Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents
Researchers introduce the concept of cross-agent asynchronous campaign attribution for LLM agents, presenting Asynchronous Attribution Fingerprint Vectors (A²FV) as a lightweight method to link attack sessions from the same adversarial campaign, even when agents do not share runtime state. On the new SCD-v1 benchmark, A²FV achieves a pairwise AUC of 0.82, outperforming per-session detectors and LLM judges in linking distributed attacks. The study demonstrates that structural and stylometric residue are key signals for attribution, and that the method remains effective under various evasion strategies.
Why it matters: This work establishes a new evaluation layer for LLM agent security, enabling detection of coordinated attacks that evade traditional per-session defenses.
Full story at: arXiv Cryptography and Security ↗