{"total":89,"rows":[{"id":"2504.18575","title":"WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks","created":"2025-04-22","cited_by_count":157,"area":"agents"},{"id":"2503.17332","title":"CVE-Bench: A Benchmark for AI Agents' Ability to Exploit Real-World Web Application Vulnerabilities","created":"2025-03-21","cited_by_count":96,"area":"agents"},{"id":"2411.07781","title":"RedCode: Risky Code Execution and Generation Benchmark for Code Agents","created":"2024-11-12","cited_by_count":90,"area":"agents"},{"id":"2506.11791","title":"SEC-bench: Automated Benchmarking of LLM Agents on Real-World Software Security Tasks","created":"2025-06-13","cited_by_count":75,"area":"agents"},{"id":"2407.21792","title":"Safetywashing: Do AI Safety Benchmarks Actually Measure Safety Progress?","created":"2024-07-31","cited_by_count":61,"area":null},{"id":"2501.08200","title":"CWEval: Outcome-driven Evaluation on Functionality and Security of LLM Code Generation","created":"2025-01-14","cited_by_count":59,"area":null},{"id":"2409.16165","title":"EnIGMA: Interactive Tools Substantially Assist LM Agents in Finding Security Vulnerabilities","created":"2024-09-24","cited_by_count":52,"area":"agents"},{"id":"2410.01606","title":"Automated Red Teaming with GOAT: the Generative Offensive Agent Tester","created":"2024-10-02","cited_by_count":45,"area":"agents"},{"id":"2601.01426","title":"SWE-Lego: Pushing the Limits of Supervised Fine-tuning for Software Issue Resolving","created":"2026-01-04","cited_by_count":31,"area":null},{"id":"2511.20703","title":"PropensityBench: Evaluating Latent Safety Risks in Large Language Models via an Agentic Approach","created":"2025-11-24","cited_by_count":22,"area":"agents"},{"id":"2510.14005","title":"PIShield: Detecting Prompt Injection Attacks via Intrinsic LLM Features","created":"2025-10-15","cited_by_count":20,"area":"safety"},{"id":"2501.09798","title":"Fun-tuning: Characterizing the Vulnerability of Proprietary LLMs to Optimization-based Prompt Injection Attacks via the Fine-Tuning Interface","created":"2025-01-16","cited_by_count":17,"area":"safety"},{"id":"2409.15398","title":"Attack Atlas: A Practitioner's Perspective on Challenges and Pitfalls in Red Teaming GenAI","created":"2024-09-23","cited_by_count":16,"area":"safety"},{"id":"2503.11917","title":"A Framework for Evaluating Emerging Cyberattack Capabilities of AI","created":"2025-03-14","cited_by_count":16,"area":null},{"id":"2503.01811","title":"AutoAdvExBench: Benchmarking autonomous exploitation of adversarial example defenses","created":"2025-03-03","cited_by_count":15,"area":null},{"id":"2507.07417","title":"May I have your Attention? Breaking Fine-Tuning based Prompt Injection Defenses using Architecture-Aware Attacks","created":"2025-07-10","cited_by_count":15,"area":"safety"},{"id":"2507.19672","title":"Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challenges","created":"2025-07-25","cited_by_count":15,"area":"alignment"},{"id":"2603.10521","title":"IH-Challenge: A Training Dataset to Improve Instruction Hierarchy on Frontier LLMs","created":"2026-03-11","cited_by_count":15,"area":"safety"},{"id":"2412.02776","title":"Hacking CTFs with Plain Agents","created":"2024-12-03","cited_by_count":14,"area":"agents"},{"id":"2504.10112","title":"Benchmarking Practices in LLM-driven Offensive Security: Testbeds, Metrics, and Experiment Design","created":"2025-04-14","cited_by_count":14,"area":null},{"id":"2505.17107","title":"CRAKEN: Cybersecurity LLM Agent with Knowledge-Based Execution","created":"2025-05-21","cited_by_count":14,"area":"agents"},{"id":"2410.09114","title":"Catastrophic Cyber Capabilities Benchmark (3CB): Robustly Evaluating LLM Agent Cyber Offense