Speculative Safety Honeypot: Toward Proactive Defense Against Multi-turn Agent Attacks

arXiv:2609.39549v1 Announce Type: cross Abstract: As Large Language Model (LLM) agents are increasingly deployed in complex environments, multi-turn interaction attacks have become a significant security challenge. Existing detection methods typically rely on historical context. However, this retrospective logic struggles to identify deep malicious intents that are split across turns to hide future risks. Inspired by speculative decoding, we propose the Speculative Safety Honeypot (SSH) framework. SSH uses a multi-agent simulation system composed of small LLMs to build an action-level speculate-and-verify workflow. In the speculation stage, SSH predicts future behaviors of the target agent and asynchronously builds a trajectory tree to expose potential risks in advance. In the verification stage, the system uses the target agent's real actions to calibrate and prune the trajectory tree, effectively reducing false positives. As a plug-and-playable component, SSH provides existing detectors with rich decision redundancy beyond the current interaction slice. By judging risk based on the evolution of the entire trajectory tree rather than a single point in time, the system reduces the reliance on the absolute precision of individual detection components. This improves the defense resilience and the warning lead-time of agent systems against complex temporal attacks.

Related

• SafeMCP: Proactive Power Regulation for LLM Agent Defense via Environment-Grounded Look-Ahead Reasoning
• Temporal Context Awareness: A Defense Framework Against Multi-turn Manipulation Attacks on Large Language Models
• D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting
• Quantifying LLM Safety Degradation Under Repeated Attacks Using Survival Analysis

Source: arXiv cs.AI | 2026-10-01