1 citations · 2 across the 8 of their papers we have counts for
9 papers
One Goal, Many Commands: Characterizing Denylist Fragility in AI Agents
Chuyang Chen, Zhiqiang Lin
The adoption of AI agents is increasing rapidly. Terminal AI agents, i.e., AI agents that run in terminal environments, are a widely used type of AI agents. Terminal AI agents rely…
Atomicity for Agents: Exposing, Exploiting, and Mitigating TOCTOU Vulnerabilities in Browser-Use Agents
Linxi Jiang, Zhijie Liu, Haotian Luo +1
Browser-use agents are widely used for everyday tasks. They enable automated interaction with web pages through structured DOM based interfaces or vision language models operating…
Web Agents Should Use Typed Actions Instead of Click-Based Browsing
Linxi Jiang, Rui Xi, Zhijie Liu +3
This position paper argues that building a reliable agentic Web requires shifting from low-level interaction primitives to typed actions supported by a semantic layer. Today's web…
A-MemGuard: A Proactive Defense Framework for LLM-Based Agent Memory
Qianshan Wei, Tengchao Yang, Yaochen Wang +7
Large Language Model (LLM) agents use memory to learn from past interactions, enabling autonomous planning and decision-making in complex environments. However, this reliance on me…
AUTOVR: Automated UI Exploration for Detecting Sensitive Data Flow Exposures in Virtual Reality Apps
John Y. Kim, Chaoshun Zuo, Yanjie Zhao +1
The rise of Virtual Reality (VR) has provided developers with an unprecedented platform for creating games and applications (apps) that require distinct inputs, different from thos…
AI Safety vs. AI Security: Demystifying the Distinction and Boundaries
Zhiqiang Lin, Huan Sun, Ness Shroff
Artificial Intelligence (AI) is rapidly being integrated into critical systems across various domains, from healthcare to autonomous vehicles. While its integration brings immense…
ELFuzz: Efficient Input Generation via LLM-driven Synthesis Over Fuzzer Space
Chuyang Chen, Brendan Dolan-Gavitt, Zhiqiang Lin
Generation-based fuzzing produces appropriate test cases according to specifications of input grammars and semantic constraints to test systems and software. However, these specifi…
RedTeamCUA: Realistic Adversarial Testing of Computer-Use Agents in Hybrid Web-OS Environments
Zeyi Liao, Jaylen Jones, Linxi Jiang +5
Computer-use agents (CUAs) promise to automate complex tasks across operating systems (OS) and the web, but remain vulnerable to indirect prompt injection. Current evaluations of t…
SoK: Where's the "up"?! A Comprehensive (bottom-up) Study on the Security of Arm Cortex-M Systems
Xi Tan, Zheyuan Ma, Sandro Pinto +6
Arm Cortex-M processors are the most widely used 32-bit microcontrollers among embedded and Internet-of-Things devices. Despite the widespread usage, there has been little effort i…