arXiv:2605.22786cs.AIcs.ET2026-05被引 3

提出LCGuard框架,保护多智能体系统中通过潜空间通信的敏感信息。

LCGuard: Latent Communication Guard for Safe KV Sharing in Multi-Agent Systems

论文配图:LCGuard: Latent Communication Guard for Safe KV Sharing in Multi-Agent Systems
图 1 · 摘自论文原文
  • 在潜空间缓存传输前进行表示层变换,阻断敏感信息泄露。
  • 实测可降低90%以上攻击者重构敏感输入的成功率。
  • 适合关注多智能体系统隐私安全的研究者与开发者。

基于大语言模型的多智能体系统越来越多依赖中间通信来协调复杂任务。尽管现有系统多采用自然语言通信,但近期研究表明,通过Transformer键值(KV)缓存的潜空间通信能提升效率并保留更丰富的任务相关信息。然而,KV缓存也编码了上下文输入、中间推理状态和智能体特有信息,形成一个不透明的通道,可能导致敏感内容在未显式文本披露的情况下跨智能体传播。为此,我们提出**LCGuard**(Latent Communication Guard),一个面向多智能体大语言模型系统中安全KV通信的框架。LCGuard将共享的KV缓存视为潜空间工作记忆,在缓存内容跨智能体传输前学习表示层的变换。我们通过重建任务操作化定义表示级敏感信息泄露:若攻击解码器能从共享缓存中恢复出智能体特异的敏感输入,则该缓存为不安全。这引出一种对抗训练范式——攻击方学习重建敏感输入,而LCGuard学习保留任务相关语义的同时最小化可重建信息。在多个模型家族和多智能体基准上的实证评估表明,相较于标准的KV共享基线,LCGuard能持续降低基于重建的泄露风险与攻击成功率,同时保持具有竞争力的任务性能。

原文摘要 · Abstract (English)

Large language model (LLM)-based multi-agent systems increasingly rely on intermediate communication to coordinate complex tasks. While most existing systems communicate through natural language, recent work shows that latent communication, particularly through transformer key-value (KV) caches, can improve efficiency and preserve richer task-relevant information. However, KV caches also encode contextual inputs, intermediate reasoning states, and agent-specific information, creating an opaque channel through which sensitive content may propagate across agents without explicit textual disclosure. To address this, we introduce \textbf{LCGuard} (Latent Communication Guard), a framework for safe KV-based latent communication in multi-agent LLM systems. LCGuard treats shared KV caches as latent working memory and learns representation-level transformations before cache artifacts are transmitted across agents. We formalize representation-level sensitive information leakage operationally through reconstruction: a shared cache artifact is unsafe if an adversarial decoder can recover agent-specific sensitive inputs from it. This leads to an adversarial training formulation in which the adversary learns to reconstruct sensitive inputs, while LCGuard learns transformations that preserve task-relevant semantics and reduce reconstructable information. Empirical evaluations across multiple model families and multi-agent benchmarks show that LCGuard consistently reduces reconstruction-based leakage and attack success rates while maintaining competitive task performance compared to standard KV-sharing baselines.

多智能体隐私保护潜空间通信安全

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。