{"total":109,"rows":[{"id":"2501.04227","title":"Agent Laboratory: Using LLM Agents as Research Assistants","created":"2025-01-08","cited_by_count":425,"area":"agents"},{"id":"2406.07933","title":"Large Language Model Unlearning via Embedding-Corrupted Prompts","created":"2024-06-12","cited_by_count":116,"area":"safety"},{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2503.09648","title":"A Survey on Trustworthy LLM Agents: Threats and Countermeasures","created":"2025-03-12","cited_by_count":96,"area":"agents"},{"id":"2503.17332","title":"CVE-Bench: A Benchmark for AI Agents' Ability to Exploit Real-World Web Application Vulnerabilities","created":"2025-03-21","cited_by_count":96,"area":"agents"},{"id":"2406.01637","title":"Teams of LLM Agents can Exploit Zero-Day Vulnerabilities","created":"2024-06-02","cited_by_count":95,"area":"agents"},{"id":"2503.09780","title":"AgentDAM: Privacy Leakage Evaluation for Autonomous Web Agents","created":"2025-03-12","cited_by_count":82,"area":"agents"},{"id":"2405.03644","title":"When LLMs Meet Cybersecurity: A Systematic Literature Review","created":"2024-05-06","cited_by_count":71,"area":null},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2403.04893","title":"A Safe Harbor for AI Evaluation and Red Teaming","created":"2024-03-07","cited_by_count":47,"area":"safety"},{"id":"2412.01778","title":"HackSynth: LLM Agent and Evaluation Framework for Autonomous Penetration Testing","created":"2024-12-02","cited_by_count":37,"area":"agents"},{"id":"2406.14595","title":"Adversaries Can Misuse Combinations of Safe Models","created":"2024-06-20","cited_by_count":32,"area":null},{"id":"2405.10313","title":"How Far Are We From AGI: Are LLMs All We Need?","created":"2024-05-16","cited_by_count":31,"area":null},{"id":"2602.17753","title":"The 2025 AI Agent Index: Documenting Technical and Safety Features of Deployed Agentic AI Systems","created":"2026-02-19","cited_by_count":30,"area":"agents"},{"id":"2505.24019","title":"LLM Agents Should Employ Security Principles","created":"2025-05-29","cited_by_count":29,"area":"agents"},{"id":"2510.23883","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","created":"2025-10-27","cited_by_count":28,"area":"agents"},{"id":"2410.14569","title":"When LLMs Go Online: The Emerging Threat of Web-Enabled LLMs","created":"2024-10-18","cited_by_count":24,"area":"agents"},{"id":"2505.10924","title":"A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?","created":"2025-05-16","cited_by_count":23,"area":"agents"},{"id":"2508.00910","title":"Cyber-Zero: Training Cybersecurity Agents without Runtime","created":"2025-07-29","cited_by_count":22,"area":"agents"},{"id":"2603.15727","title":"AgentWorm: Self-Propagating Attacks Across LLM Agent Ecosystems","created":"2026-03-16","cited_by_count":17,"area":"agents"},{"id":"2502.01635","title":"The AI Agent Index","created":"2025-02-03","cited_by_count":15,"area":"agents"},{"id":"2503.01811","title":"AutoAdvExBench: Benchmarking autonomous exploitation of adversarial example defenses","created":"2025-03-03","cited_by_count":15,"area":null},{"id":"2508.18370","title":"Training Language Model Agents to Find Vulnerabilities with CTF-Dojo","created":"2025-08-25","cited_by_count":15,"area":"agents"},{"id":"2512.09882","title":"Comparing AI Agents to Cybersecurity Professionals in Real-World Penetration Testing","created":"2025-12-10","cited_by_count":15,"area":null},{"id":"2603.11214","title":"Measuring AI Agents' Progress on Multi-Step Cyber Attack Scenarios","created":"2026-03-11","cited_by_count":14,"area":"agents"},{"id":"2406.18294","title":"Hierarchical Context Pruning: Optimizing Real-World Code Completion with Repository-Level Pretrained Code LLMs","created":"2024-06-26","cited_by_count":13,"area":null},{"id":"2507.13169","title":"Prompt Injection 2.0: Hybrid AI Threats","created":"2025-07-17","cited_by_count":13,"area":"safety"},{"id":"2604.20801","title":"Synthesizing Multi-Agent Harnesses for Vulnerability