Fu-Yao Zhang

INSURE: Inference-Time Defense Framework for Securing Agents against Hijacking

Agents are increasingly susceptible to hijack attacks, where malicious instructions embedded in cross-modal inputs (e.g., adversarial images or retrieved web content) are used to deceive the agent's execution. Existing defenses typically rely on strict filtering or refusal mechanisms, which suffer from a critical limit...