activity
20242026
most citedInsights and Current Gaps in Open-Source LLM Vulnerability Scanners: A Comparative Analysis

2 citations · 2 across the 12 of their papers we have counts for

collaborators

14 papers

cs.CR2026

BadEngram: Backdoor Attack on Gated Memory Components in LLMs

Ariel Fogel, Omer Hofman, Eilon Cohen +1

To expand open-weight models' capacity without proportionally increasing computation, recent architectures incorporate gated parametric memory that retrieves learned values and inj…

cs.MA2026

An Actionable Diagnosis of Multilingual, Multi-Agent Planning Failures

Vikas Pahuja, Jonathan Brokman, Omer Hofman +6

Multilingual multi-agent systems exhibit substantial degradation beyond English, yet prior work rarely identifies how task-critical information is lost when user requests are conve…

cs.AI2026

RIFT-Bench: Dynamic Red-teaming For Agentic AI Systems

Yarin Yerushalmi Levi, Roy Betser, Amit Giloni +5

Agentic AI systems powered by large language models (LLMs) are rapidly evolving into autonomous decision-making systems, exposing attack vectors beyond those of traditional LLM vul…

cs.CR2026

When Scanners Lie: Evaluator Instability in LLM Red-Teaming

Lidor Erez, Omer Hofman, Tamir Nizri +1

Automated LLM vulnerability scanners are increasingly used to assess security risks by measuring different attack type success rates (ASR). Yet the validity of these measurements h…

cs.CR2026

Adversarial Intent is a Latent Variable: Stateful Trust Inference for Securing Multimodal Agentic RAG

Inderjeet Singh, Vikas Pahuja, Aishvariya Priya Rathina Sabapathy +8

Current stateless defences for multimodal agentic RAG fail to detect adversarial strategies that distribute malicious semantics across retrieval, planning, and generation component…

cs.CR2026

Inference-Time Backdoors via Chat Templates: From LLM Supply Chains to Agentic System Compromise

Ariel Fogel, Omer Hofman, Eilon Cohen +1

Open-weight language models are increasingly used in production settings, raising new security challenges. One prominent threat is backdoor attacks, in which adversaries embed hidd…

cs.CR2026

AgenTRIM: Tool Risk Mitigation for Agentic AI

Roy Betser, Amit Giloni, Shamik Bose +4

AI agents are autonomous systems that combine LLMs with external tools to solve complex tasks. While such tools extend capability, improper tool permissions introduce security risk…

eess.IV2025

General and Domain-Specific Zero-shot Detection of Generated Images via Conditional Likelihood

Roy Betser, Omer Hofman, Roman Vainshtein +1

The rapid advancement of generative models, particularly diffusion-based methods, has significantly improved the realism of synthetic images. As new generative models continuously…

cs.LG2025

Training-Free Policy Violation Detection via Activation-Space Whitening in LLMs

Oren Rachmil, Avishag Shapira, Roy Betser +5

As organizations increasingly deploy LLMs in sensitive domains such as legal, financial, and medical settings, ensuring alignment with internal organizational policies has become a…

cs.AI2025

Counterfactual-based Agent Influence Ranker for Agentic AI Workflows

Amit Giloni, Chiara Picardi, Roy Betser +3

An Agentic AI Workflow (AAW), also known as an LLM-based multi-agent system, is an autonomous system that assembles several LLM-based agents to work collaboratively towards a share…

cs.DB2025

MAPS: A Multilingual Benchmark for Agent Performance and Security

Omer Hofman, Jonathan Brokman, Oren Rachmil +7

Agentic AI systems, which build on Large Language Models (LLMs) and interact with tools and memory, have rapidly advanced in capability and scope. Yet, since LLMs have been shown t…

cs.CV2025

Identifying Memorization of Diffusion Models through -Laplace Analysis: Estimators, Bounds and Applications

Jonathan Brokman, Itay Gershon, Amit Giloni +4

Diffusion models, today's leading image generative models, estimate the score function, i.e. the gradient of the log probability of (perturbed) data samples, without direct access…

cs.CV2025

Manifold Induced Biases for Zero-shot and Few-shot Detection of Generated Images

Jonathan Brokman, Amit Giloni, Omer Hofman +3

Distinguishing between real and AI-generated images, commonly referred to as 'image detection', presents a timely and significant challenge. Despite extensive research in the (semi…

cs.CR2024★ 2 cited

Insights and Current Gaps in Open-Source LLM Vulnerability Scanners: A Comparative Analysis

Jonathan Brokman, Omer Hofman, Oren Rachmil +6

This report presents a comparative analysis of open-source vulnerability scanners for conversational large language models (LLMs). As LLMs become integral to various applications,…