Capabilities","created":"2024-10-10","cited_by_count":12,"area":"agents"},{"id":"2502.15797","title":"OCCULT: Evaluating Large Language Models for Offensive Cyber Operation Capabilities","created":"2025-02-18","cited_by_count":12,"area":null},{"id":"2510.24317","title":"Cybersecurity AI Benchmark (CAIBench): A Meta-Benchmark for Evaluating Cybersecurity AI Agents","created":"2025-10-28","cited_by_count":12,"area":"agents"},{"id":"2407.01376","title":"Badllama 3: removing safety finetuning from Llama 3 in minutes","created":"2024-07-01","cited_by_count":11,"area":"safety"},{"id":"2502.18474","title":"A Contemporary Survey of Large Language Model Assisted Program Analysis","created":"2025-02-05","cited_by_count":11,"area":null},{"id":"2410.16527","title":"Insights and Current Gaps in Open-Source LLM Vulnerability Scanners: A Comparative Analysis","created":"2024-10-21","cited_by_count":10,"area":"safety"},{"id":"2503.18825","title":"EconEvals: Benchmarks and Litmus Tests for Economic Decision-Making by LLM Agents","created":"2025-03-24","cited_by_count":10,"area":"agents"},{"id":"2504.00018","title":"SandboxEval: Towards Securing Test Environment for Untrusted Code","created":"2025-03-27","cited_by_count":10,"area":null},{"id":"2502.02009","title":"LLMSecConfig: An LLM-Based Approach for Fixing Software Container Misconfigurations","created":"2025-02-04","cited_by_count":9,"area":null},{"id":"2510.02609","title":"RedCodeAgent: Automatic Red-teaming Agent against Diverse Code Agents","created":"2025-10-02","cited_by_count":9,"area":"agents"},{"id":"2407.02518","title":"INDICT: Code Generation with Internal Dialogues of Critiques for Both Security and Helpfulness","created":"2024-06-23","cited_by_count":8,"area":null},{"id":"2409.19390","title":"Efficient Federated Intrusion Detection in 5G ecosystem using optimized BERT-based model","created":"2024-09-28","cited_by_count":8,"area":null},{"id":"2505.18384","title":"Dynamic Risk Assessments for Offensive Cybersecurity Agents","created":"2025-05-23","cited_by_count":8,"area":"agents"},{"id":"2505.20630","title":"SV-TrustEval-C: Evaluating Structure and Semantic Reasoning in Large Language Models for Source Code Vulnerability Analysis","created":"2025-05-27","cited_by_count":8,"area":"lr"},{"id":"2407.08708","title":"eyeballvul: a future-proof benchmark for vulnerability detection in the wild","created":"2024-07-11","cited_by_count":6,"area":null},{"id":"2408.11650","title":"CIPHER: Cybersecurity Intelligent Penetration-testing Helper for Ethical Researcher","created":"2024-08-21","cited_by_count":6,"area":null},{"id":"2507.10457","title":"Logic layer Prompt Control Injection (LPCI): A Novel Security Vulnerability Class in Agentic Systems","created":"2025-07-14","cited_by_count":6,"area":"agents"},{"id":"2410.09569","title":"Are You Human? An Adversarial Benchmark to Expose LLMs","created":"2024-10-12","cited_by_count":5,"area":null},{"id":"2410.15490","title":"Dynamic Intelligence Assessment: Benchmarking LLMs on the Road to AGI with a Focus on Model Confidence","created":"2024-10-20","cited_by_count":5,"area":null},{"id":"2505.19915","title":"Evaluating AI cyber capabilities with crowdsourced elicitation","created":"2025-05-26","cited_by_count":5,"area":null},{"id":"2601.13864","title":"HardSecBench: Benchmarking the Security Awareness of LLMs for Hardware Code Generation","created":"2026-01-20","cited_by_count":5,"area":null},{"id":"2602.19547","title":"CIBER: A Comprehensive Benchmark for Security Evaluation of Code Interpreter Agents","created":"2026-02-23","cited_by_count":5,"area":"agents"},{"id":"2609.01836","title":"Agent Memory Is a Surface for Endogenous Authorization