{"total":127,"rows":[{"id":"2503.21460","title":"Large Language Model Agent: A Survey on Methodology, Applications and Challenges","created":"2025-03-27","cited_by_count":205,"area":"agents"},{"id":"2504.19793","title":"Prompt Injection Attack to Tool Selection in LLM Agents","created":"2025-04-28","cited_by_count":158,"area":"agents"},{"id":"2504.11358","title":"DataSentinel: A Game-Theoretic Detection of Prompt Injection Attacks","created":"2025-04-15","cited_by_count":143,"area":"safety"},{"id":"2502.13172","title":"Unveiling Privacy Risks in LLM Agent Memory","created":"2025-02-17","cited_by_count":101,"area":"agents"},{"id":"2411.09523","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","created":"2024-11-14","cited_by_count":65,"area":"agents"},{"id":"2505.11717","title":"WebInject: Prompt Injection Attack to Web Agents","created":"2025-05-16","cited_by_count":51,"area":"agents"},{"id":"2408.12787","title":"LLM-PBE: Assessing Data Privacy in Large Language Models","created":"2024-08-23","cited_by_count":41,"area":null},{"id":"2411.14110","title":"Feedback-Guided Extraction of Knowledge Base from Retrieval-Augmented LLM Applications","created":"2024-11-21","cited_by_count":37,"area":"rag"},{"id":"2505.18333","title":"A Critical Evaluation of Defenses against Prompt Injection Attacks","created":"2025-05-23","cited_by_count":36,"area":"safety"},{"id":"2409.08045","title":"Unleashing Worms and Extracting Data: Escalating the Outcome of Attacks against RAG-based Inference in Scale and Severity Using Jailbreaking","created":"2024-09-12","cited_by_count":30,"area":"safety"},{"id":"2505.18889","title":"Security Concerns for Large Language Models: A Survey","created":"2025-05-24","cited_by_count":29,"area":null},{"id":"2602.22724","title":"AgentSentry: Mitigating Indirect Prompt Injection in LLM Agents via Temporal Causal Diagnostics and Context Purification","created":"2026-02-26","cited_by_count":29,"area":"agents"},{"id":"2510.12252","title":"PromptLocate: Localizing Prompt Injection Attacks","created":"2025-10-14","cited_by_count":28,"area":"safety"},{"id":"2509.07764","title":"AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents","created":"2025-09-09","cited_by_count":27,"area":"agents"},{"id":"2409.14457","title":"Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trends","created":"2024-09-22","cited_by_count":26,"area":null},{"id":"2502.00306","title":"Riddle Me This! Stealthy Membership Inference for Retrieval-Augmented Generation","created":"2025-02-01","cited_by_count":26,"area":"rag"},{"id":"2506.11094","title":"The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs","created":"2025-06-06","cited_by_count":26,"area":null},{"id":"2503.10566","title":"ASIDE: Architectural Separation of Instructions and Data in Language Models","created":"2025-03-13","cited_by_count":24,"area":"safety"},{"id":"2410.14827","title":"Enhancing Prompt Injection Attacks to LLMs via Poisoning Alignment","created":"2024-10-18","cited_by_count":21,"area":"safety"},{"id":"2510.14005","title":"PIShield: Detecting Prompt Injection Attacks via Intrinsic LLM Features","created":"2025-10-15","cited_by_count":20,"area":"safety"},{"id":"2506.22521","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","created":"2025-06-26","cited_by_count":19,"area":null},{"id":"2512.09321","title":"ObliInjection: Order-Oblivious Prompt Injection Attack to LLM Agents with Multi-source Data","created":"2025-12-10","cited_by_count":18,"area":"agents"},{"id":"2409.14729","title":"PROMPTFUZZ: Harnessing Fuzzing Techniques for Robust Testing of Prompt Injection in LLMs","created":"2024-09-23","cited_by_count":17,"area":"safety"},{"id":"2601.05755","title":"VIGIL: Defending LLM Agents Against Tool Stream Injection via Verify-Before-Commit","created":"2026-01-09","cited_by_count":17,"area":"agents"},{"id":"2603.19469","title":"A Framework for Formalizing LLM Agent Security","created":"2026-03-19","cited_by_count":16,"area":"agents"},{"id":"2509.22040","title":"\"Your AI, My Shell\": Demystifying Prompt