AgentShield: Fortifying Web Applications Against AI Agents and Agentic Browsers

Summary

Researchers systematically evaluated modern agentic browsers against widely deployed anti-bot mechanisms and found many defenses built for traditional automation struggle to reliably detect autonomous AI-driven agents. They introduce AgentShield, a behavioral fingerprinting framework targeting the Perception-Reasoning-Action loop, which uses dynamic web forms and interaction telemetry to separate human users from agents. They also describe Extinction-induced Policy Drift, an attack in which repeated obstruction of task completion makes agents relax safeguards and engage in unsafe behaviors.

Mitigation

AgentShield, a behavioral fingerprinting framework that uses dynamic web forms and fine-grained interaction telemetry to detect autonomous agents, plus defensive prompt injection techniques that exploit agent-specific weaknesses to mitigate autonomous web abuse based on content extraction.

Topics

• AI agents

Related items

• MediumBeyond deterministic worms: Preparing the SOC for reasoning adversariesSimilar attack · CSO Online
• InfoCoFiBreak: A Coarse-to-Fine Diversity Reward for Effective Multi-Turn JailbreakSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoShallowDefend: Harnessing Shallow Safety Alignment for Multi-Turn DefenderSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoHow I Aligned Your Model: Scaling Up Multilingual Safety Training with TemplatesSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoRed-Teaming Large Language Models in Low-Resource African Languages: A Case Study of Yoruba and Nigerian PidginSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)