arXiv:2607.08180cs.CRcs.AI2026-07

利用压缩过程中的信息丢失,隐藏文本内容以防智能代理窃取。

Out of Sight: Compression-Aware Content Protection against Agentic Crawlers

论文配图:Out of Sight: Compression-Aware Content Protection against Agentic Crawlers
图 1 · 摘自论文原文
  • 通过不可见扰动干扰代理压缩,使内容在压缩时严重失真。
  • 相比最强基线,信息丢失提升最高达75.8%,且对人眼无影响。
  • 适用于真实场景如LangGraph和GitHub Copilot,适合内容防护研究者。

基于大模型的智能代理具备推理、摘要和记忆能力,对在线内容构成新型威胁,传统防护手段难以应对。现有方法如访问控制易被模仿普通浏览器的代理绕过,注入式防御又损害人类可读性。本文重新审视代理处理流程,发现代理为适应上下文限制而进行的压缩操作,是被忽视的关键防御层。我们提出CAPE框架,通过注入不可见扰动,在不改变人类可见形式的前提下,诱导代理压缩时产生严重信息损失。CAPE从可访问的替代压缩器中提取破坏性扰动种子,再通过先验引导演化与偏好校准候选优先级,适配仅可查询的目标压缩器,在低查询预算下实现有效保护。在三种内容类型、四种压缩设置下的实验表明,CAPE相较最强基线的信息丢失提升高达75.8%,且受保护内容与原版视觉上无法区分。该方法还可迁移至真实场景,包括LangGraph代理工作流与GitHub Copilot,展现其通用性与实际价值。本文旨在揭示上下文压缩作为新型防御层的潜力,推动智能代理时代的内容保护研究。

原文摘要 · Abstract (English)

The rise of LLM-based agents with reasoning, summarization, and memory capabilities has created a new threat surface for online content that conventional defenses fail to address. Existing defenses like access controls can be circumvented by agents mimicking ordinary browsers, and injection-based defenses often degrade human readability. In this paper, we revisit the agent pipeline and identify context compression, which agents routinely invoke to fit context budgets, as a critical yet overlooked defense layer. We propose CAPE, a framework that protects high-value textual content by injecting invisible perturbations without changing its human-visible surface form, thereby inducing severe information loss during agent compression. CAPE extracts disruptive seed perturbations from an accessible surrogate compressor, then adapts them to query-only target compressors through prior-guided evolution and preference-calibrated candidate prioritization, achieving effective protection under a low query budget. Experiments on three content types and four compression settings show that CAPE improves information loss by up to 75.8% over the strongest baseline while keeping protected content visually indistinguishable from originals. CAPE also transfers to real-world settings, including the LangGraph agent workflow and GitHub Copilot, highlighting its generality and practical value. This paper aims to reveal context compression as a new defense layer, promoting content protection research in the agent era.

内容保护智能代理压缩防御隐蔽信息

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。