The authors introduce Agent Cross-Layer Evidence (ACE), a corpus pairing prompts, tool schemas and model trajectories with kernel-level system-call traces from the same sessions.
Kernel traces improve detection of attacks against infrastructure-enabled AI agents
Across a paired corpus of agent sessions, syscall evidence exposed malicious behavior that application-layer telemetry could miss.
Big Tech
University of Georgia · Amazon Web Services
Research Digest··2 min read
King et al.
Why this paper
From Amazon Web Services and University of Georgia
In one line
Kernel-level syscall traces combined with application-layer telemetry improve detection of adversarial LLM agent attacks.
What we could check
- ·No code link found
- ·No weights link found
- ·No dataset link found
- ·No compute details found
- ·No stated limitations found
- ·No benchmark numbers found
Observed from the paper text and links we have. Absence here means we did not find it, not that it does not exist.
§