{"total":103,"rows":[{"id":"2410.02644","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","created":"2024-10-03","cited_by_count":369,"area":"agents"},{"id":"2509.02547","title":"The Landscape of Agentic Reinforcement Learning for LLMs: A Survey","created":"2025-09-02","cited_by_count":205,"area":"agents"},{"id":"2402.11208","title":"Watch Out for Your Agents! Investigating Backdoor Threats to LLM-Based Agents","created":"2024-02-17","cited_by_count":137,"area":"agents"},{"id":"2407.19354","title":"The Emerged Security and Privacy of LLM Agent: A Survey with Case Studies","created":"2024-07-28","cited_by_count":131,"area":"agents"},{"id":"2504.01990","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","created":"2025-03-31","cited_by_count":126,"area":"agents"},{"id":"2503.00061","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","created":"2025-02-27","cited_by_count":125,"area":"agents"},{"id":"2402.07510","title":"Secret Collusion among AI Agents: Multi-Agent Deception via Steganography","created":"2024-02-12","cited_by_count":113,"area":"agents"},{"id":"2411.09523","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","created":"2024-11-14","cited_by_count":65,"area":"agents"},{"id":"2509.26354","title":"Your Agent May Misevolve: Emergent Risks in Self-evolving LLM Agents","created":"2025-09-30","cited_by_count":62,"area":"agents"},{"id":"2403.04801","title":"Alpaca against Vicuna: Using LLMs to Uncover Memorization of LLMs","created":"2024-03-05","cited_by_count":33,"area":"agents"},{"id":"2409.09013","title":"AI-LieDar: Examine the Trade-off Between Utility and Truthfulness in LLM Agents","created":"2024-09-13","cited_by_count":31,"area":"agents"},{"id":"2601.17548","title":"Prompt Injection Attacks on Agentic Coding Assistants: A Systematic Analysis of Vulnerabilities in Skills, Tools, and Protocol Ecosystems","created":"2026-01-24","cited_by_count":31,"area":"agents"},{"id":"2510.23883","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","created":"2025-10-27","cited_by_count":28,"area":"agents"},{"id":"2605.15338","title":"Hidden in Memory: Sleeper Memory Poisoning in LLM Agents","created":"2026-05-14","cited_by_count":27,"area":"agents"},{"id":"2402.10196","title":"A Trembling House of Cards? Mapping Adversarial Attacks against Language Agents","created":"2024-02-15","cited_by_count":22,"area":"agents"},{"id":"2511.20703","title":"PropensityBench: Evaluating Latent Safety Risks in Large Language Models via an Agentic Approach","created":"2025-11-24","cited_by_count":22,"area":"agents"},{"id":"2507.14293","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","created":"2025-07-18","cited_by_count":21,"area":"agents"},{"id":"2601.11369","title":"Institutional AI: Governing LLM Collusion in Multi-Agent Cournot Markets via Public Governance Graphs","created":"2026-01-16","cited_by_count":20,"area":"agents"},{"id":"2606.24322","title":"Securing LLM-Agent Long-Term Memory Against Poisoning: Non-Malleable, Origin-Bound Authority with Machine-Checked Guarantees","created":"2026-06-23","cited_by_count":18,"area":"agents"},{"id":"2506.17318","title":"Context manipulation attacks : Web agents are susceptible to corrupted memory","created":"2025-06-18","cited_by_count":12,"area":"agents"},{"id":"2604.23338","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","created":"2026-04-25","cited_by_count":11,"area":"agents"},{"id":"2505.09757","title":"Trustless Autonomy: Understanding Motivations, Benefits, and Governance Dilemmas in Self-Sovereign Decentralized AI Agents","created":"2025-05-14","cited_by_count":10,"area":"agents"},{"id":"2506.05296","title":"Control Tax: The Price of Keeping AI in Check","created":"2025-06-05","cited_by_count":10,"area":"agents"},{"id":"2605.26112","title":"From Model Scaling to System Scaling: Scaling the Harness in Agentic AI","created":"2026-05-25","cited_by_count":8,"area":"agents"},{"id":"2606.22528","title":"Governance Decay: How Context Compaction Silently Erases Safety Constraints in Long-Horizon LLM Agents","created":"2026-06-21","cited_by_count":8,"area":"agents"},{"id":"2606.23075","title":"Safety in Self-Evolving LLM Agent Systems: Threats, Amplification, and Case