{"total":65,"rows":[{"id":"2503.23278","title":"Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions","created":"2025-03-30","cited_by_count":265,"area":null},{"id":"2503.21460","title":"Large Language Model Agent: A Survey on Methodology, Applications and Challenges","created":"2025-03-27","cited_by_count":205,"area":"agents"},{"id":"2411.18279","title":"Large Language Model-Brained GUI Agents: A Survey","created":"2024-11-27","cited_by_count":162,"area":"agents"},{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2503.23037","title":"Agentic Large Language Models, a survey","created":"2025-03-29","cited_by_count":108,"area":"agents"},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2503.11733","title":"LLM Agents for Education: Advances and Applications","created":"2025-03-14","cited_by_count":59,"area":"agents"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2502.07049","title":"LLMs in Software Security: A Survey of Vulnerability Detection Techniques and Insights","created":"2025-02-10","cited_by_count":47,"area":null},{"id":"2504.14348","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","created":"2025-04-19","cited_by_count":44,"area":"mllm"},{"id":"2508.08127","title":"BlindGuard: Safeguarding LLM-based Multi-Agent Systems under Unknown Attacks","created":"2025-08-11","cited_by_count":38,"area":"agents"},{"id":"2508.04482","title":"OS Agents: A Survey on MLLM-based Agents for General Computing Devices Use","created":"2025-08-06","cited_by_count":35,"area":"agents"},{"id":"2503.23434","title":"Towards Trustworthy GUI Agents: A Survey","created":"2025-03-30","cited_by_count":34,"area":"agents"},{"id":"2505.18889","title":"Security Concerns for Large Language Models: A Survey","created":"2025-05-24","cited_by_count":29,"area":null},{"id":"2505.10924","title":"A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?","created":"2025-05-16","cited_by_count":23,"area":"agents"},{"id":"2510.06445","title":"A Survey on Agentic Security: Applications, Threats and Defenses","created":"2025-10-07","cited_by_count":20,"area":"agents"},{"id":"2509.21011","title":"Automatic Red Teaming LLM-based Agents with Model Context Protocol Tools","created":"2025-09-25","cited_by_count":18,"area":"agents"},{"id":"2505.08807","title":"Security of Internet of Agents: Attacks and Countermeasures","created":"2025-05-12","cited_by_count":17,"area":"agents"},{"id":"2510.01645","title":"Position: Privacy Is Not Just Memorization!","created":"2025-10-02","cited_by_count":17,"area":null},{"id":"2505.03864","title":"From Glue-Code to Protocols: A Critical Analysis of A2A and MCP Integration for Scalable Agent Systems","created":"2025-05-06","cited_by_count":14,"area":null},{"id":"2601.07395","title":"MCP-ITP: An Automated Framework for Implicit Tool Poisoning in MCP","created":"2026-01-12","cited_by_count":14,"area":"agents"},{"id":"2601.12560","title":"Agentic Artificial Intelligence (AI): Architectures, Taxonomies, and Evaluation of Large Language Model Agents","created":"2026-01-18","cited_by_count":14,"area":"agents"},{"id":"2511.01815","title":"KV Cache Transform Coding for Compact Storage in LLM Inference","created":"2025-11-03","cited_by_count":13,"area":"inference"},{"id":"2604.02837","title":"Towards Secure Agent Skills: Architecture, Threat Taxonomy, and Security Analysis","created":"2026-04-03","cited_by_count":13,"area":"agents"},{"id":"2505.23847","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","created":"2025-05-28","cited_by_count":12,"area":"agents"},{"id":"2507.08270","title":"Agent Safety Alignment via Reinforcement Learning","created":"2025-07-11","cited_by_count":11,"area":"agents"},{"id":"2512.16310","title":"Agent Tools Orchestration Leaks More: Dataset, Benchmark, and Mitigation","created":"2025-12-18","cited_by_count":11,"area":"agents"},{"id":"2412.17242","title":"On the Generalization and Adaptation Ability of Machine-Generated Text Detectors in Academic Writing","created":"2024-12-23","cited_by_count":10,"area":null},{"id":"2604.05432","title":"Your LLM Agent Can Leak Your Data: Data Exfiltration via Backdoored Tool Use","created":"2026-04-07","cited_by_count":10,"area":"agents"},{"id":"2505.19240","title":"LLLMs: A Data-Driven Survey of Evolving Research on Limitations of Large Language Models","created":"2025-05-25","cited_by_count":9,"area":null},{"id":"2503.04596","title":"LLM Applications: Current Paradigms and the Next