Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 5 papers
Filter4

Attack type

Prompt injection5

Attack technique

Gradient and representation optimization2Automated search6Multi-turn escalation2Encoding and obfuscation5Cross-modal payloads4Dormant triggers6Selection manipulation1

System type

AI Agent4

Layer

Prompt layer5Application layer5
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 240papers have no tags yet and are not included in filtered results.
Attack technique：Gradient and representation optimizationAttack technique：Multi-turn escalationAttack technique：Selection manipulationLayer：Application layerClear all

Another 240papers do not have category tags yet and are not included in filtered results.

  1. Evaluation and benchmarksarXiv 2610.00392

    A2A-TIBA：针对 A2A 协议 LLM 智能体的间接提示注入攻击与三层同构攻防模型

    提出 A2A-TIBA，经 A2A 对等任务间接注入并植入常驻回调

    arXiv
    2610.00392
    Published
    Layer
    Application layer
    Setting
    Multi-agent systems
    Evaluated models
    MiniMax-M3, deepseek-v4-pro, glm-5.3 and others8
    AbstractA2A-TIBA 一次植入后绕过智能体，GDA 用四类结果定位防线，ELA-ITL 把信封标注列为第三层。

    A2A-TIBA 把间接提示注入和绕过放进 A2A：gray-box 攻击者已能投递任务，诱导目标部署常驻回调程序后，下令和外传不再经过智能体。

    Paper analysisRead analysis
  2. Evaluation and benchmarksarXiv 2609.30383

    研究者提出技能级联攻击

    提出技能级联攻击，把有害目标拆散到多个技能里绕过单技能扫描

    arXiv
    2609.30383
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    GPT-5.4, GPT-5.4 Mini, Claude Opus 4.6 and others11

    Abstract论文探讨了多技能智能体系统面临的技能级联攻击风险，提出自动化红队框架与基准集，指出跨技能交互存在安全防护盲区。

    Paper analysisRead analysis
  3. Evaluation and benchmarksarXiv 2606.12716

    PaperGuard：针对多模态 AI 同行评审的攻击与防御基准

    提出 PaperGuard，用图文注入与梯度扰动抬高自动审稿分数并检测恶意指令

    arXiv
    2606.12716
    Published
    Layer
    Application layer
    Setting
    LLM applications
    Evaluated models
    Claude-sonnet-4.5, GPT-4o, GPT-4.1 and others11
    AbstractPaperGuard 测到提示注入与白盒视觉抬分，并比较分块检索防御。

    PaperGuard同时评测并检测多模态 AI 审稿中的评分操纵。

    Paper analysisRead analysis
  4. Evaluation and benchmarksarXiv 2512.19016

    DREAM 框架用跨环境长链攻击评测 12 个 LLM Agent

    提出 DREAM 框架，评测 Agent 的跨环境长链攻击脆弱性

    arXiv
    2512.19016
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    Gemini-2.5-Flash-NT, o4-mini, Gemini-2.5-Flash and others12

    AbstractDREAM 提出基于知识图谱与策略搜索的动态红队框架，分析了长链跨环境攻击对当前主流智能体的系统性威胁。

    Paper analysisRead analysis
  5. Evaluation and benchmarksarXiv 2406.12814

    论文提出 ARE 框架，在 VisualWebArena 上评估多模态 Agent 的对抗鲁棒性

    提出 ARE 框架与图像文本攻击，评测多模态网页 Agent 的对抗鲁棒性

    arXiv
    2406.12814
    Published
    Layer
    Application layer
    Setting
    web agent
    Evaluated models
    GPT-4o, GPT-4V, Claude-3-Opus and others4

    Abstract系统评估多模态网页智能体的脆弱性，指出推理时计算组件被攻破会加剧系统风险。

    Paper analysisRead analysis
You have reached the end