Genesis: Evolving Attack Strategies for LLM Web Agent Red-Teaming

Zheng Zhang , Jiarui He , Yuchen Cai , Deheng Ye , Peilin Zhao , Ruili Feng , Hao Wang

🏛 Institutions: HKUST(GZ) , Tencent , SJTU , Alibaba Group
📅 Date: October 21, 2025
📑 Publisher: ICME 2026
💻 Env: Web
🔑 Keywords: safety attack prompt injection genetic algorithm red-teaming Genesis

TLDR

Genesis studies automated red-teaming for web agents by evolving attack strategies over repeated interactions instead of relying on fixed prompts or manually designed attacks. Its attacker-scorer-strategist loop builds and reuses a growing strategy library, yielding stronger adversarial injections across web tasks.

Open paper Code Report issue