Injection Attacks on Agentic AI Coding Editors","created":"2025-09-26","cited_by_count":15,"area":"agents"},{"id":"2510.00231","title":"The Pitfalls of KV Cache Compression","created":"2025-09-30","cited_by_count":15,"area":"inference"},{"id":"2407.08422","title":"On the (In)Security of LLM App Stores","created":"2024-07-11","cited_by_count":14,"area":null},{"id":"2412.05734","title":"LeakAgent: RL-based Red-teaming Agent for LLM Privacy Leakage","created":"2024-12-07","cited_by_count":13,"area":"agents"},{"id":"2504.09593","title":"ControlNET: A Firewall for RAG-based LLM System","created":"2025-04-13","cited_by_count":12,"area":"rag"},{"id":"2507.05630","title":"How Not to Detect Prompt Injections with an LLM","created":"2025-07-08","cited_by_count":12,"area":"safety"},{"id":"2506.06112","title":"Towards Lifecycle Unlearning Commitment Management: Measuring Sample-level Unlearning Completeness","created":"2025-06-06","cited_by_count":11,"area":"safety"},{"id":"2604.08499","title":"PIArena: A Platform for Prompt Injection Evaluation","created":"2026-04-09","cited_by_count":11,"area":"safety"},{"id":"2510.13842","title":"ADMIT: Few-shot Knowledge Poisoning Attacks on RAG-based Fact Checking","created":"2025-10-11","cited_by_count":10,"area":"rag"},{"id":"2512.08417","title":"Attention is All You Need to Defend Against Indirect Prompt Injection Attacks in LLMs","created":"2025-12-09","cited_by_count":10,"area":"agents"},{"id":"2410.09097","title":"Recent advancements in LLM Red-Teaming: Techniques, Defenses, and Ethical Considerations","created":"2024-10-09","cited_by_count":8,"area":"safety"},{"id":"2503.04596","title":"LLM Applications: Current Paradigms and the Next Frontier","created":"2025-03-06","cited_by_count":8,"area":"agents"},{"id":"2505.12442","title":"IP Leakage Attacks Targeting LLM-Based Multi-Agent Systems","created":"2025-05-18","cited_by_count":8,"area":"agents"},{"id":"2509.14404","title":"A Taxonomy of Prompt Defects in LLM Systems","created":"2025-09-17","cited_by_count":8,"area":null},{"id":"2509.25448","title":"Fingerprinting LLMs via Prompt Injection","created":"2025-09-29","cited_by_count":8,"area":"safety"},{"id":"2409.19521","title":"GenTel-Safe: A Unified Benchmark and Shielding Framework for Defending Against Prompt Injection Attacks","created":"2024-09-29","cited_by_count":7,"area":"safety"},{"id":"2512.05745","title":"ARGUS: Defending Against Multimodal Indirect Prompt Injection via Steering Instruction-Following Behavior","created":"2025-12-05","cited_by_count":7,"area":"mllm"},{"id":"2509.14278","title":"Beyond Data Privacy: New Privacy Risks for Large Language Models","created":"2025-09-16","cited_by_count":6,"area":null},{"id":"2605.06812","title":"Towards Security-Auditable LLM Agents: A Unified Graph Representation","created":"2026-05-07","cited_by_count":6,"area":"agents"},{"id":"2407.09295","title":"Systematic Categorization, Construction and Evaluation of New Attacks against Multi-modal Mobile GUI Agents","created":"2024-07-12","cited_by_count":5,"area":"agents"},{"id":"2408.09798","title":"Enhance Modality Robustness in Text-Centric Multimodal Alignment with Adversarial Prompting","created":"2024-08-19","cited_by_count":5,"area":"safety"},{"id":"2412.13426","title":"PromptKeeper: Safeguarding System Prompts for LLMs","created":"2024-12-18","cited_by_count":5,"area":null},{"id":"2503.11185","title":"Bleeding Pathways: Vanishing Discriminability in LLM Hidden States Fuels Jailbreak Attacks","created":"2025-03-14","cited_by_count":5,"area":"safety"},{"id":"2508.20282","title":"Network-Level Prompt and Trait Leakage in Local Research Agents","created":"2025-08-27","cited_by_count":5,"area":"agents"},{"id":"2509.05755","title":"Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment","created":"2025-09-06","cited_by_count":5,"area":"agents"},{"id":"2602.13597","title":"AlignSentinel: Alignment-Aware Detection of Prompt Injection Attacks","created":"2026-02-14","cited_by_count":5,"area":"safety"},{"id":"2603.17170","title":"Beyond OAuth: