{"total":17,"rows":[{"id":"2403.04783","title":"AutoDefense: Multi-Agent LLM Defense against Jailbreak Attacks","created":"2024-03-02","cited_by_count":145,"area":"agents"},{"id":"2311.11855","title":"Evil Geniuses: Delving into the Safety of LLM-based Agents","created":"2023-11-20","cited_by_count":106,"area":"agents"},{"id":"2401.11880","title":"PsySafe: A Comprehensive Framework for Psychological-based Attack, Defense, and Evaluation of Multi-agent System Safety","created":"2024-01-22","cited_by_count":80,"area":"agents"},{"id":"2410.12855","title":"JAILJUDGE: A Comprehensive Jailbreak Judge Benchmark with Multi-Agent Enhanced Explanation Evaluation Framework","created":"2024-10-11","cited_by_count":47,"area":"agents"},{"id":"2406.08689","title":"Security of AI Agents","created":"2024-06-12","cited_by_count":26,"area":"agents"},{"id":"2508.03125","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","created":"2025-08-05","cited_by_count":17,"area":"agents"},{"id":"2603.22868","title":"Agent-Sentry: Bounding LLM Agents via Execution Provenance","created":"2026-03-24","cited_by_count":15,"area":"agents"},{"id":"2506.15170","title":"From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystem","created":"2025-06-18","cited_by_count":12,"area":"agents"},{"id":"2504.20094","title":"Toward Safe and Human-Aligned Game Conversational Recommendation via Multi-Agent Decomposition","created":"2025-04-26","cited_by_count":9,"area":"agents"},{"id":"2601.04034","title":"HoneyTrap: Deceiving Large Language Model Attackers to Honeypot Traps with Resilient Multi-Agent Defense","created":"2026-01-07","cited_by_count":8,"area":"agents"},{"id":"2512.04785","title":"ASTRIDE: A Security Threat Modeling Platform for Agentic-AI Applications","created":"2025-12-04","cited_by_count":7,"area":"agents"},{"id":"2505.17735","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","created":"2025-05-23","cited_by_count":6,"area":"agents"},{"id":"2604.09747","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","created":"2026-04-10","cited_by_count":5,"area":"agents"},{"id":"2602.13234","title":"Stay in Character, Stay Safe: Dual-Cycle Adversarial Self-Evolution for Safety Role-Playing Agents","created":"2026-01-29","cited_by_count":2,"area":"agents"},{"id":"2601.19174","title":"SHIELD: An Auto-Healing Agentic Defense Framework for LLM Resource Exhaustion Attacks","created":"2026-01-27","cited_by_count":1,"area":"agents"},{"id":"2605.30454","title":"The Surface You Test Is Not the Surface That Breaks","created":"2026-05-28","cited_by_count":0,"area":"agents"},{"id":"2608.00134","title":"Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks","created":"2026-07-31","cited_by_count":0,"area":"agents"}],"next_cursor":null}