当 Agent 记得太多:针对大语言模型 Agent 的记忆投毒攻击
提出 GhostWriter 记忆投毒,经邮件与日程写入 Agent 长期记忆并跨会话激活
- arXiv
- 2607.06595
- Published
- Layer
- Application layer
- Setting
- AI Agent
- Evaluated models
- GPT-5.4-mini, DeepSeek-V4-Flash, Gemini-2.5-Flash and others4
- DefensesDetection and filtering
- AttacksPoisoning and backdoors
- TechniqueDormant triggers
- ComponentMemory