1 citations · 1 across the 14 of their papers we have counts for
7 papers · 1 filter
The Agent in the Middle: How AI-Mediated Access Reshapes Web Vulnerability Exploitation
Ruozhao Yang, Jiongchi Yu, Ming Hu +1
Web services increasingly expose backend interfaces that let users delegate tasks to AI agents, which invoke service operations directly without navigating websites. This shift cha…
JANUS: Synthesizing Cross-Layer Defenses Against Web Deserialization Attacks
Ruozhao Yang, Minglang Li, Jiongchi Yu +2
Unsafe deserialization turns untrusted data into attacker-controlled execution, and a single vulnerability can admit diverse exploit variants that evade defenses tailored to a know…
AgentTrap: Stateful Feedback Deception against Autonomous Penetration Testing Agents
Yuelin Wang, Jiongchi Yu, Yanbang Sun
Autonomous penetration testing agents conduct multi-step attacks by continuously adapting their plans and actions to target responses. As a common defense, honeypots can be deploye…
AgentAntibody: An Adaptive Immune System for Defending LLM Agents against Prompt Injection
Shihao Weng, Yang Feng, Xiaofei Xie +1
Prompt injection remains a critical threat to LLM agents, yet existing defenses treat each task as a self-contained problem, independent of previous encounters. In practice, user r…
ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection
Shihao Weng, Yang Feng, Jinrui Zhang +3
Large Language Model (LLM) agents are increasingly deployed as task-oriented software systems that use runtime context to decide and act on behalf of users. This delegation model m…
Chimera: Harnessing Multi-Agent LLMs for Automatic Insider Threat Simulation
Jiongchi Yu, Xiaofei Xie, Qiang Hu +2
Insider threats pose a persistent and critical security risk, yet are notoriously difficult to detect in complex enterprise environments, where malicious actions are often hidden w…
CAShift: Benchmarking Log-Based Cloud Attack Detection under Normality Shift
Jiongchi Yu, Xiaofei Xie, Qiang Hu +6
With the rapid advancement of cloud-native computing, securing cloud environments has become an important task. Log-based Anomaly Detection (LAD) is the most representative techniq…