Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 8 papers
Filter3

Attack technique

Gradient and representation optimization3

Impact

Harmful content48Unauthorized actions46Data and privacy leaks15Output manipulation64Availability and reliability8

System type

AI Agent6Embodied systems and robotics3

Attack surface / entry point

User input9Web pages and interfaces3Tool and skill descriptions3Images, audio and video5Training data7Weights and gradients3Distribution channels4

Layer

Application layer4

System component

Multimodal4
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 261papers have no tags yet and are not included in filtered results.
Impact：Availability and reliabilityAttack surface / entry point：Web pages and interfacesAttack surface / entry point：Images, audio and videoClear all

Another 261papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2610.09819

    FAB 攻击：给 HuBERT/WavLM 植入后门，背景警笛声即可让下游语音任务失灵

    提出 FAB 攻击，向声学基础模型植入可由环境声触发的后门

    arXiv
    2610.09819
    Published
    Layer
    Training and data layer
    Setting
    Models and APIs
    Evaluated models
    HuBERT-base, WavLM-base

    Abstract论文提出了针对声学基模的 FAB 后门攻击，在弱威胁模型下实现了任务无关、物理可触发的后门植入。

    Paper analysisRead analysis
  4. AttacksarXiv 2610.06083

    研究者提出面向深度强化学习的轨迹级可迁移黑盒对抗攻击

    提出轨迹级可迁移对抗攻击，降低深度强化学习策略的期望回报

    arXiv
    2610.06083
    Published
    Layer
    Model layer
    Setting
    Embodied systems and robotics
    Evaluated models
    DQN, Double DQN (DDQN)
    Abstract轨迹级后退视界攻击在 CartPole 上比逐步 FGSM 类和 Sign 噪声更压低回报。

    这项工作研究 DRL 上的迁移式黑盒观测攻击：受害参数不可访问时，在白盒代理上造扰动再迁移。

    Paper analysisRead analysis
  5. Evaluation and benchmarksarXiv 2609.19140

    AgentLSD：在对抗性任务污染下评测 AI 安全 Agent

    评测安全 Agent 在对抗性任务污染下的解题成功与开销

    arXiv
    2609.19140
    Published
    Layer
    Application layer
    Setting
    web agent
    Evaluated models
    Gemma-4 31B, DeepSeek-V4 Flash, GPT-OSS 120B and others6
    AbstractAgentLSD 用配对 web CTF 表明，欺骗性环境证据会改变安全智能体的解题率与工作量。

    AgentLSD 是一个对照框架，用来测量安全智能体在任务本身不变时，对对抗性任务污染的反应。

    Paper analysisRead analysis
  7. Evaluation and benchmarksarXiv 2602.10639

    VideoSTF 揭示视频大模型输出重复问题

    提出 VIDEO STF 评测视频大模型输出重复并压力测试时序扰动

    arXiv
    2602.10639
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Evaluated models
    LLaVA-Video-7B-Qwen2, LLaVA-Video-7B-Qwen2-Video-Only, LLaVA-NeXT-Video-7B and others10
    AbstractVIDEO STF 把输出重复做成可测、可被时间扰动放大、并可黑盒诱导的失败。

    VIDEO STF 测量 VideoLLM 的输出重复，并把时间变换用作 black-box 诱导。

    Paper analysisRead analysis
  8. AttacksarXiv 2505.23266

    AdvOF：用对抗物体融合攻击 VLM 驱动的视觉语言导航智能体

    提出 AdvOF，生成对抗物体误导视觉语言导航智能体的场景感知

    arXiv
    2505.23266
    Published
    Layer
    Application layer
    Setting
    Embodied systems and robotics
    Attacker
    White-box
    Evaluated models
    Lseg, Clip, ViT-L/16 and others5
    AbstractAdvOF 以多视角融合生成对抗物体。

    AdvOF 是针对 VLM 驱动 VLN 服务导航的对抗物体攻击。

    Paper analysisRead analysis
You have reached the end