{"total":46,"rows":[{"id":"2406.12814","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","created":"2024-06-18","cited_by_count":120,"area":"agents"},{"id":"2407.20859","title":"Breaking Agents: Compromising Autonomous LLM Agents Through Malfunction Amplification","created":"2024-07-30","cited_by_count":81,"area":"agents"},{"id":"2410.14923","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","created":"2024-10-19","cited_by_count":68,"area":"agents"},{"id":"2508.19461","title":"Reliable Weak-to-Strong Monitoring of LLM Agents","created":"2025-08-26","cited_by_count":31,"area":"agents"},{"id":"2402.14859","title":"The Wolf Within: Covert Injection of Malice into MLLM Societies via an MLLM Operative","created":"2024-02-20","cited_by_count":21,"area":"agents"},{"id":"2509.21834","title":"RobustFlow: Towards Robust Agentic Workflow Generation","created":"2025-09-26","cited_by_count":20,"area":"agents"},{"id":"2603.22868","title":"Agent-Sentry: Bounding LLM Agents via Execution Provenance","created":"2026-03-24","cited_by_count":15,"area":"agents"},{"id":"2512.01295","title":"Systems Security Foundations for Agentic Computing","created":"2025-12-01","cited_by_count":13,"area":"agents"},{"id":"2503.10809","title":"MIP against Agent: Malicious Image Patches Hijacking Multimodal OS Agents","created":"2025-03-13","cited_by_count":12,"area":"agents"},{"id":"2604.23338","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","created":"2026-04-25","cited_by_count":11,"area":"agents"},{"id":"2405.20770","title":"Large Language Model Sentinel: LLM Agent for Adversarial Purification","created":"2024-05-24","cited_by_count":10,"area":"agents"},{"id":"2602.02455","title":"Drift-Bench: Diagnosing Cooperative Breakdowns in LLM Agents under Input Faults via Multi-Turn Interaction","created":"2026-02-02","cited_by_count":9,"area":"agents"},{"id":"2505.18397","title":"An Outlook on the Opportunities and Challenges of Multi-Agent AI Systems","created":"2025-05-23","cited_by_count":8,"area":"agents"},{"id":"2602.08401","title":"On Protecting Agentic Systems' Intellectual Property via Watermarking","created":"2026-02-09","cited_by_count":8,"area":"agents"},{"id":"2409.11393","title":"LLM-Agent-UMF: LLM-based Agent Unified Modeling Framework for Seamless Design of Multi Active/Passive Core-Agent Architectures","created":"2024-09-17","cited_by_count":5,"area":"agents"},{"id":"2510.13825","title":"A2AS: Agentic AI Runtime Security and Self-Defense","created":"2025-10-08","cited_by_count":5,"area":"agents"},{"id":"2604.16966","title":"Visual Inception: Compromising Long-term Planning in Agentic Recommenders via Multimodal Memory Poisoning","created":"2026-04-18","cited_by_count":5,"area":"agents"},{"id":"2502.16750","title":"Guardians of the Agentic System: Preventing Many Shots Jailbreak with Agentic System","created":"2025-02-23","cited_by_count":4,"area":"agents"},{"id":"2509.22502","title":"InfiAgent: Self-Evolving Pyramid Agent Framework for Infinite Scenarios","created":"2025-09-26","cited_by_count":4,"area":"agents"},{"id":"2510.10472","title":"FML-bench: Benchmarking Machine Learning Agents for Scientific Research","created":"2025-10-12","cited_by_count":4,"area":"agents"},{"id":"2508.17674","title":"Attacking LLMs and AI Agents: Advertisement Embedding Attacks Against Large Language Models","created":"2025-08-25","cited_by_count":3,"area":"agents"},{"id":"2603.23791","title":"The Cognitive Firewall:Securing Browser Based AI Agents Against Indirect Prompt Injection Via Hybrid Edge Cloud Defense","created":"2026-03-24","cited_by_count":3,"area":"agents"},{"id":"2604.08005","title":"Preference Redirection via Attention Concentration: An Attack on Computer Use Agents","created":"2026-04-09","cited_by_count":3,"area":"agents"},{"id":"2504.03185","title":"Learning