Defenses & Enablers For Skill Injection Attacks on Terminal Based Agents
Fuente:
arXiv
Guardado en:
| Autores principales: | Fujinuma, Yoshinari, Gangal, Varun, Rebedea, Traian, Sreedhar, Makesh Narasimhan, Varshney, Prasoon, Qian, Rebecca, Kannappan, Anand |
|---|---|
| Formato: | Preprint |
| Publicado: |
2026
|
| Materias: | |
| Acceso en línea: | |
| Etiquetas: |
Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
|
Ejemplares similares
Pluralistic Behavior Suite: Stress-Testing Multi-Turn Adherence to Custom Behavioral Policies
por: Varshney, Prasoon, et al.
Publicado: (2025)
por: Varshney, Prasoon, et al.
Publicado: (2025)
Training a General Purpose Automated Red Teaming Model
por: Padmakumar, Aishwarya, et al.
Publicado: (2026)
por: Padmakumar, Aishwarya, et al.
Publicado: (2026)
AegisAgent: An Autonomous Defense Agent Against Prompt Injection Attacks in LLM-HARs
por: Wang, Yihan, et al.
Publicado: (2025)
por: Wang, Yihan, et al.
Publicado: (2025)
Defense Against Prompt Injection Attack by Leveraging Attack Techniques
por: Chen, Yulin, et al.
Publicado: (2024)
por: Chen, Yulin, et al.
Publicado: (2024)
Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents
por: Zhan, Qiusi, et al.
Publicado: (2025)
por: Zhan, Qiusi, et al.
Publicado: (2025)
Backdoor-Powered Prompt Injection Attacks Nullify Defense Methods
por: Chen, Yulin, et al.
Publicado: (2025)
por: Chen, Yulin, et al.
Publicado: (2025)
MELON: Provable Defense Against Indirect Prompt Injection Attacks in AI Agents
por: Zhu, Kaijie, et al.
Publicado: (2025)
por: Zhu, Kaijie, et al.
Publicado: (2025)
A Multi-Agent LLM Defense Pipeline Against Prompt Injection Attacks
por: Hossain, S M Asif, et al.
Publicado: (2025)
por: Hossain, S M Asif, et al.
Publicado: (2025)
SUAD: Solid-Channel Ultrasound Injection Attack and Defense to Voice Assistants
por: Liu, Chao, et al.
Publicado: (2025)
por: Liu, Chao, et al.
Publicado: (2025)
AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents
por: Debenedetti, Edoardo, et al.
Publicado: (2024)
por: Debenedetti, Edoardo, et al.
Publicado: (2024)
Digital Privacy Under Attack: Challenges and Enablers
por: Song, Baobao, et al.
Publicado: (2023)
por: Song, Baobao, et al.
Publicado: (2023)
Jailbreaking Generative AI: Multivector Phishing Threats and Transformer based Defenses
por: Mishra, Rina, et al.
Publicado: (2025)
por: Mishra, Rina, et al.
Publicado: (2025)
SkillJect: Effectively Automating Skill-Based Prompt Injection for Skill-Enabled Agents
por: Jia, Xiaojun, et al.
Publicado: (2026)
por: Jia, Xiaojun, et al.
Publicado: (2026)
Safety Through Reasoning: An Empirical Study of Reasoning Guardrail Models
por: Sreedhar, Makesh Narsimhan, et al.
Publicado: (2025)
por: Sreedhar, Makesh Narsimhan, et al.
Publicado: (2025)
Unsupervised Extraction of Dialogue Policies from Conversations
por: Sreedhar, Makesh Narsimhan, et al.
Publicado: (2024)
por: Sreedhar, Makesh Narsimhan, et al.
Publicado: (2024)
SkillAttack: Automated Red Teaming of Agent Skills through Attack Path Refinement
por: Duan, Zenghao, et al.
Publicado: (2026)
por: Duan, Zenghao, et al.
Publicado: (2026)
Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs
por: Yeo, Andrew, et al.
Publicado: (2025)
por: Yeo, Andrew, et al.
Publicado: (2025)
A Critical Evaluation of Defenses against Prompt Injection Attacks
por: Jia, Yuqi, et al.
Publicado: (2025)
por: Jia, Yuqi, et al.
Publicado: (2025)
When Skills Lie: Hidden-Comment Injection in LLM Agents
por: Wang, Qianli, et al.
Publicado: (2026)
por: Wang, Qianli, et al.
Publicado: (2026)
System-Level Defense against Indirect Prompt Injection Attacks: An Information Flow Control Perspective
por: Wu, Fangzhou, et al.
Publicado: (2024)
por: Wu, Fangzhou, et al.
Publicado: (2024)
Prompt Injection Attack to Tool Selection in LLM Agents
por: Shi, Jiawen, et al.
Publicado: (2025)
por: Shi, Jiawen, et al.
