{"total":86,"rows":[{"id":"2503.18666","title":"AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agents","created":"2025-03-24","cited_by_count":223,"area":"agents"},{"id":"2503.21460","title":"Large Language Model Agent: A Survey on Methodology, Applications and Challenges","created":"2025-03-27","cited_by_count":205,"area":"agents"},{"id":"2505.10468","title":"AI Agents vs. Agentic AI: A Conceptual Taxonomy, Applications and Challenges","created":"2025-05-15","cited_by_count":169,"area":"agents"},{"id":"2503.00061","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","created":"2025-02-27","cited_by_count":125,"area":"agents"},{"id":"2411.09523","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","created":"2024-11-14","cited_by_count":65,"area":"agents"},{"id":"2506.04133","title":"TRiSM for Agentic AI: A Review of Trust, Risk, and Security Management in LLM-based Agentic Multi-Agent Systems","created":"2025-06-04","cited_by_count":59,"area":"agents"},{"id":"2506.23260","title":"From Prompt Injections to Protocol Exploits: Threats in LLM-Powered AI Agents Workflows","created":"2025-06-29","cited_by_count":58,"area":"agents"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2505.19234","title":"GUARDIAN: Safeguarding LLM Multi-Agent Collaborations with Temporal Graph Modeling","created":"2025-05-25","cited_by_count":36,"area":"agents"},{"id":"2601.08012","title":"Towards Verifiably Safe Tool Use for LLM Agents","created":"2026-01-12","cited_by_count":36,"area":"agents"},{"id":"2508.04482","title":"OS Agents: A Survey on MLLM-based Agents for General Computing Devices Use","created":"2025-08-06","cited_by_count":35,"area":"agents"},{"id":"2602.16708","title":"Formal Policy Enforcement for Real-World Agentic Systems","created":"2026-02-18","cited_by_count":33,"area":"agents"},{"id":"2506.23844","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","created":"2025-06-30","cited_by_count":29,"area":"agents"},{"id":"2506.13666","title":"We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems","created":"2025-06-16","cited_by_count":27,"area":"agents"},{"id":"2406.08689","title":"Security of AI Agents","created":"2024-06-12","cited_by_count":26,"area":"agents"},{"id":"2601.05293","title":"A Survey of Agentic AI and Cybersecurity: Challenges, Opportunities and Use-case Prototypes","created":"2026-01-08","cited_by_count":22,"area":"agents"},{"id":"2508.12538","title":"MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security","created":"2025-08-18","cited_by_count":21,"area":"agents"},{"id":"2506.02040","title":"Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem","created":"2025-05-31","cited_by_count":19,"area":"agents"},{"id":"2603.16586","title":"Runtime Governance for AI Agents: Policies on Paths","created":"2026-03-17","cited_by_count":18,"area":"agents"},{"id":"2607.10487","title":"Temporary Authority, Permanent Effects: Commit-Time Authorization for LLM Agents","created":"2026-07-11","cited_by_count":18,"area":"agents"},{"id":"2505.08807","title":"Security of Internet of Agents: Attacks and Countermeasures","created":"2025-05-12","cited_by_count":17,"area":"agents"},{"id":"2412.18371","title":"Defining and Detecting the Defects of the Large Language Model-based Autonomous Agents","created":"2024-12-24","cited_by_count":16,"area":"agents"},{"id":"2505.23559","title":"SafeScientist: Toward Risk-Aware Scientific Discoveries by LLM Agents","created":"2025-05-29","cited_by_count":16,"area":"agents"},{"id":"2508.01186","title":"A Survey on Agent Workflow -- Status and Future","created":"2025-08-02","cited_by_count":14,"area":"agents"},{"id":"2502.15865","title":"Standard Benchmarks Fail -- Auditing LLM Agents in Finance Must Prioritize Risk","created":"2025-02-21","cited_by_count":13,"area":"agents"},{"id":"2510.18563","title":"The Trust Paradox in LLM-Based Multi-Agent Systems: When Collaboration Becomes a Security Vulnerability","created":"2025-10-21","cited_by_count":12,"area":"agents"},{"id":"2505.13076","title":"The Hidden Dangers of Browsing AI Agents","created":"2025-05-19","cited_by_count":11,"area":"agents"},{"id":"2507.08270","title":"Agent Safety Alignment via Reinforcement Learning","created":"2025-07-11","cited_by_count":11,"area":"agents"},{"id":"2512.06914","title":"SoK: Trust-Authorization Mismatch in LLM Agent Interactions","created":"2025-12-07","cited_by_count":11,"area":"agents"},{"id":"2504.05871","title":"Agent Guide: A Simple Agent Behavioral Watermarking Framework","created":"2025-04-08","cited_by_count":10,"area":"agents"},{"id":"2602.03255","title":"LPS-Bench: Benchmarking Safety Awareness of Computer-Use Agents in Long-Horizon Planning under Benign and Adversarial Scenarios","created":"2026-02-03","cited_by_count":9,"area":"agents"},{"id":"2503.04596","title":"LLM Applications: Current Paradigms and the Next Frontier","created":"2025-03-06","cited_by_count":8,"area":"agents"},{"id":"2505.09875","title":"Characterizing Unintended Consequences in Human-GUI Agent Collaboration for Web Browsing","created":"2025-05-15","cited_by_count":7,"area":"agents"},{"id":"2507.06323","title":"Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms","created":"2025-07-08","cited_by_count":7,"area":"agents"},{"id":"2508.13787","title":"BetaWeb: Towards a Blockchain-enabled Trustworthy Agentic Web","created":"2025-08-19","cited_by_count":7,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2509.24240","title":"Takedown: How It's Done in Modern Coding Agent Exploits","created":"2025-09-29","cited_by_count":6,"area":"agents"},{"id":"2512.00520","title":"Toward a Safe Internet of Agents","created":"2025-11-29","cited_by_count":6,"area":"agents"},{"id":"2607.01236","title":"Safeguarding LLM Agents from Misalignment through Provenance Analysis","created":"2026-05-01","cited_by_count":6,"area":"agents"},{"id":"2510.16558","title":"A First Look at the Security Issues in the Model Context Protocol Ecosystem","created":"2025-10-18","cited_by_count":5,"area":"agents"},{"id":"2602.19547","title":"CIBER: A Comprehensive Benchmark for Security Evaluation of Code Interpreter Agents","created":"2026-02-23","cited_by_count":5,"area":"agents"},{"id":"2603.15408","title":"TrinityGuard: A Unified Framework for Safeguarding Multi-Agent Systems","created":"2026-03-16","cited_by_count":5,"area":"agents"},{"id":"2605.11036","title":"Sequential Behavioral Watermarking for LLM Agents","created":"2026-05-11","cited_by_count":5,"area":"agents"},{"id":"2605.14932","title":"Toward Securing AI Agents Like Operating Systems","created":"2026-05-14","cited_by_count":5,"area":"agents"},{"id":"2606.19464","title":"Deontic Policies for Runtime Governance of Agentic AI Systems","created":"2026-06-17","cited_by_count":5,"area":"agents"},{"id":"2412.10807","title":"Towards Action Hijacking of Large Language Model-based Agent","created":"2024-12-14","cited_by_count":4,"area":"agents"},{"id":"2507.04067","title":"HAWK: A Hierarchical Workflow Framework for Multi-Agent Collaboration","created":"2025-07-05","cited_by_count":4,"area":"agents"},{"id":"2510.08238","title":"Chain-of-Trigger: An Agentic Backdoor that Paradoxically Enhances Agentic Robustness","created":"2025-10-09","cited_by_count":4,"area":"agents"},{"id":"2602.10465","title":"Authenticated Workflows: A Systems Approach to Protecting Agentic AI","created":"2026-02-11","cited_by_count":4,"area":"agents"},{"id":"2509.09970","title":"Securing LLM-Generated Embedded Firmware through AI Agent-Driven Validation and Patching","created":"2025-09-12","cited_by_count":3,"area":"agents"},{"id":"2602.22450","title":"Silent Egress: When Implicit Prompt Injection Makes LLM Agents Leak Without a Trace","created":"2026-02-25","cited_by_count":3,"area":"agents"},{"id":"2604.05969","title":"A Formal Security Framework for MCP-Based AI Agents: Threat Taxonomy, Verification Models, and Defense Mechanisms","created":"2026-04-07","cited_by_count":3,"area":"agents"},{"id":"2510.25423","title":"What Challenges Do Developers Face in AI Agent Systems? An Empirical Study on Stack Overflow & GitHub Issues","created":"2025-10-29","cited_by_count":2,"area":"agents"},{"id":"2601.15153","title":"How to Build AI Agents by Augmenting LLMs with Codified Human Expert Domain Knowledge? A Software Engineering Framework","created":"2026-01-21","cited_by_count":2,"area":"agents"},{"id":"2602.01942","title":"Human Society-Inspired Approaches to Agentic AI Security: The 4C Framework","created":"2026-02-02","cited_by_count":2,"area":"agents"},{"id":"2609.06972","title":"AgentDrift: A Step-Labeled Benchmark of Injection-Hijacked LLM Agent Trajectories","created":"2026-09-07","cited_by_count":2,"area":"agents"},{"id":"2510.13857","title":"From Craft to Constitution: A Governance-First Paradigm for Principled Agent Engineering","created":"2025-10-12","cited_by_count":1,"area":"agents"},{"id":"2511.07441","title":"AudAgent: Automated Auditing of Privacy Policy Compliance in AI Agents","created":"2025-11-03","cited_by_count":1,"area":"agents"},{"id":"2603.01564","title":"From Secure Agentic AI to Secure Agentic Web: Challenges, Threats, and Future