5 papers
Revoked but Still Authoritative: An Empirical Study of Revocation Enforcement in Agent-Memory Systems
Yi Ting Shen, Kentaroh Toyoda, Alex Leung
Long-running language-model agents depend on persistent memory. Many agent-memory systems preserve history through soft revocation: a contradicted fact is marked invalid and retain…
ACEA: An Adversarial Co-Evolution Arena for Head-to-Head Red-Team and Blue-Team LLM Testing
Yi Ting Shen, Kentaroh Toyoda, Alex Leung
Automated red-team attacks and blue-team defenses for large language models (LLMs) are advancing quickly. However, attackers and defenders are built and tested in isolation, and th…
AMT-X: Phase-Structured Multi-Turn Red-Teaming with Checklist-Gated Evaluation
Yi Ting Shen, Kentaroh Toyoda, Alex Leung
Safety evaluation of large language models (LLMs) relies largely on single-turn attack datasets and single-judge scoring, underestimating risk from adaptive multi-turn adversaries…
MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems
Yi Ting Shen, Kentaroh Toyoda, Alex Leung
The rapid proliferation of Model Context Protocol (MCP)-based agentic systems has introduced a new category of security threats that existing frameworks are inadequately equipped t…
MCP-38: A Comprehensive Threat Taxonomy for Model Context Protocol Systems (v1.0)
Yi Ting Shen, Kentaroh Toyoda, Alex Leung
The Model Context Protocol (MCP) introduces a structurally distinct attack surface that existing threat frameworks, designed for traditional software systems or generic LLM deploym…