{"total":77,"rows":[{"id":"2405.17935","title":"Tool Learning with Large Language Models: A Survey","created":"2024-05-28","cited_by_count":223,"area":"agents"},{"id":"2404.18231","title":"From Persona to Personalization: A Survey on Role-Playing Language Agents","created":"2024-04-28","cited_by_count":212,"area":"agents"},{"id":"2504.18575","title":"WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks","created":"2025-04-22","cited_by_count":157,"area":"agents"},{"id":"2504.11703","title":"Progent: Securing AI Agents with Privilege Control","created":"2025-04-16","cited_by_count":141,"area":"agents"},{"id":"2406.02630","title":"AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathways","created":"2024-06-04","cited_by_count":127,"area":null},{"id":"2504.01990","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","created":"2025-03-31","cited_by_count":126,"area":"agents"},{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2409.19091","title":"System-Level Defense against Indirect Prompt Injection Attacks: An Information Flow Control Perspective","created":"2024-09-27","cited_by_count":96,"area":"safety"},{"id":"2405.05175","title":"AirGapAgent: Protecting Privacy-Conscious Conversational Agents","created":"2024-05-08","cited_by_count":94,"area":"agents"},{"id":"2409.10102","title":"Trustworthiness in Retrieval-Augmented Generation Systems: A Survey","created":"2024-09-16","cited_by_count":83,"area":"rag"},{"id":"2503.09780","title":"AgentDAM: Privacy Leakage Evaluation for Autonomous Web Agents","created":"2025-03-12","cited_by_count":82,"area":"agents"},{"id":"2502.05174","title":"MELON: Provable Defense Against Indirect Prompt Injection Attacks in AI Agents","created":"2025-02-07","cited_by_count":77,"area":"agents"},{"id":"2405.03644","title":"When LLMs Meet Cybersecurity: A Systematic Literature Review","created":"2024-05-06","cited_by_count":71,"area":null},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2410.12855","title":"JAILJUDGE: A Comprehensive Jailbreak Judge Benchmark with Multi-Agent Enhanced Explanation Evaluation Framework","created":"2024-10-11","cited_by_count":47,"area":"agents"},{"id":"2405.01745","title":"Large Language Models for UAVs: Current State and Pathways to the Future","created":"2024-05-02","cited_by_count":33,"area":null},{"id":"2510.23883","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","created":"2025-10-27","cited_by_count":28,"area":"agents"},{"id":"2406.08689","title":"Security of AI Agents","created":"2024-06-12","cited_by_count":26,"area":"agents"},{"id":"2506.07564","title":"SAFEFLOW: A Principled Protocol for Trustworthy and Transactional Autonomous Agent Systems","created":"2025-06-09","cited_by_count":25,"area":"agents"},{"id":"2404.16251","title":"Prompt Leakage effect and defense strategies for multi-turn LLM interactions","created":"2024-04-24","cited_by_count":23,"area":null},{"id":"2408.08333","title":"CodeMirage: Hallucinations in Code Generated by Large Language Models","created":"2024-08-14","cited_by_count":23,"area":null},{"id":"2501.04437","title":"Integrating LLMs with ITS: Recent Advances, Potentials, Challenges, and Future Directions","created":"2025-01-08","cited_by_count":23,"area":null},{"id":"2510.21236","title":"AgentBound: Securing Execution Boundaries of AI Agents","created":"2025-10-24","cited_by_count":23,"area":"agents"},{"id":"2512.07086","title":"ThinkTrap: Denial-of-Service Attacks against Black-box LLM Services via Infinite Thinking","created":"2025-12-08","cited_by_count":23,"area":"lr"},{"id":"2408.04870","title":"ConfusedPilot: Confused Deputy Risks in RAG-based LLMs","created":"2024-08-09","cited_by_count":22,"area":"rag"},{"id":"2410.21492","title":"FATH: Authentication-based Test-time Defense against Indirect Prompt Injection Attacks","created":"2024-10-28","cited_by_count":22,"area":"safety"},{"id":"2504.05408","title":"Frontier AI's Impact on the Cybersecurity Landscape","created":"2025-04-07","cited_by_count":21,"area":null},{"id":"2602.06176","title":"Large Language Model Reasoning