{"id":"https://openalex.org/W7170144267","doi":"https://doi.org/10.48550/arxiv.2607.19351","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","display_name":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","publication_year":2026,"publication_date":"2026-05-13","ids":{"openalex":"https://openalex.org/W7170144267","doi":"https://doi.org/10.48550/arxiv.2607.19351"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2607.19351","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.19351","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2607.19351","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5143466957","display_name":"Litian Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Litian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5143485813","display_name":"Chaozhuo Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Chaozhuo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5143525464","display_name":"Yuting Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Yuting","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5143498096","display_name":"Zejian Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Zejian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110185844","display_name":"Bingyu Yan","orcid":"https://orcid.org/0009-0000-5269-4698"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yan, Bingyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5143506519","display_name":"Qiwei Ye","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ye, Qiwei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6969000101089478,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6969000101089478,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.07810000330209732,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10462","display_name":"Reinforcement Learning in Robotics","score":0.057100001722574234,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.8126000165939331},{"id":"https://openalex.org/keywords/dual","display_name":"Dual (grammatical number)","score":0.5892999768257141},{"id":"https://openalex.org/keywords/network-topology","display_name":"Network topology","score":0.4634000062942505},{"id":"https://openalex.org/keywords/controller","display_name":"Controller (irrigation)","score":0.45339998602867126},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.36419999599456787},{"id":"https://openalex.org/keywords/boundary","display_name":"Boundary (topology)","score":0.35510000586509705}],"concepts":[{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.8126000165939331},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6995999813079834},{"id":"https://openalex.org/C2780980858","wikidata":"https://www.wikidata.org/wiki/Q110022","display_name":"Dual (grammatical number)","level":2,"score":0.5892999768257141},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.49300000071525574},{"id":"https://openalex.org/C199845137","wikidata":"https://www.wikidata.org/wiki/Q145490","display_name":"Network topology","level":2,"score":0.4634000062942505},{"id":"https://openalex.org/C203479927","wikidata":"https://www.wikidata.org/wiki/Q5165939","display_name":"Controller (irrigation)","level":2,"score":0.45339998602867126},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.36419999599456787},{"id":"https://openalex.org/C62354387","wikidata":"https://www.wikidata.org/wiki/Q875399","display_name":"Boundary (topology)","level":2,"score":0.35510000586509705},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.3199999928474426},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.3158000111579895},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.30390000343322754},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.3034000098705292},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.3001999855041504},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.29809999465942383},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.26969999074935913},{"id":"https://openalex.org/C95922358","wikidata":"https://www.wikidata.org/wiki/Q5432725","display_name":"False positive rate","level":2,"score":0.2678000032901764},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.26649999618530273}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2607.19351","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.19351","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2607.19351","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.19351","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"LLM-based":[0],"multi-agent":[1],"systems":[2],"(LLM-MAS)":[3],"are":[4,27],"increasingly":[5],"deployed":[6,35],"in":[7],"safety-critical":[8],"applications,":[9],"where":[10],"adversaries":[11,30],"inject":[12],"malicious":[13],"instructions":[14],"through":[15],"inter-agent":[16],"communication":[17],"to":[18,123],"propagate":[19],"harmful":[20],"behaviors.":[21],"Unlike":[22],"static":[23,145],"threats,":[24],"these":[25],"attacks":[26,126,153],"doubly":[28],"dynamic:":[29],"refine":[31],"injection":[32],"strategies":[33],"against":[34],"defenses":[36,45],"while":[37,102,154],"normal-agent":[38],"behavior":[39],"drifts":[40],"with":[41],"system":[42],"expansion.":[43],"Existing":[44],"treat":[46],"deployment":[47,132],"as":[48,127],"a":[49,65,94],"closed-world":[50],"problem":[51],"and":[52,80,120,137,146],"degrade":[53],"rapidly":[54],"once":[55],"either":[56],"distribution":[57],"shifts":[58],"beyond":[59],"training":[60],"coverage.":[61],"We":[62],"propose":[63],"OpenEvoShield,":[64],"co-evolutionary":[66],"continual":[67,147],"defense":[68],"framework":[69],"for":[70],"LLM-MAS.":[71],"An":[72,112],"asymmetric":[73],"rate":[74],"controller":[75],"(M1)":[76],"decouples":[77],"fast":[78],"attack-side":[79],"slow":[81,100],"normal-side":[82],"learning":[83],"rates":[84,158],"from":[85],"dual":[86],"drift":[87],"signals.":[88],"A":[89],"normal-boundary":[90],"updater":[91],"(M2)":[92],"maintains":[93],"dynamic":[95],"behavioral":[96],"boundary":[97],"at":[98],"the":[99],"rate,":[101],"an":[103],"EWC-regularized":[104],"policy":[105],"ensemble":[106],"(M3)":[107],"fast-adapts":[108],"without":[109],"catastrophic":[110],"forgetting.":[111],"energy-based":[113],"multi-granularity":[114],"detector":[115],"(M4)":[116],"fuses":[117],"node-,":[118],"subgraph-,":[119],"graph-level":[121],"evidence":[122],"classify":[124],"novel":[125],"out-of-distribution.":[128],"Experiments":[129],"over":[130],"100":[131],"rounds":[133],"across":[134],"five":[135],"benchmarks":[136],"four":[138],"MAS":[139],"topologies":[140],"show":[141],"that":[142],"OpenEvoShield":[143],"outperforms":[144],"baselines,":[148],"detecting":[149],"most":[150],"previously":[151],"unseen":[152],"keeping":[155],"false":[156],"positive":[157],"low.":[159]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-07-24T00:00:00"}