{"total":65,"rows":[{"id":"2507.21504","title":"Evaluation and Benchmarking of LLM Agents: A Survey","created":"2025-07-29","cited_by_count":152,"area":"agents"},{"id":"2407.19354","title":"The Emerged Security and Privacy of LLM Agent: A Survey with Case Studies","created":"2024-07-28","cited_by_count":131,"area":"agents"},{"id":"2503.17332","title":"CVE-Bench: A Benchmark for AI Agents' Ability to Exploit Real-World Web Application Vulnerabilities","created":"2025-03-21","cited_by_count":96,"area":"agents"},{"id":"2406.01637","title":"Teams of LLM Agents can Exploit Zero-Day Vulnerabilities","created":"2024-06-02","cited_by_count":95,"area":"agents"},{"id":"2408.02479","title":"From LLMs to LLM-based Agents for Software Engineering: A Survey of Current, Challenges and Future","created":"2024-08-05","cited_by_count":86,"area":"agents"},{"id":"2501.13411","title":"VulnBot: Autonomous Penetration Testing for A Multi-Agent Collaborative Framework","created":"2025-01-23","cited_by_count":31,"area":"agents"},{"id":"2602.13379","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","created":"2026-02-13","cited_by_count":30,"area":"agents"},{"id":"2510.23883","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","created":"2025-10-27","cited_by_count":28,"area":"agents"},{"id":"2502.20383","title":"Why Are Web AI Agents More Vulnerable Than Standalone LLMs? A Security Analysis","created":"2025-02-27","cited_by_count":27,"area":"agents"},{"id":"2410.14569","title":"When LLMs Go Online: The Emerging Threat of Web-Enabled LLMs","created":"2024-10-18","cited_by_count":24,"area":"agents"},{"id":"2510.06445","title":"A Survey on Agentic Security: Applications, Threats and Defenses","created":"2025-10-07","cited_by_count":20,"area":"agents"},{"id":"2408.08902","title":"Audit-LLM: Multi-Agent Collaboration for Log-based Insider Threat Detection","created":"2024-08-12","cited_by_count":18,"area":"agents"},{"id":"2503.15552","title":"Personalized Attacks of Social Engineering in Multi-turn Conversations: LLM Agents for Simulation and Detection","created":"2025-03-18","cited_by_count":13,"area":"agents"},{"id":"2507.15241","title":"FaultLine: Automated Proof-of-Vulnerability Generation Using LLM Agents","created":"2025-07-21","cited_by_count":12,"area":"agents"},{"id":"2604.23338","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","created":"2026-04-25","cited_by_count":11,"area":"agents"},{"id":"2510.02609","title":"RedCodeAgent: Automatic Red-teaming Agent against Diverse Code Agents","created":"2025-10-02","cited_by_count":9,"area":"agents"},{"id":"2505.18384","title":"Dynamic Risk Assessments for Offensive Cybersecurity Agents","created":"2025-05-23","cited_by_count":8,"area":"agents"},{"id":"2505.06913","title":"RedTeamLLM: an Agentic AI framework for offensive security","created":"2025-05-11","cited_by_count":7,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2410.10871","title":"Applying Refusal-Vector Ablation to Llama 3.1 70B Agents","created":"2024-10-08","cited_by_count":6,"area":"agents"},{"id":"2603.07557","title":"AgentRaft: Automated Detection of Data Over-Exposure in LLM Agents","created":"2026-03-08","cited_by_count":6,"area":"agents"},{"id":"2605.09104","title":"Token Economics for LLM Agents: A Dual-View Study from Computing and Economics","created":"2026-05-09","cited_by_count":6,"area":"agents"},{"id":"2409.00985","title":"Co-Learning: Code Learning for Multi-Agent Reinforcement Collaborative Framework with Conversational Natural Language Interfaces","created":"2024-09-02","cited_by_count":5,"area":"agents"},{"id":"2506.00739","title":"DefenderBench: A Toolkit for