{"total":94,"rows":[{"id":"2503.18813","title":"Defeating Prompt Injections by Design","created":"2025-03-24","cited_by_count":297,"area":"agents"},{"id":"2504.11703","title":"Progent: Securing AI Agents with Privilege Control","created":"2025-04-16","cited_by_count":141,"area":"agents"},{"id":"2407.19354","title":"The Emerged Security and Privacy of LLM Agent: A Survey with Case Studies","created":"2024-07-28","cited_by_count":131,"area":"agents"},{"id":"2602.20156","title":"Skill-Inject: Measuring Agent Vulnerability to Skill File Attacks","created":"2026-02-23","cited_by_count":90,"area":"agents"},{"id":"2503.09780","title":"AgentDAM: Privacy Leakage Evaluation for Autonomous Web Agents","created":"2025-03-12","cited_by_count":82,"area":"agents"},{"id":"2506.08837","title":"Design Patterns for Securing LLM Agents against Prompt Injections","created":"2025-06-10","cited_by_count":73,"area":"agents"},{"id":"2406.00799","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","created":"2024-06-02","cited_by_count":72,"area":"rag"},{"id":"2411.09523","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","created":"2024-11-14","cited_by_count":65,"area":"agents"},{"id":"2501.17070","title":"Contextual Agent Security: A Policy for Every Purpose","created":"2025-01-28","cited_by_count":59,"area":null},{"id":"2504.11281","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","created":"2025-04-15","cited_by_count":59,"area":"agents"},{"id":"2504.20984","title":"ACE: A Security Architecture for LLM-Integrated App Systems","created":"2025-04-29","cited_by_count":55,"area":null},{"id":"2502.02649","title":"Fully Autonomous AI Agents Should Not be Developed","created":"2025-02-04","cited_by_count":45,"area":null},{"id":"2504.21034","title":"SAGA: A Security Architecture for Governing AI Agentic Systems","created":"2025-04-27","cited_by_count":45,"area":"agents"},{"id":"2408.02373","title":"Operationalizing Contextual Integrity in Privacy-Conscious Assistants","created":"2024-08-05","cited_by_count":37,"area":null},{"id":"2502.01822","title":"Firewalls to Secure Dynamic LLM Agentic Networks","created":"2025-02-03","cited_by_count":36,"area":"agents"},{"id":"2504.14064","title":"DoomArena: A framework for Testing AI Agents Against Evolving Security Threats","created":"2025-04-18","cited_by_count":32,"area":"agents"},{"id":"2505.24019","title":"LLM Agents Should Employ Security Principles","created":"2025-05-29","cited_by_count":29,"area":"agents"},{"id":"2603.11088","title":"The Attack and Defense Landscape of Agentic AI: A Comprehensive Survey","created":"2026-03-11","cited_by_count":28,"area":"agents"},{"id":"2602.10127","title":"\"Humans welcome to observe\": A First Look at the Agent Social Network Moltbook","created":"2026-02-02","cited_by_count":26,"area":"agents"},{"id":"2602.11510","title":"AgentLeak: A Benchmark for Internal-Channel Privacy Leakage in Multi-Agent LLM Systems","created":"2026-02-12","cited_by_count":25,"area":"agents"},{"id":"2505.17716","title":"Get Experience from Practice: LLM Agents with Record & Replay","created":"2025-05-23","cited_by_count":23,"area":"agents"},{"id":"2504.03111","title":"Les Dissonances: Cross-Tool Harvesting and Polluting in Pool-of-Tools Empowered LLM Agents","created":"2025-04-04","cited_by_count":22,"area":"agents"},{"id":"2508.10880","title":"Searching for Privacy Risks in LLM Agents via Simulation","created":"2025-08-14","cited_by_count":22,"area":"agents"},{"id":"2407.04952","title":"Granular Privacy Control for Geolocation with Vision Language Models","created":"2024-07-06","cited_by_count":21,"area":"mllm"},{"id":"2511.17959","title":"Towards Automating Data Access Permissions in AI