智能体被注入指令时防不住?这篇论文把放行决定推迟到证据够了再做,AgentDojo 上攻击成功率从 47% 压到 2.7%,做安全的人可以细看。
#AgentDojo
一篇教你怎么在部署前自动找智能体漏洞的论文,72 个真实漏洞复现,攻击成功率比 Codex 高出不少,做智能体安全的必看。
The design moves agent security from per-action LLM judgment to inferred attributes checked against a fixed policy, giving teams an audit trail they can review after the fact. Engineers building tool-using agents on frameworks like OpenAI Codex or Claude Code can use the benchmark comparison to weigh it against CaMeL and IPIGuard defenses. The arXiv paper is openly available, so teams can prototype the policy layer immediately.
Developers can implement SafeEvolve to improve agent safety without sacrificing utility, achieving better safety-utility tradeoffs than existing methods.
SARA addresses critical security risks in LLM agents that use untrusted tool outputs, providing a concrete solution for developers working with agent systems.