{"id":"https://openalex.org/W7161740699","doi":"https://doi.org/10.48550/arxiv.2605.16346","title":"PropGuard: Safeguarding LLM-MAS via Propagation-Aware Exploration and Remediation","display_name":"PropGuard: Safeguarding LLM-MAS via Propagation-Aware Exploration and Remediation","publication_year":2026,"publication_date":"2026-05-08","ids":{"openalex":"https://openalex.org/W7161740699","doi":"https://doi.org/10.48550/arxiv.2605.16346"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.16346","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.16346","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.16346","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5110185844","display_name":"Bingyu Yan","orcid":"https://orcid.org/0009-0000-5269-4698"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yan, Bingyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136456200","display_name":"Xiaoming Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Xiaoming","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125630689","display_name":"Jinyu Hou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hou, Jinyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136463731","display_name":"Chaozhuo Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Chaozhuo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136481894","display_name":"Ziyi Zhou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhou, Ziyi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136162342","display_name":"Xiaozhe Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Xiaozhe","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136469158","display_name":"Litian Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Litian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.16089999675750732,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.16089999675750732,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.1354999989271164,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.1257999986410141,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/safeguarding","display_name":"Safeguarding","score":0.8794999718666077},{"id":"https://openalex.org/keywords/environmental-remediation","display_name":"Environmental remediation","score":0.4846999943256378},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.39259999990463257},{"id":"https://openalex.org/keywords/upstream","display_name":"Upstream (networking)","score":0.3779999911785126},{"id":"https://openalex.org/keywords/downstream","display_name":"Downstream (manufacturing)","score":0.3700999915599823},{"id":"https://openalex.org/keywords/groundwater-contamination","display_name":"Groundwater contamination","score":0.3492000102996826},{"id":"https://openalex.org/keywords/prioritization","display_name":"Prioritization","score":0.32829999923706055}],"concepts":[{"id":"https://openalex.org/C2776743756","wikidata":"https://www.wikidata.org/wiki/Q5097921","display_name":"Safeguarding","level":2,"score":0.8794999718666077},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5803999900817871},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.560699999332428},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5389999747276306},{"id":"https://openalex.org/C522964758","wikidata":"https://www.wikidata.org/wiki/Q2019586","display_name":"Environmental remediation","level":3,"score":0.4846999943256378},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.39259999990463257},{"id":"https://openalex.org/C191172861","wikidata":"https://www.wikidata.org/wiki/Q7899321","display_name":"Upstream (networking)","level":2,"score":0.3779999911785126},{"id":"https://openalex.org/C2776207758","wikidata":"https://www.wikidata.org/wiki/Q5303302","display_name":"Downstream (manufacturing)","level":2,"score":0.3700999915599823},{"id":"https://openalex.org/C2989071153","wikidata":"https://www.wikidata.org/wiki/Q20113712","display_name":"Groundwater contamination","level":4,"score":0.3492000102996826},{"id":"https://openalex.org/C2777615720","wikidata":"https://www.wikidata.org/wiki/Q11888847","display_name":"Prioritization","level":2,"score":0.32829999923706055},{"id":"https://openalex.org/C91375879","wikidata":"https://www.wikidata.org/wiki/Q15473274","display_name":"Environmental planning","level":1,"score":0.3127000033855438},{"id":"https://openalex.org/C75291252","wikidata":"https://www.wikidata.org/wiki/Q1315756","display_name":"TRACE (psycholinguistics)","level":2,"score":0.3109999895095825},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.2840999960899353},{"id":"https://openalex.org/C106131492","wikidata":"https://www.wikidata.org/wiki/Q3072260","display_name":"Filter (signal processing)","level":2,"score":0.28380000591278076},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.27549999952316284},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.27309998869895935},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2685000002384186},{"id":"https://openalex.org/C2777093003","wikidata":"https://www.wikidata.org/wiki/Q6508345","display_name":"Lead (geology)","level":2,"score":0.2599000036716461},{"id":"https://openalex.org/C110698143","wikidata":"https://www.wikidata.org/wiki/Q651389","display_name":"Patrolling","level":2,"score":0.2583000063896179},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.25609999895095825},{"id":"https://openalex.org/C39389867","wikidata":"https://www.wikidata.org/wiki/Q380767","display_name":"Corporate governance","level":2,"score":0.2535000145435333},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2524000108242035}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.16346","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.16346","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.16346","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.16346","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Partnerships for the goals","id":"https://metadata.un.org/sdg/17","score":0.45143914222717285}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"LLM-based":[0],"multi-agent":[1],"systems":[2],"(LLM-MAS)":[3],"have":[4],"become":[5],"a":[6,78,86,104,163],"promising":[7],"paradigm":[8],"for":[9,81],"solving":[10],"complex":[11],"tasks":[12],"through":[13,33,124],"role":[14],"specialization,":[15],"tool":[16],"use,":[17],"memory,":[18],"and":[19,42,127,135,145],"collaborative":[20],"reasoning.":[21],"However,":[22],"these":[23,101],"interactions":[24],"create":[25],"new":[26],"security":[27],"risks":[28],"that":[29,90,150],"malicious":[30],"instructions":[31],"injected":[32],"messages,":[34],"tools,":[35],"or":[36,54,67],"memories":[37],"can":[38],"propagate":[39],"across":[40,141],"agents":[41],"rounds,":[43],"causing":[44],"system-level":[45],"compromise.":[46],"Existing":[47],"defenses":[48],"largely":[49],"rely":[50],"on":[51],"local":[52],"filtering":[53],"graph-based":[55],"anomaly":[56],"detection,":[57],"but":[58],"they":[59],"often":[60],"fail":[61],"to":[62,113,131],"trace":[63],"fine-grained":[64],"propagation":[65,117,123],"paths":[66],"remediate":[68],"contaminated":[69],"states":[70],"without":[71],"disrupting":[72],"benign":[73],"collaboration.":[74],"We":[75],"propose":[76],"PropGuard,":[77],"propagation-aware":[79],"framework":[80],"safeguarding":[82],"LLM-MAS.":[83],"PropGuard":[84,119,151],"constructs":[85],"dual-view":[87],"spatio-temporal":[88],"graph":[89,112],"combines":[91],"response-centric":[92],"risk":[93,102],"estimation":[94],"with":[95],"full-state":[96,111],"evidence":[97],"preservation.":[98],"Guided":[99],"by":[100],"priors,":[103],"GE-GRPO":[105],"trained":[106],"inspector":[107],"sequentially":[108],"explores":[109],"the":[110],"recover":[114],"compact":[115],"suspicious":[116],"subgraphs.":[118],"then":[120],"verifies":[121],"harmful":[122],"subgraph-aware":[125],"diagnosis":[126],"applies":[128],"source-guided":[129],"remediation":[130],"correct":[132],"upstream":[133],"contamination":[134],"replay":[136],"affected":[137],"downstream":[138],"interactions.":[139],"Experiments":[140],"four":[142],"communication":[143],"architectures":[144],"five":[146],"attack":[147,154],"settings":[148],"demonstrate":[149],"consistently":[152],"lowers":[153],"success":[155],"while":[156],"maintaining":[157],"high":[158],"task-level":[159],"defense":[160],"success,":[161],"achieving":[162],"favorable":[164],"effectiveness--efficiency":[165],"trade-off.":[166]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-20T00:00:00"}