{"id":"https://openalex.org/W7204187668","doi":"https://doi.org/10.1109/wccis70285.2026.11650697","title":"IBBC-Guard: Intent-Bound Behavior-Chain Modeling for Unauthorized Tool-Call Detection and Dynamic Permission Control in LLM Agents","display_name":"IBBC-Guard: Intent-Bound Behavior-Chain Modeling for Unauthorized Tool-Call Detection and Dynamic Permission Control in LLM Agents","publication_year":2026,"publication_date":"2026-07-01","ids":{"openalex":"https://openalex.org/W7204187668","doi":"https://doi.org/10.1109/wccis70285.2026.11650697"},"language":"en","primary_location":{"id":"doi:10.1109/wccis70285.2026.11650697","doi":"https://doi.org/10.1109/wccis70285.2026.11650697","is_oa":true,"landing_page_url":"https://doi.org/10.1109/wccis70285.2026.11650697","pdf_url":null,"source":{"id":"https://openalex.org/S7407106792","display_name":"World Conference on Computer and Information Security (WCCIS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 3rd World Conference on Computer and Information Security (WCCIS)","raw_type":"proceedings-article"},"parent_works":[],"lineage":["https://openalex.org/W7204187668"],"child_works_count":0,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1109/wccis70285.2026.11650697","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5148068777","display_name":"Xin Li","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xin Li","raw_affiliation_strings":["School of Information Engineering, Eurasia University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Engineering, Eurasia University","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102556557","display_name":"Xiangmei Zhao","orcid":"https://orcid.org/0009-0000-0239-6334","observed_orcids":["https://orcid.org/0009-0000-0239-6334","https://orcid.org/0009-0001-0752-8620"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xiangmei Zhao","raw_affiliation_strings":["School of Information Engineering, Eurasia University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Engineering, Eurasia University","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5157122873","display_name":"Ziheng Weng","orcid":"https://orcid.org/0009-0004-0448-082X","observed_orcids":["https://orcid.org/0009-0004-0448-082X"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ziheng Weng","raw_affiliation_strings":["School of Information Engineering, Eurasia University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Engineering, Eurasia University","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5148110506","display_name":"Congcong Zhang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I93477617","display_name":"Huizhou University","ror":"https://ror.org/03q3s7962","country_code":"CN","type":"education","lineage":["https://openalex.org/I93477617"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Congcong Zhang","raw_affiliation_strings":["School of Chemistry and Materials, Engineering, Huizhou University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Chemistry and Materials, Engineering, Huizhou University","institution_ids":["https://openalex.org/I93477617"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139583128","display_name":"Shufei An","orcid":"https://orcid.org/0009-0002-8550-7283","observed_orcids":["https://orcid.org/0009-0002-8550-7283"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shufei An","raw_affiliation_strings":["School of Information Engineering, Eurasia University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Engineering, Eurasia University","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5139605975","display_name":"Shaohang He","orcid":"https://orcid.org/0009-0005-4430-1360","observed_orcids":["https://orcid.org/0009-0005-4430-1360"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shaohang He","raw_affiliation_strings":["School of Information Engineering, Eurasia University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Engineering, Eurasia University","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"237","last_page":"244"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9409000277519226,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9409000277519226,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.035100001841783524,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.009700000286102295,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/llm-based-agents","display_name":"LLM agents","score":0.8550000190734863},{"id":"https://openalex.org/keywords/risk-prediction-score","display_name":"risk scoring","score":0.5839999914169312},{"id":"https://openalex.org/keywords/capability-based-access-control","display_name":"capability-based access control","score":0.5490000247955322},{"id":"https://openalex.org/keywords/runtime-authorization","display_name":"runtime