Papers by Hengyu An
ACIArena: Toward Unified Evaluation for Agent Cascading Injection (2026.acl-long)
Copied to clipboard
Hengyu An, Minxi Li, Jinghuai Zhang, Naen Xu, Chunyi Zhou, Changjiang Li, Xiaogang Xu, Tianyu Du, Shouling Ji
| Challenge: | Existing studies consider only limited attack strategies and simplified MAS settings, limiting their generalizability and comprehensive evaluation. |
| Approach: | They propose a framework to evaluate the robustness of Multi-Agent Systems (MAS) they propose unified evaluation suites spanning attack surfaces and attack objectives . |
| Outcome: | ACIArena provides a benchmark of 1,356 test cases for evaluating MAS robustness . it covers six widely used MAS implementations and provides measurable results . |
IPIGuard: A Novel Tool Dependency Graph-Based Defense Against Indirect Prompt Injection in LLM Agents (2025.emnlp-main)
Copied to clipboard
| Challenge: | Existing methods for detecting Indirect Prompt Injection (IPI) attacks rely on assumptions about the model's inherent security, which lacks structural constraints on agent behaviors. |
| Approach: | They propose a novel task execution paradigm that models the agents’ task execution process as a traversal over a planned Tool Dependency Graph (TDG). |
| Outcome: | The proposed model reduces unintended tool invocations triggered by injected instructions, enhancing robustness against IPI attacks. |
PerMemSafe: Benchmarking Implicit Personalized Safety of Long Horizon Self-Evolving Agents (2026.findings-acl)
Copied to clipboard
| Challenge: | Existing self-evolving agents have a low safety rate in long-horizon interactions . however, this reliance on context-independent safety evaluations is insufficient . |
| Approach: | They propose a framework that explicitly models personalized risk inference and memory evolution. |
| Outcome: | The proposed framework improves implicit personalized safety by 23.8% over prior frameworks while maintaining helpfulness in long-horizon interactions. |