{"total":99,"rows":[{"id":"2503.21460","title":"Large Language Model Agent: A Survey on Methodology, Applications and Challenges","created":"2025-03-27","cited_by_count":205,"area":"agents"},{"id":"2504.19793","title":"Prompt Injection Attack to Tool Selection in LLM Agents","created":"2025-04-28","cited_by_count":158,"area":"agents"},{"id":"2504.01990","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","created":"2025-03-31","cited_by_count":126,"area":"agents"},{"id":"2506.04133","title":"TRiSM for Agentic AI: A Review of Trust, Risk, and Security Management in LLM-based Agentic Multi-Agent Systems","created":"2025-06-04","cited_by_count":59,"area":"agents"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2503.12188","title":"Multi-Agent Systems Execute Arbitrary Malicious Code","created":"2025-03-15","cited_by_count":53,"area":"agents"},{"id":"2504.21034","title":"SAGA: A Security Architecture for Governing AI Agentic Systems","created":"2025-04-27","cited_by_count":45,"area":"agents"},{"id":"2601.05504","title":"Memory Poisoning Attack and Defense on Memory Based LLM-Agents","created":"2026-01-09","cited_by_count":44,"area":"agents"},{"id":"2602.10453","title":"The Landscape of Prompt Injection Threats in LLM Agents: From Taxonomy to Analysis","created":"2026-02-11","cited_by_count":30,"area":"agents"},{"id":"2505.24019","title":"LLM Agents Should Employ Security Principles","created":"2025-05-29","cited_by_count":29,"area":"agents"},{"id":"2506.23844","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","created":"2025-06-30","cited_by_count":29,"area":"agents"},{"id":"2510.23883","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","created":"2025-10-27","cited_by_count":28,"area":"agents"},{"id":"2511.05269","title":"TAMAS: Benchmarking Adversarial Risks in Multi-Agent LLM Systems","created":"2025-11-07","cited_by_count":26,"area":"agents"},{"id":"2509.21011","title":"Automatic Red Teaming LLM-based Agents with Model Context Protocol Tools","created":"2025-09-25","cited_by_count":18,"area":"agents"},{"id":"2508.03125","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","created":"2025-08-05","cited_by_count":17,"area":"agents"},{"id":"2505.19433","title":"Can Compressed LLMs Truly Act? An Empirical Evaluation of Agentic Capabilities in LLM Compression","created":"2025-05-26","cited_by_count":16,"area":"agents"},{"id":"2505.12567","title":"A Survey of Attacks on Large Language Models","created":"2025-05-18","cited_by_count":15,"area":"agents"},{"id":"2508.01332","title":"BlockA2A: Towards Secure and Verifiable Agent-to-Agent Interoperability","created":"2025-08-02","cited_by_count":15,"area":"agents"},{"id":"2605.26497","title":"Aligning Provenance with Authorization: A Dual-Graph Defense for LLM Agents","created":"2026-05-26","cited_by_count":15,"area":"agents"},{"id":"2601.07395","title":"MCP-ITP: An Automated Framework for Implicit Tool Poisoning in MCP","created":"2026-01-12","cited_by_count":14,"area":"agents"},{"id":"2605.03378","title":"ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection","created":"2026-05-05","cited_by_count":14,"area":"agents"},{"id":"2507.04724","title":"Who's the Mole? Modeling and Detecting Intention-Hiding Malicious Agents in LLM-Based Multi-Agent Systems","created":"2025-07-07","cited_by_count":13,"area":"agents"},{"id":"2508.07935","title":"SHIELDA: Structured Handling of Exceptions in LLM-Driven Agentic Workflows","created":"2025-08-11","cited_by_count":13,"area":"agents"},{"id":"2604.02837","title":"Towards Secure Agent Skills: Architecture, Threat Taxonomy, and Security Analysis","created":"2026-04-03","cited_by_count":13,"area":"agents"},{"id":"2505.23847","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","created":"2025-05-28","cited_by_count":12,"area":"agents"},{"id":"2512.23343","title":"AI Meets Brain: Memory Systems from Cognitive Neuroscience to Autonomous Agents","created":"2025-12-29","cited_by_count":12,"area":"agents"},{"id":"2512.06914","title":"SoK: Trust-Authorization Mismatch in LLM Agent