Threat Model
In security engineering, the process of systematically identifying potential attackers, attack paths and asset vulnerabilities. It has traditionally centered on malicious actors; autonomous AI agents introduce a new subject: automated tools that have no malicious intent but may cause substantial harm.
Timeline (last 90 days)
If an Agent acts on credentials or permissions from memory with full confidence, an attacker does not need to directly compromise the system; they only need to block or delay the propagation of updates to indirectly control the Agent's behavior.
The paper's threat model assumes the attacker possesses the exact same vision-language encoder and knows the geometric layout of the page.
The distortion bounds derived in this study apply to an omniscient attacker: one who can observe the entire parameter trajectory, knows all training samples except the target record, and has access to the overall distribution of the training data.
All Facts (3)
If an Agent acts on credentials or permissions from memory with full confidence, an attacker does not need to directly compromise the system; they only need to block or delay the propagation of updates to indirectly control the Agent's behavior.
50%UnverifiedThe paper's threat model assumes the attacker possesses the exact same vision-language encoder and knows the geometric layout of the page.
50%UnverifiedThe distortion bounds derived in this study apply to an omniscient attacker: one who can observe the entire parameter trajectory, knows all training samples except the target record, and has access to the overall distribution of the training data.
50%