Laundering","created":"2026-09-01","cited_by_count":5,"area":"agents"},{"id":"2410.11096","title":"SeCodePLT: A Unified Platform for Evaluating the Security of Code GenAI","created":"2024-10-14","cited_by_count":4,"area":null},{"id":"2412.08653","title":"What AI evaluations for preventing catastrophic risks can and cannot do","created":"2024-11-26","cited_by_count":4,"area":null},{"id":"2506.00739","title":"DefenderBench: A Toolkit for Evaluating Language Agents in Cybersecurity Environments","created":"2025-05-31","cited_by_count":4,"area":"agents"},{"id":"2604.18718","title":"Towards Optimal Agentic Architectures for Offensive Security Tasks","created":"2026-04-20","cited_by_count":4,"area":"agents"},{"id":"2405.15406","title":"A Misleading Gallery of Fluid Motion by Generative Artificial Intelligence","created":"2024-05-24","cited_by_count":3,"area":null},{"id":"2411.08813","title":"Rethinking CyberSecEval: An LLM-Aided Approach to Evaluation Critique","created":"2024-11-13","cited_by_count":3,"area":null},{"id":"2605.22643","title":"Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety","created":"2026-05-21","cited_by_count":3,"area":"agents"},{"id":"2406.06863","title":"Ollabench: Evaluating LLMs' Reasoning for Human-centric Interdependent Cybersecurity","created":"2024-06-11","cited_by_count":2,"area":"lr"},{"id":"2509.06921","title":"Neuro-Symbolic AI for Cybersecurity: State of the Art, Challenges, and Opportunities","created":"2025-09-08","cited_by_count":2,"area":null},{"id":"2510.27080","title":"Adapting Large Language Models to Emerging Cybersecurity using Retrieval Augmented Generation","created":"2025-10-31","cited_by_count":2,"area":"rag"},{"id":"2602.00513","title":"Minerva: Reinforcement Learning with Verifiable Rewards for Cyber Threat Intelligence LLMs","created":"2026-01-31","cited_by_count":2,"area":null},{"id":"2608.27147","title":"Thomson: Continual Learning of Frontier Models for SovereignAI","created":"2026-08-27","cited_by_count":2,"area":null},{"id":"2410.18312","title":"Countering Autonomous Cyber Threats","created":"2024-10-23","cited_by_count":1,"area":null},{"id":"2410.21939","title":"HonestCyberEval: An AI Cyber Risk Benchmark for Automated Software Exploitation","created":"2024-10-29","cited_by_count":1,"area":null},{"id":"2411.18216","title":"Evaluating and Improving the Robustness of Security Attack Detectors Generated by LLMs","created":"2024-11-27","cited_by_count":1,"area":null},{"id":"2505.11565","title":"ACSE-Eval: Can LLMs threat model real-world cloud infrastructure?","created":"2025-05-16","cited_by_count":1,"area":null},{"id":"2505.12185","title":"EVALOOOP: A Self-Consistency-Centered Framework for Assessing Large Language Model Robustness in Programming","created":"2025-05-18","cited_by_count":1,"area":"lr"},{"id":"2510.18131","title":"BlueCodeAgent: A Blue Teaming Agent Enabled by Automated Red Teaming for CodeGen AI","created":"2025-10-20","cited_by_count":1,"area":"agents"},{"id":"2511.03898","title":"Secure Code Generation at Scale with Reflexion","created":"2025-11-05","cited_by_count":1,"area":null},{"id":"2602.01187","title":"Autoregressive, Yet Revisable: In Decoding Revision for Secure Code Generation","created":"2026-02-01","cited_by_count":1,"area":null},{"id":"2602.15689","title":"A Content-Based Framework for Cybersecurity Refusal Decisions in Large Language Models","created":"2026-02-17","cited_by_count":1,"area":"agents"},{"id":"2603.13384","title":"VulnAgent-R2: Evidence-Calibrated Multi-Agent Auditing for Repository-Level Vulnerability Detection","created":"2026-03-11","cited_by_count":1,"area":"agents"},{"id":"2604.20389","title":"CyberCertBench: Evaluating LLMs in Cybersecurity Certification Knowledge","created":"2026-04-22","cited_by_count":1,"area":null},{"id":"2605.07830","title":"CyBiasBench: Benchmarking Bias in LLM Agents for Cyber-Attack Scenarios","created":"2026-05-08","cited_by_count":1,"area":"agents"},{"id":"2605.20351","title":"Refusal Evaluation in Coding LLMs and Code Agents: A Systematic Review of Thirteen Malicious-Code Prompt Corpora (2023-2025)","created":"2026-05-19","cited_by_count":1,"area":"agents"},{"id":"2606.12429","title":"Muse Spark Safety & Preparedness Report","created":"2026-05-14","cited_by_count":1,"area":null},{"id":"2607.05842","title":"Beyond Refusal: A Same-Lineage Study of Aligned and Abliterated LLMs for Vulnerability Analysis","created":"2026-07-07","cited_by_count":1,"area":null},{"id":"2607.15263","title":"Beyond Success Rate: Cost-Aware Evaluation of Offensive and Defensive Security Agents","created":"2026-07-16","cited_by_count":1,"area":null},{"id":"2607.25379","title":"Cyber-Capable AI Agents: Vulnerabilities, Evaluation Containment, and Defensive Response","created":"2026-07-28","cited_by_count":1,"area":"agents"},{"id":"2608.04317","title":"Trident : How to Break Deep Reinforcement Learning Cyber Defenses (Agentic)","created":"2026-08-05","cited_by_count":1,"area":"agents"},{"id":"2608.14303","title":"Detecting Contaminated Code-Generation Prompt Batches via Influence Functions","created":"2026-08-14","cited_by_count":1,"area":null},{"id":"2608.14577","title":"HarmProfile: Characterizing Harmful Distributions in Frontier LLMs","created":"2026-06-11","cited_by_count":1,"area":"safety"},{"id":"2505.12100","title":"Improving Fairness in LLMs Through Testing-Time Adversaries","created":"2025-05-17","cited_by_count":0,"area":null},{"id":"2512.21238","title":"Assessing the Software Security Comprehension of Large Language Models","created":"2025-12-24","cited_by_count":0,"area":null},{"id":"2605.17416","title":"Benchmarking Mythos-Linked Bug Rediscovery","created":"2026-05-17","cited_by_count":0,"area":null},{"id":"2605.19722","title":"Measuring Safety Alignment Effects in Autonomous Security Agents","created":"2026-05-19","cited_by_count":0,"area":"agents"},{"id":"2605.23243","title":"Are Frontier LLMs Ready for Cybersecurity? Evidence for Vertical Foundation Models from Dual-Mode Vulnerability Benchmarks","created":"2026-05-22","cited_by_count":0,"area":null},{"id":"2606.25195","title":"SoK: AI Secure Code Generation: Progress, Pitfalls, and Paths Forward","created":"2026-06-23","cited_by_count":0,"area":"agents"},{"id":"2606.31159","title":"An Empirical Study of Security Calibration in Large Language Models for Code","created":"2026-06-30","cited_by_count":0,"area":null},{"id":"2609.00578","title":"Same Request, Different Boundary: Evaluating Cybersecurity Assistance across Conversational Contexts","created":"2026-09-01","cited_by_count":0,"area":null},{"id":"2609.07344","title":"Staying on the Attack Path: Structured State for Long-Horizon Automated Penetration Testing","created":"2026-09-07","cited_by_count":0,"area":null},{"id":"2609.13731","title":"Trustworthy Agentic AI: A Comprehensive Cybersecurity and Systems Survey on Threat Landscapes, Defense Architectures, and Open Challenges","created":"2026-09-12","cited_by_count":0,"area":"agents"},{"id":"2610.06514","title":"ANT: A Multi-Granularity Network Traffic Dataset and Benchmark for Agents Behavior Auditing","created":"2026-10-05","cited_by_count":0,"area":"agents"},{"id":"2610.07532","title":"Safeguarding LLMs via Model-Agnostic Latent Safety Signals from Dark Knowledge","created":"2026-10-05","cited_by_count":0,"area":"safety"},{"id":"2610.11634","title":"LTBD: Learnable Trust-Boundary Delimiters for Prompt Injection Defense","created":"2026-10-08","cited_by_count":0,"area":"safety"}],"next_cursor":null}