Large language models increasingly mediate tool use in Model Context Protocol (MCP) systems, where adversarial influence may enter through user instructions, tool schemas, tool outputs, or protocol messages. Existing benchmarks often evaluate deployed agents, conflating model susceptibility with guardrails, orchestrati...
Nahom Birhan, Mehrdad Rostamzadeh, Sidhant Narula et al.· 0 citations
TrustShiftProbe is introduced, an evaluation and defense framework with four contributions: a stateful temporal threat model of the agent-server lifecycle as a benign conditioning phase followed by an adversarial defection at a trust horizon, and a language-agnostic attack engine that instantiates each variant as a com...
Mehrdad Rostamzadeh, Sidhant Narula, Mohammad GhasemiGol et al.· 1 citation
Experiments show that Q-DIBA achieves high clean accuracy, strong attack success, and high cross-trigger accuracy, suggesting effectiveness, stealthiness, and input specificity, suggesting that input-aware quantum backdoors are an important threat to secure QNN deployment.
Junrui Zhang, Zemin Chen, Lusi Li et al.· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.