{"total":31,"rows":[{"id":"2406.02630","title":"AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathways","created":"2024-06-04","cited_by_count":127,"area":null},{"id":"2505.23643","title":"Securing AI Agents with Information-Flow Control","created":"2025-05-29","cited_by_count":121,"area":null},{"id":"2501.17070","title":"Contextual Agent Security: A Policy for Every Purpose","created":"2025-01-28","cited_by_count":59,"area":null},{"id":"2406.18382","title":"Adversarial Search Engine Optimization for Large Language Models","created":"2024-06-26","cited_by_count":40,"area":null},{"id":"2502.15851","title":"Control Illusion: The Failure of Instruction Hierarchies in Large Language Models","created":"2025-02-21","cited_by_count":33,"area":null},{"id":"2603.12230","title":"Security Considerations for Artificial Intelligence Agents","created":"2026-03-12","cited_by_count":8,"area":null},{"id":"2501.07927","title":"Gandalf the Red: Adaptive Security for LLMs","created":"2025-01-14","cited_by_count":7,"area":null},{"id":"2604.07775","title":"ACIArena: Toward Unified Evaluation for Agent Cascading Injection","created":"2026-04-09","cited_by_count":7,"area":null},{"id":"2608.21159","title":"AID-Guard: Stateful Authorization for Delegated Agent Effects","created":"2026-08-21","cited_by_count":5,"area":null},{"id":"2604.19657","title":"An AI Agent Execution Environment to Safeguard User Data","created":"2026-04-21","cited_by_count":4,"area":null},{"id":"2508.19287","title":"Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior","created":"2025-08-25","cited_by_count":3,"area":null},{"id":"2509.14608","title":"Enterprise AI Must Enforce Participant-Aware Access Control","created":"2025-09-18","cited_by_count":3,"area":null},{"id":"2605.05271","title":"IntraGuard: Committee-Side Defenses Against Review Outsourcing to Commercial Chatbots","created":"2026-05-06","cited_by_count":2,"area":null},{"id":"2605.12233","title":"No More, No Less: Task Alignment in Terminal Agents","created":"2026-05-12","cited_by_count":2,"area":null},{"id":"2608.28327","title":"Layered LLM Defenses as an Ensemble: Access Tiers, Inference Cost, and the Measured Failure Correlation Between Defense Layers","created":"2026-08-28","cited_by_count":2,"area":null},{"id":"2506.23296","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","created":"2025-06-29","cited_by_count":1,"area":null},{"id":"2509.05608","title":"BinaryShield: Cross-Service Threat Intelligence in LLM Services using Privacy-Preserving Fingerprints","created":"2025-09-06","cited_by_count":1,"area":null},{"id":"2604.17842","title":"QuickScope: Certifying Hard Questions in Dynamic LLM Benchmarks","created":"2026-04-20","cited_by_count":1,"area":null},{"id":"2606.04109","title":"Discourse-Role Labels as Presentation-Time Variables for Context Use in Language Models","created":"2026-06-02","cited_by_count":1,"area":null},{"id":"2511.16209","title":"PSM: Prompt Sensitivity Minimization via LLM-Guided Black-Box Optimization","created":"2025-11-20","cited_by_count":0,"area":null},{"id":"2605.30521","title":"Evaluating using Mock Tool Calls to Quarantine Untrusted Prompt Inputs","created":"2026-05-28","cited_by_count":0,"area":null},{"id":"2606.08403","title":"Hiding in Plain Floats: Steganographic Carriers for Indirect Prompt and Content Injection","created":"2026-06-07","cited_by_count":0,"area":null},{"id":"2606.18120","title":"Structural Role Injection in Handlebars-Templated LLM Prompts: Triple-Brace Interpolation, Delimiter Family, and the Limits of HTML Auto-Escaping","created":"2026-06-16","cited_by_count":0,"area":null},{"id":"2607.16989","title":"Real-World Evaluation of an AI Agent Drafting Translational Impact Summaries","created":"2026-07-18","cited_by_count":0,"area":null},{"id":"2608.12789","title":"PIPES: Securing Agent Perception with Provenance and Priors","created":"2026-08-13","cited_by_count":0,"area":null},{"id":"2609.16984","title":"Nameless Tokenization: A Lossless Tokenizer-Level Defense Against Control-Token Forgery in Open-Weight LLMs","created":"2026-09-15","cited_by_count":0,"area":null},{"id":"2609.34913","title":"DGF-Bench: A Benchmark for Simulating and Auditing Deception Against Multi-Agent Governance Boards","created":"2026-09-28","cited_by_count":0,"area":null},{"id":"2610.00797","title":"Sapien: A Stateful Policy Engine for Autonomous AI Agents","created":"2026-09-30","cited_by_count":0,"area":null},{"id":"2610.04210","title":"Can LLMs Separate Pasted Artifacts from User Speech? Absorption at Unmarked Prompt Seams","created":"2026-10-03","cited_by_count":0,"area":null},{"id":"2610.05139","title":"Hidden in the Comments: A Context-Injection Attack Surface in Code LLMs","created":"2026-10-04","cited_by_count":0,"area":null},{"id":"2610.18612","title":"Nudge the Judge: Uncovering Program Decision Hijacking in Real-World Jev Applications","created":"2026-10-13","cited_by_count":0,"area":null}],"next_cursor":null}