LATIDIA · Ciberseguridad

Una encuesta sobre la seguridad de la memoria a largo plazo en agentes de LLM: ataques, defensas y gobernanza en todo el ciclo de vida de la memoria

arXiv: 2604.16548v3Tipo de anuncio: reemplazar Resumen: La aparición de la memoria persistente de sesión cruzada grabable en los agentes LLM introduce un panorama de amenazas cualitativamente diferente de la seguridad centrada en la entrada convencional

La noticia

arXiv:2604.16548v3 Announce Type: replace Abstract: The emergence of writable, cross-session persistent memory in LLM agents introduces a qualitatively different threat landscape from conventional input-centric security concerns, characterized by three properties: persistence, statefulness, and propagation. To systematically characterize this landscape, we propose a Memory Lifecycle Framework that organizes attacks, defenses, and their cross-phase dependencies along two axes: six lifecycle phases (Write, Store, Retrieve, Execute, Share & Propagate, Forget & Rollback) and four security objectives (Integrity, Confidentiality, Availability, Governance). This analysis in turn exposes the need for formal security guarantees at the system level, motivating Verifiable Memory Governance (VMG), a framework of five architectural primitives that specifies what verifiable mechanisms a long-term-memory