Agent-to-agent protocols allow LLM agents to discover peers, exchange results, and coordinate tool use. A locally successful protocol attack, however, may be rejected by a later agent or propagated into a consequential task decision. Measuring local exploitability alone leaves this difference unresolved and provides li...
Xiu-Ming Liu, Le Gai, Zhi-Yuan Chang et al.· 0 citations
When a language-model audit finds no leak, what is needed to certify non-leakage? We study guarantees over a declared prompt domain under an executable leakage criterion and decoding rule. For general bounded polynomial-time evaluators, a supplied leaking execution is polynomial-time checkable, while leak existence is...
This work develops a harness-level formulation of runtime defense that systematically characterizes how harness mechanisms enable defense construction and provides a unified view of existing runtime defense interventions from a harness perspective, and proposes HARD (Harness-based Autonomous Runtime Defense Evolution),...
Jia-Jun Ruan, Pei-Yang Li, Yu-Kun Chen et al.· 1 citation
Results indicate that CACTUS can propagate backdoors through repeated DFL aggregation and show that ASR varies with network topology and increases with the malicious-node ratio.
Chao Feng, Burkhard Stiller· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.