{"total":57,"rows":[{"id":"2410.07283","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","created":"2024-10-09","cited_by_count":133,"area":"agents"},{"id":"2407.19354","title":"The Emerged Security and Privacy of LLM Agent: A Survey with Case Studies","created":"2024-07-28","cited_by_count":131,"area":"agents"},{"id":"2502.14847","title":"Red-Teaming LLM Multi-Agent Systems via Communication Attacks","created":"2025-02-20","cited_by_count":122,"area":"agents"},{"id":"2408.00989","title":"On the Resilience of LLM-Based Multi-Agent Collaboration with Faulty Agents","created":"2024-08-02","cited_by_count":99,"area":"agents"},{"id":"2503.09648","title":"A Survey on Trustworthy LLM Agents: Threats and Countermeasures","created":"2025-03-12","cited_by_count":96,"area":"agents"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2503.12188","title":"Multi-Agent Systems Execute Arbitrary Malicious Code","created":"2025-03-15","cited_by_count":53,"area":"agents"},{"id":"2408.09955","title":"MegaAgent: A Large-Scale Autonomous LLM-based Multi-Agent System Without Predefined SOPs","created":"2024-08-19","cited_by_count":47,"area":"agents"},{"id":"2504.21034","title":"SAGA: A Security Architecture for Governing AI Agentic Systems","created":"2025-04-27","cited_by_count":45,"area":"agents"},{"id":"2504.18875","title":"Generative to Agentic AI: Survey, Conceptualization, and Challenges","created":"2025-04-26","cited_by_count":33,"area":"agents"},{"id":"2506.13666","title":"We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems","created":"2025-06-16","cited_by_count":27,"area":"agents"},{"id":"2509.14295","title":"Aegis: Automated Error Generation and Attribution for Multi-Agent Systems","created":"2025-09-17","cited_by_count":22,"area":"agents"},{"id":"2502.14529","title":"CORBA: Contagious Recursive Blocking Attacks on Multi-Agent Systems Based on Large Language Models","created":"2025-02-20","cited_by_count":20,"area":"agents"},{"id":"2602.15198","title":"Colosseum: Auditing Collusion in Cooperative Multi-Agent Systems","created":"2026-02-16","cited_by_count":18,"area":"agents"},{"id":"2508.03125","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","created":"2025-08-05","cited_by_count":17,"area":"agents"},{"id":"2505.23559","title":"SafeScientist: Toward Risk-Aware Scientific Discoveries by LLM Agents","created":"2025-05-29","cited_by_count":16,"area":"agents"},{"id":"2506.00066","title":"Literature Review Of Multi-Agent Debate For Problem-Solving","created":"2025-05-29","cited_by_count":15,"area":"agents"},{"id":"2506.15170","title":"From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystem","created":"2025-06-18","cited_by_count":12,"area":"agents"},{"id":"2408.14972","title":"AgentMonitor: A Plug-and-Play Framework for Predictive and Secure Multi-Agent Systems","created":"2024-08-27","cited_by_count":9,"area":"agents"},{"id":"2505.20824","title":"MedSentry: Understanding and Mitigating Safety Risks in Medical LLM Multi-Agent Systems","created":"2025-05-27","cited_by_count":9,"area":"agents"},{"id":"2502.01714","title":"Position: Towards a Responsible LLM-empowered Multi-Agent Systems","created":"2025-02-03","cited_by_count":8,"area":"agents"},{"id":"2505.12442","title":"IP Leakage Attacks Targeting LLM-Based Multi-Agent Systems","created":"2025-05-18","cited_by_count":8,"area":"agents"},{"id":"2506.00509","title":"Goal-Aware Identification and Rectification of Misinformation in Multi-Agent Systems","created":"2025-05-31","cited_by_count":8,"area":"agents"},{"id":"2510.16219","title":"SentinelNet: Safeguarding Multi-Agent Collaboration Through Credit-Based Dynamic Threat Detection","created":"2025-10-17","cited_by_count":8,"area":"agents"},{"id":"2511.06448","title":"When AI Agents Collude Online: Financial Fraud Risks by Collaborative LLM Agents on Social Platforms","created":"2025-11-09","cited_by_count":8,"area":"agents"},{"id":"2510.14008","title":"Stop Reducing Responsibility in LLM-Powered Multi-Agent Systems to Local Alignment","created":"2025-10-15","cited_by_count":7,"area":"agents"},{"id":"2605.11514","title":"FlowSteer: Prompt-Only Workflow Steering Exposes Planning-Time Vulnerabilities in Multi-Agent LLM Systems","created":"2026-05-12","cited_by_count":7,"area":"agents"},{"id":"2410.22339","title":"DAWN: Designing Distributed Agents in a Worldwide Network","created":"2024-10-11","cited_by_count":6,"area":"agents"},{"id":"2504.07461","title":"Achilles Heel of Distributed Multi-Agent Systems","created":"2025-04-10","cited_by_count":6,"area":"agents"},{"id":"2505.18572","title":"MASTER: Multi-Agent Security Through Exploration of Roles and Topological Structures -- A Comprehensive Framework","created":"2025-05-24","cited_by_count":6,"area":"agents"},{"id":"2506.02546","title":"To