Genesis: Evolving Attack Strategies for LLM Web Agent Red-Teaming

Zheng Zhang, Jiarui He, Yuchen Cai, Deheng Ye, Peilin Zhao, Ruili Feng, Hao Wang

🏛 Institutions: HKUST(GZ), Tencent, SJTU, Alibaba Group
📅 Date: October 21, 2025
📑 Publisher: ICME 2026
💻 Env: Web
🔑 Keywords: safety attack prompt injection genetic algorithm red-teaming Genesis

TLDR

Genesis studies automated red-teaming for web agents by evolving attack strategies over repeated interactions instead of relying on fixed prompts or manually designed attacks. Its attacker-scorer-strategist loop builds and reuses a growing strategy library, yielding stronger adversarial injections across web tasks.

Open paper arXiv Edit on GitHub Report issue