在处理外部数据时易受跨会话记忆投毒与隐私泄露的风险。
- AttacksarXiv 2609.12448
GraphProfiler 用个人知识图谱推断敏感属性并溯源到具体帖子
提出 GraphProfiler，用个人知识图谱从帖子历史推断敏感属性并溯源
- arXiv
- 2609.12448
- Published
- Layer
- Application layer
- Setting
- LLM applications
- AttacksMalicious use
- ComponentRAG
AbstractGraphProfiler 用源链接个人知识图谱做属性推断，准确率接近文本基线，并把证据定位到少量源帖。
GraphProfiler 是一个可审计的 LLM 敏感属性画像器：用源链接个人知识图谱，把推断落到具体帖子。
OpenART 提出环境演化红队框架
构建 OpenART 竞技场，以 EMHA 演化持久环境评测智能体安全
- arXiv
- 2608.00677
- Published
- Layer
- Application layer
- Setting
- AI Agent
- Evaluated models
- GPT-5.5, Claude-Opus-4.8, GLM-5.2 and others5
- AttacksPrompt injection
- TechniqueAutomated search
- AttacksarXiv 2607.26115
OpenAI releases GPT-Red: training automated red-teaming agents through self-play
训练自博弈红队智能体 GPT-Red，规模化生成提示注入与越狱攻击
- arXiv
- 2607.26115
- Published
- Layer
- Application layer
- Setting
- AI Agent
- Attacker
- Black-box
- Evaluated models
- GPT-5.6, GPT-5.5, GPT-5.4 and others8
- AttacksPrompt injection
- TechniqueAutomated search
- DefensesarXiv 2605.17380
Uber proposes ADR enterprise-level agent detection system, deployed on 7,200 hosts for ten months
提出企业级检测系统 ADR，识别编程 Agent 的提示注入与恶意 MCP
- arXiv
- 2605.17380
- Published
- Layer
- Application layer
- Setting
- coding agent
- DefensesDetection and filtering
- AttacksPrompt injection
- ComponentMCP and skills
Abstract提出了端点因果遥测、两级在线分流与离线红队闭环的 ADR 系统，并在生产环境中验证了有效性。
ClawSafety: Safe LLM, Unsafe Agent
提出 ClawSafety，评测个人智能体读到对抗工件后是否执行有害动作
- arXiv
- 2604.01438
- Published
- Layer
- Application layer
- Setting
- AI Agent
- Evaluated models
- Claude Sonnet 4.6, GPT-5.1, Gemini 2.5 Pro and others5
- AttacksPrompt injection
- ComponentMCP and skills
AgentLeak: A Benchmark for Privacy Leakage in Internal Channels of Multi-Agent LLM Systems
提出 AgentLeak 基准，测量多智能体内部通道隐私泄露
- arXiv
- 2602.11510
- Published
- Layer
- Application layer
- Setting
- Multi-agent systems
- Evaluated models
- GPT-4o, GPT-4o-mini, Claude-3.5-Sonnet and others5
- AttacksPrompt injection
- RiskDangerous agent actions
- ComponentMemory
You have reached the end