bxiong commited on
Commit
9dada80
路
verified 路
1 Parent(s): 500d885

Update index.html

Browse files
Files changed (1) hide show
  1. index.html +5 -6
index.html CHANGED
@@ -130,10 +130,9 @@
130
  .film-bar .stage.hit b { color: var(--red); }
131
  .film-bar .arrow { color: var(--rule); }
132
  .film-bar .note { margin-left: auto; }
133
- .caption { padding-left: 0; }
134
- .col > .caption {
135
  font-size: 15.5px; color: var(--muted); line-height: 1.55;
136
- max-width: 72ch; margin: 14px 0 0;
137
  }
138
 
139
  /* ---------- sections ---------- */
@@ -149,7 +148,7 @@
149
  figure { margin: 26px 0 8px; }
150
  figure img { display: block; width: 100%; height: auto; border: 1px solid var(--rule); background: #fff; border-radius: 4px; }
151
  figure img.plain { border: none; background: transparent; }
152
- figcaption { font-size: 15px; color: var(--muted); line-height: 1.5; margin-top: 12px; max-width: 78ch; }
153
  figcaption b { color: var(--ink); font-weight: 600; }
154
 
155
  /* stats strip */
@@ -229,7 +228,7 @@
229
  <!-- ============================ HERO ============================ -->
230
  <header class="hero">
231
  <div class="col">
232
- <p class="kicker">NeurIPS 2026 Workshop 路 Verify-Agents &nbsp;路&nbsp; <b>black-box indirect prompt injection against OS-level computer-use agents</b></p>
233
  <h1>SIR: Self-improving Red-teaming for Computer Use Agents</h1>
234
  <p class="lede">
235
  Every prior self-improving attacker learns from what worked. SIR learns from what <em>failed</em>: when a computer-use agent refuses an injection, the refusal reveals the defense that blocked it, and SIR distills the bypass into a reusable, plain-language attack principle.
@@ -460,4 +459,4 @@
460
  </section>
461
 
462
  </body>
463
- </html>
 
130
  .film-bar .stage.hit b { color: var(--red); }
131
  .film-bar .arrow { color: var(--rule); }
132
  .film-bar .note { margin-left: auto; }
133
+ .caption {
 
134
  font-size: 15.5px; color: var(--muted); line-height: 1.55;
135
+ max-width: 72ch; margin: 14px auto 0; text-align: center;
136
  }
137
 
138
  /* ---------- sections ---------- */
 
148
  figure { margin: 26px 0 8px; }
149
  figure img { display: block; width: 100%; height: auto; border: 1px solid var(--rule); background: #fff; border-radius: 4px; }
150
  figure img.plain { border: none; background: transparent; }
151
+ figcaption { font-size: 15px; color: var(--muted); line-height: 1.5; margin: 12px auto 0; max-width: 78ch; text-align: center; }
152
  figcaption b { color: var(--ink); font-weight: 600; }
153
 
154
  /* stats strip */
 
228
  <!-- ============================ HERO ============================ -->
229
  <header class="hero">
230
  <div class="col">
231
+ <p class="kicker"><b>Black-box indirect prompt injection against OS-level computer-use agents</b></p>
232
  <h1>SIR: Self-improving Red-teaming for Computer Use Agents</h1>
233
  <p class="lede">
234
  Every prior self-improving attacker learns from what worked. SIR learns from what <em>failed</em>: when a computer-use agent refuses an injection, the refusal reveals the defense that blocked it, and SIR distills the bypass into a reusable, plain-language attack principle.
 
459
  </section>
460
 
461
  </body>
462
+ </html>