{"total":80,"rows":[{"id":"2501.06322","title":"Multi-Agent Collaboration Mechanisms: A Survey of LLMs","created":"2025-01-10","cited_by_count":431,"area":"agents"},{"id":"2407.04295","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","created":"2024-07-05","cited_by_count":230,"area":"safety"},{"id":"2503.21460","title":"Large Language Model Agent: A Survey on Methodology, Applications and Challenges","created":"2025-03-27","cited_by_count":205,"area":"agents"},{"id":"2410.07283","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","created":"2024-10-09","cited_by_count":133,"area":"agents"},{"id":"2502.14847","title":"Red-Teaming LLM Multi-Agent Systems via Communication Attacks","created":"2025-02-20","cited_by_count":122,"area":"agents"},{"id":"2408.00989","title":"On the Resilience of LLM-Based Multi-Agent Collaboration with Faulty Agents","created":"2024-08-02","cited_by_count":99,"area":"agents"},{"id":"2503.09648","title":"A Survey on Trustworthy LLM Agents: Threats and Countermeasures","created":"2025-03-12","cited_by_count":96,"area":"agents"},{"id":"2410.10700","title":"LLMs know their vulnerabilities: Uncover Safety Gaps through Natural Distribution Shifts","created":"2024-10-14","cited_by_count":86,"area":null},{"id":"2406.12030","title":"SPA-VL: A Comprehensive Safety Preference Alignment Dataset for Vision Language Model","created":"2024-06-17","cited_by_count":85,"area":"mllm"},{"id":"2403.07865","title":"CodeAttack: Revealing Safety Generalization Challenges of Large Language Models via Code Completion","created":"2024-03-12","cited_by_count":76,"area":"safety"},{"id":"2407.09121","title":"Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Training","created":"2024-07-12","cited_by_count":69,"area":null},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2502.11054","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","created":"2025-02-16","cited_by_count":64,"area":"lr"},{"id":"2502.11127","title":"G-Safeguard: A Topology-Guided Security Lens and Treatment on LLM-based Multi-agent Systems","created":"2025-02-16","cited_by_count":59,"area":"agents"},{"id":"2503.11733","title":"LLM Agents for Education: Advances and Applications","created":"2025-03-14","cited_by_count":59,"area":"agents"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2403.12037","title":"MineDreamer: Learning to Follow Instructions via Chain-of-Imagination for Simulated-World Control","created":"2024-03-18","cited_by_count":53,"area":"wm"},{"id":"2501.12612","title":"T2ISafety: Benchmark for Assessing Fairness, Toxicity, and Privacy in Image Generation","created":"2025-01-22","cited_by_count":48,"area":null},{"id":"2503.04392","title":"AgentSafe: Safeguarding Large Language Model-based Multi-agent Systems via Hierarchical Data Management","created":"2025-03-06","cited_by_count":38,"area":"agents"},{"id":"2406.09321","title":"JailbreakEval: An Integrated Toolkit for Evaluating Jailbreak Attempts Against Large Language Models","created":"2024-06-13","cited_by_count":31,"area":"safety"},{"id":"2406.11668","title":"\"Not Aligned\" is Not \"Malicious\": Being Careful about Hallucinations of Large Language Models' Jailbreak","created":"2024-06-17","cited_by_count":25,"area":"safety"},{"id":"2505.10924","title":"A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?","created":"2025-05-16","cited_by_count":23,"area":"agents"},{"id":"2402.10196","title":"A Trembling House of Cards? Mapping Adversarial Attacks against Language Agents","created":"2024-02-15","cited_by_count":22,"area":"agents"},{"id":"2509.14295","title":"Aegis: Automated Error Generation and Attribution for Multi-Agent Systems","created":"2025-09-17","cited_by_count":22,"area":"agents"},{"id":"2402.19465","title":"Towards Tracing Trustworthiness Dynamics: Revisiting Pre-training Period of Large Language Models","created":"2024-02-29","cited_by_count":18,"area":null},{"id":"2502.09723","title":"QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language","created":"2025-02-13","cited_by_count":18,"area":"alignment"},{"id":"2508.01332","title":"BlockA2A: Towards Secure and Verifiable Agent-to-Agent Interoperability","created":"2025-08-02","cited_by_count":15,"area":"agents"},{"id":"2502.00757","title":"AgentBreeder: Mitigating the AI Safety Risks of Multi-Agent Scaffolds via Self-Improvement","created":"2025-02-02","cited_by_count":14,"area":"agents"},{"id":"2507.04724","title":"Who's