{"id":"https://openalex.org/W4407806913","doi":"https://doi.org/10.18653/v1/2026.findings-acl.342","title":"CORBA: Contagious Recursive Blocking Attacks on Multi-Agent Systems Based on Large Language Models","display_name":"CORBA: Contagious Recursive Blocking Attacks on Multi-Agent Systems Based on Large Language Models","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W4407806913","doi":"https://doi.org/10.18653/v1/2026.findings-acl.342"},"language":"en","primary_location":{"id":"doi:10.18653/v1/2026.findings-acl.342","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2026.findings-acl.342","pdf_url":"https://aclanthology.org/2026.findings-acl.342.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2026","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://aclanthology.org/2026.findings-acl.342.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5104034748","display_name":"Zhenhong Zhou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhenhong Zhou","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101308480","display_name":"Zherui Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zherui Li","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100436714","display_name":"Jie Zhang","orcid":"https://orcid.org/0000-0002-2113-2964"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jie Zhang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113293179","display_name":"Yuanhe Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yuanhe Zhang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100366737","display_name":"Kun Wang","orcid":"https://orcid.org/0000-0003-4180-6150"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kun Wang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100392465","display_name":"Yang Liu","orcid":"https://orcid.org/0000-0001-7747-5504"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang Liu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5080015697","display_name":"Qing Guo","orcid":"https://orcid.org/0000-0003-0522-1243"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Qing Guo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.00347613,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"6899","last_page":"6908"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9495000243186951,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9495000243186951,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/common-object-request-broker-architecture","display_name":"Common Object Request Broker Architecture","score":0.9038127660751343},{"id":"https://openalex.org/keywords/blocking","display_name":"Blocking (statistics)","score":0.8614482879638672},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7633399367332458},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.48421335220336914},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.4412071704864502},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.14662927389144897}],"concepts":[{"id":"https://openalex.org/C49312422","wikidata":"https://www.wikidata.org/wiki/Q691593","display_name":"Common Object Request Broker Architecture","level":2,"score":0.9038127660751343},{"id":"https://openalex.org/C144745244","wikidata":"https://www.wikidata.org/wiki/Q4927286","display_name":"Blocking (statistics)","level":2,"score":0.8614482879638672},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7633399367332458},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.48421335220336914},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.4412071704864502},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.14662927389144897}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.18653/v1/2026.findings-acl.342","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2026.findings-acl.342","pdf_url":"https://aclanthology.org/2026.findings-acl.342.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2026","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2502.14529","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2502.14529","pdf_url":"https://arxiv.org/pdf/2502.14529","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2502.14529","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2502.14529","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.18653/v1/2026.findings-acl.342","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2026.findings-acl.342","pdf_url":"https://aclanthology.org/2026.findings-acl.342.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2026","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4407806913.pdf","grobid_xml":"https://content.openalex.org/works/W4407806913.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2171577968","https://openalex.org/W1521693992","https://openalex.org/W2376449037","https://openalex.org/W2372491645","https://openalex.org/W1580342545","https://openalex.org/W2370911181","https://openalex.org/W2360422248"],"abstract_inverted_index":{"Large":[0],"Language":[1],"Model-based":[2],"Multi-Agent":[3],"Systems":[4],"represent":[5],"a":[6,22,82,154],"promising":[7],"paradigm":[8],"for":[9,157],"tackling":[10],"complex":[11],"problems":[12],"through":[13],"agent":[14],"collaboration.However,":[15],"the":[16,25,54,58,139],"reliance":[17],"on":[18],"open-ended":[19],"communication":[20,62],"exposes":[21],"fundamental":[23],"vulnerability:":[24],"collaborative":[26,55],"process":[27],"itself":[28],"can":[29],"be":[30],"exploited":[31],"and":[32,71,129,152],"disrupted.In":[33],"this":[34,38],"work,":[35],"we":[36,131],"formalize":[37],"threat":[39],"class":[40],"as":[41,81],"Denial-of-Collaboration":[42],"(DoC).Unlike":[43],"DoS,":[44],"which":[45,87],"targets":[46],"individual":[47],"nodes":[48],"or":[49,121],"services,":[50],"DoC":[51,146],"attacks":[52,104,141],"corrupt":[53],"structure":[56],"of":[57,85,98],"system,":[59],"transforming":[60],"its":[61],"topology":[63],"into":[64,96],"self-sabotage.The":[65],"result":[66],"is":[67,164],"excessive":[68],"resource":[69],"consumption":[70],"eventual":[72],"system":[73,136],"paralysis.We":[74],"introduce":[75],"COntagious":[76],"Recursive":[77],"Blocking":[78],"Attacks":[79],"(CORBA)":[80],"concrete":[83],"example":[84],"DoC,":[86],"employs":[88],"benign":[89],"yet":[90],"recursively":[91],"contagious":[92],"instructions,":[93],"forcing":[94],"LLM-MASs":[95],"cycles":[97],"meaningless":[99],"message":[100],"passing.Critically,":[101],"since":[102],"our":[103],"are":[105,115],"semantically":[106],"benign,":[107],"they":[108],"easily":[109],"bypass":[110],"conventional":[111],"safety":[112],"alignments":[113],"that":[114,133],"not":[116],"designed":[117],"to":[118],"detect":[119],"behavioral":[120],"systemic":[122],"attacks.Through":[123],"extensive":[124],"experiments":[125],"across":[126],"diverse":[127],"topologies":[128],"models,":[130],"demonstrate":[132],"CORBA":[134],"achieves":[135],"paralysis":[137],"where":[138],"baseline":[140,156],"fail.Our":[142],"work":[143],"reveals":[144],"emerging":[145],"threats":[147],"in":[148],"current":[149],"LLM-MAS":[150],"security":[151],"establishes":[153],"crucial":[155],"developing":[158],"robust,":[159],"collaboration-aware":[160],"defense":[161],"mechanisms.Our":[162],"code":[163],"available":[165],"at:":[166],"https://github.com/zhrli324/Corba.":[167]},"counts_by_year":[],"updated_date":"2026-08-05T07:39:15.569665","created_date":"2025-10-10T00:00:00"}