6 papers
SCRIPTIOC-BENCH: A Benchmark for Recognizing Actionable Threat Intelligence from Script-Based Malware using LLMs
Hanna Kim, Jian Cui, Minkyoo Song +4
Script-based malware remains a prevalent attack technique. These scripts often contain indicators of compromise (IOCs) that provide actionable threat intelligence. However, statica…
The Natural Language Interaction Protocol and Standard for AI Agents
Luyi Xing, Rasit Onur Topaloglu, Ranjan Sinha +9
AI agents are increasingly being developed and deployed across organizations using heterogeneous agent-development frameworks, AI models, tool interfaces, protocols, and execution…
What's in Your Agent's Context? Context Privilege Escalation Attacks against AI Agent Harness
Zichuan Li, Jian Cui, Ashley Chen +2
Real-world, high-profile AI agent harnesses often rely on vendor-proprietary or opaque designs for context assembly, leaving the sources and underlying logic of assembled context p…
Execution-State-Aware LLM Reasoning for Automated Proof-of-Vulnerability Generation
Haoyu Li, Xijia Che, Yanhao Wang +2
Proof-of-Vulnerability (PoV) generation is a critical task in software security, serving as a cornerstone for vulnerability validation, false positive reduction, and patch verifica…
Maris: A Formally Verifiable Privacy Policy Enforcement Paradigm for Multi-Agent Collaboration Systems
Jian Cui, Zichuan Li, Chi Wang +2
Multi-agent collaboration systems (MACS), powered by large language models (LLMs), solve complex problems efficiently by leveraging each agent's specialization and communication be…
Les Dissonances: Cross-Tool Harvesting and Polluting in Pool-of-Tools Empowered LLM Agents
Zichuan Li, Jian Cui, Xiaojing Liao +1
Large Language Model (LLM) agents are autonomous systems powered by LLMs, capable of reasoning and planning to solve problems by leveraging a set of tools. However, the integration…