Failures","created":"2026-02-05","cited_by_count":21,"area":"lr"},{"id":"2506.22521","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","created":"2025-06-26","cited_by_count":19,"area":null},{"id":"2412.18295","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","created":"2024-12-24","cited_by_count":18,"area":"rag"},{"id":"2409.15398","title":"Attack Atlas: A Practitioner's Perspective on Challenges and Pitfalls in Red Teaming GenAI","created":"2024-09-23","cited_by_count":16,"area":"safety"},{"id":"2502.13141","title":"UniGuardian: A Unified Defense for Detecting Prompt Injection, Backdoor Attacks and Adversarial Attacks in Large Language Models","created":"2025-02-18","cited_by_count":16,"area":"safety"},{"id":"2603.19469","title":"A Framework for Formalizing LLM Agent Security","created":"2026-03-19","cited_by_count":16,"area":"agents"},{"id":"2406.04755","title":"LLM Whisperer: An Inconspicuous Attack to Bias LLM Responses","created":"2024-06-07","cited_by_count":15,"area":null},{"id":"2411.13874","title":"Next-Generation Phishing: How LLM Agents Empower Cyber Attackers","created":"2024-11-21","cited_by_count":14,"area":null},{"id":"2409.01630","title":"SafeEmbodAI: a Safety Framework for Mobile Robots in Embodied AI Systems","created":"2024-09-03","cited_by_count":13,"area":null},{"id":"2505.19056","title":"An Embarrassingly Simple Defense Against LLM Abliteration Attacks","created":"2025-05-25","cited_by_count":13,"area":"safety"},{"id":"2504.00018","title":"SandboxEval: Towards Securing Test Environment for Untrusted Code","created":"2025-03-27","cited_by_count":10,"area":null},{"id":"2511.05797","title":"When AI Meets the Web: Prompt Injection Risks in Third-Party AI Chatbot Plugins","created":"2025-11-08","cited_by_count":9,"area":"safety"},{"id":"2404.15869","title":"Semantic Routing for Enhanced Performance of LLM-Assisted Intent-Based 5G Core Network Management and Orchestration","created":"2024-04-24","cited_by_count":8,"area":null},{"id":"2503.07158","title":"Generative AI in Transportation Planning: A Survey","created":"2025-03-10","cited_by_count":8,"area":null},{"id":"2505.01177","title":"LLM Security: Vulnerabilities, Attacks, Defenses, and Countermeasures","created":"2025-05-02","cited_by_count":8,"area":null},{"id":"2408.05061","title":"A Jailbroken GenAI Model Can Cause Substantial Harm: GenAI-powered Applications are Vulnerable to PromptWares","created":"2024-08-09","cited_by_count":7,"area":"safety"},{"id":"2410.22587","title":"Toxicity of the Commons: Curating Open-Source Pre-Training Data","created":"2024-10-29","cited_by_count":7,"area":null},{"id":"2504.19277","title":"Small Models, Big Tasks: An Exploratory Empirical Study on Small Language Models for Function Calling","created":"2025-04-27","cited_by_count":7,"area":"agents"},{"id":"2410.02916","title":"LLM Safeguard is a Double-Edged Sword: Exploiting False Positives for Denial-of-Service Attacks","created":"2024-10-03","cited_by_count":6,"area":"safety"},{"id":"2505.05057","title":"Towards Mitigating API Hallucination in Code Generated by LLMs with Hierarchical Dependency Aware","created":"2025-05-08","cited_by_count":6,"area":"rag"},{"id":"2603.07557","title":"AgentRaft: Automated Detection of Data Over-Exposure in LLM Agents","created":"2026-03-08","cited_by_count":6,"area":"agents"},{"id":"2501.18280","title":"Jailbreaking LLMs' Safeguard with Universal Magic Words for Text Embedding Models","created":"2025-01-30","cited_by_count":5,"area":"safety"},{"id":"2508.20766","title":"Turning the Spell Around: Lightweight Alignment Amplification via Rank-One Safety Injection","created":"2025-08-28","cited_by_count":5,"area":"alignment"},{"id":"2405.15902","title":"Hacc-Man: An Arcade Game for Jailbreaking LLMs","created":"2024-05-24","cited_by_count":4,"area":"safety"},{"id":"2502.07036","title":"Automated Consistency Analysis of LLMs","created":"2025-02-10","cited_by_count":4,"area":null},{"id":"2505.02502","title":"Unveiling the Landscape of LLM Deployment in the Wild: An Empirical Study","created":"2025-05-05","cited_by_count":4,"area":null},{"id":"2406.18812","title":"A Survey on Privacy Attacks