Natural Language Constraints for Safe Reinforcement Learning of Language Agents","created":"2025-04-04","cited_by_count":2,"area":"agents"},{"id":"2511.19536","title":"AttackPilot: Autonomous Inference Attacks Against ML Services With LLM-Based Agents","created":"2025-11-24","cited_by_count":2,"area":"agents"},{"id":"2602.04431","title":"MaMa: A Game-Theoretic Approach for Designing Safe Agentic Systems","created":"2026-02-04","cited_by_count":2,"area":"agents"},{"id":"2607.15657","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","created":"2026-07-17","cited_by_count":2,"area":"agents"},{"id":"2209.02167","title":"Red Teaming with Mind Reading: White-Box Adversarial Policies Against RL Agents","created":"2022-09-05","cited_by_count":1,"area":"agents"},{"id":"2412.08014","title":"MAGIC: Mastering Physical Adversarial Generation in Context through Collaborative LLM Agents","created":"2024-12-11","cited_by_count":1,"area":"agents"},{"id":"2512.20986","title":"AegisAgent: An Autonomous Defense Agent Against Prompt Injection Attacks in LLM-HARs","created":"2025-12-24","cited_by_count":1,"area":"agents"},{"id":"2601.22352","title":"Recoverability Has a Law: The ERR Measure for Tool-Augmented Agents","created":"2026-01-29","cited_by_count":1,"area":"agents"},{"id":"2603.04378","title":"Robustness of Agentic AI Systems via Adversarially-Aligned Jacobian Regularization","created":"2026-03-04","cited_by_count":1,"area":"agents"},{"id":"2605.03159","title":"Learning Correct Behavior from Examples: Validating Sequential Execution in Autonomous Agents","created":"2026-05-04","cited_by_count":1,"area":"agents"},{"id":"2605.04019","title":"Redefining AI Red Teaming in the Agentic Era: From Weeks to Hours","created":"2026-05-05","cited_by_count":1,"area":"agents"},{"id":"2605.09822","title":"Oracle Poisoning: Corrupting Knowledge Graphs to Weaponise AI Agent Reasoning","created":"2026-05-10","cited_by_count":1,"area":"agents"},{"id":"2606.23277","title":"GIF: Locally Sound Geometric Information Flow Control for LLMs","created":"2026-06-22","cited_by_count":1,"area":"agents"},{"id":"2607.07379","title":"Physics-Audited Agentic Discovery in Scientific Machine Learning","created":"2026-07-08","cited_by_count":1,"area":"agents"},{"id":"2609.30861","title":"SkillEvoReg: Regularizing Agent Skill Evolution Against Overfitting","created":"2026-09-25","cited_by_count":1,"area":"agents"},{"id":"2505.23803","title":"MultiPhishGuard: An Explainable and Adaptive Multi-Agent LLM System for Phishing Email Detection","created":"2025-05-26","cited_by_count":0,"area":"agents"},{"id":"2509.21129","title":"EvoMail: Self-Evolving Cognitive Agents for Adaptive Spam and Phishing Email Defense","created":"2025-09-25","cited_by_count":0,"area":"agents"},{"id":"2511.09178","title":"Perspectives on a Reliability Monitoring Framework for Agentic AI Systems","created":"2025-11-12","cited_by_count":0,"area":"agents"},{"id":"2603.07848","title":"Intentional Deception as Controllable Capability in LLM Agents","created":"2026-03-08","cited_by_count":0,"area":"agents"},{"id":"2607.13411","title":"Evaluating Frontier AI Agents as Autonomous Clinical Security Auditors","created":"2026-07-15","cited_by_count":0,"area":"agents"},{"id":"2607.15246","title":"ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors","created":"2026-07-16","cited_by_count":0,"area":"agents"},{"id":"2608.16806","title":"Breaking Planner Integrity Boundary: Enviroment State-Text Injection Attack on LLM-Driven Embodied Agents","created":"2026-08-17","cited_by_count":0,"area":"agents"},{"id":"2609.13731","title":"Trustworthy Agentic AI: A Comprehensive Cybersecurity and Systems Survey on Threat Landscapes, Defense Architectures, and Open Challenges","created":"2026-09-12","cited_by_count":0,"area":"agents"}],"next_cursor":null}