5 ms·
Domain-Camouflaged Injection Attacks Evade Detection in Multi-Agent LLM Systems
- EthicoreEngine 5mo ago[flagged]
- BarryMilo 5mo agoThis is an "uh oh" moment, isn't it?
- simonw 5mo agoIt concerns me that anyone with anything important to protect might trust what this paper calls "Injection detectors deployed to protect LLM agents" - Llama Guard and the like. There are unlimited combinations of tokens that can be used to attack an LLM system. The idea that some kind of "detector" can catch them all just feels inherently absurd to me.
- deleted 5mo ago[deleted]
- buppermint 5mo agoThe paper title is a bit misleading. The tested detectors and models here are small and rather dated (Llama 3.1 8B and Gemini Flash 2.0 - these are basically in the level of a modern 1B model), and the actual paper says this only shows vulnerability in small model systems.
- hottrends 5mo ago[flagged]
- dwa3592 5mo agoWhy weren't these attacks tested on the frontier models? The models they tested these on can also be fooled by poems and rhymes.
- deleted 5mo ago[deleted]
- yurukusa 5mo ago[flagged]
- aaditya79 5mo ago[dead]