Adversarial ML and Prompt Attacks
Universal Adversarial Suffixes Against Tool-Calling LLMs
Adversarial suffixes hijack tool-calling models to execute unauthorized actions on live systems.
Priya Subramaniam
· 9 min read
Adversarial suffixes hijack tool-calling models to execute unauthorized actions on live systems.
Verifying content, identity, intent, and state at each agent handoff prevents cascade attacks.
Attackers redirect agent objectives and corrupt memory across sessions without touching code.
Attackers exploit tool manifests and memory to map agent capabilities and predict future actions.
Two attack vectors targeting AI agents require separate defenses, not unified guardrails.
Gateway guardrails inspect API boundaries but cannot enforce intent across agent tool chains.
Individually safe tool outputs create security risks when composed across agent sessions.
Controlling AI agents requires cataloging them before securing their access.