Skip to content
InfoResearchPreprintLLM-specific

ATrust: Adaptive Trust Boundary Expansion for Securing LLM Agents

Published
Record updated
View JSON

Summary

ATrust is a defense for LLM agents that expands the trust boundary during runtime, starting from the user query as the root trust anchor and admitting task-essential external observations as new anchors. Evaluated on AgentDojo and AgentDyn with GPT-4o as the engine model, it reduces the attack success rate on AgentDyn from 37.80% to 4.37% while improving utility by 10.00%, outperforming AuthGraph by 12.33%.