authorization","score":0.48399999737739563}],"concepts":[{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.6294999718666077},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5730999708175659},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.46619999408721924},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4578999876976013},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.31139999628067017},{"id":"https://openalex.org/C17500928","wikidata":"https://www.wikidata.org/wiki/Q959968","display_name":"Control system","level":2,"score":0.295199990272522},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.26980000734329224},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.266400009393692},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.2655999958515167},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.2558000087738037}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/wccis70285.2026.11650697","doi":"https://doi.org/10.1109/wccis70285.2026.11650697","is_oa":true,"landing_page_url":"https://doi.org/10.1109/wccis70285.2026.11650697","pdf_url":null,"source":{"id":"https://openalex.org/S7407106792","display_name":"World Conference on Computer and Information Security (WCCIS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 3rd World Conference on Computer and Information Security (WCCIS)","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1109/wccis70285.2026.11650697","doi":"https://doi.org/10.1109/wccis70285.2026.11650697","is_oa":true,"landing_page_url":"https://doi.org/10.1109/wccis70285.2026.11650697","pdf_url":null,"source":{"id":"https://openalex.org/S7407106792","display_name":"World Conference on Computer and Information Security (WCCIS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 3rd World Conference on Computer and Information Security (WCCIS)","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Peace, justice, and strong institutions","score":0.5473999977111816,"id":"https://metadata.un.org/sdg/16"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W2020018978","https://openalex.org/W2056073317","https://openalex.org/W2084413241","https://openalex.org/W2121044470","https://openalex.org/W2507797218","https://openalex.org/W4241727697","https://openalex.org/W4389524506","https://openalex.org/W4402670146","https://openalex.org/W4415795271","https://openalex.org/W4415796822","https://openalex.org/W6947676652","https://openalex.org/W7133214447"],"related_works":["https://openalex.org/W7165863270","https://openalex.org/W7163822186","https://openalex.org/W7147654847","https://openalex.org/W7109764601","https://openalex.org/W7213867979","https://openalex.org/W7166179641","https://openalex.org/W7167596465","https://openalex.org/W7221724745","https://openalex.org/W7164673930","https://openalex.org/W7164843587"],"abstract_inverted_index":{"Tool-integrated":[0],"large":[1],"language":[2],"model":[3],"(LLM)":[4],"agents":[5],"can":[6],"call":[7],"files,":[8],"databases,":[9],"email":[10],"systems,":[11],"web":[12],"search,":[13],"and":[14,39,68,71,99,109,124,152,158],"code":[15],"execution":[16],"tools,":[17],"which":[18],"turns":[19],"tool":[20,62],"use":[21],"into":[22],"a":[23,45,53],"runtime":[24],"authorization":[25,134,147],"problem.":[26],"This":[27],"paper":[28],"presents":[29],"IBBC-Guard,":[30],"an":[31,48,82,131],"intent-bound":[32,132],"behavior-chain":[33,133],"method":[34],"for":[35],"unauthorized":[36],"tool-call":[37],"detection":[38],"dynamic":[40],"permission":[41],"control.":[42],"IBBC-Guard":[43,91],"binds":[44],"candidate":[46],"call$C_{i}$to":[47],"intent":[49,60],"constraint":[50],"I,":[51],"updates":[52],"behavior":[54],"chain":[55,66],"graph":[56],"BCG,":[57],"computes":[58],"Risk$(C_{i})$from":[59],"deviation,":[61],"sensitivity,":[63,65],"resource":[64],"anomaly,":[67],"parameter":[69],"risk,":[70],"maps":[72],"the":[73,87,115],"score":[74],"to":[75,121],"Allow,":[76],"Downgrade,":[77],"HumanConfirm,":[78],"or":[79],"Deny":[80],"through":[81],"intentscoped":[83],"capability":[84],"Capi.":[85],"Under":[86],"OASB-800":[88],"controlled":[89,122,143,157],"simulation,":[90],"achieves":[92],"ASR=0.000,":[93],"UDR=1.000,":[94],"FPR=0.011,":[95],"BTCR=0.971,":[96],"Overhead":[97],"=14.2%,":[98],"SUS=0.728.":[100],"Sandboxed":[101],"live":[102],"planning":[103],"traces":[104],"from":[105],"gpt-5.4,":[106],"gemini-3.1-propreview,":[107],"deepseek-v4-flash,":[108],"kimi-k2.6":[110],"further":[111],"test":[112],"interception":[113],"at":[114],"model-tool":[116],"boundary.":[117],"Claims":[118],"remain":[119],"limited":[120],"benchmarks":[123],"sandboxed":[125,159],"traces.":[126],"The":[127,140],"main":[128],"innovation":[129],"is":[130],"event":[135],"enforced":[136],"before":[137],"executor":[138],"access.":[139],"evaluation":[141],"covers":[142],"guardrail":[144],"baselines,":[145],"per-call":[146],"latency,":[148],"adversarial":[149],"prompt":[150],"robustness,":[151],"structural":[153],"multi-agent":[154],"scalability":[155],"under":[156],"settings.":[160]},"counts_by_year":[],"updated_date":"2026-11-11T12:16:26.678958","created_date":"2026-08-26T00:00:00"}