{"total":21,"rows":[{"id":"2505.23643","title":"Securing AI Agents with Information-Flow Control","created":"2025-05-29","cited_by_count":121,"area":null},{"id":"2504.20984","title":"ACE: A Security Architecture for LLM-Integrated App Systems","created":"2025-04-29","cited_by_count":55,"area":null},{"id":"2504.02733","title":"Enhancing LLM Robustness to Perturbed Instructions: An Empirical Study","created":"2025-04-03","cited_by_count":17,"area":null},{"id":"2601.07185","title":"Defenses Against Prompt Attacks Learn Surface Heuristics","created":"2026-01-12","cited_by_count":11,"area":null},{"id":"2604.25109","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","created":"2026-04-28","cited_by_count":7,"area":null},{"id":"2605.18991","title":"Agent Security is a Systems Problem","created":"2026-05-18","cited_by_count":5,"area":null},{"id":"2509.14608","title":"Enterprise AI Must Enforce Participant-Aware Access Control","created":"2025-09-18","cited_by_count":3,"area":null},{"id":"2603.18740","title":"Measuring and Exploiting Contextual Bias in LLM-Assisted Security Code Review","created":"2026-03-19","cited_by_count":3,"area":null},{"id":"2606.30383","title":"Whose Side Is Your Agent On? Multi-Party Principal Loyalty in LLM Agents","created":"2026-06-29","cited_by_count":3,"area":null},{"id":"2606.20510","title":"Efficient and Sound Probabilistic Verification for AI Agents","created":"2026-06-18","cited_by_count":2,"area":null},{"id":"2602.09757","title":"Towards Poisoning Robustness Certification for Natural Language Generation","created":"2026-02-10","cited_by_count":1,"area":null},{"id":"2512.03720","title":"Context-Aware Hierarchical Learning: A Two-Step Paradigm towards Safer LLMs","created":"2025-12-03","cited_by_count":0,"area":null},{"id":"2605.09721","title":"Security Risks in Tool-Enabled AI Agents: A Systematic Analysis of Privileged Execution Environments","created":"2026-05-10","cited_by_count":0,"area":null},{"id":"2605.09737","title":"System-Prompt Anchoring with Cross-Attention Layers","created":"2026-05-10","cited_by_count":0,"area":null},{"id":"2605.10907","title":"Engineering Robustness into Personal Agents with the AI Workflow Store","created":"2026-05-11","cited_by_count":0,"area":null},{"id":"2605.30521","title":"Evaluating using Mock Tool Calls to Quarantine Untrusted Prompt Inputs","created":"2026-05-28","cited_by_count":0,"area":null},{"id":"2609.13725","title":"IBBench-Light: A Paired Evaluation of Task-Conditioned Responses to External Directives","created":"2026-09-12","cited_by_count":0,"area":null},{"id":"2609.16984","title":"Nameless Tokenization: A Lossless Tokenizer-Level Defense Against Control-Token Forgery in Open-Weight LLMs","created":"2026-09-15","cited_by_count":0,"area":null},{"id":"2610.04210","title":"Can LLMs Separate Pasted Artifacts from User Speech? Absorption at Unmarked Prompt Seams","created":"2026-10-03","cited_by_count":0,"area":null},{"id":"2610.05139","title":"Hidden in the Comments: A Context-Injection Attack Surface in Code LLMs","created":"2026-10-04","cited_by_count":0,"area":null},{"id":"2610.17820","title":"Same Attack, Different Judge: A First Controlled Adversarial Comparison of Jev, LLM Judges, and Purpose-Built Safety Classifiers","created":"2026-10-13","cited_by_count":0,"area":null}],"next_cursor":null}