{"id":"https://openalex.org/W7164567010","doi":"https://doi.org/10.48550/arxiv.2606.12918","title":"MAStrike: Shapley-Guided Collusive Red-Teaming on Multi-Agent Systems","display_name":"MAStrike: Shapley-Guided Collusive Red-Teaming on Multi-Agent Systems","publication_year":2026,"publication_date":"2026-06-11","ids":{"openalex":"https://openalex.org/W7164567010","doi":"https://doi.org/10.48550/arxiv.2606.12918"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.12918","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.12918","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.12918","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5004007883","display_name":"Chejian Xu","orcid":"https://orcid.org/0009-0009-7598-639X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xu, Chejian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138518516","display_name":"Zhaorun Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Zhaorun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138541907","display_name":"Jingyang Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Jingyang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138531062","display_name":"Freddy Lecue","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lecue, Freddy","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109633381","display_name":"Avni Kothari","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kothari, Avni","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101755049","display_name":"Sarah Tan","orcid":"https://orcid.org/0000-0001-5453-4874"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tan, Sarah","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138515295","display_name":"Wenbo Guo","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Guo, Wenbo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5138505252","display_name":"Bo Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Bo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.18469999730587006,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.18469999730587006,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.1720000058412552,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.0714000016450882,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7759000062942505},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5098999738693237},{"id":"https://openalex.org/keywords/heuristic","display_name":"Heuristic","score":0.5097000002861023},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.40560001134872437},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.3831000030040741},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.36419999599456787},{"id":"https://openalex.org/keywords/shapley-value","display_name":"Shapley value","score":0.34439998865127563},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.3433000147342682},{"id":"https://openalex.org/keywords/multi-agent-system","display_name":"Multi-agent system","score":0.34209999442100525}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7759000062942505},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6887999773025513},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5098999738693237},{"id":"https://openalex.org/C173801870","wikidata":"https://www.wikidata.org/wiki/Q201413","display_name":"Heuristic","level":2,"score":0.5097000002861023},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.40560001134872437},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.3831000030040741},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.36419999599456787},{"id":"https://openalex.org/C199022921","wikidata":"https://www.wikidata.org/wiki/Q240046","display_name":"Shapley value","level":3,"score":0.34439998865127563},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.3433000147342682},{"id":"https://openalex.org/C41550386","wikidata":"https://www.wikidata.org/wiki/Q529909","display_name":"Multi-agent system","level":2,"score":0.34209999442100525},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.34150001406669617},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3264999985694885},{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.3255000114440918},{"id":"https://openalex.org/C199845137","wikidata":"https://www.wikidata.org/wiki/Q145490","display_name":"Network topology","level":2,"score":0.3208000063896179},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.31869998574256897},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.2874999940395355},{"id":"https://openalex.org/C29852176","wikidata":"https://www.wikidata.org/wiki/Q373338","display_name":"Critical