Directions","created":"2026-03-02","cited_by_count":1,"area":"agents"},{"id":"2603.07496","title":"From Thinker to Society: Security in Hierarchical Autonomy Evolution of AI Agents","created":"2026-03-08","cited_by_count":1,"area":"agents"},{"id":"2603.18914","title":"Security, privacy, and agentic AI in a regulatory view: From definitions and distinctions to provisions and reflections","created":"2026-03-19","cited_by_count":1,"area":"agents"},{"id":"2605.06393","title":"Constraining Host-Level Abuse in Self-Hosted Computer-Use Agents via TEE-Backed Isolation","created":"2026-05-07","cited_by_count":1,"area":"agents"},{"id":"2605.07135","title":"Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions","created":"2026-05-08","cited_by_count":1,"area":"agents"},{"id":"2605.25435","title":"Security of OpenClaw Agents: Fundamentals, Attacks, and Countermeasures","created":"2026-05-25","cited_by_count":1,"area":"agents"},{"id":"2606.12797","title":"The Containment Gap: How Deployed Agentic AI Frameworks Fail Public-Facing Safety Requirements","created":"2026-06-11","cited_by_count":1,"area":"agents"},{"id":"2607.25379","title":"Cyber-Capable AI Agents: Vulnerabilities, Evaluation Containment, and Defensive Response","created":"2026-07-28","cited_by_count":1,"area":"agents"},{"id":"2608.00718","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","created":"2026-08-01","cited_by_count":1,"area":"agents"},{"id":"2608.04626","title":"Blockchain Empowered Trustworthy Agent Networks: Foundations, Taxonomy, and Future Directions","created":"2026-08-05","cited_by_count":1,"area":"agents"},{"id":"2609.00595","title":"SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems","created":"2026-09-01","cited_by_count":1,"area":"agents"},{"id":"2509.04802","title":"Mind the Gap: Evaluating Model- and Agentic-Level Vulnerabilities in LLMs with Action Graphs","created":"2025-09-05","cited_by_count":0,"area":"agents"},{"id":"2602.21127","title":"\"Are You Sure?\": An Empirical Study of Human Perception Vulnerability in LLM-Driven Agentic Systems","created":"2026-02-24","cited_by_count":0,"area":"agents"},{"id":"2603.14417","title":"Questionnaire Responses Do not Capture the Safety of AI Agents","created":"2026-03-15","cited_by_count":0,"area":"agents"},{"id":"2605.03213","title":"When Agents Handle Secrets: A Survey of Confidential Computing for Agentic AI","created":"2026-05-04","cited_by_count":0,"area":"agents"},{"id":"2606.28666","title":"Why Trust Your Agent? Empirical Security Gains from TRiSM-Guided Agentic Workflows in Healthcare","created":"2026-06-27","cited_by_count":0,"area":"agents"},{"id":"2607.17951","title":"RT-SHCUA: Real-Time Self-Hosted Computer-Use Agent for UAV Control","created":"2026-07-20","cited_by_count":0,"area":"agents"},{"id":"2607.24893","title":"Early Detection of Distributed Backdoors in Multi-Agent LLM Systems: A Characterization Study","created":"2026-07-27","cited_by_count":0,"area":"agents"},{"id":"2608.10530","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","created":"2026-08-11","cited_by_count":0,"area":"agents"},{"id":"2608.12172","title":"Rethinking Agent Security as a Networking Problem","created":"2026-08-12","cited_by_count":0,"area":"agents"},{"id":"2608.18110","title":"Emergence of Agentic AI: A Review on Evolution, Background, Working Principles, Applications, Adoption Factors, and Future Research Directions","created":"2026-06-20","cited_by_count":0,"area":"agents"},{"id":"2609.16098","title":"Universal Defenses for Tool-Integrated LLM Agents Against Adversarial Attacks","created":"2026-09-14","cited_by_count":0,"area":"agents"},{"id":"2609.17648","title":"Trust propagation and structural containment in Multi-agent LLM pipelines","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2609.23894","title":"Connecting the Dots in Agentic AI Security: A Cross-Dimensional Threat Taxonomy, Evaluation Maturity, and Open Challenges","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.32778","title":"Agentic Network Traffic Monitoring","created":"2026-09-26","cited_by_count":0,"area":"agents"},{"id":"2609.39297","title":"MiniRep: Robust Reputation-Based Aggregation for Multi-Agent Debate","created":"2026-09-30","cited_by_count":0,"area":"agents"},{"id":"2610.05782","title":"Agentic-ZTA: A Multi-Agent Architecture for Autonomous Zero Trust Enforcement","created":"2026-10-05","cited_by_count":0,"area":"agents"},{"id":"2610.06001","title":"AgentSpy: Making AI Agent Behavior Observable","created":"2026-10-05","cited_by_count":0,"area":"agents"}],"next_cursor":null}