{"total":59,"rows":[{"id":"2410.07283","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","created":"2024-10-09","cited_by_count":133,"area":"agents"},{"id":"2406.02630","title":"AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathways","created":"2024-06-04","cited_by_count":127,"area":null},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2411.09523","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","created":"2024-11-14","cited_by_count":65,"area":"agents"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2503.12188","title":"Multi-Agent Systems Execute Arbitrary Malicious Code","created":"2025-03-15","cited_by_count":53,"area":"agents"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2504.21034","title":"SAGA: A Security Architecture for Governing AI Agentic Systems","created":"2025-04-27","cited_by_count":45,"area":"agents"},{"id":"2501.10114","title":"Infrastructure for AI Agents","created":"2025-01-17","cited_by_count":41,"area":null},{"id":"2503.04392","title":"AgentSafe: Safeguarding Large Language Model-based Multi-agent Systems via Hierarchical Data Management","created":"2025-03-06","cited_by_count":38,"area":"agents"},{"id":"2505.19234","title":"GUARDIAN: Safeguarding LLM Multi-Agent Collaborations with Temporal Graph Modeling","created":"2025-05-25","cited_by_count":36,"area":"agents"},{"id":"2602.10453","title":"The Landscape of Prompt Injection Threats in LLM Agents: From Taxonomy to Analysis","created":"2026-02-11","cited_by_count":30,"area":"agents"},{"id":"2410.15686","title":"NetSafe: Exploring the Topological Safety of Multi-agent Networks","created":"2024-10-21","cited_by_count":29,"area":"agents"},{"id":"2505.18889","title":"Security Concerns for Large Language Models: A Survey","created":"2025-05-24","cited_by_count":29,"area":null},{"id":"2505.24019","title":"LLM Agents Should Employ Security Principles","created":"2025-05-29","cited_by_count":29,"area":"agents"},{"id":"2404.07981","title":"Manipulating Large Language Models to Increase Product Visibility","created":"2024-04-11","cited_by_count":28,"area":null},{"id":"2510.23883","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","created":"2025-10-27","cited_by_count":28,"area":"agents"},{"id":"2502.19145","title":"Multi-Agent Security Tax: Trading Off Security and Collaboration Capabilities in Multi-Agent Systems","created":"2025-02-26","cited_by_count":27,"area":null},{"id":"2604.16548","title":"A Survey on Long-Term Memory Security in LLM Agents: Attacks, Defenses, and Governance Across the Memory Lifecycle","created":"2026-04-17","cited_by_count":27,"area":"agents"},{"id":"2507.20526","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","created":"2025-07-28","cited_by_count":24,"area":"lr"},{"id":"2406.12137","title":"IDs for AI Systems","created":"2024-06-17","cited_by_count":19,"area":null},{"id":"2602.11865","title":"Intelligent AI Delegation","created":"2026-02-12","cited_by_count":18,"area":null},{"id":"2603.15714","title":"How Vulnerable Are AI Agents to Indirect Prompt Injections? Insights from a Large-Scale Public Competition","created":"2026-03-16","cited_by_count":17,"area":"agents"},{"id":"2603.15727","title":"AgentWorm: Self-Propagating Attacks Across LLM Agent Ecosystems","created":"2026-03-16","cited_by_count":17,"area":"agents"},{"id":"2601.07072","title":"Overcoming the Retrieval Barrier: Indirect Prompt Injection in the Wild for LLM Systems","created":"2026-01-11","cited_by_count":16,"area":"safety"},{"id":"2507.13169","title":"Prompt Injection 2.0: Hybrid AI Threats","created":"2025-07-17","cited_by_count":13,"area":"safety"},{"id":"2506.07524","title":"TAI3: Testing Agent Integrity in Interpreting User Intent","created":"2025-06-09","cited_by_count":9,"area":"agents"},{"id":"2505.12442","title":"IP Leakage Attacks Targeting LLM-Based Multi-Agent Systems","created":"2025-05-18","cited_by_count":8,"area":"agents"},{"id":"2602.19555","title":"SOK: A Taxonomy of Attack Vectors and Defense Strategies for Agentic Supply Chain Runtime","created":"2026-02-23","cited_by_count":8,"area":"agents"},{"id":"2603.07379","title":"SoK: Agentic Retrieval-Augmented Generation (RAG): Taxonomy, Architectures, Evaluation, and Research Directions","created":"2026-03-07","cited_by_count":8,"area":"lr"},{"id":"2606.22528","title":"Governance Decay: How Context Compaction Silently Erases Safety Constraints in Long-Horizon LLM Agents","created":"2026-06-21","cited_by_count":8,"area":"agents"},{"id":"2606.23075","title":"Safety