paper-with-me

홈 › Papers

Superplatforms Have to Attack AI Agents

2025-05-23 · Jianghao Lin, Jiachen Zhu, Zheli Zhou, Yunjia Xi, Weiwen Liu, Yong Yu, Weinan Zhang

Over the past decades, superplatforms, digital companies that integrate a vast range of third-party services and applications into a single, unified ecosystem, have built their fortunes on monopolizing user attention through targeted advertising and algorithmic content curation. Yet the emergence of AI agents driven by large language models (LLMs) threatens to upend this business model. Agents can not only free user attention with autonomy across diverse platforms and therefore bypass the user-attention-based monetization, but might also become the new entrance for digital traffic. Hence, we argue that superplatforms have to attack AI agents to defend their centralized control of digital traffic entrance. Specifically, we analyze the fundamental conflict between user-attention-based monetization and agent-driven autonomy through the lens of our gatekeeping theory. We show how AI agents can disintermediate superplatforms and potentially become the next dominant gatekeepers, thereby forming the urgent necessity for superplatforms to proactively constrain and attack AI agents. Moreover, we go through the potential technologies for superplatform-initiated attacks, covering a brand-new, unexplored technical area with unique challenges. We have to emphasize that, despite our position, this paper does not advocate for adversarial attacks by superplatforms on AI agents, but rather offers an envisioned trend to highlight the emerging tensions between superplatforms and AI agents. Our aim is to raise awareness and encourage critical discussion for collaborative solutions, prioritizing user interests and perserving the openness of digital ecosystems in the age of AI agents.

📄 PDF Abstract BibTeX arXiv:2505.17861

Code (0)

등록된 구현이 없습니다.

Methods 이 논문이 사용한 방법론

Softmax The Softmax output function transforms a previous layer's output into a vector of probabilities. It is commonly used for multiclass classification. Given an input vector $x$…
Attention 설명 없음

Similar Papers 제목 키워드 기반

Agent Data Injection Attacks are Realistic Threats to AI Agents

2026-07-06 · Woohyuk Choi, Juhee Kim, Taehyun Kang, Jihyeon Jeong 외 arxiv

AI agents act on behalf of user prompts, consuming external data and taking actions based on the agent context. Prior research on AI agent security has primarily focused on indirect prompt injection (IPI). Its most well-…

Adversarial Attacks on Cooperative Multi-agent Bandits

2023-11-03 · Jinhang Zuo, Zhiyao Zhang, Xuchuang Wang, Cheng Chen 외

Cooperative multi-agent multi-armed bandits (CMA2B) consider the collaborative efforts of multiple agents in a shared multi-armed bandit game. We study latent vulnerabilities exposed by this collaboration and consider ad…

Multi-Armed Bandits

Strategically-timed State-Observation Attacks on Deep Reinforcement Learning Agents

2021-06-18 · ICML Workshop AML 2021 7 · You Qiaoben, Xinning Zhou, Chengyang Ying, Jun Zhu

Deep reinforcement learning (DRL) policies are vulnerable to the adversarial attack on their observations, which may mislead real-world RL agents to catastrophic failures. Several works have shown the effectiveness of t…

Adversarial Attackcontinuous-controlContinuous ControlDeep Reinforcement Learning+3

Blackbox Attacks on Reinforcement Learning Agents Using Approximated Temporal Information

2019-09-06 · Yiren Zhao, Ilia Shumailov, Han Cui, Xitong Gao 외

Recent research on reinforcement learning (RL) has suggested that trained agents are vulnerable to maliciously crafted adversarial samples. In this work, we show how such samples can be generalised from White-box and Gre…

reinforcement-learningReinforcement LearningReinforcement Learning (RL)Time Series Analysis

WAInjectBench: Benchmarking Prompt Injection Detections for Web Agents

2025-10-01 · Yinuo Liu, Ruohan Xu, Xilong Wang, Yuqi Jia 외 arxiv

Multiple prompt injection attacks have been proposed against web agents. At the same time, various methods have been developed to detect general prompt injection attacks, but none have been systematically evaluated for w…