Studies","created":"2026-06-22","cited_by_count":8,"area":"agents"},{"id":"2509.25302","title":"Dive into the Agent Matrix: A Realistic Evaluation of Self-Replication Risk in LLM Agents","created":"2025-09-29","cited_by_count":7,"area":"agents"},{"id":"2412.16325","title":"Towards Safe and Honest AI Agents with Neural Self-Other Overlap","created":"2024-12-20","cited_by_count":6,"area":"agents"},{"id":"2510.05159","title":"Malice in Agentland: Down the Rabbit Hole of Backdoors in the AI Supply Chain","created":"2025-10-03","cited_by_count":6,"area":"agents"},{"id":"2602.22303","title":"Training Agents to Self-Report Misbehavior","created":"2026-02-25","cited_by_count":6,"area":"agents"},{"id":"2605.09104","title":"Token Economics for LLM Agents: A Dual-View Study from Computing and Economics","created":"2026-05-09","cited_by_count":6,"area":"agents"},{"id":"2511.17085","title":"Why Do Language Model Agents Whistleblow?","created":"2025-11-21","cited_by_count":5,"area":"agents"},{"id":"2603.06874","title":"LieCraft: A Multi-Agent Framework for Evaluating Deceptive Capabilities in Language Models","created":"2026-03-06","cited_by_count":5,"area":"agents"},{"id":"2604.15559","title":"Subliminal Transfer of Unsafe Behaviors in AI Agent Distillation","created":"2026-04-16","cited_by_count":5,"area":"agents"},{"id":"2605.08442","title":"Injection-Execution Dissociation: A Mechanistic Evaluation of Persistent Memory Attacks and Defenses in Stateful LLM Agents","created":"2026-05-08","cited_by_count":5,"area":"agents"},{"id":"2607.02514","title":"Distributed Attacks in Persistent-State AI Control","created":"2026-07-02","cited_by_count":5,"area":"agents"},{"id":"2511.15992","title":"Detecting Sleeper Agents in Large Language Models via Semantic Drift Analysis","created":"2025-11-20","cited_by_count":4,"area":"agents"},{"id":"2604.10134","title":"PlanGuard: Defending Agents against Indirect Prompt Injection via Planning-based Consistency Verification","created":"2026-04-11","cited_by_count":4,"area":"agents"},{"id":"2605.00073","title":"AgentReputation: A Decentralized Agentic AI Reputation Framework","created":"2026-04-30","cited_by_count":4,"area":"agents"},{"id":"2605.27593","title":"Voluntary Collusion with Secret Tools in Competing LLM Agents","created":"2026-05-26","cited_by_count":4,"area":"agents"},{"id":"2605.30169","title":"Dissociative Identity: Language Model Agents Lack Grounding for Reputation Mechanisms","created":"2026-05-28","cited_by_count":4,"area":"agents"},{"id":"2508.17674","title":"Attacking LLMs and AI Agents: Advertisement Embedding Attacks Against Large Language Models","created":"2025-08-25","cited_by_count":3,"area":"agents"},{"id":"2510.16255","title":"Detecting Adversarial Fine-tuning with Auditing Agents","created":"2025-10-17","cited_by_count":3,"area":"agents"},{"id":"2603.03371","title":"Sleeper Cell: Injecting Latent Malice Temporal Backdoors into Tool-Using LLMs","created":"2026-03-02","cited_by_count":3,"area":"agents"},{"id":"2603.26635","title":"Deception and Communication in Autonomous Multi-Agent Systems: An Experimental Study with Among Us","created":"2026-03-27","cited_by_count":3,"area":"agents"},{"id":"2605.22643","title":"Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety","created":"2026-05-21","cited_by_count":3,"area":"agents"},{"id":"2510.22462","title":"Learning \"Partner-Aware\" Collaborators in Multi-Party Collaboration","created":"2025-10-26","cited_by_count":2,"area":"agents"},{"id":"2510.23245","title":"Multi-Stakeholder Alignment in LLM-Powered Collaborative AI Systems: A Multi-Agent Framework for Intelligent Tutoring","created":"2025-10-27","cited_by_count":2,"area":"agents"},{"id":"2602.04653","title":"Inference-Time Backdoors via Chat Templates: From LLM Supply Chains to Agentic System Compromise","created":"2026-02-04","cited_by_count":2,"area":"agents"},{"id":"2605.17380","title":"ADR: An Agentic Detection System for Enterprise Agentic AI Security","created":"2026-05-17","cited_by_count":2,"area":"agents"},{"id":"2605.31170","title":"Emergent Languages in Populations of Language Model Agents: From Token Efficiency to Oversight Evasion","created":"2026-05-29","cited_by_count":2,"area":"agents"},{"id":"2606.12709","title":"Smarter