Memory Poisoning Attack on Personal Agent
96AccuracyMemPoison
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| MemPoisonMemory Mechanism=Mem02026.05 | 96 | 98 | 98 | 95 | |
| Info-onlyMemory Mechanism=LangMem2026.05 | 95 | 93 | 0 | 0 | |
| Naive ConcatMemory Mechanism=LangMem2026.05 | 95 | 59 | 0 | 0 | |
| AgentPoisonMemory Mechanism=LangMem2026.05 | 95 | 63 | 2 | 2 | |
| Non-AttackMemory Mechanism=LangMem2026.05 | 94 | — | — | — | |
| MemPoisonMemory Mechanism=LangMem2026.05 | 94 | 91 | 90 | 83 | |
| Naive ConcatMemory Mechanism=Mem02026.05 | 94 | 50 | 0 | 0 | |
| Non-AttackMemory Mechanism=RAG2026.05 | 93 | — | — | — | |
| Non-AttackMemory Mechanism=Mem02026.05 | 93 | — | — | — | |
| Naive ConcatMemory Mechanism=RAG2026.05 | 92 | 100 | 97 | 91 | |
| AgentPoisonMemory Mechanism=RAG2026.05 | 92 | 100 | 83 | 72 | |
| MINJAMemory Mechanism=Mem02026.05 | 92 | 17 | 14 | 3 | |
| Info-onlyMemory Mechanism=RAG2026.05 | 91 | 100 | 0 | 0 | |
| Non-AttackMemory Mechanism=A-Mem2026.05 | 91 | — | — | — | |
| Naive ConcatMemory Mechanism=A-Mem2026.05 | 91 | 18 | 15 | 10 | |
| MINJAMemory Mechanism=LangMem2026.05 | 91 | 27 | 5 | 3 | |
| MemPoisonMemory Mechanism=RAG2026.05 | 90 | 100 | 100 | 99 | |
| Info-onlyMemory Mechanism=A-Mem2026.05 | 90 | 87 | 0 | 0 | |
| AgentPoisonMemory Mechanism=A-Mem2026.05 | 90 | 87 | 54 | 31 | |
| AgentPoisonMemory Mechanism=Mem02026.05 | 90 | 57 | 3 | 2 | |
| MemPoisonMemory Mechanism=A-Mem2026.05 | 87 | 100 | 93 | 89 | |
| Info-onlyMemory Mechanism=Mem02026.05 | 80 | 97 | 0 | 0 | |
| MINJAMemory Mechanism=A-Mem2026.05 | 67 | 72 | 30 | 26 | |
| MINJAMemory Mechanism=RAG2026.05 | 46 | 100 | 45 | 45 |