infrastructure","level":2,"score":0.2800000011920929},{"id":"https://openalex.org/C202269582","wikidata":"https://www.wikidata.org/wiki/Q2644277","display_name":"Complementarity (molecular biology)","level":2,"score":0.2766999900341034},{"id":"https://openalex.org/C2778770139","wikidata":"https://www.wikidata.org/wiki/Q1966904","display_name":"Solver","level":2,"score":0.27410000562667847},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2711000144481659},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.2703999876976013},{"id":"https://openalex.org/C137635306","wikidata":"https://www.wikidata.org/wiki/Q182667","display_name":"Pareto principle","level":2,"score":0.2687999904155731},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.26809999346733093},{"id":"https://openalex.org/C94124525","wikidata":"https://www.wikidata.org/wiki/Q912550","display_name":"Categorization","level":2,"score":0.267300009727478},{"id":"https://openalex.org/C187191949","wikidata":"https://www.wikidata.org/wiki/Q1138496","display_name":"Profiling (computer programming)","level":2,"score":0.2621000111103058},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.25040000677108765},{"id":"https://openalex.org/C2776291640","wikidata":"https://www.wikidata.org/wiki/Q2912517","display_name":"Value (mathematics)","level":2,"score":0.2500999867916107}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.12918","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.12918","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.12918","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.12918","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Hierarchical":[0],"multi-agent":[1],"systems":[2],"(MAS)":[3],"are":[4,25,75,140,217],"rapidly":[5],"being":[6],"deployed":[7],"in":[8,99],"high-stakes":[9],"workflows":[10],"across":[11,28,182],"domains":[12],"such":[13,41],"as":[14,42,72],"finance":[15],"and":[16,23,45,63,81,132,165,172,178,204,213],"software":[17,176],"engineering.":[18],"In":[19],"these":[20],"systems,":[21],"safety":[22],"security":[24],"inherently":[26],"distributed":[27],"role-specialized":[29],"agents,":[30,209],"significantly":[31],"expanding":[32],"the":[33,104],"attack":[34],"surface,":[35],"particularly":[36],"under":[37,120],"coordinated":[38],"adversarial":[39,136,155],"behaviors":[40],"privilege":[43],"escalation":[44],"cross-agent":[46],"collusion.":[47],"Existing":[48],"red-teaming":[49,98,163],"approaches":[50],"for":[51,78,96,110],"MAS":[52,162,183],"remain":[53],"limited:":[54],"they":[55],"rely":[56],"on":[57,185],"heuristic":[58,194],"selection":[59],"of":[60],"target":[61],"agents":[62,74,84,152],"perturb":[64],"isolated":[65],"message":[66],"streams,":[67],"leaving":[68],"critical":[69,211],"questions":[70],"unanswered":[71],"which":[73],"most":[76],"responsible":[77],"system":[79,118],"safety,":[80],"how":[82],"compromised":[83],"can":[85],"coordinate":[86],"to":[87,117,150],"bypass":[88],"defenses.":[89],"We":[90,102,157],"propose":[91,103],"MAStrike,":[92],"a":[93,160],"closed-loop":[94],"framework":[95],"collusive":[97],"hierarchical":[100,170],"MAS.":[101],"first":[105],"agent-level":[106],"Shapley":[107,201],"value":[108,202],"analysis":[109,197],"MAS,":[111],"quantifying":[112],"each":[113],"agent's":[114],"marginal":[115],"contribution":[116],"robustness":[119],"task-specific":[121],"distributions.":[122],"GGuided":[123],"by":[124,219],"this":[125],"attribution,":[126],"MAStrike":[127,191],"identifies":[128],"vulnerable":[129],"agent":[130],"coalitions":[131],"generates":[133],"coordinated,":[134],"role-aware":[135],"manipulations.":[137],"These":[138],"attacks":[139],"iteratively":[141],"refined":[142],"through":[143],"structured":[144],"causal":[145],"diagnosis,":[146],"attributing":[147],"failure":[148],"cases":[149],"uncompromised":[151],"that":[153,190,216],"block":[154],"attempts.":[156],"further":[158,198],"build":[159],"comprehensive":[161],"benchmark":[164],"controllable":[166],"environments":[167],"spanning":[168],"diverse":[169],"topologies":[171],"domains,":[173],"including":[174],"finance,":[175],"engineering,":[177],"CRM.":[179],"Extensive":[180],"experiments":[181],"built":[184],"multiple":[186],"frontier":[187],"models":[188],"show":[189],"substantially":[192],"outperforms":[193],"baselines.":[195],"Our":[196],"uncovers":[199],"non-trivial":[200],"distributions":[203],"higher-order":[205],"interaction":[206],"structures":[207],"among":[208],"revealing":[210],"vulnerabilities":[212],"coordination":[214],"patterns":[215],"overlooked":[218],"prior":[220],"single-agent":[221],"or":[222],"template-based":[223],"methods.":[224]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-13T00:00:00"}