A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework
Fuente:
arXiv
Saved in:
| Main Author: | Chu, Kexin |
|---|---|
| Format: | Preprint |
| Published: |
2026
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
Similar Items
Adversarial Threats in Quantum Machine Learning: A Survey of Attacks and Defenses
by: Ghosh, Archisman, et al.
Published: (2025)
by: Ghosh, Archisman, et al.
Published: (2025)
A Multi-Agent LLM Defense Pipeline Against Prompt Injection Attacks
by: Hossain, S M Asif, et al.
Published: (2025)
by: Hossain, S M Asif, et al.
Published: (2025)
AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents
by: Debenedetti, Edoardo, et al.
Published: (2024)
by: Debenedetti, Edoardo, et al.
Published: (2024)
Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents
by: Zhan, Qiusi, et al.
Published: (2025)
by: Zhan, Qiusi, et al.
Published: (2025)
Data Reconstruction Attacks and Defenses: A Systematic Evaluation
by: Liu, Sheng, et al.
Published: (2024)
by: Liu, Sheng, et al.
Published: (2024)
AutoDefense: Multi-Agent LLM Defense against Jailbreak Attacks
by: Zeng, Yifan, et al.
Published: (2024)
by: Zeng, Yifan, et al.
Published: (2024)
Deep Learning Model Security: Threats and Defenses
by: Wang, Tianyang, et al.
Published: (2024)
by: Wang, Tianyang, et al.
Published: (2024)
A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives
by: Zhao, Kaixiang, et al.
Published: (2025)
by: Zhao, Kaixiang, et al.
Published: (2025)
A Zero Trust Framework for Realization and Defense Against Generative AI Attacks in Power Grid
by: Munir, Md. Shirajum, et al.
Published: (2024)
by: Munir, Md. Shirajum, et al.
Published: (2024)
Enhancing Security in Deep Reinforcement Learning: A Comprehensive Survey on Adversarial Attacks and Defenses
by: Yichao, Wu, et al.
Published: (2025)
by: Yichao, Wu, et al.
Published: (2025)
Uncovering Attacks and Defenses in Secure Aggregation for Federated Deep Learning
by: Zhang, Yiwei, et al.
Published: (2024)
by: Zhang, Yiwei, et al.
Published: (2024)
SecureLearn -- An Attack-agnostic Defense for Multiclass Machine Learning Against Data Poisoning Attacks
by: Paracha, Anum, et al.
Published: (2025)
by: Paracha, Anum, et al.
Published: (2025)
A No-Defense Defense Against Gradient-Based Adversarial Attacks on ML-NIDS: Is Less More?
by: elShehaby, Mohamed, et al.
Published: (2026)
by: elShehaby, Mohamed, et al.
Published: (2026)
A Defensive Framework Against Adversarial Attacks on Machine Learning-Based Network Intrusion Detection Systems
by: Tafreshian, Benyamin, et al.
Published: (2025)
by: Tafreshian, Benyamin, et al.
Published: (2025)
Multi-Agent Framework for Threat Mitigation and Resilience in AI-Based Systems
by: Foundjem, Armstrong, et al.
Published: (2025)
by: Foundjem, Armstrong, et al.
Published: (2025)
LLM Security: Vulnerabilities, Attacks, Defenses, and Countermeasures
by: Aguilera-Martínez, Francisco, et al.
Published: (2025)
by: Aguilera-Martínez, Francisco, et al.
Published: (2025)
Open-Weight LLM Fine-Tuning Defenses are Susceptible to Simple Attacks
by: Kuo, Kevin, et al.
Published: (2026)
by: Kuo, Kevin, et al.
Published: (2026)
A Taxonomy of Attacks and Defenses in Split Learning
by: Shabbir, Aqsa, et al.
Published: (2025)
by: Shabbir, Aqsa, et al.
Published: (2025)
Attacks and Defenses Against LLM Fingerprinting
by: Kurian, Kevin, et al.
Published: (2025)
by: Kurian, Kevin, et al.
Published: (2025)
Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey
by: Truong, Vu Tuan, et al.
Published: (2024)
by: Truong, Vu Tuan, et al.
Published: (2024)
Dashed Line Defense: Plug-And-Play Defense Against Adaptive Score-Based Query Attacks
by: Fu, Yanzhang, et al.
Published: (2026)
by: Fu, Yanzhang, et al.
