{"id":"https://openalex.org/W7153192945","doi":"https://doi.org/10.48550/arxiv.2604.07775","title":"ACIArena: Toward Unified Evaluation for Agent Cascading Injection","display_name":"ACIArena: Toward Unified Evaluation for Agent Cascading Injection","publication_year":2026,"publication_date":"2026-04-09","ids":{"openalex":"https://openalex.org/W7153192945","doi":"https://doi.org/10.48550/arxiv.2604.07775"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.07775","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.07775","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.07775","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5121553485","display_name":"Hengyu An","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"An, Hengyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114130724","display_name":"Minxi Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Minxi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133321388","display_name":"Jinghuai Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Jinghuai","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133376324","display_name":"Naen Xu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xu, Naen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016021356","display_name":"Chunyi Zhou","orcid":"https://orcid.org/0000-0003-0081-0946"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhou, Chunyi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101504674","display_name":"Changjiang Li","orcid":"https://orcid.org/0000-0002-1671-7183"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Changjiang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125703485","display_name":"Xiaogang Xu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xu, Xiaogang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133389926","display_name":"Tianyu Du","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Du, Tianyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5133384090","display_name":"Shouling Ji","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ji, Shouling","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.2547999918460846,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.2547999918460846,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10456","display_name":"Multi-Agent Systems and Negotiation","score":0.15150000154972076,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.10260000079870224,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.72079998254776},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6830000281333923},{"id":"https://openalex.org/keywords/benchmarking","display_name":"Benchmarking","score":0.5490000247955322},{"id":"https://openalex.org/keywords/limiting","display_name":"Limiting","score":0.5048999786376953},{"id":"https://openalex.org/keywords/generalizability-theory","display_name":"Generalizability theory","score":0.5008000135421753},{"id":"https://openalex.org/keywords/multi-agent-system","display_name":"Multi-agent system","score":0.4544000029563904},{"id":"https://openalex.org/keywords/suite","display_name":"Suite","score":0.44600000977516174}],"concepts":[{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.72079998254776},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6851999759674072},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6830000281333923},{"id":"https://openalex.org/C86251818","wikidata":"https://www.wikidata.org/wiki/Q816754","display_name":"Benchmarking","level":2,"score":0.5490000247955322},{"id":"https://openalex.org/C188198153","wikidata":"https://www.wikidata.org/wiki/Q1613840","display_name":"Limiting","level":2,"score":0.5048999786376953},{"id":"https://openalex.org/C27158222","wikidata":"https://www.wikidata.org/wiki/Q5532422","display_name":"Generalizability theory","level":2,"score":0.5008000135421753},{"id":"https://openalex.org/C41550386","wikidata":"https://www.wikidata.org/wiki/Q529909","display_name":"Multi-agent system","level":2,"score":0.4544000029563904},{"id":"https://openalex.org/C79581498","wikidata":"https://www.wikidata.org/wiki/Q1367530","display_name":"Suite","level":2,"score":0.44600000977516174},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.421999990940094},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.40689998865127563},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3840999901294708},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.3741999864578247},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3662000000476837},{"id":"https://openalex.org/C100776233","wikidata":"https://www.wikidata.org/wiki/Q2532492","display_name":"Bridge (graph theory)","level":2,"score":0.35989999771118164},{"id":"https://openalex.org/C2776544517","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Unexpected events","level":2,"score":0.32679998874664307},{"id":"https://openalex.org/C174348530","wikidata":"https://www.wikidata.org/wiki/Q188635","display_name":"Bridging (networking)","level":2,"score":0.3057999908924103},{"id":"https://openalex.org/C119323957","wikidata":"https://www.wikidata.org/wiki/Q5048226","display_name":"Cascading failure","level":4,"score":0.29829999804496765},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.29330000281333923},{"id":"https://openalex.org/C199845137","wikidata":"https://www.wikidata.org/wiki/Q145490","display_name":"Network topology","level":2,"score":0.28610000014305115},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.2524000108242035}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.07775","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.07775","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.07775","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.07775","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Collaboration":[0],"and":[1,48,55,90,111,121,153],"information":[2,98],"sharing":[3],"empower":[4],"Multi-Agent":[5],"Systems":[6],"(MAS)":[7],"but":[8],"also":[9],"introduce":[10,63,175],"a":[11,24,65,103,123,182],"critical":[12],"security":[13],"risk":[14],"known":[15],"as":[16],"Agent":[17],"Cascading":[18],"Injection":[19],"(ACI).":[20],"In":[21],"such":[22],"attacks,":[23],"compromised":[25],"agent":[26,86],"exploits":[27],"inter-agent":[28,88],"trust":[29],"to":[30,165,167,180],"propagate":[31],"malicious":[32],"instructions,":[33],"causing":[34],"cascading":[35],"failures":[36],"across":[37],"the":[38,70],"system.":[39],"However,":[40],"existing":[41],"studies":[42],"consider":[43],"only":[44],"limited":[45],"attack":[46,81,91],"strategies":[47],"simplified":[49,161],"MAS":[50,109,119,132,140,148,190],"settings,":[51],"limiting":[52],"their":[53],"generalizability":[54],"comprehensive":[56],"evaluation.":[57],"To":[58],"bridge":[59],"this":[60],"gap,":[61],"we":[62],"ACIArena,":[64],"unified":[66,104],"framework":[67],"for":[68,129,185],"evaluating":[69,131,139],"robustness":[71,141],"of":[72,125,189],"MAS.":[73],"ACIArena":[74,101,178],"offers":[75],"systematic":[76],"evaluation":[77],"suites":[78],"spanning":[79],"multiple":[80],"surfaces":[82],"(i.e.,":[83,93],"external":[84],"inputs,":[85],"profiles,":[87],"messages)":[89],"objectives":[92],"instruction":[94],"hijacking,":[95],"task":[96],"disruption,":[97],"exfiltration).":[99],"Specifically,":[100],"establishes":[102],"specification":[105],"that":[106,138],"jointly":[107],"supports":[108],"construction":[110],"attack-defense":[112],"modules.":[113],"It":[114],"covers":[115],"six":[116],"widely":[117],"used":[118],"implementations":[120],"provides":[122],"benchmark":[124],"1,356":[126],"test":[127],"cases":[128],"systematically":[130],"robustness.":[133],"Our":[134],"benchmarking":[135],"results":[136],"show":[137],"solely":[142],"through":[143],"topology":[144],"is":[145],"insufficient;":[146],"robust":[147],"require":[149],"deliberate":[150],"role":[151],"design":[152,191],"controlled":[154],"interaction":[155],"patterns.":[156],"Moreover,":[157],"defenses":[158,172],"developed":[159],"in":[160],"environments":[162],"often":[163],"fail":[164],"transfer":[166],"real-world":[168],"settings;":[169],"narrowly":[170],"scoped":[171],"may":[173],"even":[174],"new":[176],"vulnerabilities.":[177],"aims":[179],"provide":[181],"solid":[183],"foundation":[184],"advancing":[186],"deeper":[187],"exploration":[188],"principles.":[192]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-04-11T00:00:00"}