Against Digital Twin Systems in AI-Robotics","created":"2024-06-27","cited_by_count":3,"area":null},{"id":"2504.13769","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","created":"2025-04-18","cited_by_count":3,"area":"rag"},{"id":"2508.19287","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","created":"2025-08-25","cited_by_count":3,"area":null},{"id":"2409.02375","title":"How Privacy-Savvy Are Large Language Models? A Case Study on Compliance and Privacy Technical Review","created":"2024-09-04","cited_by_count":2,"area":null},{"id":"2508.08629","title":"Securing Educational LLMs: A Generalised Taxonomy of Attacks on LLMs and DREAD Risk Assessment","created":"2025-08-12","cited_by_count":2,"area":"safety"},{"id":"2512.06659","title":"The Evolution of Agentic AI in Cybersecurity: From Single LLM Reasoners to Multi-Agent Systems and Autonomous Pipelines","created":"2025-12-07","cited_by_count":2,"area":"agents"},{"id":"2604.05987","title":"Flowr -- Scaling Up Retail Supply Chain Operations Through Agentic AI in Large Scale Supermarket Chains","created":"2026-04-07","cited_by_count":2,"area":null},{"id":"2605.08460","title":"When Child Inherits: Modeling and Exploiting Subagent Spawn in Multi-Agent Networks","created":"2026-05-08","cited_by_count":2,"area":"agents"},{"id":"2409.17144","title":"Differential Privacy Regularization: Protecting Training Data Through Loss Function Regularization","created":"2024-09-25","cited_by_count":1,"area":null},{"id":"2410.04009","title":"ASPIRER: Bypassing System Prompts With Permutation-based Backdoors in LLMs","created":"2024-10-05","cited_by_count":1,"area":"safety"},{"id":"2410.18114","title":"Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyond","created":"2024-10-09","cited_by_count":1,"area":null},{"id":"2506.06401","title":"Direct Behavior Optimization: Unlocking the Potential of Lightweight LLMs","created":"2025-06-06","cited_by_count":1,"area":null},{"id":"2509.12168","title":"RAGs to Riches: RAG-like Few-shot Learning for Large Language Model Role-playing","created":"2025-09-15","cited_by_count":1,"area":null},{"id":"2511.05919","title":"Injecting Falsehoods: Adversarial Man-in-the-Middle Attacks Undermining Factual Recall in LLMs","created":"2025-11-08","cited_by_count":1,"area":null},{"id":"2604.19844","title":"If you're waiting for a sign... that might not be it! Mitigating Trust Boundary Confusion from Visual Injections on Vision-Language Agentic Systems","created":"2026-04-21","cited_by_count":1,"area":"mllm"},{"id":"2503.05737","title":"Local Differences, Global Lessons: Insights from Organisation Policies for International Legislation","created":"2025-02-19","cited_by_count":0,"area":null},{"id":"2510.16128","title":"Prompt injections as a tool for preserving identity in GAI image descriptions","created":"2025-10-17","cited_by_count":0,"area":"safety"},{"id":"2511.07480","title":"KG-DF: A Black-box Defense Framework against Jailbreak Attacks Based on Knowledge Graphs","created":"2025-11-09","cited_by_count":0,"area":"safety"},{"id":"2602.20513","title":"From Performance to Purpose: A Sociotechnical Taxonomy for Evaluating Large Language Model Utility","created":"2026-02-24","cited_by_count":0,"area":null},{"id":"2606.22153","title":"$\\pi$-RAG: Oblivious Retrieval via Semantic Quantization and Transcendental Addressing for Large Language Models","created":"2026-06-20","cited_by_count":0,"area":null},{"id":"2607.16660","title":"From Adoption to Deployment: A Qualitative Study on AI Integration in Software Development Practice","created":"2026-07-18","cited_by_count":0,"area":null},{"id":"2609.28557","title":"BaseCamp --- An Agentic AI Framework for Automating DNA Sequencing Data Pipelines","created":"2026-09-23","cited_by_count":0,"area":"agents"},{"id":"2609.28585","title":"Persistent Billable State: Denial-of-Wallet Attacks and Defenses in Tool-Calling LLM Agents","created":"2026-09-23","cited_by_count":0,"area":"agents"},{"id":"2610.10742","title":"BRANCH: Bypassing Multi-Scanner AI Guardrails","created":"2026-10-07","cited_by_count":0,"area":"lr"}],"next_cursor":null}