Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 9 papers
Filter3

Attack type

Denial of service3

Attack technique

Gradient and representation optimization3Automated search6

Impact

Harmful content69Unauthorized actions31Data and privacy leaks13Output manipulation52Availability and reliability9

System type

AI Agent7Embodied systems and robotics5

Attack surface / entry point

User input4Images, audio and video3

Layer

Prompt layer5Application layer3
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 265papers have no tags yet and are not included in filtered results.
Attack technique：Gradient and representation optimizationAttack technique：Automated searchImpact：Availability and reliabilityClear all

Another 265papers do not have category tags yet and are not included in filtered results.

  2. AttacksarXiv 2610.06083

    研究者提出面向深度强化学习的轨迹级可迁移黑盒对抗攻击

    提出轨迹级可迁移对抗攻击，降低深度强化学习策略的期望回报

    arXiv
    2610.06083
    Published
    Layer
    Model layer
    Setting
    Embodied systems and robotics
    Evaluated models
    DQN, Double DQN (DDQN)
    Abstract轨迹级后退视界攻击在 CartPole 上比逐步 FGSM 类和 Sign 噪声更压低回报。

    这项工作研究 DRL 上的迁移式黑盒观测攻击：受害参数不可访问时，在白盒代理上造扰动再迁移。

    Paper analysisRead analysis
  3. AttacksarXiv 2609.29948

    ENDOPROMPT：用受害者侧伪参考学习降低模型任务效用的前缀

    提出 ENDOPROMPT，以受害者侧伪参考学习降低良性任务效用的前缀

    arXiv
    2609.29948
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Evaluated models
    Qwen2.5-7B, Llama-3.1-8B, Mistral-7B-v0.3 and others4
    Abstract作者用受害模型续写监督良性效用攻击，并把行为位移、任务退化与请求匹配效果分开评测。

    ENDOPROMPT 是一种用受害模型自身续写监督前缀生成的 white-box 效用攻击方法。它针对良性任务失败，不要求产生有害内容或明确拒答。

    Paper analysisRead analysis
  6. AttacksarXiv 2605.13338

    研究者提出层级遗传算法黑盒攻击，诱导推理模型过度思考

    提出层级遗传算法 HGA，扰动题目逻辑结构诱发推理模型过度思考

    arXiv
    2605.13338
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Attacker
    Black-box
    Evaluated models
    DeepSeek-R1 (671B), Qwen3-Thinking, GPT-o3 and others5

    AbstractHGA 在黑盒推理模型上用逻辑扰动拉长输出，作者称可从小代理迁移，查询成本是其局限。

    Paper analysisRead analysis
  9. AttacksarXiv 2505.23266

    AdvOF：用对抗物体融合攻击 VLM 驱动的视觉语言导航智能体

    提出 AdvOF，生成对抗物体误导视觉语言导航智能体的场景感知

    arXiv
    2505.23266
    Published
    Layer
    Application layer
    Setting
    Embodied systems and robotics
    Attacker
    White-box
    Evaluated models
    Lseg, Clip, ViT-L/16 and others5
    AbstractAdvOF 以多视角融合生成对抗物体。

    AdvOF 是针对 VLM 驱动 VLN 服务导航的对抗物体攻击。

    Paper analysisRead analysis
You have reached the end