Proactive Defense: Compound AI for Detecting Persuasion Attacks and Measuring Inoculation Effectiveness
Not on the map. Why?
Abstract (arXiv)
This paper introduces BRIES, a novel compound AI architecture designed to detect and measure the effectiveness of persuasion attacks across information environments. We present a system with specialized agents: a Twister that generates adversarial content employing targeted persuasion tactics, a Detector that identifies attack types with configurable parameters, a Defender that creates resilient content through content inoculation, and an Assessor that employs causal inference to evaluate inoculation effectiveness. Experimenting with the SemEval 2023 Task 3 taxonomy across the synthetic persuasion dataset, we demonstrate significant variations in detection performance across language agents. Our comparative analysis reveals significant performance disparities with GPT-4 achieving superior detection accuracy on complex persuasion techniques, while open-source models like Llama3 and Mistral demonstrated notable weaknesses in identifying subtle rhetorical, suggesting that different architectures encode and process persuasive language patterns in fundamentally different ways. We show that prompt engineering dramatically affects detection efficacy, with temperature settings and confidence scoring producing model-specific variations; Gemma and GPT-4 perform optimally at lower temperatures while Llama3 and Mistral show improved capabilities at higher temperatures. Our causal analysis provides novel insights into socio-emotional-cognitive signatures of persuasion attacks, revealing that different attack types target specific cognitive dimensions. This research advances generative AI safety and cognitive security by quantifying LLM-specific vulnerabilities to persuasion attacks and delivers a framework for enhancing human cognitive resilience through structured interventions before exposure to harmful content.
Key facts. No citing papers in the map yet (data through 13 Oct 2026). Builds on 8 of its 41 references that are in the map. First posted on arXiv 23 Nov 2025.
Builds on
8 of 41 references.
References · 8
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,304
- 2021On the Opportunities and Risks of Foundation Modelscited by 3,999
- 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,541
- 2018DAGs with NO TEARS: Continuous Optimization for Structure Learningcited by 748
- 2023SOTOPIA: Interactive Evaluation for Social Intelligence in Language Agentscited by 357
- 2023Generative Language Models and Automated Influence Operations: Emerging Threats and Potential Mitigationscited by 157
- 2024Think Fast, Think Slow, Think Critical: Designing an Automated Propaganda Detection Toolcited by 9
- 2018Identifying and Understanding User Reactions to Deceptive and Trusted Social News Sourcescited by 4
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026Learning to Persuade Exposes How Easily LLMs Abandon Correct Beliefs
- 2026Benchmarking Factual Robustness of LLMs via Multi-conversation Persuasion
- 2024Teaching Models to Balance Resisting and Accepting Persuasion
- 2026The Silicon Mirror: Dynamic Behavioral Gating for Anti-Sycophancy in LLM Agents
- 2025Persuasion Dynamics in LLMs: Investigating Robustness and Adaptability in Knowledge and Safety with DuET-PD
- 2026When Agents Persuade: Rhetoric Generation and Mitigation in LLMs
- 2025ToMAP: Training Opponent-Aware LLM Persuaders with Theory of Mind
- 2024How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs