mlsanityData to 7 Oct 2026

PeerGuard: Defending Multi-Agent Systems Against Backdoor Attacks Through Mutual Reasoning

arXiv 2505.11642 ↗First posted 16 May 2025cs.MA cs.AI cs.LGcited by 9

On the map: LLM reasoning → Reasoning for agents, planning and code

also in 2 more
Abstract (arXiv)

Multi-agent systems leverage advanced AI models as autonomous agents that interact, cooperate, or compete to complete complex tasks across applications such as robotics and traffic management. Despite their growing importance, safety in multi-agent systems remains largely underexplored, with most research focusing on single AI models rather than interacting agents. This work investigates backdoor vulnerabilities in multi-agent systems and proposes a defense mechanism based on agent interactions. By leveraging reasoning abilities, each agent evaluates responses from others to detect illogical reasoning processes, which indicate poisoned agents. Experiments on LLM-based multi-agent systems, including ChatGPT series and Llama 3, demonstrate the effectiveness of the proposed method, achieving high accuracy in identifying poisoned agents while minimizing false positives on clean agents. We believe this work provides insights into multi-agent system safety and contributes to the development of robust, trustworthy AI interactions.

Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 0 of its 36 references that are in the map. First posted on arXiv 16 May 2025.

Builds on

0 of 36 references.

No references here yet.

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 4; 2026: 5.

9 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Collaborative Shadows: Distributed Backdoor Attacks in LLM-Based Multi-Agent Systems
  2. 2026Early Detection of Distributed Backdoors in Multi-Agent LLM Systems: A Characterization Study
  3. 2025The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise
  4. 2026Architecting Secure AI Agents: Perspectives on System-Level Defenses Against Indirect Prompt Injection Attacks
  5. 2024AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases
  6. 2025BlindGuard: Safeguarding LLM-based Multi-Agent Systems under Unknown Attacks
  7. 2026Rethinking Agent Security as a Networking Problem
  8. 2026GroupGuard: A Framework for Modeling and Defending Collusive Attacks in Multi-Agent Systems