‹ back to 2026-07-22

Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents

Research LLM Agents

Ranking

Overall 71

Content 85

Popularity 40

Observed public metrics from 1 member.

Merged summary

TL;DR - This paper formalizes attribution of asynchronous attacks spanning independent LLM agents and introduces A²FV, a proxy-side fingerprinting protocol. It matters because session-level defenses can miss distributed adversarial campaigns.

A²FV compares proxy-observable tool use, timing, and prompt residue without shared runtime state or attacker identities.
The authors introduce SCD-v1, covering benign traffic, isolated attacks, multi-session campaigns, evasion, and leakage audits.
A²FV achieves 0.82 pairwise AUC; adapted session detectors and chunked LLM judges perform near chance.
Structural and stylometric residue provides the strongest signal, with separability persisting under controlled evasion tests.

Sources (1)

Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents

arXiv cs.CR SangJin Park, Myungsub Choi, Jineok Kim, Minseung Kang 2026-07-21 arXiv:2607.18826

Public signals Semantic Scholar citations 0 · Semantic Scholar influential citations 0

Providers: Hugging Face · N/A OpenAlex · N/A Publisher · N/A Semantic Scholar · Citations 0 · Influential citations 0 X · N/A Fetched 2026-08-14 14:30:28.370674 UTC

A²FV compares proxy-observable tool use, timing, and prompt residue without shared runtime state or attacker identities.
The authors introduce SCD-v1, covering benign traffic, isolated attacks, multi-session campaigns, evasion, and leakage audits.
A²FV achieves 0.82 pairwise AUC; adapted session detectors and chunked LLM judges perform near chance.
Structural and stylometric residue provides the strongest signal, with separability persisting under controlled evasion tests.

item →