Agents","created":"2025-11-22","cited_by_count":21,"area":null},{"id":"2509.14284","title":"The Sum Leaks More Than Its Parts: Compositional Privacy Risks and Mitigations in Multi-Agent Collaboration","created":"2025-09-16","cited_by_count":20,"area":"agents"},{"id":"2510.05244","title":"Indirect Prompt Injections: Are Firewalls All You Need, or Stronger Benchmarks?","created":"2025-10-06","cited_by_count":18,"area":"safety"},{"id":"2508.07667","title":"1-2-3 Check: Enhancing Contextual Privacy in LLM via Multi-Agent Reasoning","created":"2025-08-11","cited_by_count":17,"area":"lr"},{"id":"2510.01645","title":"Position: Privacy Is Not Just Memorization!","created":"2025-10-02","cited_by_count":17,"area":null},{"id":"2506.12241","title":"Privacy Reasoning in Ambiguous Contexts","created":"2025-06-13","cited_by_count":11,"area":"lr"},{"id":"2509.22256","title":"Secure and Efficient Access Control for Computer-Use Agents via Context Space","created":"2025-09-26","cited_by_count":11,"area":"agents"},{"id":"2511.07772","title":"SALT: Steering Activations towards Leakage-free Thinking in Chain of Thought","created":"2025-11-11","cited_by_count":11,"area":"lr"},{"id":"2510.14312","title":"Terrarium: Revisiting the Blackboard for Multi-Agent Safety, Privacy, and Security Studies","created":"2025-10-16","cited_by_count":10,"area":"agents"},{"id":"2601.09625","title":"The Promptware Kill Chain: How Prompt Injections Gradually Evolved Into a Multistep Malware Delivery Mechanism","created":"2026-01-14","cited_by_count":9,"area":"safety"},{"id":"2605.17634","title":"AI Agents May Always Fall for Prompt Injections","created":"2026-05-17","cited_by_count":9,"area":"safety"},{"id":"2505.04799","title":"Maris: A Formally Verifiable Privacy Policy Enforcement Paradigm for Multi-Agent Collaboration Systems","created":"2025-05-07","cited_by_count":8,"area":"agents"},{"id":"2603.05520","title":"Information-Theoretic Privacy Control for Sequential Multi-Agent LLM Systems","created":"2026-02-13","cited_by_count":8,"area":"agents"},{"id":"2503.08175","title":"Privacy-Enhancing Paradigms within Federated Multi-Agent Systems","created":"2025-03-11","cited_by_count":7,"area":"agents"},{"id":"2505.09875","title":"Characterizing Unintended Consequences in Human-GUI Agent Collaboration for Web Browsing","created":"2025-05-15","cited_by_count":7,"area":"agents"},{"id":"2506.10171","title":"Beyond Jailbreaking: Auditing Contextual Privacy in LLM Agents","created":"2025-06-11","cited_by_count":7,"area":"agents"},{"id":"2605.09530","title":"MemPrivacy: Privacy-Preserving Personalized Memory Management for Edge-Cloud Agents","created":"2026-05-10","cited_by_count":7,"area":"agents"},{"id":"2605.09823","title":"CalBench: Evaluating Coordination-Privacy Trade-offs in Multi-Agent LLMs","created":"2026-05-10","cited_by_count":7,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2409.03735","title":"Privacy Bias in Language Models: A Contextual Integrity-based Auditing Metric","created":"2024-09-05","cited_by_count":6,"area":null},{"id":"2509.14278","title":"Beyond Data Privacy: New Privacy Risks for Large Language Models","created":"2025-09-16","cited_by_count":6,"area":null},{"id":"2512.05951","title":"Trusted AI Agents in the Cloud","created":"2025-12-05","cited_by_count":6,"area":"agents"},{"id":"2508.20282","title":"Network-Level Prompt and Trait Leakage in Local Research Agents","created":"2025-08-27","cited_by_count":5,"area":"agents"},{"id":"2605.23989","title":"Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security","created":"2026-05-17","cited_by_count":5,"area":"agents"},{"id":"2505.14549","title":"Can Large Language Models Really Recognize Your