Published: (2026)
Can Adversarial Code Comments Fool AI Security Reviewers -- Large-Scale Empirical Study of Comment-Based Attacks and Defenses Against LLM Code Analysis
by: Thornton, Scott
Published: (2026)
by: Thornton, Scott
Published: (2026)
A Causal Perspective for Enhancing Jailbreak Attack and Defense
by: Pan, Licheng, et al.
Published: (2026)
by: Pan, Licheng, et al.
Published: (2026)
A Survey on Model Extraction Attacks and Defenses for Large Language Models
by: Zhao, Kaixiang, et al.
Published: (2025)
by: Zhao, Kaixiang, et al.
Published: (2025)
A Survey of Model Extraction Attacks and Defenses in Distributed Computing Environments
by: Zhao, Kaixiang, et al.
Published: (2025)
by: Zhao, Kaixiang, et al.
Published: (2025)
Toward a Multi-Layer ML-Based Security Framework for Industrial IoT
by: Bouferroum, Aymen, et al.
Published: (2026)
by: Bouferroum, Aymen, et al.
Published: (2026)
TRYLOCK: Defense-in-Depth Against LLM Jailbreaks via Layered Preference and Representation Engineering
by: Thornton, Scott
Published: (2026)
by: Thornton, Scott
Published: (2026)
Sponge Attacks on Sensing AI: Energy-Latency Vulnerabilities and Defense via Model Pruning
by: Hasan, Syed Mhamudul, et al.
Published: (2025)
by: Hasan, Syed Mhamudul, et al.
Published: (2025)
PECAN: A Deterministic Certified Defense Against Backdoor Attacks
by: Zhang, Yuhao, et al.
Published: (2023)
by: Zhang, Yuhao, et al.
Published: (2023)
Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective
by: Wu, Baoyuan, et al.
Published: (2023)
by: Wu, Baoyuan, et al.
Published: (2023)
Survey of Security and Data Attacks on Machine Unlearning In Financial and E-Commerce
by: Brodzinski, Carl E. J.
Published: (2024)
by: Brodzinski, Carl E. J.
Published: (2024)
A Survey of Privacy Threats and Defense in Vertical Federated Learning: From Model Life Cycle Perspective
by: Yu, Lei, et al.
Published: (2024)
by: Yu, Lei, et al.
Published: (2024)
Temporal Context Awareness: A Defense Framework Against Multi-turn Manipulation Attacks on Large Language Models
by: Kulkarni, Prashant, et al.
Published: (2025)
by: Kulkarni, Prashant, et al.
Published: (2025)
A Critical Review on the Effectiveness and Privacy Threats of Membership Inference Attacks
by: Jebreel, Najeeb, et al.
Published: (2026)
by: Jebreel, Najeeb, et al.
Published: (2026)
Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey
by: Huang, Tiansheng, et al.
Published: (2024)
by: Huang, Tiansheng, et al.
Published: (2024)
OrgForge-IT: A Verifiable Synthetic Benchmark for LLM-Based Insider Threat Detection
by: Flynt, Jeffrey
Published: (2026)
by: Flynt, Jeffrey
Published: (2026)
Exploiting Defenses against GAN-Based Feature Inference Attacks in Federated Learning
by: Luo, Xinjian, et al.
Published: (2020)
by: Luo, Xinjian, et al.
Published: (2020)
Security in the Fine-Tuning Lifecycle of Large Language Models: Threats, Defenses,Evaluation, and Future Directions
by: Li, Wenjuan, et al.
Published: (2026)
by: Li, Wenjuan, et al.
Published: (2026)
Attack and Defense of Deep Learning Models in the Field of Web Attack Detection
by: Shi, Lijia, et al.
Published: (2024)
by: Shi, Lijia, et al.
Published: (2024)
Synthetic Tabular Data: Methods, Attacks and Defenses
by: Cormode, Graham, et al.
Published: (2025)
by: Cormode, Graham, et al.
Published: (2025)
Similar Items
-
Adversarial Threats in Quantum Machine Learning: A Survey of Attacks and Defenses
by: Ghosh, Archisman, et al.
Published: (2025) -
A Multi-Agent LLM Defense Pipeline Against Prompt Injection Attacks
by: Hossain, S M Asif, et al.
Published: (2025) -
AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents
by: Debenedetti, Edoardo, et al.
Published: (2024) -
Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents
by: Zhan, Qiusi, et al.
Published: (2025) -
Data Reconstruction Attacks and Defenses: A Systematic Evaluation
by: Liu, Sheng, et al.
Published: (2024)