Interactions","created":"2025-12-07","cited_by_count":11,"area":"agents"},{"id":"2510.14312","title":"Terrarium: Revisiting the Blackboard for Multi-Agent Safety, Privacy, and Security Studies","created":"2025-10-16","cited_by_count":10,"area":"agents"},{"id":"2505.20824","title":"MedSentry: Understanding and Mitigating Safety Risks in Medical LLM Multi-Agent Systems","created":"2025-05-27","cited_by_count":9,"area":"agents"},{"id":"2506.07524","title":"TAI3: Testing Agent Integrity in Interpreting User Intent","created":"2025-06-09","cited_by_count":9,"area":"agents"},{"id":"2511.03841","title":"Security Analysis of Agentic AI Communication Protocols: A Comparative Evaluation","created":"2025-11-05","cited_by_count":9,"area":"agents"},{"id":"2602.13477","title":"OMNI-LEAK: Orchestrator Multi-Agent Network Induced Data Leakage","created":"2026-02-13","cited_by_count":9,"area":"agents"},{"id":"2505.12442","title":"IP Leakage Attacks Targeting LLM-Based Multi-Agent Systems","created":"2025-05-18","cited_by_count":8,"area":"agents"},{"id":"2506.03053","title":"MAEBE: Multi-Agent Emergent Behavior Framework","created":"2025-06-03","cited_by_count":8,"area":"agents"},{"id":"2510.22620","title":"Breaking Agent Backbones: Evaluating the Security of Backbone LLMs in AI Agents","created":"2025-10-26","cited_by_count":8,"area":"agents"},{"id":"2602.19555","title":"SOK: A Taxonomy of Attack Vectors and Defense Strategies for Agentic Supply Chain Runtime","created":"2026-02-23","cited_by_count":8,"area":"agents"},{"id":"2604.15367","title":"SoK: Security of Autonomous LLM Agents in Agentic Commerce","created":"2026-04-15","cited_by_count":8,"area":"agents"},{"id":"2605.11514","title":"FlowSteer: Prompt-Only Workflow Steering Exposes Planning-Time Vulnerabilities in Multi-Agent LLM Systems","created":"2026-05-12","cited_by_count":7,"area":"agents"},{"id":"2510.05159","title":"Malice in Agentland: Down the Rabbit Hole of Backdoors in the AI Supply Chain","created":"2025-10-03","cited_by_count":6,"area":"agents"},{"id":"2604.04522","title":"HDP: A Lightweight Cryptographic Protocol for Human Delegation Provenance in Agentic AI Systems","created":"2026-04-06","cited_by_count":6,"area":"agents"},{"id":"2605.02812","title":"Autonomous LLM Agent Worms: Cross-Platform Propagation, Automated Discovery and Temporal Re-Entry Defense","created":"2026-05-04","cited_by_count":6,"area":"agents"},{"id":"2510.14133","title":"Formalizing the Safety, Security, and Functional Properties of Agentic AI Systems","created":"2025-10-15","cited_by_count":5,"area":"agents"},{"id":"2603.15408","title":"TrinityGuard: A Unified Framework for Safeguarding Multi-Agent Systems","created":"2026-03-16","cited_by_count":5,"area":"agents"},{"id":"2508.03864","title":"Evo-MARL: Co-Evolutionary Multi-Agent Reinforcement Learning for Internalized Safety","created":"2025-08-05","cited_by_count":4,"area":"agents"},{"id":"2510.19420","title":"Securing Multi-Agent Systems Against Corruptions via Node Contribution Backpropagation","created":"2025-10-22","cited_by_count":4,"area":"agents"},{"id":"2601.13186","title":"Prompt Injection Mitigation with Agentic AI, Nested Learning, and AI Sustainability via Semantic Caching","created":"2026-01-19","cited_by_count":4,"area":"agents"},{"id":"2605.09278","title":"EquiMem: Calibrating Shared Memory in Multi-Agent Debate via Game-Theoretic Equilibrium","created":"2026-05-10","cited_by_count":4,"area":"agents"},{"id":"2606.07790","title":"Byzantine Cheap Talk: Adversarial Resilience and Topology Effects in LLM Coordination Games","created":"2026-06-05","cited_by_count":4,"area":"agents"},{"id":"2606.28958","title":"When Latent Agents Lie: KV-Cache Integrity in Multi-Agent LLM Collaboration","created":"2026-06-27","cited_by_count":4,"area":"agents"},{"id":"2608.10218","title":"Mind Viruses: Self-Propagating Ideas in Multi-Agent LLM Systems","created":"2026-08-10","cited_by_count":4,"area":"agents"},{"id":"2512.16167","title":"Ev-Trust: An Evolutionarily Stable Trust Mechanism for Decentralized LLM-Based Multi-Agent Service Economies","created":"2025-12-18","cited_by_count":3,"area":"agents"},{"id":"2604.12461","title":"CIA: Inferring the Communication Topology from LLM-based Multi-Agent Systems","created":"2026-04-14","cited_by_count":3,"area":"agents"},{"id":"2605.10481","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","created":"2026-05-11","cited_by_count":3,"area":"agents"},{"id":"2605.19240","title":"CASPIAN: Online Detection and Attribution of Cascade Attacks in LLM Multi-Agent Systems via Cross-Channel Causal Monitoring","created":"2026-05-19","cited_by_count":3,"area":"agents"},{"id":"2605.25389","title":"Evo-Attacker: Memory-Augmented Reinforcement Learning for Long-Horizon Tool Attacks on LLM-MAS","created":"2026-05-25","cited_by_count":3,"area":"agents"},{"id":"2507.21146","title":"Towards Unifying Quantitative Security Benchmarking for Multi Agent Systems","created":"2025-07-23","cited_by_count":2,"area":"agents"},{"id":"2509.21634","title":"MobiLLM: An Agentic AI Framework for Closed-Loop Threat Mitigation in 6G Open RANs","created":"2025-09-25","cited_by_count":2,"area":"agents"},{"id":"2511.17671","title":"MURMUR: Using cross-user chatter to break collaborative language agents in groups","created":"2025-11-21","cited_by_count":2,"area":"agents"},{"id":"2604.24477","title":"GAMMAF: A Common Framework for Graph-Based Anomaly Monitoring Benchmarking in LLM Multi-Agent Systems","created":"2026-04-27","cited_by_count":2,"area":"agents"},{"id":"2605.08460","title":"When Child Inherits: Modeling and Exploiting Subagent Spawn in Multi-Agent Networks","created":"2026-05-08","cited_by_count":2,"area":"agents"},{"id":"2606.09084","title":"Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps","created":"2026-06-08","cited_by_count":2,"area":"agents"},{"id":"2607.15434","title":"Coercion and Deception in AI-to-AI Management: An Agentic Benchmark of Unprompted Escalation","created":"2026-07-16","cited_by_count":2,"area":"agents"},{"id":"2608.02698","title":"Steganalysis of Adaptive Covert Collusion in Tool-Using Agent Populations: A Black-Box, Cross-Principal Approach","created":"2026-08-03","cited_by_count":2,"area":"agents"},{"id":"2608.22868","title":"AgentFlow: A Flow-Centric Policy Language and Framework for Securing LLM Agent Systems","created":"2026-08-24","cited_by_count":2,"area":"agents"},{"id":"2609.06972","title":"AgentDrift: A Step-Labeled Benchmark of Injection-Hijacked LLM Agent Trajectories","created":"2026-09-07","cited_by_count":2,"area":"agents"},{"id":"2609.24967","title":"Emergent Collusion in Long-Horizon LLM Agent Interaction","created":"2026-09-21","cited_by_count":2,"area":"agents"},{"id":"2511.08710","title":"Convergence dynamics of Agent-to-Agent Interactions with Misaligned objectives","created":"2025-11-11","cited_by_count":1,"area":"agents"},{"id":"2603.01564","title":"From Secure Agentic AI to Secure Agentic Web: Challenges, Threats, and Future Directions","created":"2026-03-02","cited_by_count":1,"area":"agents"},{"id":"2603.28013","title":"Kill-Chain Canaries: Stage-Level Tracking of Prompt Injection Across Attack Surfaces and Model Safety Tiers","created":"2026-03-30","cited_by_count":1,"area":"agents"},{"id":"2604.17125","title":"CASCADE: A Component Ablation and Corpus Audit of a Layered Local Defense for MCP-Based Systems","created":"2026-04-18","cited_by_count":1,"area":"agents"},{"id":"2607.05120","title":"Agent Data Injection Attacks are Realistic Threats to AI Agents","created":"2026-07-06","cited_by_count":1,"area":"agents"},{"id":"2607.06807","title":"When Agents Go Rogue: Activation-Based Detection of Malicious Behaviors in Multi-Agent Systems","created":"2026-07-07","cited_by_count":1,"area":"agents"},{"id":"2607.09766","title":"Norm Enforcement for AI Agents: Robustly Shaping Behavior in Multi-Agent Systems","created":"2026-07-07","cited_by_count":1,"area":"agents"},{"id":"2608.00718","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","created":"2026-08-01","cited_by_count":1,"area":"agents"},{"id":"2608.00747","title":"When Prompts Control Robots: Prompt Injection Attacks in Multi-Agent