the Mole? Modeling and Detecting Intention-Hiding Malicious Agents in LLM-Based Multi-Agent Systems","created":"2025-07-07","cited_by_count":13,"area":"agents"},{"id":"2506.15170","title":"From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystem","created":"2025-06-18","cited_by_count":12,"area":"agents"},{"id":"2503.01742","title":"Building Safe GenAI Applications: An End-to-End Overview of Red Teaming for Large Language Models","created":"2025-03-03","cited_by_count":11,"area":"safety"},{"id":"2506.05947","title":"IntentionESC: An Intention-Centered Framework for Enhancing Emotional Support in Dialogue Systems","created":"2025-06-06","cited_by_count":11,"area":null},{"id":"2507.14660","title":"When Autonomy Goes Rogue: Preparing for Risks of Multi-Agent Collusion in Social Systems","created":"2025-07-19","cited_by_count":11,"area":null},{"id":"2512.12069","title":"Rethinking Jailbreak Detection of Large Vision Language Models with Representational Contrastive Scoring","created":"2025-12-12","cited_by_count":11,"area":"lr"},{"id":"2504.16489","title":"Amplified Vulnerabilities: Structured Jailbreak Attacks on LLM-based Multi-Agent Debate","created":"2025-04-23","cited_by_count":10,"area":"lr"},{"id":"2507.05248","title":"Response Attack: Exploiting Contextual Priming to Jailbreak Large Language Models","created":"2025-07-07","cited_by_count":10,"area":"safety"},{"id":"2408.14972","title":"AgentMonitor: A Plug-and-Play Framework for Predictive and Secure Multi-Agent Systems","created":"2024-08-27","cited_by_count":9,"area":"agents"},{"id":"2505.20824","title":"MedSentry: Understanding and Mitigating Safety Risks in Medical LLM Multi-Agent Systems","created":"2025-05-27","cited_by_count":9,"area":"agents"},{"id":"2505.12442","title":"IP Leakage Attacks Targeting LLM-Based Multi-Agent Systems","created":"2025-05-18","cited_by_count":8,"area":"agents"},{"id":"2506.04572","title":"Demonstrations of Integrity Attacks in Multi-Agent Systems","created":"2025-06-05","cited_by_count":8,"area":"agents"},{"id":"2510.16219","title":"SentinelNet: Safeguarding Multi-Agent Collaboration Through Credit-Based Dynamic Threat Detection","created":"2025-10-17","cited_by_count":8,"area":"agents"},{"id":"2511.06448","title":"When AI Agents Collude Online: Financial Fraud Risks by Collaborative LLM Agents on Social Platforms","created":"2025-11-09","cited_by_count":8,"area":"agents"},{"id":"2602.03100","title":"Risky-Bench: Probing Agentic Safety Risks under Real-World Deployment","created":"2026-02-03","cited_by_count":8,"area":"agents"},{"id":"2412.12722","title":"Defending LVLMs Against Vision Attacks through Partial-Perception Supervision","created":"2024-12-17","cited_by_count":7,"area":"mllm"},{"id":"2502.00840","title":"Activation Approximations Can Incur Safety Vulnerabilities Even in Aligned LLMs: Comprehensive Analysis and Defense","created":"2025-02-02","cited_by_count":7,"area":null},{"id":"2504.07461","title":"Achilles Heel of Distributed Multi-Agent Systems","created":"2025-04-10","cited_by_count":6,"area":"agents"},{"id":"2505.18572","title":"MASTER: Multi-Agent Security Through Exploration of Roles and Topological Structures -- A Comprehensive Framework","created":"2025-05-24","cited_by_count":6,"area":"agents"},{"id":"2506.02546","title":"To trust or not to trust: Attention-based Trust Management for LLM Multi-Agent Systems","created":"2025-06-03","cited_by_count":6,"area":"agents"},{"id":"2509.16494","title":"Can an Individual Manipulate the Collective Decisions of Multi-Agents?","created":"2025-09-20","cited_by_count":5,"area":"agents"},{"id":"2510.07505","title":"PEAR: Planner-Executor Agent Robustness Benchmark","created":"2025-10-08","cited_by_count":5,"area":"agents"},{"id":"2510.09871","title":"CoBia: Constructed Conversations Can Trigger Otherwise Concealed Societal Biases in LLMs","created":"2025-10-10","cited_by_count":5,"area":"safety"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2601.04694","title":"ResMAS: Resilience Optimization in LLM-based Multi-agent Systems","created":"2026-01-08","cited_by_count":5,"area":"agents"},{"id":"2410.01677","title":"Mind Scramble: Unveiling Large Language Model Psychology Via Typoglycemia","created":"2024-10-02","cited_by_count":4,"area":null},{"id":"2603.13940","title":"GroupGuard: A Framework for Modeling and Defending