Skip to content

Author

Ning Zhang

We have 10 of 18 papers

We haven’t gathered this author’s papers yet. Follow them and we’ll fetch their work.

Not the right person? Other researchers publish under this name.

#artificial intelligence Preprint Oct 2026

Capability-Grounded Agentic Planning

Capability-Grounded Agentic Planning (CGAP) is presented, which compiles the tool catalog deterministically into a PDDL model, uses an LLM to turn the request into goals, and solves the model with a classical planner.

Shikha Shrestha, William Yeoh, Ning Zhang et al. · 0 citations
#artificial intelligence Preprint Oct 2026

RoboAuto: Autonomous Robot Program Search through Multi-Level Physical Understanding

This work introduces RoboAuto, a framework for robot program search that explicitly organizes physical understanding at the object, scene, and interaction levels through three components and shows that the knowledge base transfers across simulators and embodiments, and that program search performance scales with its si...

Bu-Zhao Liu, Jia-Ning Ye, Xiu Yuan et al. · 1 citation
#artificial intelligence Preprint Oct 2026

AutoRedClaw: Automated Red-Teaming for Claw-Style Agents

This work introduces AutoRedClaw, an automated red-teaming framework that generates end-to-end attacks together with the environments needed to execute them, and constructs RedClaw-Bench, a 330-case benchmark that yields substantially higher attack success rates (ASRs) than AgentDojo, AgentDyn, and DTap.

Hao Li, Tong-Yan Hu, Weidi Luo et al. · 0 citations
#natural language process... Preprint Oct 2026

Red-TTT: Test-Time Training for Automated Jailbreaking Large Language Models

Red-TTT is proposed, which updates the attacker's parameters during the attack on each behavior, and requires only sampling access to the victim and integrates into existing attack pipelines with no other changes, increasing attack success rate and cracking many behaviors previous method cannot.

Tong-Yan Hu, Hao Li, Xiaogeng Liu et al. · 0 citations
#machine learning Preprint Oct 2026

Self-Reflection Fine-Tuning: Enhancing Agent Security against Prompt Injection Attacks from Failure Experience

Large language model (LLM) agents are increasingly deployed in tool-augmented environments, but their reliance on external inputs makes them highly vulnerable to prompt injection attacks that can hijack task objectives. Existing safety alignment methods rely on static expert trajectories or preference optimization, lim...

Zi-Xu Wang, Hao Li, Feng Gao et al. · 0 citations
#artificial intelligence Preprint Jun 2026

AutoDojo: A Generative Benchmark for Evaluating Prompt Injection Defenses in LLM Agents

AutoDojo is introduced, a generative benchmark built on AgentDojo and AgentDyn that generates IPI adaptively for a given agent and defense, and it is demonstrated that standard static benchmarks often significantly overestimate defense efficacy.

Xinhang Ma, Taoran Li, Chao-Wei Xiao et al. · 5 citations
Preprint Sep 2026

MechAudit-40: White-Box Auditing across 40 LLM Attack Mechanisms

Internal representations thus support cross-mechanism attack-exposure auditing against calibrated benign references, but decouple from downstream task compromise and parameter integrity, according to downstream task compromise and parameter integrity.

Zhen Guo, Shang-Hao Shi, Shamim Yazdani et al. · 0 citations
#artificial intelligence Preprint Sep 2026

Skynet: Workflow-Level Anomaly Detection for Agentic AI via Semantic and Structural Modeling

It is argued that anomaly detection for agentic AI must reason at the workflow level, where global execution structure exposes signals that local checks cannot see, and presents Skynet, a principled workflow-level anomaly detection framework that turns observed multi-agent execution into directed workflow graphs and sc...

Chao-Yu Zhang, He-Xuan Yu, Heng Jin et al. · 0 citations
Preprint Aug 2026

ROPE: Routed Origin Policy Enforcement against Indirect Prompt Injection

ROPE is presented, which is anchored in a structural notion of trust, and holds attack success rate to 1.6--2.6 while retaining 82--100% of undefended clean utility, significantly exceeding state-of-the-art system-level defenses in utility while attaining comparable or better security.

Xinhang Ma, Chao-Wei Xiao, William Yeoh et al. · 3 citations · ⚡2

TokenPilot: Cache-Efficient Context Management for LLM Agents

TokenPilot is presented, a dual-granularity context management framework that reduces costs by 61% and 56% in isolated mode, and 61% and 87% in continuous mode, while maintaining competitive performance compared to prior systems.

Buqiang Xu, Z. Xue, Dian Chen et al. · 1 citation

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.