mlsanityData to 14 Oct 2026

MASTER: Multi-Agent Security Through Exploration of Roles and Topological Structures -- A Comprehensive Framework

arXiv 2505.18572 ↗First posted 24 May 2025cs.MA cs.AIcited by 6

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

Large Language Models (LLMs)-based Multi-Agent Systems (MAS) exhibit remarkable problem-solving and task planning capabilities across diverse domains due to their specialized agentic roles and collaborative interactions. However, this also amplifies the severity of security risks under MAS attacks. To address this, we introduce MASTER, a novel security research framework for MAS, focusing on diverse Role configurations and Topological structures across various scenarios. MASTER offers an automated construction process for different MAS setups and an information-flow-based interaction paradigm. To tackle MAS security challenges in varied scenarios, we design a scenario-adaptive, extensible attack strategy utilizing role and topological information, which dynamically allocates targeted, domain-specific attack tasks for collaborative agent execution. Our experiments demonstrate that such an attack, leveraging role and topological information, exhibits significant destructive potential across most models. Additionally, we propose corresponding defense strategies, substantially enhancing MAS resilience across diverse scenarios. We anticipate that our framework and findings will provide valuable insights for future research into MAS security challenges.

Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 31 of its 46 references that are in the map. First posted on arXiv 24 May 2025.

Builds on

31 of 46 references.

Closest ancestors · 6

Same direction, newest first

  1. 2025AgentSafe: Safeguarding Large Language Model-based Multi-agent Systems via Hierarchical Data Management6 Mar
  2. 2024FATS: A Prompt Injection Attack Utilizing Feign Security Agents with Deceptive Few-shots Learning11 Oct
  3. 2024Flooding Spread of Manipulated Knowledge in LLM-Based Multi-Agent Communities10 Jul
  4. 2024Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast13 Feb
  5. 2024PsySafe: A Comprehensive Framework for Psychological-based Attack, Defense, and Evaluation of Multi-agent System Safety22 Jan
  6. 2023Evil Geniuses: Delving into the Safety of LLM-based Agents20 Nov

Other references · 25

  1. 2023Efficient Memory Management for Large Language Model Serving with PagedAttentioncited by 5,944
  2. 2023A Survey on Large Language Model based Autonomous Agentscited by 2,242
  3. 2023ToolLLM: Facilitating Large Language Models to Master 16000+ Real-world APIscited by 1,947
  4. 2023Improving Factuality and Reasoning in Language Models through Multiagent Debatecited by 1,784
  5. 2023The Rise and Potential of Large Language Model Based Agents: A Surveycited by 1,439
  6. 2023CAMEL: Communicative Agents for "Mind" Exploration of Large Language Model Societycited by 1,395
  7. 2023Encouraging Divergent Thinking in Large Language Models through Multi-Agent Debatecited by 1,011
  8. 2023ViperGPT: Visual Inference via Python Execution for Reasoningcited by 603
  9. 2023AgentVerse: Facilitating Multi-Agent Collaboration and Exploring Emergent Behaviorscited by 598
  10. 2022Using Large Language Models to Simulate Multiple Humans and Replicate Human Subject Studiescited by 515
  11. 2023DeepInception: Hypnotize Large Language Model to Be Jailbreakercited by 367
  12. 2023Multi-Agent Collaboration: Harnessing the Power of Intelligent LLM Agentscited by 333
13 more
  1. 2023Exploring Large Language Models for Communication Games: An Empirical Study on Werewolfcited by 241
  2. 2023Exploring Collaboration Mechanisms for LLM Agents: A Social Psychology Viewcited by 222
  3. 2023AutoAgents: A Framework for Automatic Agent Generationcited by 216
  4. 2023War and Peace (WarAgent): Large Language Model-based Multi-Agent Simulation of World Warscited by 145
  5. 2024Simulating Classroom Education with LLM-Empowered Agentscited by 127
  6. 2023Avalon's Game of Thoughts: Battle Against Deception through Recursive Contemplationcited by 104
  7. 2024LLM Discussion: Enhancing the Creativity of Large Language Models via Discussion Framework and Role-Playcited by 66
  8. 2024MultiAgent Collaboration Attack: Investigating Adversarial Attacks in Large Language Model Collaborations via Debatecited by 56
  9. 2024Large Language Model for Participatory Urban Planningcited by 40
  10. 2025Multi-Agent Security Tax: Trading Off Security and Collaboration Capabilities in Multi-Agent Systemscited by 27
  11. 2025EduPlanner: LLM-Based Multi-Agent Systems for Customized and Intelligent Instructional Designcited by 18
  12. 2024AI-Driven Virtual Teacher for Enhanced Educational Efficiency: Leveraging Large Pretrain Models for Autonomous Error Analysis and Correctioncited by 12
  13. 2024Playing Language Game with LLMs Leads to Jailbreakingcited by 11

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 6.

6 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems
  2. 2024AgentMonitor: A Plug-and-Play Framework for Predictive and Secure Multi-Agent Systems
  3. 2025Seven Security Challenges in Cross-domain Multi-agent LLM Systems
  4. 2026Security Considerations for Multi-agent Systems
  5. 2025Comprehensive Vulnerability Analysis is Necessary for Trustworthy LLM-MAS
  6. 2025Extending the OWASP Multi-Agentic System Threat Modeling Guide: Insights from Multi-Agent Security Research
  7. 2025Terrarium: Revisiting the Blackboard for Multi-Agent Safety, Privacy, and Security Studies
  8. 2026From Monoliths to Swarms: A Study of Attack Surface Evolution in the Transition to Multi-Agent Web Systems