{"total":106,"rows":[{"id":"2403.02691","title":"InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents","created":"2024-03-05","cited_by_count":538,"area":"agents"},{"id":"2410.09024","title":"AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents","created":"2024-10-11","cited_by_count":437,"area":"agents"},{"id":"2401.10019","title":"R-Judge: Benchmarking Safety Risk Awareness for LLM Agents","created":"2024-01-18","cited_by_count":288,"area":"agents"},{"id":"2312.11970","title":"Large Language Models Empowered Agent-based Modeling and Simulation: A Survey and Perspectives","created":"2023-12-19","cited_by_count":257,"area":"agents"},{"id":"2407.04295","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","created":"2024-07-05","cited_by_count":230,"area":"safety"},{"id":"2503.21460","title":"Large Language Model Agent: A Survey on Methodology, Applications and Challenges","created":"2025-03-27","cited_by_count":205,"area":"agents"},{"id":"2505.00212","title":"Which Agent Causes Task Failures and When? On Automated Failure Attribution of LLM Multi-Agent Systems","created":"2025-04-30","cited_by_count":185,"area":"agents"},{"id":"2404.11584","title":"The Landscape of Emerging AI Agent Architectures for Reasoning, Planning, and Tool Calling: A Survey","created":"2024-04-17","cited_by_count":168,"area":"agents"},{"id":"2402.08567","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","created":"2024-02-13","cited_by_count":153,"area":"mllm"},{"id":"2402.11208","title":"Watch Out for Your Agents! Investigating Backdoor Threats to LLM-Based Agents","created":"2024-02-17","cited_by_count":137,"area":"agents"},{"id":"2410.06703","title":"ST-WebAgentBench: A Benchmark for Evaluating Safety and Trustworthiness in Web Agents","created":"2024-10-09","cited_by_count":133,"area":"agents"},{"id":"2410.07283","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","created":"2024-10-09","cited_by_count":133,"area":"agents"},{"id":"2402.09283","title":"Attacks, Defenses and Evaluations for LLM Conversation Safety: A Survey","created":"2024-02-14","cited_by_count":130,"area":null},{"id":"2406.02630","title":"AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathways","created":"2024-06-04","cited_by_count":127,"area":null},{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2408.00989","title":"On the Resilience of LLM-Based Multi-Agent Collaboration with Faulty Agents","created":"2024-08-02","cited_by_count":99,"area":"agents"},{"id":"2401.15897","title":"Red-Teaming for Generative AI: Silver Bullet or Security Theater?","created":"2024-01-29","cited_by_count":83,"area":"safety"},{"id":"2401.11880","title":"PsySafe: A Comprehensive Framework for Psychological-based Attack, Defense, and Evaluation of Multi-agent System Safety","created":"2024-01-22","cited_by_count":80,"area":"agents"},{"id":"2406.01288","title":"Improved Few-Shot Jailbreaking Can Circumvent Aligned Language Models and Their Defenses","created":"2024-06-03","cited_by_count":70,"area":"safety"},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2401.05778","title":"Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systems","created":"2024-01-11","cited_by_count":66,"area":null},{"id":"2402.01586","title":"TrustAgent: Towards Safe and Trustworthy LLM-based Agents","created":"2024-02-02","cited_by_count":64,"area":"agents"},{"id":"2412.17686","title":"Large Language Model Safety: A Holistic Survey","created":"2024-12-23","cited_by_count":59,"area":"safety"},{"id":"2502.11127","title":"G-Safeguard: A Topology-Guided Security Lens and Treatment on LLM-based Multi-agent Systems","created":"2025-02-16","cited_by_count":59,"area":"agents"},{"id":"2408.02544","title":"Caution for the Environment: Multimodal LLM Agents are Susceptible to Environmental Distractions","created":"2024-08-05","cited_by_count":56,"area":"mllm"},{"id":"2406.07057","title":"MultiTrust: A Comprehensive Benchmark Towards Trustworthy Multimodal Large Language Models","created":"2024-06-11","cited_by_count":53,"area":"mllm"},{"id":"2402.04247","title":"Risks of AI Scientists: Prioritizing Safeguarding Over Autonomy","created":"2024-02-06","cited_by_count":49,"area":null},{"id":"2502.08586","title":"Commercial LLM Agents Are Already Vulnerable to Simple Yet Dangerous Attacks","created":"2025-02-12","cited_by_count":49,"area":"agents"},{"id":"2402.11359","title":"Offline Training of Language Model Agents with Functions as Learnable Weights","created":"2024-02-17","cited_by_count":48,"area":"agents"},{"id":"2410.07137","title":"Cheating Automatic LLM Benchmarks: Null Models Achieve High Win Rates","created":"2024-10-09","cited_by_count":45,"area":null},{"id":"2602.06052","title":"A Survey of Agent Memory in the Second Half: Towards Self-Evolving and Long-Horizon Agents","created":"2026-01-14","cited_by_count":44,"area":"agents"},{"id":"2505.19234","title":"GUARDIAN: Safeguarding LLM Multi-Agent Collaborations with Temporal Graph Modeling","created":"2025-05-25","cited_by_count":36,"area":"agents"},{"id":"2504.00218","title":"$\\textit{Agents Under Siege}$: Breaking Pragmatic Multi-Agent LLM Systems with Optimized Prompt Attacks","created":"2025-03-31","cited_by_count":34,"area":"agents"},{"id":"2404.04442","title":"Exploring Autonomous Agents through the Lens of Large Language Models: A Review","created":"2024-04-05","cited_by_count":31,"area":"agents"},{"id":"2506.23844","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","created":"2025-06-30","cited_by_count":29,"area":"agents"},{"id":"2510.09781","title":"Building a Foundational Guardrail for General Agentic Systems via Synthetic Data","created":"2025-10-10","cited_by_count":29,"area":"agents"},{"id":"2401.09002","title":"AttackEval: How to Evaluate the Effectiveness of Jailbreak Attacking on Large Language Models","created":"2024-01-17","cited_by_count":28,"area":"safety"},{"id":"2502.19145","title":"Multi-Agent Security Tax: Trading Off Security and Collaboration Capabilities in Multi-Agent Systems","created":"2025-02-26","cited_by_count":27,"area":null},{"id":"2409.16783","title":"Holistic Automated Red Teaming for Large Language Models through Top-Down Test Case Generation and Multi-turn Interaction","created":"2024-09-25","cited_by_count":25,"area":"safety"},{"id":"2504.18041","title":"RAG LLMs are Not Safer: A Safety Analysis of Retrieval-Augmented Generation for Large Language Models","created":"2025-04-25","cited_by_count":24,"area":"rag"},{"id":"2511.20597","title":"BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents","created":"2025-11-25","cited_by_count":24,"area":"safety"},{"id":"2505.10924","title":"A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?","created":"2025-05-16","cited_by_count":23,"area":"agents"},{"id":"2402.10196","title":"A Trembling House of Cards? Mapping Adversarial Attacks against Language Agents","created":"2024-02-15","cited_by_count":22,"area":"agents"},{"id":"2505.23020","title":"AgentAlign: Navigating Safety Alignment in the Shift from Informative to Agentic Large Language Models","created":"2025-05-29","cited_by_count":21,"area":"agents"},{"id":"2401.07115","title":"Open Models, Closed Minds? On Agents Capabilities in Mimicking Human Personalities through Open Large Language Models","created":"2024-01-13","cited_by_count":20,"area":"agents"},{"id":"2511.10400","title":"Rethinking the Reliability of Multi-agent System: A Perspective from Byzantine Fault Tolerance","created":"2025-11-13","cited_by_count":17,"area":"lr"},{"id":"2505.23559","title":"SafeScientist: Toward Risk-Aware Scientific Discoveries by LLM Agents","created":"2025-05-29","cited_by_count":16,"area":"agents"},{"id":"2507.04724","title":"Who's the Mole? Modeling and Detecting Intention-Hiding Malicious Agents in LLM-Based Multi-Agent Systems","created":"2025-07-07","cited_by_count":13,"area":"agents"},{"id":"2505.23847","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","created":"2025-05-28","cited_by_count":12,"area":"agents"},{"id":"2408.11313","title":"An Optimizable Suffix Is Worth A Thousand Templates: Efficient Black-box Jailbreaking without Affirmative Phrases via LLM as