Discovery","created":"2026-04-22","cited_by_count":13,"area":"agents"},{"id":"2410.09114","title":"Catastrophic Cyber Capabilities Benchmark (3CB): Robustly Evaluating LLM Agent Cyber Offense Capabilities","created":"2024-10-10","cited_by_count":12,"area":"agents"},{"id":"2502.15797","title":"OCCULT: Evaluating Large Language Models for Offensive Cyber Operation Capabilities","created":"2025-02-18","cited_by_count":12,"area":null},{"id":"2404.12689","title":"Can LLMs Understand Computer Networks? Towards a Virtual System Administrator","created":"2024-04-19","cited_by_count":11,"area":null},{"id":"2410.17141","title":"Towards Automated Penetration Testing: Introducing LLM Benchmark, Analysis, and Improvements","created":"2024-10-22","cited_by_count":11,"area":null},{"id":"2502.09755","title":"Jailbreak Attack Initializations as Extractors of Compliance Directions","created":"2025-02-13","cited_by_count":10,"area":"safety"},{"id":"2501.19202","title":"Improving LLM Unlearning Robustness via Random Perturbations","created":"2025-01-31","cited_by_count":9,"area":"safety"},{"id":"2505.12402","title":"Automated Profile Inference with Language Model Agents","created":"2025-05-18","cited_by_count":9,"area":"agents"},{"id":"2506.07524","title":"TAI3: Testing Agent Integrity in Interpreting User Intent","created":"2025-06-09","cited_by_count":9,"area":"agents"},{"id":"2502.06656","title":"A Frontier AI Risk Management Framework: Bridging the Gap Between Current AI Practices and Established Risk Management","created":"2025-02-10","cited_by_count":8,"area":null},{"id":"2505.18384","title":"Dynamic Risk Assessments for Offensive Cybersecurity Agents","created":"2025-05-23","cited_by_count":8,"area":"agents"},{"id":"2408.05061","title":"A Jailbroken GenAI Model Can Cause Substantial Harm: GenAI-powered Applications are Vulnerable to PromptWares","created":"2024-08-09","cited_by_count":7,"area":"safety"},{"id":"2505.06913","title":"RedTeamLLM: an Agentic AI framework for offensive security","created":"2025-05-11","cited_by_count":7,"area":"agents"},{"id":"2605.30883","title":"TRACE: Task-Aware Adaptive Self-Evolving Agentic Jailbreaking","created":"2026-05-29","cited_by_count":7,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2408.11650","title":"CIPHER: Cybersecurity Intelligent Penetration-testing Helper for Ethical Researcher","created":"2024-08-21","cited_by_count":6,"area":null},{"id":"2410.10871","title":"Applying Refusal-Vector Ablation to Llama 3.1 70B Agents","created":"2024-10-08","cited_by_count":6,"area":"agents"},{"id":"2505.07610","title":"Concept-Level Explainability for Auditing & Steering LLM Responses","created":"2025-05-12","cited_by_count":6,"area":"safety"},{"id":"2509.14278","title":"Beyond Data Privacy: New Privacy Risks for Large Language Models","created":"2025-09-16","cited_by_count":6,"area":null},{"id":"2602.02164","title":"Co-RedTeam: Orchestrated Security Discovery and Exploitation with LLM Agents","created":"2026-02-02","cited_by_count":6,"area":"agents"},{"id":"2606.01494","title":"ClawHub Security Signals: When VirusTotal, Static Analysis, and SkillSpector Disagree","created":"2026-05-31","cited_by_count":6,"area":null},{"id":"2410.15650","title":"Voice-Enabled AI Agents can Perform Common Scams","created":"2024-10-21","cited_by_count":5,"area":"agents"},{"id":"2505.11449","title":"LLMs unlock new paths to monetizing exploits","created":"2025-05-16","cited_by_count":5,"area":null},{"id":"2412.08653","title":"What AI evaluations for preventing catastrophic risks can and cannot do","created":"2024-11-26","cited_by_count":4,"area":null},{"id":"2505.00841","title":"From Texts to Shields: Convergence of Large Language Models and Cybersecurity","created":"2025-05-01","cited_by_count":4,"area":null},{"id":"2506.00739","title":"DefenderBench: A Toolkit for Evaluating Language Agents in Cybersecurity Environments","created":"2025-05-31","cited_by_count":4,"area":"agents"},{"id":"2506.02048","title":"Improving LLM Agents with