{"id":"https://openalex.org/W7162112394","doi":"https://doi.org/10.48550/arxiv.2605.22786","title":"LCGuard: Latent Communication Guard for Safe KV Sharing in Multi-Agent Systems","display_name":"LCGuard: Latent Communication Guard for Safe KV Sharing in Multi-Agent Systems","publication_year":2026,"publication_date":"2026-05-21","ids":{"openalex":"https://openalex.org/W7162112394","doi":"https://doi.org/10.48550/arxiv.2605.22786"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.22786","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.22786","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.22786","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136734920","display_name":"Sadia Asif","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Asif, Sadia","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010987707","display_name":"Mohammad Mohammadi Amiri","orcid":"https://orcid.org/0000-0002-7343-6628"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Amiri, Mohammad Mohammadi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033844485","display_name":"Momin Abbas","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Abbas, Momin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060534465","display_name":"Prasanna Sattigeri","orcid":"https://orcid.org/0000-0003-4435-0486"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sattigeri, Prasanna","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136813520","display_name":"Karthikeyan Natesan Ramamurthy","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ramamurthy, Karthikeyan Natesan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7577999830245972,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7577999830245972,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.03970000147819519,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.030400000512599945,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6492999792098999},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.5910999774932861},{"id":"https://openalex.org/keywords/cache","display_name":"Cache","score":0.49619999527931213},{"id":"https://openalex.org/keywords/guard","display_name":"Guard (computer science)","score":0.44429999589920044},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.3847000002861023},{"id":"https://openalex.org/keywords/encode","display_name":"ENCODE","score":0.3675999939441681},{"id":"https://openalex.org/keywords/transformer","display_name":"Transformer","score":0.3546999990940094},{"id":"https://openalex.org/keywords/channel","display_name":"Channel (broadcasting)","score":0.3458999991416931},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.33059999346733093}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8416000008583069},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6492999792098999},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.5910999774932861},{"id":"https://openalex.org/C115537543","wikidata":"https://www.wikidata.org/wiki/Q165596","display_name":"Cache","level":2,"score":0.49619999527931213},{"id":"https://openalex.org/C141141315","wikidata":"https://www.wikidata.org/wiki/Q2379942","display_name":"Guard (computer science)","level":2,"score":0.44429999589920044},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.3847000002861023},{"id":"https://openalex.org/C66746571","wikidata":"https://www.wikidata.org/wiki/Q1134833","display_name":"ENCODE","level":3,"score":0.3675999939441681},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.3546999990940094},{"id":"https://openalex.org/C127162648","wikidata":"https://www.wikidata.org/wiki/Q16858953","display_name":"Channel (broadcasting)","level":2,"score":0.3458999991416931},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.33059999346733093},{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.3278999924659729},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.319599986076355},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.3188999891281128},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3167000114917755},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.31470000743865967},{"id":"https://openalex.org/C2779439875","wikidata":"https://www.wikidata.org/wiki/Q1078276","display_name":"Natural language