arXiv AI By Dongyi Liu, Haixing He, Xiaobao Wu, Jia Li

MIND: Lightweight and Effective Memory Injection Defense for LLM Agents via Intent-Aware Information Bottleneck

Read the original on arXiv AI →

MIND is a lightweight defense framework that protects memory‑augmented LLM agents from memory injection attacks by using an intent‑aware Information Bottleneck to extract compact intent–behavior representations. The approach filters out task‑irrelevant and repetitive information while preserving attack signals, enabling a lightweight detector to identify malicious memories without repeated LLM auditing. Experiments show that MIND significantly lowers attack success rates—reducing mean ASR‑r and ASR‑a by 58.1% and 53.5% on ReAct‑StrategyQA—while maintaining task accuracy and inference efficiency.

Machine-generated by The Flow from the publisher's headline and feed description — not written or checked by a human. The full article lives at arXiv AI.

Hugging Face Trending Papers
Jun 13

Defending against Adaptive Prompt Injection Attacks via Reasoning-enabled Task Alignment

Indirect prompt injection attacks hijack LLM-based agents by embedding malicious instructions in third-party data that the agent retrieves during task execution. Existing defenses report near-zero attack success rate on static benchmarks, yet recent adaptive evaluations show that these results collapse once the attacker is allowed to optimize against the deployed defense.