Publicado: (2025)
PINA: Prompt Injection Attack against Navigation Agents
por: Liu, Jiani, et al.
Publicado: (2026)
por: Liu, Jiani, et al.
Publicado: (2026)
Architecting Secure AI Agents: Perspectives on System-Level Defenses Against Indirect Prompt Injection Attacks
por: Xiang, Chong, et al.
Publicado: (2026)
por: Xiang, Chong, et al.
Publicado: (2026)
SkillTrojan: Backdoor Attacks on Skill-Based Agent Systems
por: Feng, Yunhao, et al.
Publicado: (2026)
por: Feng, Yunhao, et al.
Publicado: (2026)
DRIFT: Dynamic Rule-Based Defense with Injection Isolation for Securing LLM Agents
por: Li, Hao, et al.
Publicado: (2025)
por: Li, Hao, et al.
Publicado: (2025)
ObliInjection: Order-Oblivious Prompt Injection Attack to LLM Agents with Multi-source Data
por: Wang, Reachal, et al.
Publicado: (2025)
por: Wang, Reachal, et al.
Publicado: (2025)
Trace: Unmasking AI Attack Agents Through Terminal Behavior Fingerprinting
por: Ediga, Murali, et al.
Publicado: (2026)
por: Ediga, Murali, et al.
Publicado: (2026)
Memory Poisoning Attack and Defense on Memory Based LLM-Agents
por: Sunil, Balachandra Devarangadi, et al.
Publicado: (2026)
por: Sunil, Balachandra Devarangadi, et al.
Publicado: (2026)
SuperLocalMemory: Privacy-Preserving Multi-Agent Memory with Bayesian Trust Defense Against Memory Poisoning
por: Bhardwaj, Varun Pratap
Publicado: (2026)
por: Bhardwaj, Varun Pratap
Publicado: (2026)
A Login Page Transparency and Visual Similarity Based Zero Day Phishing Defense Protocol
por: Varshney, Gaurav, et al.
Publicado: (2025)
por: Varshney, Gaurav, et al.
Publicado: (2025)
Dynamic Probabilistic Noise Injection for Membership Inference Defense
por: Forough, Javad, et al.
Publicado: (2025)
por: Forough, Javad, et al.
Publicado: (2025)
LoopTrap: Termination Poisoning Attacks on LLM Agents
por: Xu, Huiyu, et al.
Publicado: (2026)
por: Xu, Huiyu, et al.
Publicado: (2026)
FATH: Authentication-based Test-time Defense against Indirect Prompt Injection Attacks
por: Wang, Jiongxiao, et al.
Publicado: (2024)
por: Wang, Jiongxiao, et al.
Publicado: (2024)
WARD: Adversarially Robust Defense of Web Agents Against Prompt Injections
por: Cao, Tri, et al.
Publicado: (2026)
por: Cao, Tri, et al.
Publicado: (2026)
Prompt Injection Attacks on Agentic Coding Assistants: A Systematic Analysis of Vulnerabilities in Skills, Tools, and Protocol Ecosystems
por: Maloyan, Narek, et al.
Publicado: (2026)
por: Maloyan, Narek, et al.
Publicado: (2026)
Jailbreaking Generative AI: Empowering Novices to Conduct Phishing Attacks
por: Mishra, Rina, et al.
Publicado: (2025)
por: Mishra, Rina, et al.
Publicado: (2025)
Formalizing and Benchmarking Prompt Injection Attacks and Defenses
por: Liu, Yupei, et al.
Publicado: (2023)
por: Liu, Yupei, et al.
Publicado: (2023)
Defending Against Prompt Injection With a Few DefensiveTokens
por: Chen, Sizhe, et al.
Publicado: (2025)
por: Chen, Sizhe, et al.
Publicado: (2025)
Skill-Inject: Measuring Agent Vulnerability to Skill File Attacks
por: Schmotz, David, et al.
Publicado: (2026)
por: Schmotz, David, et al.
Publicado: (2026)
BadSkill: Backdoor Attacks on Agent Skills via Model-in-Skill Poisoning
por: Tie, Guiyao, et al.
Publicado: (2026)
por: Tie, Guiyao, et al.
Publicado: (2026)
Ejemplares similares
-
Pluralistic Behavior Suite: Stress-Testing Multi-Turn Adherence to Custom Behavioral Policies
por: Varshney, Prasoon, et al.
Publicado: (2025) -
Training a General Purpose Automated Red Teaming Model
por: Padmakumar, Aishwarya, et al.
Publicado: (2026) -
AegisAgent: An Autonomous Defense Agent Against Prompt Injection Attacks in LLM-HARs
por: Wang, Yihan, et al.
Publicado: (2025) -
Defense Against Prompt Injection Attack by Leveraging Attack Techniques
por: Chen, Yulin, et al.
Publicado: (2024) -
Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents
por: Zhan, Qiusi, et al.
Publicado: (2025)