Saboteurs, Better Fixers: Scaling & Security in Linear Multi-Agent Workflows","created":"2026-06-10","cited_by_count":2,"area":"agents"},{"id":"2606.18142","title":"Your AI Travel Agent Would Book You a Bullfight: An Agentic Benchmark for Implicit Animal Welfare in Frontier AI Models","created":"2026-06-16","cited_by_count":2,"area":"agents"},{"id":"2606.30449","title":"Internal-State Probes Read the Situation, Not the Action: Three Negative Results for Pre-Action Misalignment Monitoring","created":"2026-06-29","cited_by_count":2,"area":"agents"},{"id":"2608.26372","title":"Knowledge-Verified Emergent Deception in LLM Agents Under Conflicting Incentives","created":"2026-08-26","cited_by_count":2,"area":"agents"},{"id":"2406.16739","title":"Agent-Driven Automatic Software Improvement","created":"2024-06-24","cited_by_count":1,"area":"agents"},{"id":"2511.19874","title":"Cross-LLM Generalization of Behavioral Backdoor Detection in AI Agent Supply Chains","created":"2025-11-25","cited_by_count":1,"area":"agents"},{"id":"2602.04197","title":"From Helpfulness to Toxic Proactivity: Diagnosing Behavioral Misalignment in LLM Agents","created":"2026-02-04","cited_by_count":1,"area":"agents"},{"id":"2603.07202","title":"Lying to Win: Assessing LLM Deception through Human-AI Games and Parallel-World Probing","created":"2026-03-07","cited_by_count":1,"area":"agents"},{"id":"2603.07496","title":"From Thinker to Society: Security in Hierarchical Autonomy Evolution of AI Agents","created":"2026-03-08","cited_by_count":1,"area":"agents"},{"id":"2604.20582","title":"Trust, Lies, and Long Memories: Emergent Social Dynamics and Reputation in Multi-Round Avalon with LLM Agents","created":"2026-04-22","cited_by_count":1,"area":"agents"},{"id":"2605.09045","title":"Containment Verification: AI Safety Guarantees Independent of Alignment","created":"2026-05-09","cited_by_count":1,"area":"agents"},{"id":"2605.11135","title":"Control Charts for Multi-agent Systems","created":"2026-05-11","cited_by_count":1,"area":"agents"},{"id":"2605.19035","title":"Trustworthy Agent Network: Trust in Agent Networks Must Be Baked In, Not Bolted On","created":"2026-05-18","cited_by_count":1,"area":"agents"},{"id":"2606.09692","title":"Observability for Delegated Execution in Agentic AI Systems","created":"2026-06-08","cited_by_count":1,"area":"agents"},{"id":"2607.21518","title":"Same Dangerous Objective, Opposite Advice: Direct Exposure versus Multi-Agent Mediation","created":"2026-07-23","cited_by_count":1,"area":"agents"},{"id":"2607.22445","title":"Dynamic Capability Scoping for Enterprise AI Agents: A Synthetic Dataset and Three-Source Permission Architecture","created":"2026-07-24","cited_by_count":1,"area":"agents"},{"id":"2607.25379","title":"Cyber-Capable AI Agents: Vulnerabilities, Evaluation Containment, and Defensive Response","created":"2026-07-28","cited_by_count":1,"area":"agents"},{"id":"2607.26064","title":"The Age of AI Agents Demands A New Scientific Paradigm To Sustain Trustworthy Science","created":"2026-06-18","cited_by_count":1,"area":"agents"},{"id":"2608.08131","title":"Compositional Threat Analysis of Latent Compromise in LLM Agent Systems: The Order 66 Scenario","created":"2026-08-08","cited_by_count":1,"area":"agents"},{"id":"2609.36490","title":"LLMs Learn to Evade Latent Monitors from Prior Feedback Alone","created":"2026-09-29","cited_by_count":1,"area":"agents"},{"id":"2609.39050","title":"Covert Assistance: Helpful LLM Agents Evade Oversight in Multi-Agent Systems","created":"2026-09-30","cited_by_count":1,"area":"agents"},{"id":"2509.06701","title":"Probabilistic Modeling of Latent Agentic Substructures in Deep Neural Networks","created":"2025-09-08","cited_by_count":0,"area":"agents"},{"id":"2603.00121","title":"Graph-theoretic Agreement Framework for Multi-agent LLM Systems","created":"2026-02-23","cited_by_count":0,"area":"agents"},{"id":"2603.14417","title":"Questionnaire Responses Do not Capture the Safety of AI Agents","created":"2026-03-15","cited_by_count":0,"area":"agents"},{"id":"2603.26953","title":"ASTER -- Agentic Science Toolkit for Exoplanet Research","created":"2026-03-27","cited_by_count":0,"area":"agents"},{"id":"2604.09056","title":"Conversations