Name?","created":"2025-05-20","cited_by_count":4,"area":null},{"id":"2507.16124","title":"Benchmarking LLM Privacy Recognition for Social Robot Decision Making","created":"2025-07-22","cited_by_count":4,"area":null},{"id":"2603.18382","title":"From Weak Cues to Real Identities: Evaluating Inference-Driven De-Anonymization in LLM Agents","created":"2026-03-19","cited_by_count":4,"area":"agents"},{"id":"2604.19657","title":"An AI Agent Execution Environment to Safeguard User Data","created":"2026-04-21","cited_by_count":4,"area":null},{"id":"2605.19127","title":"POLAR-Bench: A Diagnostic Benchmark for Privacy-Utility Trade-offs in LLM Agents","created":"2026-05-18","cited_by_count":4,"area":"agents"},{"id":"2607.13718","title":"How Agents Ask for Permission: User Permissions for AI Agents, from Interfaces to Enforcement","created":"2026-07-15","cited_by_count":4,"area":"agents"},{"id":"2602.03183","title":"Privasis: Synthesizing the Largest \"Public\" Private Dataset from Scratch","created":"2026-02-03","cited_by_count":3,"area":null},{"id":"2605.02307","title":"SOTOPIA-TOM: Evaluating Privacy and Information Management in Multi-Agent Interaction with Theory of Mind","created":"2026-05-04","cited_by_count":3,"area":"agents"},{"id":"2606.30383","title":"Whose Side Is Your Agent On? Multi-Party Principal Loyalty in LLM Agents","created":"2026-06-29","cited_by_count":3,"area":null},{"id":"2607.01510","title":"Janus: a Playground for User-Involved Agentic Permission Management","created":"2026-07-01","cited_by_count":3,"area":"agents"},{"id":"2608.08300","title":"Mitigating Over-Personalization in LLMs via Structured Memory","created":"2026-08-08","cited_by_count":3,"area":null},{"id":"2606.13949","title":"Minim: Privacy-Aware Minimal View for Agents via Trusted Local Sanitization","created":"2026-06-11","cited_by_count":2,"area":"agents"},{"id":"2606.21710","title":"PrivacyAlign: Contextual Privacy Alignment for LLM Agents","created":"2026-06-19","cited_by_count":2,"area":"agents"},{"id":"2607.05318","title":"PiSAs: Benchmarking Contextual Integrity in Multi-User Agentic Systems","created":"2026-07-06","cited_by_count":2,"area":"agents"},{"id":"2508.10836","title":"SoK: Data Minimization in Machine Learning","created":"2025-08-14","cited_by_count":1,"area":null},{"id":"2509.21465","title":"Talking Trees: Reasoning-Assisted Induction of Decision Trees for Tabular Data","created":"2025-09-25","cited_by_count":1,"area":"lr"},{"id":"2510.04465","title":"Autonomy Reshapes How Personalization Affects Privacy Concerns and Trust in LLM Agents","created":"2025-10-06","cited_by_count":1,"area":null},{"id":"2511.07441","title":"AudAgent: Automated Auditing of Privacy Policy Compliance in AI Agents","created":"2025-11-03","cited_by_count":1,"area":"agents"},{"id":"2512.11147","title":"MiniScope: A Least Privilege Framework for Authorizing Tool Calling Agents","created":"2025-12-11","cited_by_count":1,"area":"agents"},{"id":"2601.18125","title":"Understanding Users' Privacy Reasoning and Behaviors During Chatbot Use to Support Meaningful Agency in Privacy","created":"2026-01-26","cited_by_count":1,"area":null},{"id":"2603.17639","title":"VeriGrey: Greybox Agent Validation","created":"2026-03-18","cited_by_count":1,"area":"agents"},{"id":"2605.16630","title":"PrivScope: Task-scoped Disclosure Control for Hybrid Agentic Systems","created":"2026-05-15","cited_by_count":1,"area":"agents"},{"id":"2605.20258","title":"It Takes Two: Complementary Self-Distillation for Contextual Integrity in LLMs","created":"2026-05-18","cited_by_count":1,"area":"distill"},{"id":"2607.02814","title":"SovereignNegotiation-Bench: Evaluating User-Owned Personal Agents In Delegated Bargaining Under Privacy, Consent, Evidence, And