Security-Aware Tool Selection: Refusal and Delegation Policies for Risky Tool Calls
A research project that treats the decision to execute a tool call as a learnable risk-aware policy — training context-conditional...
Tagged: llm-security
6 ideas with this tag
Stateful Cross-Session Injection: Attacks, Detection, and Session-Boundary Defenses
A research project that studies how prompt injections persist across agent sessions — building a stateful evaluation harness that measures...
Ecosystem-Scale Measurement of Tool-Poisoning Risks in MCP Server Registries
A research project that measures, for the first time at registry scale, how much tool-poisoning risk actually exists across public...
Security-Utility Pareto Measurement of Agent Defenses under Adaptive Attacks
A research project that measures the full trade-off curve between prompt-injection resistance and task utility for LLM agent defenses —...
Trajectory-Anomaly Pre-Commit Detection of Multi-Step Injection Attacks
A research project that trains unsupervised models on benign agent trajectories to detect multi-step prompt-injection campaigns before the harmful action...
Cross-Architecture Robustness of Prompt-Injection Defenses under Adaptive Attack Transfer
A research project that measures whether prompt-injection defenses keep working when both the attack strategy and the agent architecture change...