Reinforcement Learning on Cryptographic CTF Challenges","created":"2025-06-01","cited_by_count":4,"area":"agents"},{"id":"2507.06850","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","created":"2025-07-09","cited_by_count":4,"area":"agents"},{"id":"2508.21579","title":"Agentic Discovery and Validation of Android App Vulnerabilities","created":"2025-08-29","cited_by_count":4,"area":"agents"},{"id":"2509.16749","title":"Evaluating LLM Generated Detection Rules in Cybersecurity","created":"2025-09-20","cited_by_count":4,"area":null},{"id":"2509.18661","title":"Agentic AutoSurvey: Let LLMs Survey LLMs","created":"2025-09-23","cited_by_count":4,"area":"agents"},{"id":"2510.14700","title":"LLM Agents for Automated Web Vulnerability Reproduction: Are We There Yet?","created":"2025-10-16","cited_by_count":4,"area":"agents"},{"id":"2604.05719","title":"Hackers or Hallucinators? A Comprehensive Analysis of LLM-Based Automated Penetration Testing","created":"2026-04-07","cited_by_count":4,"area":null},{"id":"2410.15396","title":"The Best Defense is a Good Offense: Countering LLM-Powered Cyberattacks","created":"2024-10-20","cited_by_count":3,"area":null},{"id":"2504.12143","title":"ARCeR: an Agentic RAG for the Automated Definition of Cyber Ranges","created":"2025-04-16","cited_by_count":3,"area":"agents"},{"id":"2510.17862","title":"When \"Correct\" Is Not Safe: Can We Trust Functionally Correct Patches Generated by Code Agents?","created":"2025-10-15","cited_by_count":3,"area":"agents"},{"id":"2605.15228","title":"Verifiable Agentic Infrastructure: Proof-Derived Authorization for Sovereign AI Systems","created":"2026-05-13","cited_by_count":3,"area":"agents"},{"id":"2412.07430","title":"Knowledge Graph Guided Evaluation of Abstention Techniques","created":"2024-12-10","cited_by_count":2,"area":null},{"id":"2603.09134","title":"AgenticCyOps: Securing Multi-Agentic AI Integration in Enterprise Cyber Operations","created":"2026-03-10","cited_by_count":2,"area":"agents"},{"id":"2605.24949","title":"APT-Agent: Automated Penetration Testing using Large Language Models","created":"2026-05-24","cited_by_count":2,"area":"agents"},{"id":"2410.18312","title":"Countering Autonomous Cyber Threats","created":"2024-10-23","cited_by_count":1,"area":null},{"id":"2502.15506","title":"Construction and Evaluation of LLM-based agents for Semi-Autonomous penetration testing","created":"2025-02-21","cited_by_count":1,"area":"agents"},{"id":"2508.14190","title":"Two Birds with One Stone: Multi-Task Detection and Attribution of LLM-Generated Text","created":"2025-08-19","cited_by_count":1,"area":null},{"id":"2601.03287","title":"Automated Post-Incident Policy Gap Analysis via Threat-Informed Evidence Mapping using Large Language Models","created":"2026-01-04","cited_by_count":1,"area":null},{"id":"2604.05440","title":"LanG -- A Governance-Aware Agentic AI Platform for Unified Security Operations","created":"2026-04-07","cited_by_count":1,"area":"agents"},{"id":"2604.06019","title":"CritBench: A Framework for Evaluating Cybersecurity Capabilities of Large Language Models in IEC 61850 Digital Substation Environments","created":"2026-04-07","cited_by_count":1,"area":null},{"id":"2605.30096","title":"How Reliable Are AI Attackers Against a Fixed Vulnerable Target? A 400-Run Empirical Study of LLM Penetration Testing Consistency","created":"2026-05-28","cited_by_count":1,"area":null},{"id":"2606.25332","title":"Decoupling Reconnaissance and Exploitation: Measuring the Capability Boundaries of LLM-Based Web Penetration Testing","created":"2026-06-24","cited_by_count":1,"area":null},{"id":"2607.12406","title":"Isolation as a First-Class Principle for LLM-Agent System Safety: Concepts, Taxonomy, Challenges and Future Directions","created":"2026-07-14","cited_by_count":1,"area":"agents"},{"id":"2607.18575","title":"RECEIPT: Deterministic, Reward-Hacking-Resistant Verification for White-Box Agentic XSS Discovery","created":"2026-07-20","cited_by_count":1,"area":"agents"},{"id":"2607.25379","title":"Cyber-Capable