{"total":48,"rows":[{"id":"2505.23643","title":"Securing AI Agents with Information-Flow Control","created":"2025-05-29","cited_by_count":121,"area":null},{"id":"2403.06833","title":"Can LLMs Separate Instructions From Data? And What Do We Even Mean By That?","created":"2024-03-11","cited_by_count":81,"area":null},{"id":"2402.18649","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","created":"2024-02-28","cited_by_count":77,"area":null},{"id":"2404.06921","title":"GoEX: Perspectives and Designs Towards a Runtime for Autonomous LLM Applications","created":"2024-04-10","cited_by_count":23,"area":null},{"id":"2602.11865","title":"Intelligent AI Delegation","created":"2026-02-12","cited_by_count":18,"area":null},{"id":"2405.19524","title":"AI Risk Management Should Incorporate Both Safety and Security","created":"2024-05-29","cited_by_count":17,"area":null},{"id":"2406.06737","title":"Raccoon: Prompt Extraction Benchmark of LLM-Integrated Applications","created":"2024-06-10","cited_by_count":16,"area":null},{"id":"2502.04951","title":"Unsafe LLM-Based Search: Quantitative Analysis and Mitigation of Safety Risks in AI Web Search","created":"2025-02-07","cited_by_count":16,"area":null},{"id":"2604.11806","title":"Detecting Safety Violations Across Many Agent Traces","created":"2026-04-13","cited_by_count":14,"area":null},{"id":"2509.14404","title":"A Taxonomy of Prompt Defects in LLM Systems","created":"2025-09-17","cited_by_count":8,"area":null},{"id":"2501.07927","title":"Gandalf the Red: Adaptive Security for LLMs","created":"2025-01-14","cited_by_count":7,"area":null},{"id":"2504.20084","title":"AI Awareness","created":"2025-04-25","cited_by_count":7,"area":null},{"id":"2604.25109","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","created":"2026-04-28","cited_by_count":7,"area":null},{"id":"2412.14847","title":"A Survey of RWKV","created":"2024-12-19","cited_by_count":6,"area":null},{"id":"2501.00745","title":"Dynamics of Adversarial Attacks on Large Language Model-Based Search Engines","created":"2025-01-01","cited_by_count":5,"area":null},{"id":"2602.15344","title":"ER-MIA: Black-Box Adversarial Memory Injection Attacks on Long-Term Memory-Augmented Large Language Models","created":"2026-02-17","cited_by_count":5,"area":null},{"id":"2506.07330","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","created":"2025-06-09","cited_by_count":4,"area":null},{"id":"2509.21884","title":"You Can't Steal Nothing: Mitigating Prompt Leakages in LLMs via System Vectors","created":"2025-09-26","cited_by_count":4,"area":null},{"id":"2508.19287","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","created":"2025-08-25","cited_by_count":3,"area":null},{"id":"2509.14608","title":"Enterprise AI Must Enforce Participant-Aware Access Control","created":"2025-09-18","cited_by_count":3,"area":null},{"id":"2510.22242","title":"PaperAsk: A Benchmark for Reliability Evaluation of LLMs in Paper Search and Reading","created":"2025-10-25","cited_by_count":3,"area":null},{"id":"2602.03608","title":"Controlling Output Rankings in Generative Engines for LLM-based Search","created":"2026-02-03","cited_by_count":3,"area":null},{"id":"2509.02372","title":"Scam2Prompt: A Scalable Framework for Auditing Malicious Scam Endpoints in Production LLMs","created":"2025-09-02","cited_by_count":2,"area":null},{"id":"2603.04259","title":"When AI Fails, What Works? A Data-Driven Taxonomy of Real-World AI Risk Mitigation Strategies","created":"2026-03-04","cited_by_count":2,"area":null},{"id":"2605.05271","title":"IntraGuard: Committee-Side Defenses Against Review Outsourcing to Commercial Chatbots","created":"2026-05-06","cited_by_count":2,"area":null},{"id":"2605.09314","title":"How LLMs Are Persuaded: A Few Attention Heads, Rerouted","created":"2026-05-10","cited_by_count":2,"area":null},{"id":"2606.22659","title":"Confidently