Task-Scoped Authorization for AI Agents via Natural Language Slices","created":"2026-03-17","cited_by_count":5,"area":null},{"id":"2605.28999","title":"Measuring Real-World Prompt Injection Attacks in LLM-based Resume Screening","created":"2026-05-27","cited_by_count":5,"area":"safety"},{"id":"2410.12443","title":"Reconstruction of Differentially Private Text Sanitization via Large Language Models","created":"2024-10-16","cited_by_count":4,"area":null},{"id":"2412.10807","title":"Towards Action Hijacking of Large Language Model-based Agent","created":"2024-12-14","cited_by_count":4,"area":"agents"},{"id":"2509.21884","title":"You Can't Steal Nothing: Mitigating Prompt Leakages in LLMs via System Vectors","created":"2025-09-26","cited_by_count":4,"area":null},{"id":"2601.21233","title":"Just Ask: Curious Code Agents Reveal System Prompts in Frontier LLMs","created":"2026-01-29","cited_by_count":4,"area":"agents"},{"id":"2604.18231","title":"AgenTEE: Confidential LLM Agent Execution on Edge Devices","created":"2026-04-20","cited_by_count":4,"area":"agents"},{"id":"2607.25560","title":"Agent Skills Matter: Inferring Proprietary Skills from Execution Trajectories","created":"2026-07-28","cited_by_count":4,"area":null},{"id":"2502.09974","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","created":"2025-02-14","cited_by_count":3,"area":"safety"},{"id":"2506.23603","title":"SoK: Semantic Privacy in Large Language Models","created":"2025-06-30","cited_by_count":3,"area":null},{"id":"2509.03117","title":"PromptCOS: Towards Content-only System Prompt Copyright Auditing for LLMs","created":"2025-09-03","cited_by_count":3,"area":"safety"},{"id":"2509.23037","title":"GuardNet: Graph-Attention Filtering for Jailbreak Defense in Large Language Models","created":"2025-09-27","cited_by_count":3,"area":"safety"},{"id":"2601.20615","title":"DRAINCODE: Stealthy Energy Consumption Attacks on Retrieval-Augmented Code Generation via Context Poisoning","created":"2026-01-28","cited_by_count":3,"area":"rag"},{"id":"2607.12624","title":"PVDetector: Detecting Prompt Injection Attacks on Purpose-Specific LLM Agents through Policy-Violation Concept Analysis","created":"2026-07-14","cited_by_count":3,"area":"agents"},{"id":"2409.18395","title":"Code Vulnerability Repair with Large Language Model using Context-Aware Prompt Tuning","created":"2024-09-27","cited_by_count":2,"area":null},{"id":"2411.07518","title":"LLM App Squatting and Cloning","created":"2024-11-12","cited_by_count":2,"area":null},{"id":"2504.07839","title":"Deep Learning-based Intrusion Detection Systems: A Survey","created":"2025-04-10","cited_by_count":2,"area":null},{"id":"2508.06837","title":"Towards Effective Prompt Stealing Attack against Text-to-Image Diffusion Models","created":"2025-08-09","cited_by_count":2,"area":"diffusion"},{"id":"2508.08629","title":"Securing Educational LLMs: A Generalised Taxonomy of Attacks on LLMs and DREAD Risk Assessment","created":"2025-08-12","cited_by_count":2,"area":"safety"},{"id":"2510.02964","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","created":"2025-10-03","cited_by_count":2,"area":"rag"},{"id":"2607.19957","title":"HijackKV: New Threat in Position-Independent KV Cache Reuse","created":"2026-07-22","cited_by_count":2,"area":"inference"},{"id":"2410.04009","title":"ASPIRER: Bypassing System Prompts With Permutation-based Backdoors in LLMs","created":"2024-10-05","cited_by_count":1,"area":"safety"},{"id":"2501.12521","title":"An Empirically-grounded tool for Automatic Prompt Linting and Repair: A Case Study on Bias, Vulnerability, and Optimization in Developer Prompts","created":"2025-01-21","cited_by_count":1,"area":null},{"id":"2505.04101","title":"LLMs' Suitability for Network Security: A Case Study of STRIDE Threat Modeling","created":"2025-05-07","cited_by_count":1,"area":null},{"id":"2505.11557","title":"AC-LoRA: (Almost) Training-Free Access Control-Aware Multi-Modal LLMs","created":"2025-05-15","cited_by_count":1,"area":null},{"id":"2506.19109","title":"Enhancing