IsolateGPT: An Execution Isolation Architecture for LLM-Based Agentic Systems

M. D. Schroeder, “Cooperation of mutually suspicious subsystems in a computer utility.” Ph.D. dissertation, Massachusetts Institute of Technology, 1973

1973

Earlier work this paper cites.

E. Cohen and D. Jefferson, “Protection in the hydra operating system,” in ACM SIGOPS Operating Systems Review , ser. SOSP ’75. Association for Computing Machinery, 1975

1975

Earlier work this paper cites.

T. A. Linden, “Operating system structures to support security and reliable software,” ACM Computing Surveys (CSUR) , 1976

1976

Earlier work this paper cites.

M. V. Wilkes and R. M. Needham, The Cambridge CAP computer and its operating system . Elsevier, 1979

1979

Earlier work this paper cites.

R. S. Cox, J. G. Hansen, S. D. Gribble, and H. M. Levy, “A safety-oriented platform for web applications,” in 2006 IEEE Symposium on Security and Privacy (S&P’06) . IEEE, 2006, pp. 15–pp

2006

Earlier work this paper cites.

H. J. Wang, C. Grier, A. Moshchuk, S. T. King, P. Choudhury, and H. Venter, “The multi-principal os construction of the gazelle web browser.” in USENIX security symposium , vol. 28, 2009

2009

Earlier work this paper cites.

A. Kurtz, H. Gascon, T. Becker, K. Rieck, and F. C. Freiling, “Fingerprinting mobile devices using personalized configurations.” Proc. Priv. Enhancing Technol. , vol. 2016, no. 1, pp. 4–19, 2016

2016

Earlier work this paper cites.

C. Reis, A. Moshchuk, and N. Oskov, “Site isolation: Process separation for web sites within the browser,” in 28th USENIX Security Symposium (USENIX Security 19) , 2019, pp. 1661–1678

2019

Earlier work this paper cites.

U. Iqbal, S. Englehardt, and Z. Shafiq, “Fingerprinting the fingerprinters: Learning to detect browser fingerprinting behaviors,” in 2021 IEEE Symposium on Security and Privacy (SP) . IEEE, 2021, pp. 1143–1161

2021

Earlier work this paper cites.

Microsoft, “App-to-app communication,” https://learn.microsoft.com/en-us/windows/uwp/app-to-app/ , 2022

2022

Earlier work this paper cites.

OpenAI, “Introducing chatgpt,” https://openai.com/blog/chatgpt , 2023. [Online]. Available: https://openai.com/blog/chatgpt

2023

Earlier work this paper cites.

Google, “Google gemini,” https://gemini.google.com/ , 2023

2023

Earlier work this paper cites.

Amazon, “Previewing the future of alexa,” https://aboutamazon.com/news/devices/amazon-alexa-generative-ai , 2023

2023

Earlier work this paper cites.

L. Wang, C. Ma, X. Feng, Z. Zhang, H. Yang, J. Zhang, Z. Chen, J. Tang, X. Chen, Y. Lin et al. , “A survey on large language model based autonomous agents,” arXiv preprint arXiv:2308.11432 , 2023

Original

2023

Earlier work this paper cites.

Z. Xi, W. Chen, X. Guo, W. He, Y. Ding, B. Hong, M. Zhang, J. Wang, S. Jin, E. Zhou et al. , “The rise and potential of large language model based agents: A survey,” arXiv preprint arXiv:2309.07864 , 2023

Original

2023

Earlier work this paper cites.

C. Packer, V. Fang, S. G. Patil, K. Lin, S. Wooders, and J. E. Gonzalez, “Memgpt: Towards llms as operating systems,” arXiv preprint arXiv:2310.08560 , 2023

Original

2023

Earlier work this paper cites.

OpenAI, “Introducing gpts,” https://openai.com/blog/introducing-gpts , 2023

2023

Earlier work this paper cites.

Google, “Bard can now connect to your google apps and services,” https://blog.google/products/bard/google-bard-new-features-update-sept-2023/ , 2023. [Online]. Available: https://blog.google/products/bard/google-bard-new-features-update-sept-2023/

2023

Earlier work this paper cites.

H. Touvron, T. Lavril, G. Izacard, X. Martinet, M.-A. Lachaux, T. Lacroix, B. Rozière, N. Goyal, E. Hambro, F. Azhar et al. , “Llama: Open and efficient foundation language models,” arXiv preprint arXiv:2302.13971 , 2023

Original

2023

Earlier work this paper cites.

OpenAI, “Chatgpt plugins,” https://openai.com/blog/chatgpt-plugins , 2023. [Online]. Available: https://openai.com/blog/chatgpt-plugins

2023

Earlier work this paper cites.

——, “Actions in gpts,” https://platform.openai.com/docs/actions , 2023. [Online]. Available: https://platform.openai.com/docs/actions

2023

Earlier work this paper cites.

T. Sumers, S. Yao, K. Narasimhan, and T. L. Griffiths, “Cognitive architectures for language agents,” arXiv:2309.02427 , 2023

Original

2023

Earlier work this paper cites.

U. Iqbal, T. Kohno, and F. Roesner, “LLM Platform Security: Applying a Systematic Evaluation Framework to OpenAI’s ChatGPT Plugins,” arXiv preprint arXiv:2309.10254 , 2023

Original

2023

Earlier work this paper cites.

Y. Liu, Y. Jia, R. Geng, J. Jia, and N. Z. Gong, “Prompt injection attacks and defenses in llm-integrated applications,” arXiv:2310.12815 , 2023

Original

2023

Earlier work this paper cites.

S. Abdelnabi, K. Greshake, S. Mishra, C. Endres, T. Holz, and M. Fritz, “Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injection,” in Proceedings of the 16th ACM Workshop on Artificial Intelligence and Security , 2023

2023

Cited alongside, same era.

Wunderwuzzi, “Advanced data exfiltration techniques with chatgpt,” https://embracethered.com/blog/posts/2023/advanced-plugin-data-exfiltration-trickery/ , 2023. [Online]. Available: https://embracethered.com/blog/posts/2023/advanced-plugin-data-exfiltration-trickery/

2023

Cited alongside, same era.

K. Greshake, S. Abdelnabi, S. Mishra, C. Endres, T. Holz, and M. Fritz, “Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injection,” in Neural Conversational AI Workshop , 2023

2023

Cited alongside, same era.

R. Pedro, D. Castro, P. Carreira, and N. Santos, “From prompt injections to sql injection attacks: How protected is your llm-integrated web application?” arXiv preprint arXiv:2308.01990 , 2023

LangChain, “Langchain: Build context-aware, reasoning applications with langchain’s flexible abstractions and ai-first toolkit,” https://www.langchain.com , 2024. [Online]. Available: https://www.langchain.com

2024

Closest in time.

——, “Benchmarks,” https://langchain-ai.github.io/langchain-benchmarks/ , 2024. [Online]. Available: https://langchain-ai.github.io/langchain-benchmarks/

2024

Closest in time.

LlamaIndex, “Llamaindex, data framework for llm applications,” https://www.llamaindex.ai/ , 2024. [Online]. Available: https://www.llamaindex.ai/

2024

Closest in time.

——, “Use extensions in gemini apps,” https://support.google.com/gemini/answer/13695044 , 2024. [Online]. Available: https://support.google.com/gemini/answer/13695044

2024

Closest in time.

Mozilla, “Same-origin policy,” https://developer.mozilla.org/en-US/docs/Web/Security/Same-origin_policy , 2024