{"id":"https://openalex.org/W4415967331","doi":"https://doi.org/10.48550/arxiv.2510.18314","title":"Genesis: Evolving Attack Strategies for LLM Web Agent Red-Teaming","display_name":"Genesis: Evolving Attack Strategies for LLM Web Agent Red-Teaming","publication_year":2025,"publication_date":"2025-10-21","ids":{"openalex":"https://openalex.org/W4415967331","doi":"https://doi.org/10.48550/arxiv.2510.18314"},"language":null,"primary_location":{"id":"pmh:oai:arXiv.org:2510.18314","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2510.18314","pdf_url":"https://arxiv.org/pdf/2510.18314","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2510.18314","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5045897021","display_name":"Zheng Zhang","orcid":"https://orcid.org/0009-0007-2007-2019","observed_orcids":["https://orcid.org/0009-0007-2007-2019"]},"institutions":[{"id":"https://openalex.org/I4405261251","display_name":"The Hong Kong University of Science and Technology (Guangzhou)","ror":"https://ror.org/050h0vm43","country_code":"CN","type":"education","lineage":["https://openalex.org/I4405261251"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhang, Zheng","raw_affiliation_strings":["The Hong Kong University of Science and Technology (Guangzhou) , Guangzhou , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Hong Kong University of Science and Technology (Guangzhou) , Guangzhou , China","institution_ids":["https://openalex.org/I4405261251"]}]},{"author_position":"middle","author":{"id":null,"display_name":"He, Jiarui","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4405261251","display_name":"The Hong Kong University of Science and Technology (Guangzhou)","ror":"https://ror.org/050h0vm43","country_code":"CN","type":"education","lineage":["https://openalex.org/I4405261251"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"He, Jiarui","raw_affiliation_strings":["The Hong Kong University of Science and Technology (Guangzhou) , Guangzhou , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Hong Kong University of Science and Technology (Guangzhou) , Guangzhou , China","institution_ids":["https://openalex.org/I4405261251"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Cai, Yuchen","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4405261251","display_name":"The Hong Kong University of Science and Technology (Guangzhou)","ror":"https://ror.org/050h0vm43","country_code":"CN","type":"education","lineage":["https://openalex.org/I4405261251"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Cai, Yuchen","raw_affiliation_strings":["The Hong Kong University of Science and Technology (Guangzhou) , Guangzhou , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Hong Kong University of Science and Technology (Guangzhou) , Guangzhou , China","institution_ids":["https://openalex.org/I4405261251"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073681676","display_name":"Deheng Ye","orcid":"https://orcid.org/0000-0002-1754-1837","observed_orcids":["https://orcid.org/0000-0002-1754-1837"]},"institutions":[{"id":"https://openalex.org/I2250653659","display_name":"Tencent (China)","ror":"https://ror.org/00hhjss72","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250653659"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ye, Deheng","raw_affiliation_strings":["Tencent ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tencent ,","institution_ids":["https://openalex.org/I2250653659"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015991234","display_name":"Peilin Zhao","orcid":"https://orcid.org/0000-0001-8543-3953","observed_orcids":["https://orcid.org/0000-0001-8543-3953"]},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhao, Peilin","raw_affiliation_strings":["Shanghai Jiao Tong University , Shanghai , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University , Shanghai , China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Feng, Ruili","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I1304085615","display_name":"Nvidia (United Kingdom)","ror":"https://ror.org/02kr42612","country_code":"GB","type":"company","lineage":["https://openalex.org/I1304085615","https://openalex.org/I4210127875"]},{"id":"https://openalex.org/I4210127875","display_name":"Nvidia (United States)","ror":"https://ror.org/03jdj4y14","country_code":"US","type":"company","lineage":["https://openalex.org/I4210127875"]}],"countries":["GB","US"],"is_corresponding":false,"raw_author_name":"Feng, Ruili","raw_affiliation_strings":["Nvidia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nvidia","institution_ids":["https://openalex.org/I1304085615","https://openalex.org/I4210127875"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100446112","display_name":"Hao Wang","orcid":"https://orcid.org/0000-0002-3086-3128","observed_orcids":["https://orcid.org/0000-0002-3086-3128","https://orcid.org/0000-0003-1662-2480"]},"institutions":[{"id":"https://openalex.org/I4405261251","display_name":"The Hong Kong University of Science and Technology (Guangzhou)","ror":"https://ror.org/050h0vm43","country_code":"CN","type":"education","lineage":["https://openalex.org/I4405261251"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wang, Hao","raw_affiliation_strings":["The Hong Kong University of Science and Technology (Guangzhou) , Guangzhou , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Hong Kong University of Science and Technology (Guangzhou) , Guangzhou , China","institution_ids":["https://openalex.org/I4405261251"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9301999807357788,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9301999807357788,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.049800001084804535,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.0034000000450760126,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/red-teaming","display_name":"red teaming","score":0.9290000200271606},{"id":"https://openalex.org/keywords/genetic-algorithm","display_name":"genetic algorithm","score":0.6439999938011169},{"id":"https://openalex.org/keywords/strategy-representation","display_name":"strategy representation","score":0.4580000042915344},{"id":"https://openalex.org/keywords/llm-security","display_name":"LLM security","score":0.5669999718666077}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7347999811172485},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.4747999906539917},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.4025000035762787},{"id":"https://openalex.org/C2779544567","wikidata":"https://www.wikidata.org/wiki/Q7621877","display_name":"Strategist","level":2,"score":0.37700000405311584},{"id":"https://openalex.org/C130436687","wikidata":"https://www.wikidata.org/wiki/Q7978591","display_name":"Web modeling","level":3,"score":0.3546000123023987},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3264000117778778},{"id":"https://openalex.org/C35578498","wikidata":"https://www.wikidata.org/wiki/Q193424","display_name":"Web service","level":2,"score":0.31700000166893005},{"id":"https://openalex.org/C2129575","wikidata":"https://www.wikidata.org/wiki/Q54837","display_name":"Semantic Web","level":2,"score":0.31139999628067017},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.27799999713897705},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.265500009059906},{"id":"https://openalex.org/C196126337","wikidata":"https://www.wikidata.org/wiki/Q821080","display_name":"Mashup","level":4,"score":0.25929999351501465},{"id":"https://openalex.org/C11392498","wikidata":"https://www.wikidata.org/wiki/Q11288","display_name":"Web server","level":3,"score":0.2529999911785126}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2510.18314","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2510.18314","pdf_url":"https://arxiv.org/pdf/2510.18314","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2510.18314","doi":"https://doi.org/10.48550/arxiv.2510.18314","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2510.18314","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2510.18314","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2510.18314","pdf_url":"https://arxiv.org/pdf/2510.18314","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"sustainable_development_goals_aurora":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G8721675579","display_name":null,"funder_award_id":"62406267","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335480","display_name":"Guangzhou Municipal Science and Technology Project","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4415967331.pdf","grobid_xml":"https://content.openalex.org/works/W4415967331.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"As":[0],"large":[1],"language":[2],"model":[3],"(LLM)":[4],"agents":[5],"increasingly":[6],"automate":[7],"complex":[8],"web":[9,24,54,65,116,153],"tasks,":[10],"they":[11],"boost":[12],"productivity":[13],"while":[14],"simultaneously":[15],"introducing":[16],"new":[17],"security":[18],"risks.":[19],"However,":[20],"relevant":[21],"studies":[22],"on":[23,34],"agent":[25,66],"attacks":[26],"remain":[27],"limited.":[28],"Existing":[29],"red-teaming":[30],"approaches":[31],"mainly":[32],"rely":[33],"manually":[35],"crafted":[36],"attack":[37,76,166],"strategies":[38,127,161],"or":[39],"static":[40],"models":[41],"trained":[42],"offline.":[43],"Such":[44],"methods":[45],"fail":[46],"to":[47,59,119,144],"capture":[48],"the":[49,70,103,114,146],"underlying":[50],"behavioral":[51],"patterns":[52],"of":[53,75,89],"agents,":[55],"making":[56],"it":[57],"difficult":[58],"generalize":[60],"across":[61,151],"diverse":[62],"environments.":[63],"In":[64],"attacks,":[67],"success":[68],"requires":[69],"continuous":[71],"discovery":[72],"and":[73,94,131,162],"evolution":[74],"strategies.":[77],"To":[78],"this":[79],"end,":[80],"we":[81],"propose":[82],"Genesis,":[83],"a":[84,107,135],"novel":[85,160],"agentic":[86],"framework":[87,158],"composed":[88],"three":[90],"modules:":[91],"Attacker,":[92],"Scorer,":[93],"Strategist.":[95],"The":[96,111,122],"Attacker":[97],"generates":[98],"adversarial":[99],"injections":[100],"by":[101],"integrating":[102],"genetic":[104],"algorithm":[105],"with":[106],"hybrid":[108],"strategy":[109,138],"representation.":[110],"Scorer":[112],"evaluates":[113],"target":[115],"agent's":[117],"responses":[118],"provide":[120],"feedback.":[121],"Strategist":[123],"dynamically":[124],"uncovers":[125],"effective":[126],"from":[128],"interaction":[129],"logs":[130],"compiles":[132],"them":[133],"into":[134],"continuously":[136],"growing":[137],"library,":[139],"which":[140],"is":[141,170],"then":[142],"re-deployed":[143],"enhance":[145],"Attacker's":[147],"effectiveness.":[148],"Extensive":[149],"experiments":[150],"various":[152],"tasks":[154],"show":[155],"that":[156],"our":[157],"discovers":[159],"consistently":[163],"outperforms":[164],"existing":[165],"baselines.":[167],"Our":[168],"code":[169],"available":[171],"at":[172],"https://github.com/CjangCjengh/web_agent_attack.":[173]},"counts_by_year":[],"updated_date":"2026-10-16T09:59:22.235173","created_date":"2025-10-24T00:00:00"}