Rethinking Indirect Prompt Injection as a Test-Time Search Problem
This work identifies the attacker's adaptive search over the system attack surfaces as an important and underexplored security risk for tool-using agents and suggests that agentic security evaluations should characterize both the attacker's search procedure and compute budget.
D. M. Nguyen, Joon Sik Kim, Blazej Manczak et al.
· 1 citation