{"total":67,"rows":[{"id":"2405.06823","title":"PLeak: Prompt Leaking Attacks against Large Language Model Applications","created":"2024-05-10","cited_by_count":127,"area":null},{"id":"2505.23643","title":"Securing AI Agents with Information-Flow Control","created":"2025-05-29","cited_by_count":121,"area":null},{"id":"2501.17070","title":"Contextual Agent Security: A Policy for Every Purpose","created":"2025-01-28","cited_by_count":59,"area":null},{"id":"2311.16153","title":"Identifying and Mitigating Vulnerabilities in LLM-Integrated Applications","created":"2023-11-07","cited_by_count":54,"area":null},{"id":"2505.18889","title":"Security Concerns for Large Language Models: A Survey","created":"2025-05-24","cited_by_count":29,"area":null},{"id":"2504.05408","title":"Frontier AI's Impact on the Cybersecurity Landscape","created":"2025-04-07","cited_by_count":21,"area":null},{"id":"2406.07954","title":"Dataset and Lessons Learned from the 2024 SaTML LLM Capture-the-Flag Competition","created":"2024-06-12","cited_by_count":20,"area":null},{"id":"2506.01333","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","created":"2025-06-02","cited_by_count":20,"area":null},{"id":"2508.19843","title":"SoK: Large Language Model Copyright Auditing via Fingerprinting","created":"2025-08-27","cited_by_count":15,"area":null},{"id":"2505.00976","title":"Attack and defense techniques in large language models: A survey and new perspectives","created":"2025-05-02","cited_by_count":14,"area":null},{"id":"2506.04202","title":"TracLLM: A Generic Framework for Attributing Long Context LLMs","created":"2025-06-04","cited_by_count":13,"area":null},{"id":"2601.10440","title":"AgentGuardian: Learning Access Control Policies to Govern AI Agent Behavior","created":"2026-01-15","cited_by_count":11,"area":null},{"id":"2402.19200","title":"PRSA: Prompt Stealing Attacks against Real-World Prompt Services","created":"2024-02-29","cited_by_count":10,"area":null},{"id":"2603.12230","title":"Security Considerations for Artificial Intelligence Agents","created":"2026-03-12","cited_by_count":8,"area":null},{"id":"2501.07927","title":"Gandalf the Red: Adaptive Security for LLMs","created":"2025-01-14","cited_by_count":7,"area":null},{"id":"2510.01529","title":"Bypassing Prompt Guards in Production with Controlled-Release Prompting","created":"2025-10-02","cited_by_count":7,"area":null},{"id":"2409.03274","title":"Recent Advances in Attack and Defense Approaches of Large Language Models","created":"2024-09-05","cited_by_count":6,"area":null},{"id":"2410.09569","title":"Are You Human? An Adversarial Benchmark to Expose LLMs","created":"2024-10-12","cited_by_count":5,"area":null},{"id":"2602.09433","title":"Autonomous Action Runtime Management(AARM):A System Specification for Securing AI-Driven Actions at Runtime","created":"2026-02-10","cited_by_count":5,"area":null},{"id":"2603.17170","title":"Beyond OAuth: Task-Scoped Authorization for AI Agents via Natural Language Slices","created":"2026-03-17","cited_by_count":5,"area":null},{"id":"2608.28945","title":"Automated Researchers Can Mitigate Well-characterized Alignment Failures","created":"2026-08-28","cited_by_count":5,"area":null},{"id":"2410.06287","title":"Non-Halting Queries: Exploiting Fixed Points in LLMs","created":"2024-10-08","cited_by_count":4,"area":null},{"id":"2410.23678","title":"Goal Hijacking Attack on Large Language Models via Pseudo-Conversation Injection","created":"2024-10-31","cited_by_count":4,"area":null},{"id":"2506.07330","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","created":"2025-06-09","cited_by_count":4,"area":null},{"id":"2512.16059","title":"ContextLeak: Auditing Leakage in Private In-Context Learning Methods","created":"2025-12-18","cited_by_count":4,"area":null},{"id":"2604.19657","title":"An AI Agent Execution Environment to Safeguard User Data","created":"2026-04-21","cited_by_count":4,"area":null},{"id":"2410.15396","title":"The Best Defense is a Good Offense: Countering LLM-Powered Cyberattacks","created":"2024-10-20","cited_by_count":3,"area":null},{"id":"2508.19287","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","created":"2025-08-25","cited_by_count":3,"area":null},{"id":"2509.20639","title":"A Framework for Rapidly Developing and Deploying Protection Against Large Language Model Attacks","created":"2025-09-25","cited_by_count":3,"area":null},{"id":"2512.20164","title":"AI Security Beyond Core Domains: Resume Screening as a Case Study of Adversarial Vulnerabilities in Specialized LLM Applications","created":"2025-12-23","cited_by_count":3,"area":null},{"id":"2603.18740","title":"Measuring and Exploiting Contextual Bias in LLM-Assisted Security Code Review","created":"2026-03-19","cited_by_count":3,"area":null},{"id":"2606.30383","title":"Whose Side Is Your Agent On? Multi-Party Principal Loyalty in LLM Agents","created":"2026-06-29","cited_by_count":3,"area":null},{"id":"2412.20087","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","created":"2024-12-28","cited_by_count":2,"area":null},{"id":"2504.12335","title":"You've Changed: Detecting Modification of Black-Box Large Language Models","created":"2025-04-14","cited_by_count":2,"area":null},{"id":"2605.08310","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","created":"2026-05-08","cited_by_count":2,"area":null},{"id":"2501.12521","title":"An