Institutional Pressure","created":"2026-07-02","cited_by_count":1,"area":null},{"id":"2506.00197","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","created":"2025-05-30","cited_by_count":0,"area":null},{"id":"2602.05016","title":"From Fragmentation to Integration: Exploring the Design Space of AI Agents for Human-as-the-Unit Privacy Management","created":"2026-02-04","cited_by_count":0,"area":null},{"id":"2604.06409","title":"Say Something Else: Rethinking Contextual Privacy as Information Sufficiency","created":"2026-04-07","cited_by_count":0,"area":null},{"id":"2605.10907","title":"Engineering Robustness into Personal Agents with the AI Workflow Store","created":"2026-05-11","cited_by_count":0,"area":null},{"id":"2605.29251","title":"Provably Secure Agent Guardrail","created":"2026-05-28","cited_by_count":0,"area":"agents"},{"id":"2606.25836","title":"AI Snitches Get Glitches: Towards Evading Agentic Surveillance","created":"2026-06-24","cited_by_count":0,"area":"agents"},{"id":"2607.03821","title":"DualView: Preventing Indirect Prompt Injection in Personal AI Agents","created":"2026-07-04","cited_by_count":0,"area":"agents"},{"id":"2607.05364","title":"REDDIT: Forgetting-Resistant Correction of Timestamp Drift in ASR via Replay-Based Distribution Editing","created":"2026-07-06","cited_by_count":0,"area":null},{"id":"2607.22953","title":"Share No More Than the Request Requires: Federated Disclosure for Perspective-Aware AI","created":"2026-07-24","cited_by_count":0,"area":null},{"id":"2608.02613","title":"MemArena: An Ego-Centric Benchmark for On-Device Agentic Personal Memory Assistants at Scale","created":"2026-05-20","cited_by_count":0,"area":"agents"},{"id":"2608.03130","title":"DP-MemView: A Memory Interface for Attribute-Level Transcript Privacy in Long-Term LLM Agents","created":"2026-08-04","cited_by_count":0,"area":"agents"},{"id":"2608.12172","title":"Rethinking Agent Security as a Networking Problem","created":"2026-08-12","cited_by_count":0,"area":"agents"},{"id":"2608.12977","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","created":"2026-08-13","cited_by_count":0,"area":"agents"},{"id":"2608.20658","title":"The Claws in Plain Sight: Unauthorized Context Disclosure through LLM Agent Tool Calls","created":"2026-08-21","cited_by_count":0,"area":"agents"},{"id":"2609.14003","title":"Confuse the Model, Control the Flow: Understanding and Mitigating Privacy Leakage from LLM Agents with Information Flow Control","created":"2026-09-12","cited_by_count":0,"area":"agents"},{"id":"2609.32915","title":"AgentTell: Behavioural Side-Channel Leakage in Browser-Use Agents","created":"2026-09-26","cited_by_count":0,"area":null},{"id":"2609.35408","title":"\"Nothing to See Here'': Unintended Disclosure through Revision Traces of LLM Deliverables","created":"2026-09-28","cited_by_count":0,"area":null},{"id":"2609.35937","title":"PrivacySkills: How Privacy Guidance Shapes Source Selection in LLM Agents","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2609.36414","title":"Eternal Sunshine of the Spotless Mind: Systematically Erasing LLM's Memories","created":"2026-09-29","cited_by_count":0,"area":null},{"id":"2610.06454","title":"AgentPrivArena: Evaluating and Auditing Real-world AI Agent Privacy","created":"2026-10-05","cited_by_count":0,"area":"agents"},{"id":"2610.12813","title":"VEPA: Verified Evolving Formal Policy for Lifelong LLM Agent Guardrails","created":"2026-10-08","cited_by_count":0,"area":"agents"},{"id":"2610.18007","title":"Cost-Efficient Privacy Enforcement for Email-Generating LLM Agents under Strategic Information Requests","created":"2026-10-13","cited_by_count":0,"area":"agents"}],"next_cursor":null}