understanding","level":3,"score":0.31060001254081726},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.3012999892234802},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.30059999227523804},{"id":"https://openalex.org/C170133592","wikidata":"https://www.wikidata.org/wiki/Q1806883","display_name":"Latent semantic analysis","level":2,"score":0.28760001063346863},{"id":"https://openalex.org/C125411270","wikidata":"https://www.wikidata.org/wiki/Q18653","display_name":"Encoding (memory)","level":2,"score":0.28130000829696655},{"id":"https://openalex.org/C195324797","wikidata":"https://www.wikidata.org/wiki/Q33742","display_name":"Natural language","level":2,"score":0.27390000224113464},{"id":"https://openalex.org/C854659","wikidata":"https://www.wikidata.org/wiki/Q1859284","display_name":"Message passing","level":2,"score":0.26910001039505005},{"id":"https://openalex.org/C175154964","wikidata":"https://www.wikidata.org/wiki/Q380077","display_name":"Task analysis","level":3,"score":0.26269999146461487},{"id":"https://openalex.org/C86251818","wikidata":"https://www.wikidata.org/wiki/Q816754","display_name":"Benchmarking","level":2,"score":0.2624000012874603},{"id":"https://openalex.org/C101765175","wikidata":"https://www.wikidata.org/wiki/Q577764","display_name":"Communications system","level":2,"score":0.2623000144958496},{"id":"https://openalex.org/C57273362","wikidata":"https://www.wikidata.org/wiki/Q576722","display_name":"Decoding methods","level":2,"score":0.2547999918460846},{"id":"https://openalex.org/C157657479","wikidata":"https://www.wikidata.org/wiki/Q2367247","display_name":"Closed captioning","level":3,"score":0.2526000142097473}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.22786","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.22786","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.22786","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.22786","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Large":[0],"language":[1],"model":[2,170],"(LLM)-based":[3],"multi-agent":[4,89,173],"systems":[5,18],"increasingly":[6],"rely":[7],"on":[8],"intermediate":[9,50],"communication":[10,87],"to":[11,140,150,192],"coordinate":[12],"complex":[13],"tasks.":[14],"While":[15],"most":[16],"existing":[17],"communicate":[19],"through":[20,30,60,119],"natural":[21],"language,":[22],"recent":[23],"work":[24],"shows":[25],"that":[26,158,176],"latent":[27,86,98],"communication,":[28],"particularly":[29],"transformer":[31],"key-value":[32],"(KV)":[33],"caches,":[34],"can":[35,131],"improve":[36],"efficiency":[37],"and":[38,53,101,162,172,182],"preserve":[39,159],"richer":[40],"task-relevant":[41,160],"information.":[42,165],"However,":[43],"KV":[44,95],"caches":[45,96],"also":[46],"encode":[47],"contextual":[48],"inputs,":[49,153],"reasoning":[51],"states,":[52],"agent-specific":[54,133],"information,":[55],"creating":[56],"an":[57,128,141],"opaque":[58],"channel":[59],"which":[61,146],"sensitive":[62,115,134,152],"content":[63],"may":[64],"propagate":[65],"across":[66,110,168],"agents":[67],"without":[68],"explicit":[69],"textual":[70],"disclosure.":[71],"To":[72],"address":[73],"this,":[74],"we":[75],"introduce":[76],"\\textbf{LCGuard}":[77],"(Latent":[78],"Communication":[79],"Guard),":[80],"a":[81,121],"framework":[82],"for":[83],"safe":[84],"KV-based":[85],"in":[88,145],"LLM":[90],"systems.":[91],"LCGuard":[92,155,177],"treats":[93],"shared":[94,122],"as":[97],"working":[99],"memory":[100],"learns":[102,149,156],"representation-level":[103,114],"transformations":[104,157],"before":[105],"cache":[106,123],"artifacts":[107],"are":[108],"transmitted":[109],"agents.":[111],"We":[112],"formalize":[113],"information":[116],"leakage":[117,181],"operationally":[118],"reconstruction:":[120],"artifact":[124],"is":[125],"unsafe":[126],"if":[127],"adversarial":[129,142],"decoder":[130],"recover":[132],"inputs":[135],"from":[136],"it.":[137],"This":[138],"leads":[139],"training":[143],"formulation":[144],"the":[147],"adversary":[148],"reconstruct":[151],"while":[154,186],"semantics":[161],"reduce":[163],"reconstructable":[164],"Empirical":[166],"evaluations":[167],"multiple":[169],"families":[171],"benchmarks":[174],"show":[175],"consistently":[178],"reduces":[179],"reconstruction-based":[180],"attack":[183],"success":[184],"rates":[185],"maintaining":[187],"competitive":[188],"task":[189],"performance":[190],"compared":[191],"standard":[193],"KV-sharing":[194],"baselines.":[195]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-23T00:00:00"}