Robotic Systems","created":"2026-08-01","cited_by_count":1,"area":"agents"},{"id":"2608.01558","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","created":"2026-08-03","cited_by_count":1,"area":"agents"},{"id":"2609.00595","title":"SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems","created":"2026-09-01","cited_by_count":1,"area":"agents"},{"id":"2510.03495","title":"AgentHub: A Registry for Discoverable, Verifiable, and Reproducible AI Agents","created":"2025-10-03","cited_by_count":0,"area":"agents"},{"id":"2605.07110","title":"Securing Computer-Use Agents: A Unified Architecture-Lifecycle Framework for Deployment-Grounded Reliability","created":"2026-05-08","cited_by_count":0,"area":"agents"},{"id":"2606.30602","title":"MESA: Prioritizing Vulnerable Communication Channels for Securing Multi-Agent Systems","created":"2026-06-29","cited_by_count":0,"area":"agents"},{"id":"2607.03821","title":"DualView: Preventing Indirect Prompt Injection in Personal AI Agents","created":"2026-07-04","cited_by_count":0,"area":"agents"},{"id":"2607.16199","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","created":"2026-04-30","cited_by_count":0,"area":"agents"},{"id":"2607.18826","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","created":"2026-07-21","cited_by_count":0,"area":"agents"},{"id":"2608.00202","title":"From Monoliths to Swarms: A Study of Attack Surface Evolution in the Transition to Multi-Agent Web Systems","created":"2026-07-31","cited_by_count":0,"area":"agents"},{"id":"2608.10530","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","created":"2026-08-11","cited_by_count":0,"area":"agents"},{"id":"2608.20597","title":"Testing and Evaluation of Agentic AI Systems In Military Command and Control","created":"2026-08-20","cited_by_count":0,"area":"agents"},{"id":"2609.03192","title":"Where Reliability Lives: Experimental Localisation of Behavioural Properties in an Agent System","created":"2026-09-02","cited_by_count":0,"area":"agents"},{"id":"2609.17320","title":"Emergence World: Adversarial Stress-Testing of Long-Horizon Multi-Agent Systems","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2609.17527","title":"Agentic Societies Need a Social Harness","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2609.17817","title":"Reflections on Trusting Trust, Revisited: Contaminating Self-Modifying AI Coding Agents with Poisoned Benchmarks","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2609.18460","title":"Collective Loss of Control in LLM Agent Systems: An Epidemic Account of Mutation, Contagion, and Recovery","created":"2026-09-16","cited_by_count":0,"area":"agents"},{"id":"2609.19789","title":"Contagion on the Trading Floor: How Adversarial Signals Spread in Multi-Agent Trading Systems","created":"2026-09-17","cited_by_count":0,"area":"agents"},{"id":"2609.22949","title":"Beyond Single-Model Injection: A Threat Model and Defense Architecture for Prompt Injection in Multi-Agent Systems","created":"2026-09-19","cited_by_count":0,"area":"agents"},{"id":"2609.23700","title":"When the Agent Becomes the Kernel: A Systematization of Security on the Path to AI-Native Operating Systems","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.35576","title":"Share-Borne AI Virus: Memory-Hopping Attacks Across LLM Agents","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2609.37567","title":"Concealing LLM-Based Multi-Agent Topology via Phantom Structure Injection","created":"2026-09-29","cited_by_count":0,"area":"agents"},{"id":"2610.05793","title":"Topology-Conditioned Backdoors: Language Models That Insert Vulnerabilities When They Infer They Are in a Multi-Agent System","created":"2026-10-05","cited_by_count":0,"area":"agents"},{"id":"2610.06401","title":"RAISED: Self-Distillation for Robustness to Prompt Injection in LLM Agents","created":"2026-10-05","cited_by_count":0,"area":"agents"},{"id":"2610.06748","title":"BazaarBench: Delegation Safety in Decentralized C2C Marketplaces Run by LLM Agents","created":"2026-10-05","cited_by_count":0,"area":"agents"}],"next_cursor":null}