提出分层防御框架,提升大模型多智能体系统的安全与效率。
MAS-Shield: A Defense Framework for Secure and Efficient LLM MAS
- 分三阶段动态分配防御资源,先选关键节点,再轻量过滤,最后重器仲裁。
- 对多种攻击场景恢复率达92.5%,防御延迟降低70%以上。
- 适合需高安全与低延迟的复杂多智能体系统部署。
基于大语言模型(LLM)的多智能体系统(MAS)易受语言攻击,可能引发网络级联失效。现有防御存在根本矛盾:轻量单审核方法易成单点故障,而鲁棒的委员会式方案在多轮交互中计算开销巨大。为此,我们提出 extbf{MAS-Shield},一个兼顾安全与高效的防御框架,采用粗粒度到细粒度的过滤流程。通过三阶段协议动态分配防御资源:(1) extbf{关键智能体选择},精准定位高影响力节点以缩小防御范围;(2) extbf{轻量审计},使用轻量哨兵模型快速过滤绝大多数良性请求;(3) extbf{全局共识审计},仅将可疑或模糊信号升级至重型委员会进行最终裁决。该分层设计有效优化了安全与效率的权衡。实验表明,MAS-Shield 在多种对抗场景下实现92.5%的恢复率,并相较现有方法将防御延迟降低超70%。
原文摘要 · Abstract (English)
Large Language Model (LLM)-based Multi-Agent Systems (MAS) are susceptible to linguistic attacks that can trigger cascading failures across the network. Existing defenses face a fundamental dilemma: lightweight single-auditor methods are prone to single points of failure, while robust committee-based approaches incur prohibitive computational costs in multi-turn interactions. To address this challenge, we propose \textbf{MAS-Shield}, a secure and efficient defense framework designed with a coarse-to-fine filtering pipeline. Rather than applying uniform scrutiny, MAS-Shield dynamically allocates defense resources through a three-stage protocol: (1) \textbf{Critical Agent Selection } strategically targets high-influence nodes to narrow the defense surface; (2) \textbf{Light Auditing} employs lightweight sentry models to rapidly filter the majority of benign cases; and (3) \textbf{Global Consensus Auditing} escalates only suspicious or ambiguous signals to a heavyweight committee for definitive arbitration. This hierarchical design effectively optimizes the security-efficiency trade-off. Experiments demonstrate that MAS-Shield achieves a 92.5\% recovery rate against diverse adversarial scenarios and reduces defense latency by over 70\% compared to existing methods.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。