Optimizer","created":"2024-08-21","cited_by_count":11,"area":"safety"},{"id":"2410.06809","title":"Root Defence Strategies: Ensuring Safety of LLM at the Decoding Level","created":"2024-10-09","cited_by_count":11,"area":"safety"},{"id":"2507.14660","title":"When Autonomy Goes Rogue: Preparing for Risks of Multi-Agent Collusion in Social Systems","created":"2025-07-19","cited_by_count":11,"area":null},{"id":"2512.06914","title":"SoK: Trust-Authorization Mismatch in LLM Agent Interactions","created":"2025-12-07","cited_by_count":11,"area":"agents"},{"id":"2604.23338","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","created":"2026-04-25","cited_by_count":11,"area":"agents"},{"id":"2407.00466","title":"BioKGBench: A Knowledge Graph Checking Benchmark of AI Agent for Biomedical Science","created":"2024-06-29","cited_by_count":10,"area":"agents"},{"id":"2605.09076","title":"Robust Multi-Agent LLMs under Byzantine Faults","created":"2026-05-09","cited_by_count":10,"area":"agents"},{"id":"2512.18733","title":"Explainable and Fine-Grained Safeguarding of LLM Multi-Agent Systems via Bi-Level Graph Anomaly Detection","created":"2025-12-21","cited_by_count":9,"area":"agents"},{"id":"2410.09097","title":"Recent advancements in LLM Red-Teaming: Techniques, Defenses, and Ethical Considerations","created":"2024-10-09","cited_by_count":8,"area":"safety"},{"id":"2511.06448","title":"When AI Agents Collude Online: Financial Fraud Risks by Collaborative LLM Agents on Social Platforms","created":"2025-11-09","cited_by_count":8,"area":"agents"},{"id":"2605.06161","title":"Beyond Accuracy: Policy Invariance as a Reliability Test for LLM Safety Judges","created":"2026-05-07","cited_by_count":8,"area":"safety"},{"id":"2402.15218","title":"BSPA: Exploring Black-box Stealthy Prompt Attacks against Image Generators","created":"2024-02-23","cited_by_count":7,"area":null},{"id":"2501.00055","title":"LLM-Virus: Evolutionary Jailbreak Attack on Large Language Models","created":"2024-12-28","cited_by_count":7,"area":"safety"},{"id":"2505.15935","title":"MAPS: A Multilingual Benchmark for Agent Performance and Security","created":"2025-05-21","cited_by_count":7,"area":"agents"},{"id":"2504.07461","title":"Achilles Heel of Distributed Multi-Agent Systems","created":"2025-04-10","cited_by_count":6,"area":"agents"},{"id":"2504.21053","title":"NeuRel-Attack: Neuron Relearning for Safety Disalignment in Large Language Models","created":"2025-04-29","cited_by_count":6,"area":"alignment"},{"id":"2505.17735","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","created":"2025-05-23","cited_by_count":6,"area":"agents"},{"id":"2505.18572","title":"MASTER: Multi-Agent Security Through Exploration of Roles and Topological Structures -- A Comprehensive Framework","created":"2025-05-24","cited_by_count":6,"area":"agents"},{"id":"2506.04836","title":"Oversight Structures for Agentic AI in Public-Sector Organizations","created":"2025-06-05","cited_by_count":6,"area":null},{"id":"2510.07709","title":"Multimodal Safety Evaluation in Generative Agent Social Simulations","created":"2025-10-09","cited_by_count":6,"area":"agents"},{"id":"2405.19668","title":"AutoBreach: Universal and Adaptive Jailbreaking with Efficient Wordplay-Guided Optimization","created":"2024-05-30","cited_by_count":5,"area":"safety"},{"id":"2411.08862","title":"LLMStinger: Jailbreaking LLMs using RL fine-tuned LLMs","created":"2024-11-13","cited_by_count":5,"area":"safety"},{"id":"2501.18280","title":"Jailbreaking LLMs' Safeguard with Universal Magic Words for Text Embedding Models","created":"2025-01-30","cited_by_count":5,"area":"safety"},{"id":"2510.14133","title":"Formalizing the Safety, Security, and Functional Properties of Agentic AI Systems","created":"2025-10-15","cited_by_count":5,"area":"agents"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2601.04694","title":"ResMAS: Resilience Optimization in LLM-based Multi-agent Systems","created":"2026-01-08","cited_by_count":5,"area":"agents"},{"id":"2602.19547","title":"CIBER: A Comprehensive Benchmark for Security Evaluation of Code Interpreter