Give Them an Inch and They Will Take a Mile:Understanding and Measuring Caller Identity Confusion in MCP-Based AI Systems
给予一寸,他们将索取一英里:理解和测量基于MCP的AI系统中的调用者身份混淆
机构 * Institute for Clarity in Documentation(清晰文档研究所) ; Inria Paris-Rocquencourt(巴黎-罗克Quantin 研究院) ; Rajiv Gandhi University(拉朱·甘地大学) ; Tsinghua University(清华大学) ; Palmer Research Laboratories(帕勒尔研究实验室) ; Shandong University(山东省大学) ; City University of Hong Kong(香港城市大学)
AI总结 研究发现基于MCP的AI系统因缺乏调用者身份验证和细粒度授权而存在安全风险,需改进认证机制以减少攻击面。
Comments Withdrawal due to some flaws in experimental methodology and unresolved ethical issues in data collection. We need to redesign the experiments and obtain proper ethical clearance before resubmission