The proposed SUA-Arena, which implements 6 attack strategies and contains 188 test cases, finds that all of them are vulnerable to show-up attacks and shows that multi-agent systems need explicit mechanisms for enforcing authority boundaries.
Mao-Sen Zhang, Jian-Shuo Dong, Yu-Tong Zhang et al.· 0 citations
This paper proposes LeakGauge, which probes this response by appending a suffix that gauges leakage behavior and mapping its prefill token probabilities to an attack-risk score, and shows that the risk score is sensitive to an internal leakage-related direction.
Maosen Zhang, Jianshuo Dong, Bo-Han Lu et al.· 1 citation
A probe-gated reasoning-based defense is introduced to bridge a knowledge-action gap in agentic LLMs when they are exposed to IPI attacks, and an analysis framework is introduced that identifies natural-language explanations strongly correlated with probe-captured signals.