让智能体主动感知风险,按需触发防御,提升安全效率。
Spider-Sense: Intrinsic Risk Sensing for Efficient Agent Defense with Hierarchical Adaptive Screening
- 基于内在风险感知,事件驱动触发防御,避免强制检查
- 攻击成功率最低,误报率低,延迟仅增加8.3%
- 适合追求高效安全的自主智能体系统开发者
随着大语言模型演变为自主智能体,其在现实世界中的应用日益广泛,也带来了新的安全挑战。现有防御机制多采用强制性检查范式,在智能体生命周期的预设阶段强制执行安全验证。本文认为,有效的智能体安全应具备内在性与选择性,而非架构上的分离与强制。提出Spider-Sense框架,基于内在风险感知(IRS)构建事件驱动的防御机制,使智能体保持潜在警觉,并仅在感知到风险时触发防御。触发后,系统采用分层防御策略:对已知模式使用轻量级相似匹配解决,对模糊案例则升级至深度内部推理,从而摆脱对外部模型的依赖。为支持严谨评估,引入S²Bench基准,包含真实工具执行和多阶段攻击的生命周期感知设计。大量实验表明,Spider-Sense在防御性能上达到或优于现有方法,实现最低的攻击成功率为(具体数值未提),误报率低,仅带来8.3%的额外延迟。
原文摘要 · Abstract (English)
As large language models (LLMs) evolve into autonomous agents, their real-world applicability has expanded significantly, accompanied by new security challenges. Most existing agent defense mechanisms adopt a mandatory checking paradigm, in which security validation is forcibly triggered at predefined stages of the agent lifecycle. In this work, we argue that effective agent security should be intrinsic and selective rather than architecturally decoupled and mandatory. We propose Spider-Sense framework, an event-driven defense framework based on Intrinsic Risk Sensing (IRS), which allows agents to maintain latent vigilance and trigger defenses only upon risk perception. Once triggered, the Spider-Sense invokes a hierarchical defence mechanism that trades off efficiency and precision: it resolves known patterns via lightweight similarity matching while escalating ambiguous cases to deep internal reasoning, thereby eliminating reliance on external models. To facilitate rigorous evaluation, we introduce S$^2$Bench, a lifecycle-aware benchmark featuring realistic tool execution and multi-stage attacks. Extensive experiments demonstrate that Spider-Sense achieves competitive or superior defense performance, attaining the lowest Attack Success Rate (ASR) and False Positive Rate (FPR), with only a marginal latency overhead of 8.3\%.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。