in Self-Evolving LLM Agent Systems: Threats, Amplification, and Case Studies","created":"2026-06-22","cited_by_count":8,"area":"agents"},{"id":"2408.05061","title":"A Jailbroken GenAI Model Can Cause Substantial Harm: GenAI-powered Applications are Vulnerable to PromptWares","created":"2024-08-09","cited_by_count":7,"area":"safety"},{"id":"2605.02812","title":"Autonomous LLM Agent Worms: Cross-Platform Propagation, Automated Discovery and Temporal Re-Entry Defense","created":"2026-05-04","cited_by_count":6,"area":"agents"},{"id":"2605.16746","title":"State Contamination in Memory-Augmented LLM Agents","created":"2026-05-16","cited_by_count":5,"area":"agents"},{"id":"2605.23989","title":"Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security","created":"2026-05-17","cited_by_count":5,"area":"agents"},{"id":"2412.10807","title":"Towards Action Hijacking of Large Language Model-based Agent","created":"2024-12-14","cited_by_count":4,"area":"agents"},{"id":"2608.10218","title":"Mind Viruses: Self-Propagating Ideas in Multi-Agent LLM Systems","created":"2026-08-10","cited_by_count":4,"area":"agents"},{"id":"2604.21131","title":"Cross-Session Threats in AI Agents: Benchmark, Evaluation, and Algorithms","created":"2026-04-22","cited_by_count":3,"area":"agents"},{"id":"2608.25776","title":"EVOMAL: Self-Poisoning in Self-Evolving Coding Agents","created":"2026-08-26","cited_by_count":3,"area":"agents"},{"id":"2410.23472","title":"Risk Sources and Risk Management Measures in Support of Standards for General-Purpose AI Systems","created":"2024-10-30","cited_by_count":2,"area":null},{"id":"2503.19280","title":"LogicLearner: A Tool for the Guided Practice of Propositional Logic Proofs","created":"2025-03-25","cited_by_count":2,"area":null},{"id":"2507.09801","title":"Technical Requirements for Halting Dangerous AI Activities","created":"2025-07-13","cited_by_count":2,"area":null},{"id":"2512.23132","title":"Multi-Agent Framework for Threat Mitigation and Resilience in AI-Based Systems","created":"2025-12-29","cited_by_count":2,"area":"agents"},{"id":"2410.18312","title":"Countering Autonomous Cyber Threats","created":"2024-10-23","cited_by_count":1,"area":null},{"id":"2509.10682","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","created":"2025-09-12","cited_by_count":1,"area":null},{"id":"2603.07496","title":"From Thinker to Society: Security in Hierarchical Autonomy Evolution of AI Agents","created":"2026-03-08","cited_by_count":1,"area":"agents"},{"id":"2608.01558","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","created":"2026-08-03","cited_by_count":1,"area":"agents"},{"id":"2411.08003","title":"Can adversarial attacks by large language models be attributed?","created":"2024-11-12","cited_by_count":0,"area":null},{"id":"2411.08241","title":"A Social Outcomes and Priorities centered (SOP) Framework for AI policy","created":"2024-11-12","cited_by_count":0,"area":null},{"id":"2503.04742","title":"A Case for Specialisation in Non-Human Entities","created":"2025-02-05","cited_by_count":0,"area":null},{"id":"2504.02701","title":"Responsible Development of Offensive AI","created":"2025-04-03","cited_by_count":0,"area":null},{"id":"2605.19847","title":"Auditing Privacy in Multi-Tenant RAG under Account Collusion","created":"2026-05-19","cited_by_count":0,"area":null},{"id":"2609.11911","title":"Artificial Id: Drive and Persistent Alignment in Agentic AI","created":"2026-09-10","cited_by_count":0,"area":"agents"},{"id":"2609.13731","title":"Trustworthy Agentic AI: A Comprehensive Cybersecurity and Systems Survey on Threat Landscapes, Defense Architectures, and Open Challenges","created":"2026-09-12","cited_by_count":0,"area":"agents"},{"id":"2609.23700","title":"When the Agent Becomes the Kernel: A Systematization of Security on the Path to AI-Native Operating Systems","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.27900","title":"Delegated Misalignment: How Multi-Agent Structures Amplify LLM Safety Risks","created":"2026-08-26","cited_by_count":0,"area":"agents"},{"id":"2610.00430","title":"Memetic Trojans: Social Contagions as Carriers of Adversarial Payloads in Agent Networks","created":"2026-09-30","cited_by_count":0,"area":"agents"},{"id":"2610.04083","title":"Self-Propagating Misalignment in LLM Agents, and Why Auditing or Disabling Memory Is Not Enough","created":"2026-10-02","cited_by_count":0,"area":"agents"}],"next_cursor":null}