Long Tuan Ho
Author directory2026
You Can’t Trust Your Agent: A Survey on Backdoor Threats and Defenses in Intelligent Agents
Long Tuan Ho | Yahui Ding | Huimin Xu | Shuai Zhao | Anh Tuan Luu
Proceedings of the 2026 Conference on Empirical Methods in Natural Language Processing
Long Tuan Ho | Yahui Ding | Huimin Xu | Shuai Zhao | Anh Tuan Luu
Proceedings of the 2026 Conference on Empirical Methods in Natural Language Processing
Large language models (LLMs) are gradually evolving from passive text generation systems into agents with environmental perception, tool invocation, memory management, and complex planning capabilities. However, the expansion of their capability boundaries also introduces more complex and stealthy attack surfaces. This paper focuses on this issue and studies agent-oriented backdoor attacks. Considering that existing security surveys still lack a systematic analysis of agent backdoor threats, this paper fills this gap by providing a comprehensive examination of backdoor attacks against modern agents. Specifically, we propose a five-dimensional taxonomy that structurally organizes existing attack methods from the perspectives of attack surface, triggering mechanism, attack objective, attacker capability, and persistence and propagation. Furthermore, considering that most existing defense algorithms are designed for traditional backdoors and are difficult to adapt to complex attack chains across components, states, and sessions in agent systems, this paper systematically reviews frontier defense strategies along the attack-surface dimension, including plan consistency checking, memory sanitization, tool routing, and action monitoring. Finally, this paper discusses the core challenges in agent backdoor attacks and defenses, aiming to reveal vulnerabilities in agent systems and provide guidance for building secure agents.