AI Agents: Vulnerabilities, Evaluation Containment, and Defensive Response","created":"2026-07-28","cited_by_count":1,"area":"agents"},{"id":"2608.03009","title":"Tiny Enough to Break In: Agentic Remote Access Trojans Powered by Small Language Models","created":"2026-08-04","cited_by_count":1,"area":"agents"},{"id":"2608.04317","title":"Trident : How to Break Deep Reinforcement Learning Cyber Defenses (Agentic)","created":"2026-08-05","cited_by_count":1,"area":"agents"},{"id":"2608.20563","title":"Beyond End-to-End Success: Diagnosing Failures in Long-Horizon Security LLM Agents","created":"2026-08-20","cited_by_count":1,"area":"agents"},{"id":"2608.26237","title":"How Do LLM Agents Actually Get the Flag? Trace-Level Provenance for Agentic Offensive Security Evaluation","created":"2026-08-26","cited_by_count":1,"area":"agents"},{"id":"2609.22664","title":"From Capability to Assurance in Autonomous Penetration-Testing Harnesses: A Framework and Reference Implementation","created":"2026-09-19","cited_by_count":1,"area":"agents"},{"id":"2609.39050","title":"Covert Assistance: Helpful LLM Agents Evade Oversight in Multi-Agent Systems","created":"2026-09-30","cited_by_count":1,"area":"agents"},{"id":"2511.13725","title":"Can We Stop Malicious AI? KILLBENCH: A Benchmark for External AI Kill Switch Feasibility","created":"2025-09-26","cited_by_count":0,"area":null},{"id":"2512.15081","title":"Quantifying Return on Security Controls in LLM Systems","created":"2025-12-17","cited_by_count":0,"area":"safety"},{"id":"2601.12607","title":"A Cloud-based Multi-Agentic Workflow for Science","created":"2026-01-18","cited_by_count":0,"area":"agents"},{"id":"2602.13363","title":"Assessing Spear-Phishing Website Generation in Large Language Model Coding Agents","created":"2026-02-13","cited_by_count":0,"area":"agents"},{"id":"2603.20131","title":"An Agentic Multi-Agent Architecture for Cybersecurity Risk Management","created":"2026-03-20","cited_by_count":0,"area":"agents"},{"id":"2604.01637","title":"Seclens: Role-specific Evaluation of LLM's for security vulnerablity detection","created":"2026-04-02","cited_by_count":0,"area":null},{"id":"2604.10427","title":"A Queueing-Theoretic Framework for Dynamic Attack Surfaces: Data-Integrated Risk Analysis and Adaptive Defense","created":"2026-04-12","cited_by_count":0,"area":"deeprl"},{"id":"2604.17159","title":"Systematic Capability Benchmarking of Frontier Large Language Models for Offensive Cyber Tasks","created":"2026-04-18","cited_by_count":0,"area":"agents"},{"id":"2605.06713","title":"Agentic AI and the Industrialization of Cyber Offense: Forecast, Consequences, and Defensive Priorities for Enterprises and the Mittelstand","created":"2026-05-06","cited_by_count":0,"area":"agents"},{"id":"2605.12916","title":"SHM-Agents: A Generalist-Specialist Integrated Agent System for Structural Health Monitoring","created":"2026-05-13","cited_by_count":0,"area":null},{"id":"2605.17416","title":"Benchmarking Mythos-Linked Bug Rediscovery","created":"2026-05-17","cited_by_count":0,"area":null},{"id":"2606.10304","title":"MIRAGE: A Polarity-Flipping Encoding Subspace in LLM Agents","created":"2026-06-09","cited_by_count":0,"area":"agents"},{"id":"2606.15123","title":"Data-Centric Benchmarking of Exploit Generation in LLMs: Understanding the Impact of Fine-Tuning","created":"2026-06-13","cited_by_count":0,"area":null},{"id":"2606.19149","title":"OpenAnt: LLM-Powered Vulnerability Discovery Through Code Decomposition, Adversarial Verification, and Dynamic Testing","created":"2026-06-17","cited_by_count":0,"area":null},{"id":"2606.24402","title":"Poisoned Playbooks: Demystifying Knowledge Poisoning Effects on AI Security Agents","created":"2026-06-23","cited_by_count":0,"area":"rag"},{"id":"2607.11288","title":"Mako: A Self-Evolving Agentic Operating System (SE-AOS) for Autonomous Web Exploitation","created":"2026-07-13","cited_by_count":0,"area":"agents"}],"next_cursor":"100"}