trust or not to trust: Attention-based Trust Management for LLM Multi-Agent Systems","created":"2025-06-03","cited_by_count":6,"area":"agents"},{"id":"2601.14667","title":"INFA-Guard: Mitigating Malicious Propagation via Infection-Aware Safeguarding in LLM-Based Multi-Agent Systems","created":"2026-01-21","cited_by_count":6,"area":"agents"},{"id":"2407.09295","title":"Systematic Categorization, Construction and Evaluation of New Attacks against Multi-modal Mobile GUI Agents","created":"2024-07-12","cited_by_count":5,"area":"agents"},{"id":"2512.04129","title":"Don't Trust Your Upstream: Exploiting LLM Multi-Agent System via Topology-Guided Adversarial Propagation","created":"2025-12-03","cited_by_count":5,"area":"agents"},{"id":"2601.04694","title":"ResMAS: Resilience Optimization in LLM-based Multi-agent Systems","created":"2026-01-08","cited_by_count":5,"area":"agents"},{"id":"2510.19420","title":"Securing Multi-Agent Systems Against Corruptions via Node Contribution Backpropagation","created":"2025-10-22","cited_by_count":4,"area":"agents"},{"id":"2502.15153","title":"When Disagreements Elicit Robustness: Investigating Self-Repair Capabilities under LLM Multi-Agent Disagreements","created":"2025-02-21","cited_by_count":3,"area":"agents"},{"id":"2512.16167","title":"Ev-Trust: An Evolutionarily Stable Trust Mechanism for Decentralized LLM-Based Multi-Agent Service Economies","created":"2025-12-18","cited_by_count":3,"area":"agents"},{"id":"2603.02960","title":"Architecting Trust in Artificial Epistemic Agents","created":"2026-03-03","cited_by_count":3,"area":"agents"},{"id":"2605.16346","title":"PropGuard: Safeguarding LLM-MAS via Propagation-Aware Exploration and Remediation","created":"2026-05-08","cited_by_count":3,"area":"agents"},{"id":"2602.00428","title":"When Agents \"Misremember\" Collectively: Exploring the Mandela Effect in LLM-based Multi-Agent Systems","created":"2026-01-31","cited_by_count":2,"area":"agents"},{"id":"2604.24477","title":"GAMMAF: A Common Framework for Graph-Based Anomaly Monitoring Benchmarking in LLM Multi-Agent Systems","created":"2026-04-27","cited_by_count":2,"area":"agents"},{"id":"2605.28104","title":"Defending LLM-based Multi-Agent Systems Against Cooperative Attacks with Sentence-Level Rectification","created":"2026-05-27","cited_by_count":2,"area":"agents"},{"id":"2606.16710","title":"Misinformation Propagation in Benign Multi-Agent Systems","created":"2026-06-15","cited_by_count":2,"area":"agents"},{"id":"2609.24967","title":"Emergent Collusion in Long-Horizon LLM Agent Interaction","created":"2026-09-21","cited_by_count":2,"area":"agents"},{"id":"2509.26126","title":"The Hunger Game Debate: On the Emergence of Over-Competition in Multi-Agent Systems","created":"2025-09-30","cited_by_count":1,"area":"agents"},{"id":"2605.09027","title":"GAMBIT: A Three-Mode Benchmark for Adversarial Robustness in Multi-Agent LLM Collectives","created":"2026-05-09","cited_by_count":1,"area":"agents"},{"id":"2607.12406","title":"Isolation as a First-Class Principle for LLM-Agent System Safety: Concepts, Taxonomy, Challenges and Future Directions","created":"2026-07-14","cited_by_count":1,"area":"agents"},{"id":"2608.00718","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","created":"2026-08-01","cited_by_count":1,"area":"agents"},{"id":"2608.14668","title":"BRA-Audit: Budgeted Runtime Auditing for LLM Multi-Agent Systems via Cumulative-Exposure Audit-Point Placement","created":"2026-08-02","cited_by_count":1,"area":"agents"},{"id":"2609.00595","title":"SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems","created":"2026-09-01","cited_by_count":1,"area":"agents"},{"id":"2606.30602","title":"MESA: Prioritizing Vulnerable Communication Channels for Securing Multi-Agent Systems","created":"2026-06-29","cited_by_count":0,"area":"agents"},{"id":"2607.26120","title":"Even More Deception: Objective Misalignment in Mixed-Motive LLM Multi-Agent Systems","created":"2026-07-28","cited_by_count":0,"area":"agents"},{"id":"2608.10530","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","created":"2026-08-11","cited_by_count":0,"area":"agents"},{"id":"2608.24069","title":"Poisoning Agentic Alpha: Adversarial Vulnerabilities Across Roles and Architectures in Multi-Agent Trading Systems","created":"2026-08-25","cited_by_count":0,"area":"agents"},{"id":"2609.23700","title":"When the Agent Becomes the Kernel: A Systematization of Security on the Path to AI-Native Operating Systems","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.37567","title":"Concealing LLM-Based Multi-Agent Topology via Phantom Structure Injection","created":"2026-09-29","cited_by_count":0,"area":"agents"}],"next_cursor":null}