{"total":18,"rows":[{"id":"2505.23643","title":"Securing AI Agents with Information-Flow Control","created":"2025-05-29","cited_by_count":121,"area":null},{"id":"2406.07954","title":"Dataset and Lessons Learned from the 2024 SaTML LLM Capture-the-Flag Competition","created":"2024-06-12","cited_by_count":20,"area":null},{"id":"2507.16372","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","created":"2025-07-22","cited_by_count":17,"area":null},{"id":"2603.12230","title":"Security Considerations for Artificial Intelligence Agents","created":"2026-03-12","cited_by_count":8,"area":null},{"id":"2512.16059","title":"ContextLeak: Auditing Leakage in Private In-Context Learning Methods","created":"2025-12-18","cited_by_count":4,"area":null},{"id":"2506.15617","title":"The Compositional Architecture of Regret in Large Language Models","created":"2025-06-18","cited_by_count":3,"area":null},{"id":"2509.14608","title":"Enterprise AI Must Enforce Participant-Aware Access Control","created":"2025-09-18","cited_by_count":3,"area":null},{"id":"2510.26486","title":"LINK-KG: LLM-Driven Coreference-Resolved Knowledge Graphs for Human Smuggling Networks","created":"2025-10-30","cited_by_count":2,"area":null},{"id":"2510.26512","title":"Inside CORE-KG: Evaluating Structured Prompting and Coreference Resolution for Knowledge Graphs","created":"2025-10-30","cited_by_count":2,"area":null},{"id":"2605.12233","title":"No More, No Less: Task Alignment in Terminal Agents","created":"2026-05-12","cited_by_count":2,"area":null},{"id":"2609.15994","title":"Latent Undertow: How Ordinary Typos Break Probes","created":"2026-07-08","cited_by_count":2,"area":null},{"id":"2509.05608","title":"BinaryShield: Cross-Service Threat Intelligence in LLM Services using Privacy-Preserving Fingerprints","created":"2025-09-06","cited_by_count":1,"area":null},{"id":"2512.15979","title":"OLAF: Towards Robust LLM-Based Annotation Framework in Empirical Software Engineering","created":"2025-12-17","cited_by_count":1,"area":null},{"id":"2408.00925","title":"WHITE PAPER: A Brief Exploration of Data Exfiltration using GCG Suffixes","created":"2024-08-01","cited_by_count":0,"area":null},{"id":"2606.21843","title":"Measuring What Persists: Conditioning Mechanisms and a Geometric Framework for AI Agent Identity","created":"2026-06-20","cited_by_count":0,"area":null},{"id":"2608.00672","title":"From Chasing Ghosts to Missed Attacks: Perspectives and Perceptions of SOC Practitioners on LLM Integration, Risks, and Readiness","created":"2026-08-01","cited_by_count":0,"area":null},{"id":"2608.27954","title":"Not to Break, but to Attest: Adversarial Probes for Privacy-Preserving LLM Verification","created":"2026-08-28","cited_by_count":0,"area":null},{"id":"2610.04210","title":"Can LLMs Separate Pasted Artifacts from User Speech? Absorption at Unmarked Prompt Seams","created":"2026-10-03","cited_by_count":0,"area":null}],"next_cursor":null}