Risk Detection LLMs in Financial Agents via Multi-Stage Generative Rollout","created":"2026-04-10","cited_by_count":0,"area":"agents"},{"id":"2605.16471","title":"From AI-Generated Content to Agentic Action: Security and Safety Threats in Generative AI","created":"2026-05-15","cited_by_count":0,"area":"agents"},{"id":"2606.00603","title":"Toward Agentic Governance: What Shapes LLM-Agent Intervention in Public Forums?","created":"2026-05-30","cited_by_count":0,"area":"agents"},{"id":"2606.10304","title":"MIRAGE: A Polarity-Flipping Encoding Subspace in LLM Agents","created":"2026-06-09","cited_by_count":0,"area":"agents"},{"id":"2606.10747","title":"The Arbiter Agent: Continually Monitoring Multi-Agent Conversations to Detect Emergent Misalignment","created":"2026-06-09","cited_by_count":0,"area":"agents"},{"id":"2606.14831","title":"Is Your Agent Playing Dead? Deployed LLM Agents Exhibit Constraint-Evasive Fabrication and Thanatosis","created":"2026-06-12","cited_by_count":0,"area":"agents"},{"id":"2607.02389","title":"Steerability via constraints: a substrate for scalable oversight of coding agents","created":"2026-07-02","cited_by_count":0,"area":"agents"},{"id":"2607.05132","title":"When Agents Lie: Premeditation, Persistence, and Exploitation in Repeated Games","created":"2026-07-06","cited_by_count":0,"area":"agents"},{"id":"2607.06608","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","created":"2026-07-07","cited_by_count":0,"area":"agents"},{"id":"2607.19433","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","created":"2026-07-20","cited_by_count":0,"area":"agents"},{"id":"2608.11274","title":"Agent Safety Should Be a Runtime Contract","created":"2026-08-11","cited_by_count":0,"area":"agents"},{"id":"2608.24037","title":"Curved Inference II: Sleeper Agent Geometry - Extending Interpretability Beyond Probes","created":"2026-08-25","cited_by_count":0,"area":"agents"},{"id":"2609.08126","title":"SchemeArena: Factorized Stress Testing of Scheming in LLM Agents","created":"2026-09-08","cited_by_count":0,"area":"agents"},{"id":"2609.13731","title":"Trustworthy Agentic AI: A Comprehensive Cybersecurity and Systems Survey on Threat Landscapes, Defense Architectures, and Open Challenges","created":"2026-09-12","cited_by_count":0,"area":"agents"},{"id":"2609.16694","title":"Toward Secure AI-Powered Penetration Testing Agents: Security Threats, Guardrails, and Architectural Perspectives","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2609.18460","title":"Collective Loss of Control in LLM Agent Systems: An Epidemic Account of Mutation, Contagion, and Recovery","created":"2026-09-16","cited_by_count":0,"area":"agents"},{"id":"2609.22510","title":"Defusing Explosive Prompts: Understanding and Preventing Trigger-Based Prompt Injections in LLM Agents","created":"2026-09-18","cited_by_count":0,"area":"agents"},{"id":"2609.23700","title":"When the Agent Becomes the Kernel: A Systematization of Security on the Path to AI-Native Operating Systems","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.23894","title":"Connecting the Dots in Agentic AI Security: A Cross-Dimensional Threat Taxonomy, Evaluation Maturity, and Open Challenges","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.32021","title":"SilentCall: Hidden Tool-Call Backdoors in Open-Weight Agents, and How to Catch Them","created":"2026-09-25","cited_by_count":0,"area":"agents"},{"id":"2609.32361","title":"Black-Box Auditing of Epistemic Reliability in Multi-Agent Debate Distillation","created":"2026-09-26","cited_by_count":0,"area":"agents"},{"id":"2610.04083","title":"Self-Propagating Misalignment in LLM Agents, and Why Auditing or Disabling Memory Is Not Enough","created":"2026-10-02","cited_by_count":0,"area":"agents"},{"id":"2610.04528","title":"Quantifying Collusion Among Autonomous LLM Agents: A Statistical Analysis of the Collusion Wiki Incident","created":"2026-10-03","cited_by_count":0,"area":"agents"},{"id":"2610.05793","title":"Topology-Conditioned Backdoors: Language Models That Insert Vulnerabilities When They Infer They Are in a Multi-Agent System","created":"2026-10-05","cited_by_count":0,"area":"agents"}],"next_cursor":"100"}