{"total":20,"rows":[{"id":"2407.12784","title":"AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases","created":"2024-07-17","cited_by_count":429,"area":"agents"},{"id":"2410.02644","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","created":"2024-10-03","cited_by_count":369,"area":"agents"},{"id":"2411.09523","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","created":"2024-11-14","cited_by_count":65,"area":"agents"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2506.13666","title":"We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems","created":"2025-06-16","cited_by_count":27,"area":"agents"},{"id":"2512.01295","title":"Systems Security Foundations for Agentic Computing","created":"2025-12-01","cited_by_count":13,"area":"agents"},{"id":"2602.03100","title":"Risky-Bench: Probing Agentic Safety Risks under Real-World Deployment","created":"2026-02-03","cited_by_count":8,"area":"agents"},{"id":"2505.19260","title":"ALRPHFS: Adversarially Learned Risk Patterns with Hierarchical Fast \\& Slow Reasoning for Robust Agent Defense","created":"2025-05-25","cited_by_count":5,"area":"agents"},{"id":"2604.16966","title":"Visual Inception: Compromising Long-term Planning in Agentic Recommenders via Multimodal Memory Poisoning","created":"2026-04-18","cited_by_count":5,"area":"agents"},{"id":"2604.18874","title":"How Adversarial Environments Mislead Agentic AI?","created":"2026-04-20","cited_by_count":5,"area":"agents"},{"id":"2412.10807","title":"Towards Action Hijacking of Large Language Model-based Agent","created":"2024-12-14","cited_by_count":4,"area":"agents"},{"id":"2608.25776","title":"EVOMAL: Self-Poisoning in Self-Evolving Coding Agents","created":"2026-08-26","cited_by_count":3,"area":"agents"},{"id":"2608.04626","title":"Blockchain Empowered Trustworthy Agent Networks: Foundations, Taxonomy, and Future Directions","created":"2026-08-05","cited_by_count":1,"area":"agents"},{"id":"2606.00566","title":"Same Payload, Different Channel: Measuring Trust Asymmetry in Tool-Using Language Models","created":"2026-05-30","cited_by_count":0,"area":"agents"},{"id":"2607.28103","title":"MIND: Lightweight and Effective Memory Injection Defense for LLM Agents via Intent-Aware Information Bottleneck","created":"2026-07-30","cited_by_count":0,"area":"agents"},{"id":"2609.14723","title":"Detecting and Localizing Segment-Level Poisoning in Multi-Source LLM-Agent Inputs","created":"2026-09-13","cited_by_count":0,"area":"agents"},{"id":"2609.16694","title":"Toward Secure AI-Powered Penetration Testing Agents: Security Threats, Guardrails, and Architectural Perspectives","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2609.23700","title":"When the Agent Becomes the Kernel: A Systematization of Security on the Path to AI-Native Operating Systems","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.34245","title":"Certified Multi-Source Integrity for Structured Agent Actions","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2610.07311","title":"Understanding and Mitigating Inference-Time Overreliance Using Agentic Memory","created":"2026-10-05","cited_by_count":0,"area":"agents"}],"next_cursor":null}