Collusive Attacks in Multi-Agent Systems","created":"2026-03-14","cited_by_count":4,"area":"agents"},{"id":"2604.00835","title":"Agentic Tool Use in Large Language Models","created":"2026-04-01","cited_by_count":4,"area":"agents"},{"id":"2605.16282","title":"Taxonomy and Consistency Analysis of Safety Benchmarks for AI Agents","created":"2026-04-11","cited_by_count":4,"area":"agents"},{"id":"2511.15862","title":"The Subtle Art of Defection: Understanding Uncooperative Behaviors in LLM based Multi-Agent Systems","created":"2025-11-19","cited_by_count":3,"area":"agents"},{"id":"2511.22924","title":"MAS-Shield: A Defense Framework for Secure and Efficient LLM MAS","created":"2025-11-28","cited_by_count":3,"area":null},{"id":"2512.16167","title":"Ev-Trust: An Evolutionarily Stable Trust Mechanism for Decentralized LLM-Based Multi-Agent Service Economies","created":"2025-12-18","cited_by_count":3,"area":"agents"},{"id":"2603.11132","title":"WebWeaver: Breaking Topology Confidentiality in LLM Multi-Agent Systems with Stealthy Context-Based Inference","created":"2026-03-11","cited_by_count":3,"area":"agents"},{"id":"2603.15661","title":"DynaTrust: Defending Multi-Agent Systems Against Sleeper Agents via Dynamic Trust Graphs","created":"2026-03-09","cited_by_count":3,"area":"lr"},{"id":"2509.24408","title":"FuncPoison: Poisoning Function Library to Hijack Multi-agent Autonomous Driving Systems","created":"2025-09-29","cited_by_count":2,"area":"driving"},{"id":"2406.18783","title":"Psychological Profiling in Cybersecurity: A Look at LLMs and Psycholinguistic Features","created":"2024-06-26","cited_by_count":1,"area":null},{"id":"2604.06367","title":"WebSP-Eval: Evaluating Web Agents on Website Security and Privacy Tasks","created":"2026-04-07","cited_by_count":1,"area":"agents"},{"id":"2607.06807","title":"When Agents Go Rogue: Activation-Based Detection of Malicious Behaviors in Multi-Agent Systems","created":"2026-07-07","cited_by_count":1,"area":"agents"},{"id":"2607.26836","title":"Before Agents Speak: Pre-hoc Failure Risk Inference in Multi-Agent Systems","created":"2026-07-29","cited_by_count":1,"area":"agents"},{"id":"2608.00718","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","created":"2026-08-01","cited_by_count":1,"area":"agents"},{"id":"2510.17904","title":"BreakFun: Jailbreaking LLMs via Object Instantiation under Simulated Code Execution","created":"2025-10-19","cited_by_count":0,"area":"safety"},{"id":"2512.18755","title":"MEEA: Mere Exposure Effect-Driven Confrontational Optimization for LLM Jailbreaking","created":"2025-12-21","cited_by_count":0,"area":"alignment"},{"id":"2604.20166","title":"Trust Stack for Mental Health AI: A Survey of Calibration across Human, Interaction, and AI Layers","created":"2026-04-22","cited_by_count":0,"area":null},{"id":"2605.03242","title":"Enhancing Agent Safety Judgment: Controlled Benchmark Rewriting and Analogical Reasoning for Deceptive Out-of-Distribution Scenarios","created":"2026-05-05","cited_by_count":0,"area":"lr"},{"id":"2606.12918","title":"MAStrike: Shapley-Guided Collusive Red-Teaming on Multi-Agent Systems","created":"2026-06-11","cited_by_count":0,"area":"safety"},{"id":"2608.03272","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","created":"2026-08-04","cited_by_count":0,"area":"agents"},{"id":"2608.29098","title":"SafeAtlas-VL: Beyond Binary Multimodal Safety with Large-Scale Data and Guard Models","created":"2026-08-29","cited_by_count":0,"area":null},{"id":"2609.02414","title":"Before the Script, Set the Stage: How Worldview Simulation Amplifies Psychologically Grounded Persuasion in Multi-Turn Jailbreaking","created":"2026-09-02","cited_by_count":0,"area":"safety"},{"id":"2609.17527","title":"Agentic Societies Need a Social Harness","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2609.18460","title":"Collective Loss of Control in LLM Agent Systems: An Epidemic Account of Mutation, Contagion, and Recovery","created":"2026-09-16","cited_by_count":0,"area":"agents"},{"id":"2609.37567","title":"Concealing LLM-Based Multi-Agent Topology via Phantom Structure Injection","created":"2026-09-29","cited_by_count":0,"area":"agents"},{"id":"2610.16155","title":"Uncovering Robustness Weaknesses in LLM Agents via Persona Evolution with Task-Integrity Constraints","created":"2026-10-12","cited_by_count":0,"area":"agents"}],"next_cursor":null}