MASTER: Multi-Agent Security Through Exploration of Roles and Topological Structures -- A Comprehensive Framework
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
Large Language Models (LLMs)-based Multi-Agent Systems (MAS) exhibit remarkable problem-solving and task planning capabilities across diverse domains due to their specialized agentic roles and collaborative interactions. However, this also amplifies the severity of security risks under MAS attacks. To address this, we introduce MASTER, a novel security research framework for MAS, focusing on diverse Role configurations and Topological structures across various scenarios. MASTER offers an automated construction process for different MAS setups and an information-flow-based interaction paradigm. To tackle MAS security challenges in varied scenarios, we design a scenario-adaptive, extensible attack strategy utilizing role and topological information, which dynamically allocates targeted, domain-specific attack tasks for collaborative agent execution. Our experiments demonstrate that such an attack, leveraging role and topological information, exhibits significant destructive potential across most models. Additionally, we propose corresponding defense strategies, substantially enhancing MAS resilience across diverse scenarios. We anticipate that our framework and findings will provide valuable insights for future research into MAS security challenges.
Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 31 of its 46 references that are in the map. First posted on arXiv 24 May 2025.
Builds on
31 of 46 references.
Closest ancestors · 6
Same direction, newest first
- 2025AgentSafe: Safeguarding Large Language Model-based Multi-agent Systems via Hierarchical Data Management6 Mar
- 2024FATS: A Prompt Injection Attack Utilizing Feign Security Agents with Deceptive Few-shots Learning11 Oct
- 2024Flooding Spread of Manipulated Knowledge in LLM-Based Multi-Agent Communities10 Jul
- 2024Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast13 Feb
- 2024PsySafe: A Comprehensive Framework for Psychological-based Attack, Defense, and Evaluation of Multi-agent System Safety22 Jan
- 2023Evil Geniuses: Delving into the Safety of LLM-based Agents20 Nov
Other references · 25
- 2023Efficient Memory Management for Large Language Model Serving with PagedAttentioncited by 5,944
- 2023A Survey on Large Language Model based Autonomous Agentscited by 2,242
- 2023ToolLLM: Facilitating Large Language Models to Master 16000+ Real-world APIscited by 1,947
- 2023Improving Factuality and Reasoning in Language Models through Multiagent Debatecited by 1,784
- 2023The Rise and Potential of Large Language Model Based Agents: A Surveycited by 1,439
- 2023CAMEL: Communicative Agents for "Mind" Exploration of Large Language Model Societycited by 1,395
- 2023Encouraging Divergent Thinking in Large Language Models through Multi-Agent Debatecited by 1,011
- 2023ViperGPT: Visual Inference via Python Execution for Reasoningcited by 603
- 2023AgentVerse: Facilitating Multi-Agent Collaboration and Exploring Emergent Behaviorscited by 598
- 2022Using Large Language Models to Simulate Multiple Humans and Replicate Human Subject Studiescited by 515
- 2023DeepInception: Hypnotize Large Language Model to Be Jailbreakercited by 367
- 2023Multi-Agent Collaboration: Harnessing the Power of Intelligent LLM Agentscited by 333
13 more
- 2023Exploring Large Language Models for Communication Games: An Empirical Study on Werewolfcited by 241
- 2023Exploring Collaboration Mechanisms for LLM Agents: A Social Psychology Viewcited by 222
- 2023AutoAgents: A Framework for Automatic Agent Generationcited by 216
- 2023War and Peace (WarAgent): Large Language Model-based Multi-Agent Simulation of World Warscited by 145
- 2024Simulating Classroom Education with LLM-Empowered Agentscited by 127
- 2023Avalon's Game of Thoughts: Battle Against Deception through Recursive Contemplationcited by 104
- 2024LLM Discussion: Enhancing the Creativity of Large Language Models via Discussion Framework and Role-Playcited by 66
- 2024MultiAgent Collaboration Attack: Investigating Adversarial Attacks in Large Language Model Collaborations via Debatecited by 56
- 2024Large Language Model for Participatory Urban Planningcited by 40
- 2025Multi-Agent Security Tax: Trading Off Security and Collaboration Capabilities in Multi-Agent Systemscited by 27
- 2025EduPlanner: LLM-Based Multi-Agent Systems for Customized and Intelligent Instructional Designcited by 18
- 2024AI-Driven Virtual Teacher for Enhanced Educational Efficiency: Leveraging Large Pretrain Models for Autonomous Error Analysis and Correctioncited by 12
- 2024Playing Language Game with LLMs Leads to Jailbreakingcited by 11
Built on by
Citing papers per year: 2026: 6.
6 papers.
- 2026Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluationcited by 7
- 2026Architecture Matters for Multi-Agent Securitycited by 3
- 2026Smarter Saboteurs, Better Fixers: Scaling & Security in Linear Multi-Agent Workflowscited by 2
- 2026When Agents Go Rogue: Activation-Based Detection of Malicious Behaviors in Multi-Agent Systemscited by 1
- 2026Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivitycited by 0
- 2026WebMCP-Phalanx: Enforcing and Characterizing Trust Boundaries for Browser-Integrated LLM Agentscited by 0
- 2026WebMCP-Phalanx: Enforcing and Characterizing Trust Boundaries for Browser-Integrated LLM Agents25 Aug 2026
- 2026Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity4 Aug 2026
- 2026When Agents Go Rogue: Activation-Based Detection of Malicious Behaviors in Multi-Agent Systems7 Jul 2026
- 2026Smarter Saboteurs, Better Fixers: Scaling & Security in Linear Multi-Agent Workflows10 Jun 2026
- 2026Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation9 Jun 2026
- 2026Architecture Matters for Multi-Agent Security25 Apr 2026
Similar, not cited
Close in wording, no citation either way
- 2026SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems
- 2024AgentMonitor: A Plug-and-Play Framework for Predictive and Secure Multi-Agent Systems
- 2025Seven Security Challenges in Cross-domain Multi-agent LLM Systems
- 2026Security Considerations for Multi-agent Systems
- 2025Comprehensive Vulnerability Analysis is Necessary for Trustworthy LLM-MAS
- 2025Extending the OWASP Multi-Agentic System Threat Modeling Guide: Insights from Multi-Agent Security Research
- 2025Terrarium: Revisiting the Blackboard for Multi-Agent Safety, Privacy, and Security Studies
- 2026From Monoliths to Swarms: A Study of Attack Surface Evolution in the Transition to Multi-Agent Web Systems