Evaluating Language Agents in Cybersecurity Environments","created":"2025-05-31","cited_by_count":4,"area":"agents"},{"id":"2506.02048","title":"Improving LLM Agents with Reinforcement Learning on Cryptographic CTF Challenges","created":"2025-06-01","cited_by_count":4,"area":"agents"},{"id":"2510.14700","title":"LLM Agents for Automated Web Vulnerability Reproduction: Are We There Yet?","created":"2025-10-16","cited_by_count":4,"area":"agents"},{"id":"2511.15998","title":"Hiding in the AI Traffic: Abusing MCP for LLM-Powered Agentic Red Teaming","created":"2025-11-20","cited_by_count":4,"area":"agents"},{"id":"2604.18718","title":"Towards Optimal Agentic Architectures for Offensive Security Tasks","created":"2026-04-20","cited_by_count":4,"area":"agents"},{"id":"2609.28940","title":"Calibrated Decision Models for Autonomous Penetration-Testing Harnesses: JEV and Laya as System One Decision Layers for LLM-Driven Pentest Agents","created":"2026-09-24","cited_by_count":4,"area":"agents"},{"id":"2504.12143","title":"ARCeR: an Agentic RAG for the Automated Definition of Cyber Ranges","created":"2025-04-16","cited_by_count":3,"area":"agents"},{"id":"2509.13021","title":"xOffense: An Autonomous Multi-Agent Framework for Penetration Testing with Domain-Adapted Large Language Models","created":"2025-09-16","cited_by_count":3,"area":"agents"},{"id":"2510.17862","title":"When \"Correct\" Is Not Safe: Can We Trust Functionally Correct Patches Generated by Code Agents?","created":"2025-10-15","cited_by_count":3,"area":"agents"},{"id":"2511.08475","title":"Designing LLM-based Multi-Agent Systems for Software Engineering Tasks: Quality Attributes, Design Patterns and Rationale","created":"2025-11-11","cited_by_count":3,"area":"agents"},{"id":"2604.03121","title":"An Independent Safety Evaluation of Kimi K2.5","created":"2026-04-03","cited_by_count":3,"area":"agents"},{"id":"2605.24949","title":"APT-Agent: Automated Penetration Testing using Large Language Models","created":"2026-05-24","cited_by_count":2,"area":"agents"},{"id":"2502.15506","title":"Construction and Evaluation of LLM-based agents for Semi-Autonomous penetration testing","created":"2025-02-21","cited_by_count":1,"area":"agents"},{"id":"2510.13257","title":"GRIDAI: Generating and Repairing Intrusion Detection Rules via Collaboration among Multiple LLM-based Agents","created":"2025-10-15","cited_by_count":1,"area":"agents"},{"id":"2602.05721","title":"A Dual-Loop Agent Framework for Automated Vulnerability Reproduction","created":"2026-02-05","cited_by_count":1,"area":"agents"},{"id":"2605.07830","title":"CyBiasBench: Benchmarking Bias in LLM Agents for Cyber-Attack Scenarios","created":"2026-05-08","cited_by_count":1,"area":"agents"},{"id":"2607.12406","title":"Isolation as a First-Class Principle for LLM-Agent System Safety: Concepts, Taxonomy, Challenges and Future Directions","created":"2026-07-14","cited_by_count":1,"area":"agents"},{"id":"2607.18575","title":"RECEIPT: Deterministic, Reward-Hacking-Resistant Verification for White-Box Agentic XSS Discovery","created":"2026-07-20","cited_by_count":1,"area":"agents"},{"id":"2607.25379","title":"Cyber-Capable AI Agents: Vulnerabilities, Evaluation Containment, and Defensive Response","created":"2026-07-28","cited_by_count":1,"area":"agents"},{"id":"2608.03009","title":"Tiny Enough to Break In: Agentic Remote Access Trojans Powered by Small Language Models","created":"2026-08-04","cited_by_count":1,"area":"agents"},{"id":"2608.04317","title":"Trident : How to Break Deep Reinforcement Learning Cyber Defenses (Agentic)","created":"2026-08-05","cited_by_count":1,"area":"agents"},{"id":"2608.09526","title":"RangeFactory: Scalable Construction of Multi-Hop Cyber Ranges","created":"2026-08-10","cited_by_count":1,"area":"agents"},{"id":"2608.20563","title":"Beyond End-to-End Success: Diagnosing Failures in Long-Horizon Security LLM Agents","created":"2026-08-20","cited_by_count":1,"area":"agents"},{"id":"2609.22664","title":"From Capability to Assurance in Autonomous Penetration-Testing Harnesses: A Framework and Reference Implementation","created":"2026-09-19","cited_by_count":1,"area":"agents"},{"id":"2506.08693","title":"Recognition Without Mitigation: Ethical Frameworks in Autonomous Offensive-LLM Agent Research","created":"2025-06-10","cited_by_count":0,"area":"agents"},{"id":"2510.01654","title":"SoK: Measuring What Matters for Closed-Loop Security Agents","created":"2025-10-02","cited_by_count":0,"area":"agents"},{"id":"2601.12607","title":"A Cloud-based Multi-Agentic Workflow for Science","created":"2026-01-18","cited_by_count":0,"area":"agents"},{"id":"2604.05130","title":"A Multi-Agent Framework for Automated Exploit Generation with Constraint-Guided Comprehension and Reflection","created":"2026-04-06","cited_by_count":0,"area":"agents"},{"id":"2605.05000","title":"Agentic Vulnerability Reasoning on COTS Binaries","created":"2026-05-06","cited_by_count":0,"area":"agents"},{"id":"2605.06601","title":"Patch2Vuln: Agentic Reconstruction of Vulnerabilities from Linux Distribution Binary Patches","created":"2026-05-07","cited_by_count":0,"area":"agents"},{"id":"2605.06713","title":"Agentic AI and the Industrialization of Cyber Offense: Forecast, Consequences, and Defensive Priorities for Enterprises and the Mittelstand","created":"2026-05-06","cited_by_count":0,"area":"agents"},{"id":"2605.15503","title":"uGen: An Agentic Framework for Generating Microarchitectural Attack PoCs","created":"2026-05-15","cited_by_count":0,"area":"agents"},{"id":"2605.30604","title":"An Organization-Scoped LLM Agent Runtime Architecture for Regulated Cybersecurity Operations","created":"2026-05-28","cited_by_count":0,"area":"agents"},{"id":"2606.03453","title":"FORGE: Multi-Agent Graduated Exploitation and Detection Engineering","created":"2026-06-02","cited_by_count":0,"area":"agents"},{"id":"2606.26933","title":"Chai: Agentic Discovery of Cryptographic Misuse Vulnerabilities","created":"2026-06-25","cited_by_count":0,"area":"agents"},{"id":"2607.11288","title":"Mako: A Self-Evolving Agentic Operating System (SE-AOS) for Autonomous Web Exploitation","created":"2026-07-13","cited_by_count":0,"area":"agents"},{"id":"2608.21423","title":"Agentic Security: A Systematization of Tools, Failure Modes, and Design Laws for LLM-Driven Penetration Testing","created":"2026-08-16","cited_by_count":0,"area":"agents"},{"id":"2609.02647","title":"PrimSynth: An Agentic Approach to Discover, Validate, and Synthesize Exploit Primitives for Linux Kernel Vulnerabilities","created":"2026-09-02","cited_by_count":0,"area":"agents"},{"id":"2609.11852","title":"BlueSTAR: Tiered Agentic Architecture for Autonomous Cyber Defense","created":"2026-09-10","cited_by_count":0,"area":"agents"},{"id":"2609.17164","title":"Plug 'n' Pray: Agentic LLM-based Detection of Potential Log File Exposures in Third-Party Content Management System Plugins","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2609.25591","title":"Evaluating Coding Agents on Kernel Exploit Generation","created":"2026-09-22","cited_by_count":0,"area":"agents"},{"id":"2609.32424","title":"CyberClear: A Benchmark for LLM Agent Systems on APT Attack Chain Provenance","created":"2026-09-26","cited_by_count":0,"area":"agents"}],"next_cursor":null}