SentinelDB-X Causal Temporal Runtime Verification for Cumulative Semantic Attacks in LLM Database Agents
编号:128
访问权限:仅限参会人
更新:2026-11-10 16:51:17 浏览:15次
Online
摘要
LLM-driven database agents are able to build individually admissible queries, which breach disclosure, purpose, provenance, or delegated authority in a session. We introduce SentinelDB-X, a runtime verifier that switches the target of enforcement from a single query to a causal temporal execution trace. The verifier keeps a typed Causal Temporal Exposure Ledger, generates intent to executable policy state, preserves authority monotonicity across retrieved data and tools, and applies bounded counterfactual replay before high impact actions. Neural SQL risk and open world evidence support the decision but not for execution. In all source held out, unseen family, generated attack, tool mediated, and cumulative session regimes, SentinelDB-X achieves an overall F1 score of 92.6 percent, compared to 67.8 percent for the highest baseline F1 score at the query level. The cumulative F1 is reduced to 73.8 percent without temporal memory. The full system attains 0.92 Top 3 causal event recall, 0.87 attribution nDCG, and no hard policy violations on the encoded policy test set, while the median latency is 10.6ms on the local path and 18.4ms on the counterfactual path.
关键词
LLM database agents,,Cumulative Semantic Attacks,Runtime Verification,Data Provenance,Counterfactual Replay,Neuro-Symbolic Security
稿件作者
FIRAS TARIK JASIM
shivaji university
Kabir G Karade
shivaji university
Atheer Alaa Hammad Hammad+
shivaji university
发表评论