{"total":26,"rows":[{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2311.11797","title":"Igniting Language Intelligence: The Hitchhiker's Guide From Chain-of-Thought Reasoning to Language Agents","created":"2023-11-20","cited_by_count":72,"area":"lr"},{"id":"2504.17704","title":"Safety in Large Reasoning Models: A Survey","created":"2025-04-24","cited_by_count":64,"area":"lr"},{"id":"2505.05849","title":"AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents","created":"2025-05-09","cited_by_count":42,"area":"lr"},{"id":"2503.01908","title":"UDora: A Unified Red Teaming Framework against LLM Agents by Dynamically Hijacking Their Own Reasoning","created":"2025-02-28","cited_by_count":21,"area":"lr"},{"id":"2509.07604","title":"K2-Think: A Parameter-Efficient Reasoning System","created":"2025-09-09","cited_by_count":11,"area":"lr"},{"id":"2605.11039","title":"The Granularity Mismatch in Agent Security: Argument-Level Provenance Solves Enforcement and Isolates the LLM Reasoning Bottleneck","created":"2026-05-11","cited_by_count":11,"area":"lr"},{"id":"2603.00131","title":"Thought Virus: Viral Misalignment via Subliminal Prompting in Multi-Agent Systems","created":"2026-02-23","cited_by_count":9,"area":"lr"},{"id":"2505.14585","title":"Context Reasoner: Incentivizing Reasoning Capability for Contextualized Privacy and Safety Compliance via Reinforcement Learning","created":"2025-05-20","cited_by_count":8,"area":"lr"},{"id":"2505.20630","title":"SV-TrustEval-C: Evaluating Structure and Semantic Reasoning in Large Language Models for Source Code Vulnerability Analysis","created":"2025-05-27","cited_by_count":8,"area":"lr"},{"id":"2511.10714","title":"BadThink: Triggered Overthinking Attacks on Chain-of-Thought Reasoning in Large Language Models","created":"2025-11-13","cited_by_count":8,"area":"lr"},{"id":"2603.03205","title":"Learning When to Act or Refuse: Guarding Agentic Reasoning Models for Safe Multi-Step Tool Use","created":"2026-03-03","cited_by_count":8,"area":"lr"},{"id":"2601.15495","title":"Tracking the Limits of Knowledge Propagation: How LLMs Fail at Multi-Step Reasoning with Conflicting Knowledge","created":"2026-01-21","cited_by_count":7,"area":"lr"},{"id":"2508.20737","title":"Rethinking Testing for LLM Applications: Characteristics, Challenges, and a Lightweight Interaction Protocol","created":"2025-08-28","cited_by_count":6,"area":"lr"},{"id":"2602.07470","title":"Are Reasoning LLMs Robust to Interventions on Their Chain-of-Thought?","created":"2026-02-07","cited_by_count":6,"area":"lr"},{"id":"2606.04425","title":"What If Prompt Injection Never Left? Rethinking Agent Security through Cross-Session Stored Prompt Injection","created":"2026-06-03","cited_by_count":3,"area":"lr"},{"id":"2509.22250","title":"Safety Compliance: Rethinking LLM Safety Reasoning through the Lens of Compliance","created":"2025-09-26","cited_by_count":2,"area":"lr"},{"id":"2510.16259","title":"Distractor Injection Attacks on Large Reasoning Models: Characterization and Defense","created":"2025-10-17","cited_by_count":2,"area":"lr"},{"id":"2602.01795","title":"RedVisor: Reasoning-Aware Prompt Injection Defense via Zero-Copy KV Cache Reuse","created":"2026-02-02","cited_by_count":2,"area":"lr"},{"id":"2511.12861","title":"From Perception to Reasoning: Deep Thinking Empowers Multimodal Large Language Models","created":"2025-11-17","cited_by_count":1,"area":"lr"},{"id":"2604.23270","title":"CAP-CoT: Cycle Adversarial Prompt for Improving Chain of Thoughts in LLM Reasoning","created":"2026-04-25","cited_by_count":1,"area":"lr"},{"id":"2608.05188","title":"Position: It's Time to Optimize LLMs for Self-Consistency","created":"2026-07-31","cited_by_count":1,"area":"lr"},{"id":"2508.15839","title":"CIA+TA Risk Assessment for AI Reasoning Vulnerabilities","created":"2025-08-19","cited_by_count":0,"area":"lr"},{"id":"2512.08169","title":"Information-Dense Reasoning for Efficient and Auditable Security Alert Triage","created":"2025-12-09","cited_by_count":0,"area":"lr"},{"id":"2604.02954","title":"LogicPoison: Logical Attacks on Graph Retrieval-Augmented Generation","created":"2026-04-03","cited_by_count":0,"area":"lr"},{"id":"2605.30686","title":"Depth-Dependent Indirect Prompt Injection in Tool-Calling ReAct Agents: Injection Depth, Payload Framing, and Turn-Budget Sensitivity","created":"2026-05-29","cited_by_count":0,"area":"lr"}],"next_cursor":null}