Security in LLM Applications: A Performance Evaluation of Early Detection Systems","created":"2025-06-23","cited_by_count":1,"area":"safety"},{"id":"2508.06153","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","created":"2025-08-08","cited_by_count":1,"area":"safety"},{"id":"2508.10404","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","created":"2025-08-14","cited_by_count":1,"area":"safety"},{"id":"2509.10682","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","created":"2025-09-12","cited_by_count":1,"area":null},{"id":"2509.12652","title":"Don't Change My View: Ideological Bias Auditing in Large Language Models","created":"2025-09-16","cited_by_count":1,"area":null},{"id":"2510.05109","title":"Tiny but Mighty: A Software-Hardware Co-Design Approach for Efficient Multimodal Inference on Battery-Powered Small Devices","created":"2025-09-25","cited_by_count":1,"area":"mllm"},{"id":"2510.07892","title":"Metric Calculating Benchmark: Code-Verifiable Complicate Instruction Following Benchmark for Large Language Models","created":"2025-10-09","cited_by_count":1,"area":null},{"id":"2510.17000","title":"Bits Leaked per Query: Information-Theoretic Bounds on Adversarial Attacks against LLMs","created":"2025-10-19","cited_by_count":1,"area":"safety"},{"id":"2605.29979","title":"Fingerprinting Inference Systems of Large Language Models","created":"2026-05-28","cited_by_count":1,"area":null},{"id":"2606.03344","title":"RogueMerge: Robust and Unified Attacks against LLM Model Merging","created":"2026-06-02","cited_by_count":1,"area":null},{"id":"2607.05120","title":"Agent Data Injection Attacks are Realistic Threats to AI Agents","created":"2026-07-06","cited_by_count":1,"area":"agents"},{"id":"2608.01117","title":"SoK: Intent-Oriented Systematization of Multi-Turn LLM Jailbreaks","created":"2026-08-02","cited_by_count":1,"area":"safety"},{"id":"2608.22248","title":"Beyond Over-Refusal: Defending Indirect Prompt Injection via Latent Instruction Manifolds","created":"2026-08-23","cited_by_count":1,"area":"safety"},{"id":"2608.28411","title":"LongPIBench: A Long-Context Benchmark for Prompt Injection","created":"2026-08-28","cited_by_count":1,"area":"safety"},{"id":"2610.04985","title":"Hidden Risks of Jev: An Empirical Study of Security, Privacy, and Dual Use","created":"2026-10-04","cited_by_count":1,"area":"safety"},{"id":"2503.12339","title":"A Closer Look at Adversarial Suffix Learning for Jailbreaking LLMs: Augmented Adversarial Trigger Learning","created":"2025-03-16","cited_by_count":0,"area":"safety"},{"id":"2505.06284","title":"DMRL: Data- and Model-aware Reward Learning for Data Extraction","created":"2025-05-07","cited_by_count":0,"area":"alignment"},{"id":"2506.08885","title":"AdversariaL attacK sAfety aLIgnment(ALKALI): Safeguarding LLMs through GRACE: Geometric Representation-Aware Contrastive Enhancement- Introducing Adversarial Vulnerability Quality Index (AVQI)","created":"2025-06-10","cited_by_count":0,"area":"alignment"},{"id":"2508.02312","title":"Data Security in Large Language Models: Risks, Defense, and Directions","created":"2025-08-04","cited_by_count":0,"area":"safety"},{"id":"2508.02961","title":"Defend LLMs Through Self-Consciousness","created":"2025-08-04","cited_by_count":0,"area":"safety"},{"id":"2508.08583","title":"AI Security Map: Holistic Organization of AI Security Technologies and Impacts on Stakeholders","created":"2025-08-12","cited_by_count":0,"area":null},{"id":"2510.22963","title":"When Compression Becomes an Attack Surface: Black-Box Attacks on Prompt-Compressed LLM Agents","created":"2025-10-27","cited_by_count":0,"area":"agents"},{"id":"2511.00346","title":"Exploiting Latent Space Discontinuities for Building Universal LLM Jailbreaks and Data Extraction Attacks","created":"2025-11-01","cited_by_count":0,"area":"safety"},{"id":"2511.17874","title":"Beyond Jailbreak: Unveiling Risks in LLM Applications Arising from Blurred Capability Boundaries","created":"2025-11-22","cited_by_count":0,"area":"safety"}],"next_cursor":"100"}