The Trojan Hippo Bench is introduced, a dynamic evaluation framework for persistent memory attacks and memory-layer defenses, comprising an OpenEvolve-based adaptive red-teaming benchmark that stress-tests defenses and memory backends against continuously refined attacks, and a capability-aware security-utility analysi...
Debeshee Das, Julien Piet, D. Kaviani et al.· 12 citations· ⚡1
This work proposes Twin Agent, a general privilege separation design pattern inspired by residual coding in the agent context that preserves high task utility while preventing prompt injection attacks, outperforming both undefended agents and privilege separation baselines.
Zhan-Hao Hu, Dennis Jacob, Xiao Huang et al.· arXiv.org· 0 citations
Cross-Site Scripting (XSS) remains one of the most prevalent and damaging classes of web vulnerabilities. LLM-based coding agents offer a promising approach to XSS discovery by combining source-code reasoning with interactive testing against a running application. However, a coding agent's claims cannot be trusted on t...