Agents","created":"2026-02-23","cited_by_count":5,"area":"agents"},{"id":"2510.08238","title":"Chain-of-Trigger: An Agentic Backdoor that Paradoxically Enhances Agentic Robustness","created":"2025-10-09","cited_by_count":4,"area":"agents"},{"id":"2603.13940","title":"GroupGuard: A Framework for Modeling and Defending Collusive Attacks in Multi-Agent Systems","created":"2026-03-14","cited_by_count":4,"area":"agents"},{"id":"2407.12061","title":"Situated Instruction Following","created":"2024-07-15","cited_by_count":3,"area":null},{"id":"2601.18827","title":"Automated structural testing of LLM-based agents: methods, framework, and case studies","created":"2026-01-25","cited_by_count":3,"area":"agents"},{"id":"2606.13686","title":"Benchmarking Web Agent Safety under E-commerce Deceptive Interfaces","created":"2026-04-26","cited_by_count":3,"area":"agents"},{"id":"2404.04285","title":"MIMIR: A Streamlined Platform for Personalized Agent Tuning in Domain Expertise","created":"2024-04-03","cited_by_count":2,"area":"agents"},{"id":"2503.20320","title":"Iterative Prompting with Persuasion Skills in Jailbreaking Large Language Models","created":"2025-03-26","cited_by_count":2,"area":"safety"},{"id":"2504.15801","title":"A closer look at how large language models trust humans: patterns and biases","created":"2025-04-22","cited_by_count":2,"area":"agents"},{"id":"2506.11402","title":"LoRA Users Beware: A Few Spurious Tokens Can Manipulate Your Finetuned Model","created":"2025-06-13","cited_by_count":2,"area":null},{"id":"2509.24408","title":"FuncPoison: Poisoning Function Library to Hijack Multi-agent Autonomous Driving Systems","created":"2025-09-29","cited_by_count":2,"area":"driving"},{"id":"2512.00412","title":"Red Teaming Large Reasoning Models","created":"2025-11-29","cited_by_count":2,"area":"lr"},{"id":"2603.24203","title":"Invisible Threats from Model Context Protocol: Generating Stealthy Injection Payload via Tree-based Adaptive Search","created":"2026-03-25","cited_by_count":2,"area":"agents"},{"id":"2605.08460","title":"When Child Inherits: Modeling and Exploiting Subagent Spawn in Multi-Agent Networks","created":"2026-05-08","cited_by_count":2,"area":"agents"},{"id":"2605.28104","title":"Defending LLM-based Multi-Agent Systems Against Cooperative Attacks with Sentence-Level Rectification","created":"2026-05-27","cited_by_count":2,"area":"agents"},{"id":"2402.17411","title":"Consistency Matters: Explore LLMs Consistency From a Black-Box Perspective","created":"2024-02-27","cited_by_count":1,"area":null},{"id":"2503.12931","title":"MirrorShield: Towards Universal Defense Against Jailbreaks via Entropy-Guided Mirror Crafting","created":"2025-03-17","cited_by_count":1,"area":"safety"},{"id":"2506.18543","title":"SoK: A Comprehensive Security Analysis of Jailbreak Resilience in GPT and DeepSeek Models","created":"2025-06-23","cited_by_count":1,"area":"safety"},{"id":"2601.07177","title":"Safe-FedLLM: Delving into the Safety of Federated Large Language Models","created":"2026-01-12","cited_by_count":1,"area":null},{"id":"2602.04197","title":"From Helpfulness to Toxic Proactivity: Diagnosing Behavioral Misalignment in LLM Agents","created":"2026-02-04","cited_by_count":1,"area":"agents"},{"id":"2604.03242","title":"DRAFT: Task Decoupled Latent Reasoning for Agent Safety","created":"2026-02-11","cited_by_count":1,"area":"lr"},{"id":"2606.08234","title":"SciTrace: Trajectory-Aware Safety Reasoning for Scientific Discovery Agents","created":"2026-06-06","cited_by_count":1,"area":"lr"},{"id":"2607.06807","title":"When Agents Go Rogue: Activation-Based Detection of Malicious Behaviors in Multi-Agent Systems","created":"2026-07-07","cited_by_count":1,"area":"agents"},{"id":"2609.00595","title":"SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems","created":"2026-09-01","cited_by_count":1,"area":"agents"},{"id":"2509.26345","title":"SafeBehavior: Simulating Human-Like Multistage Reasoning to Mitigate Jailbreak Attacks in Large Language Models","created":"2025-09-30","cited_by_count":0,"area":"lr"}],"next_cursor":"100"}