arXiv (Computer Science - Cryptography and Security) • 2h
The CoopGuard Framework: Mitigating Multi-Turn Decomposition Attacks in LLMs
Traditional LLM security relies on stateless, single-turn prompt inspection, which fails against advanced multi-turn decomposition attacks. These adversaries fragment prohibited intent into a sequence of benign-looking sub-tasks to circumvent safety filters. The CoopGuard framework addresses this vulnerability by transitioning from reactive filtering to a proactive, stateful cooperative multi-agent architecture. By utilizing specialized agents for pacing, ambiguity, and forensics, the system tracks conversational context to identify evolving malicious patterns, significantly increasing the economic and computational cost for attackers while providing high-fidelity defense through active misdirection.