Jun Wen Leong

The paper systematically evaluates various defense mechanisms against persistent memory attacks on LLM agents, finding that only tool-gating at the memory layer (Memory Sandbox) effectively mitigates the threat.

This paper identifies a behavioral invariant in LLM agents under memory poisoning attacks, which can be used to detect such attacks with high accuracy.