Wrong: Severity-Aware Calibration of Prompt-Injection Detectors under Attack Shift","created":"2026-06-21","cited_by_count":2,"area":null},{"id":"2609.15994","title":"Latent Undertow: How Ordinary Typos Break Probes","created":"2026-07-08","cited_by_count":2,"area":null},{"id":"2501.12521","title":"An Empirically-grounded tool for Automatic Prompt Linting and Repair: A Case Study on Bias, Vulnerability, and Optimization in Developer Prompts","created":"2025-01-21","cited_by_count":1,"area":null},{"id":"2509.05608","title":"BinaryShield: Cross-Service Threat Intelligence in LLM Services using Privacy-Preserving Fingerprints","created":"2025-09-06","cited_by_count":1,"area":null},{"id":"2509.10682","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","created":"2025-09-12","cited_by_count":1,"area":null},{"id":"2604.09075","title":"Hierarchical Alignment: Enforcing Hierarchical Instruction-Following in LLMs through Logical Consistency","created":"2026-04-10","cited_by_count":1,"area":null},{"id":"2606.04109","title":"Discourse-Role Labels as Presentation-Time Variables for Context Use in Language Models","created":"2026-06-02","cited_by_count":1,"area":null},{"id":"2607.19355","title":"Information Discernment in Large Language Models","created":"2026-05-22","cited_by_count":1,"area":null},{"id":"2609.15017","title":"PIDS-Bench: Evaluating Prompt-Injection Detectors Under Over-Defense, Obfuscation, and Distribution Shift","created":"2026-09-14","cited_by_count":1,"area":null},{"id":"2605.00055","title":"Ambient Persuasion in a Deployed AI Agent: Unauthorized Escalation Following Routine Non-Adversarial Content Exposure","created":"2026-04-29","cited_by_count":0,"area":null},{"id":"2605.02236","title":"Perturbation Dose Responses in Recursive LLM Loops: Raw Switching, Stochastic Floors, and Persistent Escape under Append, Replace, and Dialog Updates","created":"2026-05-04","cited_by_count":0,"area":null},{"id":"2605.03129","title":"PIIGuard: Mitigating PII Harvesting under Adversarial Sanitization","created":"2026-05-04","cited_by_count":0,"area":null},{"id":"2605.09721","title":"Security Risks in Tool-Enabled AI Agents: A Systematic Analysis of Privileged Execution Environments","created":"2026-05-10","cited_by_count":0,"area":null},{"id":"2605.11442","title":"Can a Single Message Paralyze the AI Infrastructure? The Rise of AbO-DDoS Attacks through Targeted Mobius Injection","created":"2026-05-12","cited_by_count":0,"area":null},{"id":"2606.08403","title":"Hiding in Plain Floats: Steganographic Carriers for Indirect Prompt and Content Injection","created":"2026-06-07","cited_by_count":0,"area":null},{"id":"2606.09563","title":"PRISM: Recovering Instruction Sets from Language Model Activations","created":"2026-06-08","cited_by_count":0,"area":null},{"id":"2606.09700","title":"What the Eyes See, the LLMs Miss: Exploiting Human Perception for Adversarial Text Attacks","created":"2026-06-08","cited_by_count":0,"area":null},{"id":"2609.09560","title":"The Vibe Shift in Software Engineering: Evaluating AI-Led Conversational Programming for Performance, Cognition, and Responsible Adoption","created":"2026-09-09","cited_by_count":0,"area":null},{"id":"2609.13725","title":"IBBench-Light: A Paired Evaluation of Task-Conditioned Responses to External Directives","created":"2026-09-12","cited_by_count":0,"area":null},{"id":"2609.32915","title":"AgentTell: Behavioural Side-Channel Leakage in Browser-Use Agents","created":"2026-09-26","cited_by_count":0,"area":null},{"id":"2610.00797","title":"Sapien: A Stateful Policy Engine for Autonomous AI Agents","created":"2026-09-30","cited_by_count":0,"area":null},{"id":"2610.04210","title":"Can LLMs Separate Pasted Artifacts from User Speech? Absorption at Unmarked Prompt Seams","created":"2026-10-03","cited_by_count":0,"area":null}],"next_cursor":null}