Empirically-grounded tool for Automatic Prompt Linting and Repair: A Case Study on Bias, Vulnerability, and Optimization in Developer Prompts","created":"2025-01-21","cited_by_count":1,"area":null},{"id":"2509.10682","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","created":"2025-09-12","cited_by_count":1,"area":null},{"id":"2509.20277","title":"Investigating Security Implications of Automatically Generated Code on the Software Supply Chain","created":"2025-09-24","cited_by_count":1,"area":null},{"id":"2602.13033","title":"Buy versus Build an LLM: A Decision Framework for Governments","created":"2026-02-13","cited_by_count":1,"area":null},{"id":"2605.15118","title":"Talk is (Not) Cheap: A Taxonomy and Benchmark Coverage Audit for LLM Attacks","created":"2026-05-14","cited_by_count":1,"area":null},{"id":"2605.29055","title":"Hallucination Mitigation with Agentic AI, Nested Learning, and AI Sustainability via Semantic Caching","created":"2026-05-27","cited_by_count":1,"area":null},{"id":"2606.03344","title":"RogueMerge: Robust and Unified Attacks against LLM Model Merging","created":"2026-06-02","cited_by_count":1,"area":null},{"id":"2609.15017","title":"PIDS-Bench: Evaluating Prompt-Injection Detectors Under Over-Defense, Obfuscation, and Distribution Shift","created":"2026-09-14","cited_by_count":1,"area":null},{"id":"2506.00197","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","created":"2025-05-30","cited_by_count":0,"area":null},{"id":"2507.13629","title":"Large Language Models in Cybersecurity: Applications, Vulnerabilities, and Defense Techniques","created":"2025-07-18","cited_by_count":0,"area":null},{"id":"2512.03720","title":"Context-Aware Hierarchical Learning: A Two-Step Paradigm towards Safer LLMs","created":"2025-12-03","cited_by_count":0,"area":null},{"id":"2601.13122","title":"Responsible AI for General-Purpose Systems: Overview, Challenges, and A Path Forward","created":"2026-01-19","cited_by_count":0,"area":null},{"id":"2603.00369","title":"Policy Compliance of User Requests in Natural Language for AI Systems","created":"2026-02-27","cited_by_count":0,"area":null},{"id":"2603.17123","title":"Security Assessment and Mitigation Strategies for Large Language Models: A Comprehensive Defensive Framework","created":"2026-03-17","cited_by_count":0,"area":null},{"id":"2604.27487","title":"Low Rank Adaptation for Adversarial Perturbation","created":"2026-04-30","cited_by_count":0,"area":null},{"id":"2606.01386","title":"GuidaPA: Privacy-Preserving Chatbot for Public Administration via Federated Learning","created":"2026-05-31","cited_by_count":0,"area":null},{"id":"2606.18120","title":"Structural Role Injection in Handlebars-Templated LLM Prompts: Triple-Brace Interpolation, Delimiter Family, and the Limits of HTML Auto-Escaping","created":"2026-06-16","cited_by_count":0,"area":null},{"id":"2606.18530","title":"Evaluating Prompting-Based Defenses Against Domain-Camouflaged Injection Attacks","created":"2026-06-16","cited_by_count":0,"area":null},{"id":"2607.17986","title":"Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go?","created":"2026-07-20","cited_by_count":0,"area":null},{"id":"2607.23532","title":"Mission-Level Runtime Assurance for LLM-Assisted ISR Swarms over a Verification-Aware Fabric","created":"2026-07-26","cited_by_count":0,"area":null},{"id":"2608.12610","title":"@skills: Attention is all you have","created":"2026-08-12","cited_by_count":0,"area":null},{"id":"2608.15893","title":"Breaking and Defending LLM-Powered Social Media Bot Detection Systems","created":"2026-08-16","cited_by_count":0,"area":null},{"id":"2609.02168","title":"FUSE: An Evaluating Framework for Dangerous Capabilities of LLMs","created":"2026-09-02","cited_by_count":0,"area":null},{"id":"2609.13725","title":"IBBench-Light: A Paired Evaluation of Task-Conditioned Responses to External Directives","created":"2026-09-12","cited_by_count":0,"area":null},{"id":"2609.19722","title":"ALIBI: Adversarial Legitimacy Injection in Binary Input against LLM Malware Analyzers","created":"2026-09-17","cited_by_count":0,"area":null},{"id":"2609.23766","title":"TriFleetRCA: On-Premise LLM Root Cause Analysis for Kubernetes","created":"2026-09-20","cited_by_count":0,"area":null},{"id":"2609.26682","title":"From Alignment to Access Control: A Framework for GenAI Policy Enforcement","created":"2026-09-22","cited_by_count":0,"area":null},{"id":"2609.32915","title":"AgentTell: Behavioural Side-Channel Leakage in Browser-Use Agents","created":"2026-09-26","cited_by_count":0,"area":null},{"id":"2609.35308","title":"Epistemic Policy Divergence in Multi-Turn LLM Contamination: A Protocol-Gradient Investigation","created":"2026-09-28","cited_by_count":0,"area":null},{"id":"2609.37040","title":"Selecting The Most Informative Tokens in Natural Language Autoencoders","created":"2026-09-29","cited_by_count":0,"area":null},{"id":"2610.04210","title":"Can LLMs Separate Pasted Artifacts from User Speech? Absorption at Unmarked Prompt Seams","created":"2026-10-03","cited_by_count":0,"area":null},{"id":"2610.05139","title":"Hidden in the Comments: A Context-Injection Attack Surface in Code LLMs","created":"2026-10-04","cited_by_count":0,"area":null}],"next_cursor":null}