{"id":"https://openalex.org/W7160961815","doi":"https://doi.org/10.48550/arxiv.2605.08876","title":"OTora: A Unified Red Teaming Framework for Reasoning-Level Denial-of-Service in LLM Agents","display_name":"OTora: A Unified Red Teaming Framework for Reasoning-Level Denial-of-Service in LLM Agents","publication_year":2026,"publication_date":"2026-05-09","ids":{"openalex":"https://openalex.org/W7160961815","doi":"https://doi.org/10.48550/arxiv.2605.08876"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.08876","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.08876","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.08876","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135980203","display_name":"Xinyu Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Xinyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054272337","display_name":"Ronghui Mu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mu, Ronghui","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135958019","display_name":"Lin Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Lin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135918620","display_name":"Tianjin Huang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Huang, Tianjin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5135966153","display_name":"Gaojie Jin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jin, Gaojie","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7451000213623047,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7451000213623047,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.047200001776218414,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.03500000014901161,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.6624000072479248},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.6083999872207642},{"id":"https://openalex.org/keywords/latency","display_name":"Latency (audio)","score":0.6033999919891357},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5023000240325928},{"id":"https://openalex.org/keywords/task-analysis","display_name":"Task analysis","score":0.40709999203681946},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.3727000057697296},{"id":"https://openalex.org/keywords/autonomous-agent","display_name":"Autonomous agent","score":0.30660000443458557}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8011000156402588},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.6624000072479248},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.6083999872207642},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.6033999919891357},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5023000240325928},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4374000132083893},{"id":"https://openalex.org/C175154964","wikidata":"https://www.wikidata.org/wiki/Q380077","display_name":"Task analysis","level":3,"score":0.40709999203681946},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.3727000057697296},{"id":"https://openalex.org/C13687954","wikidata":"https://www.wikidata.org/wiki/Q4826847","display_name":"Autonomous agent","level":2,"score":0.30660000443458557},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.3057999908924103},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.3050000071525574},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2955000102519989},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2935999929904938},{"id":"https://openalex.org/C195344581","wikidata":"https://www.wikidata.org/wiki/Q2555318","display_name":"Automated reasoning","level":2,"score":0.28769999742507935},{"id":"https://openalex.org/C20162079","wikidata":"https://www.wikidata.org/wiki/Q1151406","display_name":"Case-based reasoning","level":2,"score":0.2678000032901764},{"id":"https://openalex.org/C2989134064","wikidata":"https://www.wikidata.org/wiki/Q288510","display_name":"Execution time","level":2,"score":0.26339998841285706},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.2615000009536743},{"id":"https://openalex.org/C74072328","wikidata":"https://www.wikidata.org/wiki/Q1142726","display_name":"Intelligent agent","level":2,"score":0.25839999318122864},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.2529999911785126}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.08876","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.08876","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.08876","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.08876","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.4275515675544739}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Large":[0],"Language":[1],"Models":[2],"(LLMs)":[3],"are":[4],"increasingly":[5],"deployed":[6],"as":[7,119],"autonomous":[8],"agents":[9,112],"that":[10,70,99],"execute":[11],"tool-augmented,":[12],"multi-step":[13],"tasks,":[14],"where":[15],"latency":[16,135,155],"is":[17,28,159],"a":[18],"critical":[19],"factor":[20],"for":[21,60,148],"real-world":[22],"applications.":[23],"Yet":[24],"an":[25,34,44,67,95],"overlooked":[26],"threat":[27],"Reasoning-Level":[29],"Denial-of-Service":[30],"(R-DoS),":[31],"in":[32,130],"which":[33],"attacker":[35],"preserves":[36],"task":[37,105,141],"correctness":[38],"but":[39],"degrades":[40],"availability":[41],"by":[42],"inflating":[43],"agent's":[45],"reasoning":[46,92,131,153],"depth":[47],"or":[48],"tool-use":[49],"budget.":[50],"We":[51],"introduce":[52],"OTora,":[53],"the":[54],"first":[55],"unified,":[56],"two-stage":[57],"red-teaming":[58],"framework":[59],"instantiating":[61],"R-DoS":[62],"attacks.":[63],"Stage":[64,88],"I":[65],"optimizes":[66],"adversarial":[68],"trigger":[69],"induces":[71],"targeted":[72],"tool":[73],"invocations":[74],"using":[75],"insertion-aware":[76],"scoring":[77],"and":[78,85,110,121,133,150,154],"dynamic":[79],"target":[80],"co-evolution,":[81],"supporting":[82],"both":[83],"black-box":[84],"white-box":[86],"settings.":[87],"II":[89],"generates":[90],"agent-aware":[91],"payloads":[93],"via":[94],"ICL-guided":[96],"genetic":[97],"search":[98],"amplifies":[100],"overthinking":[101],"while":[102,138],"maintaining":[103],"correct":[104],"outcomes.":[106],"Across":[107],"WebShop,":[108],"Email,":[109],"OS":[111],"built":[113],"on":[114],"multiple":[115],"backbone":[116],"models":[117],"such":[118],"LLaMA-70B":[120],"GPT-OSS-120B,":[122],"OTora":[123],"achieves":[124],"up":[125],"to":[126],"10":[127],"times":[128],"increases":[129],"tokens":[132],"order-of-magnitude":[134],"slowdowns,":[136],"all":[137],"preserving":[139],"near-baseline":[140],"accuracy.":[142],"Finally,":[143],"we":[144],"discuss":[145],"mitigation":[146],"strategies":[147],"detecting":[149],"constraining":[151],"abnormal":[152],"spikes.":[156],"The":[157],"code":[158],"available":[160],"at":[161],"https://github.com/llm2409/OTora.":[162]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-13T00:00:00"}