16 papers
"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers
Biwei Yan, Minghui Xu, Yijun Yang +4
The Model Context Protocol (MCP) has rapidly become the de facto standard for connecting large language models (LLMs) to external resources, but it also introduces a class of priva…
AgentDID: Trustless Identity Authentication for AI Agents
Minghui Xu, Xiaoyu Liu, Yihao Guo +3
AI agents are autonomous entities that can be instantiated on demand, migrate across platforms, and interact with other agents or services without continuous human supervision. In…
Don't believe everything you read: Understanding and Measuring MCP Behavior under Misleading Tool Descriptions
Zhihao Li, Boyang Ma, Xuelong Dai +4
The Model Context Protocol (MCP) enables large language models to invoke external tools through natural-language descriptions, forming the foundation of many AI agent applications.…
Low Rank Comes with Low Security: Gradient Assembly Poisoning Attacks against Distributed LoRA-based LLM Systems
Yueyan Dong, Minghui Xu, Qin Hu +5
Low-Rank Adaptation (LoRA) has become a popular solution for fine-tuning large language models (LLMs) in federated settings, dramatically reducing update costs by introducing train…
Beyond Model Jailbreak: Systematic Dissection of the "Ten DeadlySins" in Embodied Intelligence
Yuhang Huang, Junchao Li, Boyang Ma +6
Embodied AI systems integrate language models with real world sensing, mobility, and cloud connected mobile apps. Yet while model jailbreaks have drawn significant attention, the b…
"MCP Does Not Stand for Misuse Cryptography Protocol": Uncovering Cryptographic Misuse in Model Context Protocol at Scale
Biwei Yan, Yue Zhang, Minghui Xu +5
The Model Context Protocol (MCP) is rapidly emerging as the middleware for LLM-based applications, offering a standardized interface for tool integration. However, its built-in sec…