PeerGuard: Defending Multi-Agent Systems Against Backdoor Attacks Through Mutual Reasoning
On the map: LLM reasoning → Reasoning for agents, planning and code
also in 2 more
Abstract (arXiv)
Multi-agent systems leverage advanced AI models as autonomous agents that interact, cooperate, or compete to complete complex tasks across applications such as robotics and traffic management. Despite their growing importance, safety in multi-agent systems remains largely underexplored, with most research focusing on single AI models rather than interacting agents. This work investigates backdoor vulnerabilities in multi-agent systems and proposes a defense mechanism based on agent interactions. By leveraging reasoning abilities, each agent evaluates responses from others to detect illogical reasoning processes, which indicate poisoned agents. Experiments on LLM-based multi-agent systems, including ChatGPT series and Llama 3, demonstrate the effectiveness of the proposed method, achieving high accuracy in identifying poisoned agents while minimizing false positives on clean agents. We believe this work provides insights into multi-agent system safety and contributes to the development of robust, trustworthy AI interactions.
Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 0 of its 36 references that are in the map. First posted on arXiv 16 May 2025.
Builds on
0 of 36 references.
No references here yet.
Built on by
Citing papers per year: 2025: 4; 2026: 5.
9 papers.
- 2025A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasurescited by 54
- 2025Web Fraud Attacks Against LLM-Driven Multi-Agent Systemscited by 8
- 2025Evo-MARL: Co-Evolutionary Multi-Agent Reinforcement Learning for Internalized Safetycited by 4
- 2025AdvEvo-MARL: Shaping Internalized Safety through Adversarial Co-Evolution in Multi-Agent Reinforcement Learningcited by 3
- 2026When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systemscited by 2
- 2026AutoRAS: Learning Robust Agentic Systems with Primitive Representationscited by 1
- 2026BRA-Audit: Budgeted Runtime Auditing for LLM Multi-Agent Systems via Cumulative-Exposure Audit-Point Placementcited by 1
- 2026SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systemscited by 1
- 2026One Axis, No Brake: Self-Knowledge Limits the Filtering of Harmful Peer Conformity in LLMscited by 1
- 2026SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems1 Sep 2026
- 2026BRA-Audit: Budgeted Runtime Auditing for LLM Multi-Agent Systems via Cumulative-Exposure Audit-Point Placement2 Aug 2026
- 2026One Axis, No Brake: Self-Knowledge Limits the Filtering of Harmful Peer Conformity in LLMs17 Jul 2026
- 2026When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems13 Jul 2026
- 2026AutoRAS: Learning Robust Agentic Systems with Primitive Representations19 Jun 2026
- 2025AdvEvo-MARL: Shaping Internalized Safety through Adversarial Co-Evolution in Multi-Agent Reinforcement Learning2 Oct 2025
- 2025Web Fraud Attacks Against LLM-Driven Multi-Agent Systems1 Sep 2025
- 2025Evo-MARL: Co-Evolutionary Multi-Agent Reinforcement Learning for Internalized Safety5 Aug 2025
- 2025A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures24 Jun 2025
Similar, not cited
Close in wording, no citation either way
- 2025Collaborative Shadows: Distributed Backdoor Attacks in LLM-Based Multi-Agent Systems
- 2026Early Detection of Distributed Backdoors in Multi-Agent LLM Systems: A Characterization Study
- 2025The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise
- 2026Architecting Secure AI Agents: Perspectives on System-Level Defenses Against Indirect Prompt Injection Attacks
- 2024AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases
- 2025BlindGuard: Safeguarding LLM-based Multi-Agent Systems under Unknown Attacks
- 2026Rethinking Agent Security as a Networking Problem
- 2026GroupGuard: A Framework for Modeling and Defending Collusive Attacks in Multi-Agent Systems