Task Shield cuts indirect prompt injection attack success to 2.07% on AgentDojo with GPT-4o by using an LLM to verify that each instruction and tool call contributes to the user's explicit goals.
Whom to Trust? Elective Learning for Distributed Gaussian Process Regression
1 Pith paper cite this work. Polarity classification is still indexing.
abstract
This paper introduces an innovative approach to enhance distributed cooperative learning using Gaussian process (GP) regression in multi-agent systems (MASs). The key contribution of this work is the development of an elective learning algorithm, namely prior-aware elective distributed GP (Pri-GP), which empowers agents with the capability to selectively request predictions from neighboring agents based on their trustworthiness. The proposed Pri-GP effectively improves individual prediction accuracy, especially in cases where the prior knowledge of an agent is incorrect. Moreover, it eliminates the need for computationally intensive variance calculations for determining aggregation weights in distributed GP. Furthermore, we establish a prediction error bound within the Pri-GP framework, ensuring the reliability of predictions, which is regarded as a crucial property in safety-critical MAS applications.
fields
cs.CR 1years
2024 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
The Task Shield: Enforcing Task Alignment to Defend Against Indirect Prompt Injection in LLM Agents
Task Shield cuts indirect prompt injection attack success to 2.07% on AgentDojo with GPT-4o by using an LLM to verify that each instruction and tool call contributes to the user's explicit goals.