{"total":47,"rows":[{"id":"2506.04202","title":"TracLLM: A Generic Framework for Attributing Long Context LLMs","created":"2025-06-04","cited_by_count":13,"area":null},{"id":"2604.03131","title":"A Systematic Security Evaluation of OpenClaw and Its Variants","created":"2026-04-03","cited_by_count":13,"area":null},{"id":"2604.03976","title":"Quantifying Trust: Financial Risk Management for Trustworthy AI Agents","created":"2026-04-05","cited_by_count":8,"area":null},{"id":"2608.04289","title":"SafeCommit: Certifying When Memory-Grounded Agents May Safely Act","created":"2026-08-04","cited_by_count":6,"area":null},{"id":"2602.15344","title":"ER-MIA: Black-Box Adversarial Memory Injection Attacks on Long-Term Memory-Augmented Large Language Models","created":"2026-02-17","cited_by_count":5,"area":null},{"id":"2606.30306","title":"Always-OnAgents:A Survey of Persistent Memory, State, and Governance in LLMAgents","created":"2026-06-29","cited_by_count":5,"area":null},{"id":"2503.08644","title":"Exploiting Instruction-Following Retrievers for Malicious Information Retrieval","created":"2025-03-11","cited_by_count":4,"area":null},{"id":"2604.19657","title":"An AI Agent Execution Environment to Safeguard User Data","created":"2026-04-21","cited_by_count":4,"area":null},{"id":"2605.11003","title":"The Authorization-Execution Gap Is a Major Safety and Security Problem in Open-World Agents","created":"2026-05-10","cited_by_count":4,"area":null},{"id":"2608.06984","title":"HarnessSafe: Evaluating Safety Across Persistent Carriers in Agent Harnesses","created":"2026-08-07","cited_by_count":3,"area":null},{"id":"2505.14226","title":"Phonetic Perturbations Reveal Tokenizer-Rooted Safety Gaps in LLMs","created":"2025-05-20","cited_by_count":2,"area":null},{"id":"2506.11402","title":"LoRA Users Beware: A Few Spurious Tokens Can Manipulate Your Finetuned Model","created":"2025-06-13","cited_by_count":2,"area":null},{"id":"2602.10134","title":"Reverse-Engineering Model Editing on Language Models","created":"2026-02-07","cited_by_count":2,"area":null},{"id":"2602.19844","title":"LLM-enabled Applications Require System-Level Threat Monitoring","created":"2026-02-23","cited_by_count":2,"area":null},{"id":"2410.18312","title":"Countering Autonomous Cyber Threats","created":"2024-10-23","cited_by_count":1,"area":null},{"id":"2509.10682","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","created":"2025-09-12","cited_by_count":1,"area":null},{"id":"2604.16762","title":"CapSeal: Capability-Sealed Secret Mediation for Secure Agent Execution","created":"2026-04-18","cited_by_count":1,"area":null},{"id":"2605.13213","title":"Hierarchical Attacks for Multi-Modal Multi-Agent Reasoning","created":"2026-05-13","cited_by_count":1,"area":null},{"id":"2605.15118","title":"Talk is (Not) Cheap: A Taxonomy and Benchmark Coverage Audit for LLM Attacks","created":"2026-05-14","cited_by_count":1,"area":null},{"id":"2608.14992","title":"Does a Tool Result Carry More Authority Than Plain Text? Three Prospective Studies of False-Claim Adoption in a Synthetic Assignment Task with Claude Opus 5","created":"2026-08-15","cited_by_count":1,"area":null},{"id":"2608.21230","title":"Utility Under Attack: Agent Memory Poisoning and the Limits of Content Screening and Provenance Ranking","created":"2026-08-21","cited_by_count":1,"area":null},{"id":"2609.04135","title":"The Natural Language Interaction Protocol and Standard for AI Agents","created":"2026-09-03","cited_by_count":1,"area":null},{"id":"2609.30813","title":"A Benchmark and Diagnostic Study of Epistemic Admission in Shared Agent Memory","created":"2026-09-25","cited_by_count":1,"area":null},{"id":"2506.22492","title":"Report on NSF Workshop on Science of Safe AI","created":"2025-06-24","cited_by_count":0,"area":null},{"id":"2507.13629","title":"Large Language Models in Cybersecurity: Applications, Vulnerabilities, and Defense Techniques","created":"2025-07-18","cited_by_count":0,"area":null},{"id":"2511.02600","title":"On The Dangers of Poisoned LLMs In Security Automation","created":"2025-11-04","cited_by_count":0,"area":null},{"id":"2602.05016","title":"From Fragmentation to Integration: Exploring the Design Space of AI Agents for Human-as-the-Unit Privacy Management","created":"2026-02-04","cited_by_count":0,"area":null},{"id":"2603.07460","title":"Where Do LLM-based Systems Break? A System-Level Security Framework for Risk Assessment and Treatment","created":"2026-03-08","cited_by_count":0,"area":null},{"id":"2606.08381","title":"Auditing Proprietary Alignment in Large Language Models: A Comparative Framework Without a Ground-Truth Standard","created":"2026-06-07","cited_by_count":0,"area":null},{"id":"2606.21124","title":"PulseCX: Breaking the Closed-World Assumption in Real-Time CX","created":"2026-06-19","cited_by_count":0,"area":null},{"id":"2607.17986","title":"Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go?","created":"2026-07-20","cited_by_count":0,"area":null},{"id":"2607.19292","title":"The safety failures we are not instrumenting: a perspective on hidden safety-critical challenges in modern AI systems","created":"2026-07-21","cited_by_count":0,"area":null},{"id":"2607.24117","title":"Grading the Narrators: An Isnad-Rijal Framework for Claim-Level Provenance in Multi-Agent Knowledge Systems","created":"2026-07-27","cited_by_count":0,"area":null},{"id":"2608.11390","title":"Mechanism Design for Generative Engines: From Exploitation toward Win-Win Outcomes","created":"2026-08-11","cited_by_count":0,"area":null},{"id":"2608.23601","title":"StateTune: Transforming LLM-Assisted EDA Flow Tuning into a Stateful, Closed-Loop Process","created":"2026-08-19","cited_by_count":0,"area":null},{"id":"2608.30303","title":"Lazy Grounding: Attacking Search Agents with Factual Evidence","created":"2026-08-31","cited_by_count":0,"area":null},{"id":"2609.22246","title":"The Corroboration Illusion: When More News Makes LLM Forecasts Less True","created":"2026-09-05","cited_by_count":0,"area":null},{"id":"2609.25052","title":"Self-Cleaning and Captured Anyway: One Measured Primitive for Error in a Store an Agent Writes to Itself, and What a Falling Score Actually Measures","created":"2026-09-06","cited_by_count":0,"area":null},{"id":"2609.25563","title":"AkasicMEM: Governed Enterprise Memory for Agents","created":"2026-09-22","cited_by_count":0,"area":null},{"id":"2609.30028","title":"How does Adversarial Influence Scale in Multi-Agent Systems?","created":"2026-09-24","cited_by_count":0,"area":null},{"id":"2609.31186","title":"Evolutionary Safety of Recursive Self-Improving AI: Taxonomy, Risk Discovery, and Evaluation","created":"2026-09-25","cited_by_count":0,"area":null},{"id":"2609.32091","title":"Memory as Middleware for Self-Improving AI Agents","created":"2026-09-25","cited_by_count":0,"area":null},{"id":"2609.39473","title":"Beyond the Shadows of Plato's Cave: Evaluating False Memory in Autonomous Agents via Counterfactual Reasoning","created":"2026-09-30","cited_by_count":0,"area":null},{"id":"2610.02920","title":"HASTE: Evolving Agent Harnesses Against Emerging Attacks Using Sparse Evidence","created":"2026-10-02","cited_by_count":0,"area":null},{"id":"2610.06274","title":"What May an Agent Change About Itself? A Containment Floor for Self-Configuring Agent Runtimes","created":"2026-10-05","cited_by_count":0,"area":null},{"id":"2610.13623","title":"APEX-Harm: Evaluating Agent Safety in Shared Professional Workspaces","created":"2026-10-09","cited_by_count":0,"area":null},{"id":"2610.18603","title":"AgentStripes: An Evidence-Graded Maturity Model for AI Agents","created":"2026-10-13","cited_by_count":0,"area":null}],"next_cursor":null}