Frontier","created":"2025-03-06","cited_by_count":8,"area":"agents"},{"id":"2510.14319","title":"Metacognitive Self-Correction for Multi-Agent System via Prototype-Guided Next-Execution Reconstruction","created":"2025-10-16","cited_by_count":7,"area":"agents"},{"id":"2603.23802","title":"How are AI agents used? Evidence from 177,000 MCP tools","created":"2026-03-25","cited_by_count":7,"area":"agents"},{"id":"2605.02900","title":"Safety in Embodied AI: A Survey of Risks, Attacks, and Defenses","created":"2026-03-28","cited_by_count":7,"area":"safety"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2512.00520","title":"Toward a Safe Internet of Agents","created":"2025-11-29","cited_by_count":6,"area":"agents"},{"id":"2603.07557","title":"AgentRaft: Automated Detection of Data Over-Exposure in LLM Agents","created":"2026-03-08","cited_by_count":6,"area":"agents"},{"id":"2602.15028","title":"Long Context, Less Focus: A Scaling Gap in LLMs Revealed through Privacy and Personalization","created":"2026-02-16","cited_by_count":5,"area":null},{"id":"2602.19547","title":"CIBER: A Comprehensive Benchmark for Security Evaluation of Code Interpreter Agents","created":"2026-02-23","cited_by_count":5,"area":"agents"},{"id":"2603.27148","title":"SafetyDrift: Predicting When AI Agents Cross the Line Before They Actually Do","created":"2026-03-28","cited_by_count":5,"area":"agents"},{"id":"2604.18071","title":"Architectural Design Decisions in AI Agent Harnesses","created":"2026-04-20","cited_by_count":4,"area":"agents"},{"id":"2506.23603","title":"SoK: Semantic Privacy in Large Language Models","created":"2025-06-30","cited_by_count":3,"area":null},{"id":"2603.26221","title":"Clawed and Dangerous: Can We Trust Open Agentic Systems?","created":"2026-03-27","cited_by_count":3,"area":"agents"},{"id":"2604.23459","title":"Architecture Matters for Multi-Agent Security","created":"2026-04-25","cited_by_count":3,"area":null},{"id":"2606.04075","title":"Large Language Models Hack Rewards, and Society","created":"2026-06-02","cited_by_count":3,"area":null},{"id":"2506.20606","title":"Model Editing as a Double-Edged Sword: Steering Agent Ethical Behavior Toward Beneficence or Harm","created":"2025-06-25","cited_by_count":2,"area":"agents"},{"id":"2508.03991","title":"Galaxy: A Cognition-Centered Framework for Proactive, Privacy-Preserving, and Self-Evolving LLM Agents","created":"2025-08-06","cited_by_count":2,"area":"agents"},{"id":"2509.16861","title":"AdaptiveGuard: Towards Adaptive Runtime Safety for LLM-Powered Software","created":"2025-09-21","cited_by_count":2,"area":"safety"},{"id":"2511.21758","title":"A Longitudinal Measurement of Privacy Policy Evolution for Large Language Models","created":"2025-11-24","cited_by_count":2,"area":"agents"},{"id":"2604.03925","title":"AdaptFuse: Training-Free Sequential Preference Inference via Externalized Bayesian Computation","created":"2026-04-05","cited_by_count":2,"area":null},{"id":"2606.04051","title":"RUBAS: Rubric-Based Reinforcement Learning for Agent Safety","created":"2026-06-02","cited_by_count":2,"area":"agents"},{"id":"2509.10682","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","created":"2025-09-12","cited_by_count":1,"area":null},{"id":"2604.12253","title":"A Scoping Review of Large Language Model-Based Pedagogical Agents","created":"2026-04-14","cited_by_count":1,"area":"agents"},{"id":"2605.18672","title":"Position: A Three-Layer Probabilistic Assume-Guarantee Architecture Is Structurally Required for Safe LLM Agent Deployment","created":"2026-05-18","cited_by_count":1,"area":"agents"},{"id":"2606.09908","title":"IDP-Bench: Benchmarking ability of LLMs to protect personal information in interdependent privacy contexts","created":"2026-06-06","cited_by_count":1,"area":null},{"id":"2608.04626","title":"Blockchain Empowered Trustworthy Agent Networks: Foundations, Taxonomy, and Future Directions","created":"2026-08-05","cited_by_count":1,"area":"agents"},{"id":"2602.21127","title":"\"Are You Sure?\": An Empirical Study of Human Perception Vulnerability in LLM-Driven Agentic Systems","created":"2026-02-24","cited_by_count":0,"area":"agents"},{"id":"2604.15078","title":"Where are the Humans? A Scoping Review of Fairness in Multi-agent AI Systems","created":"2026-04-16","cited_by_count":0,"area":null},{"id":"2605.02255","title":"On the Privacy of LLMs: An Ablation Study","created":"2026-05-04","cited_by_count":0,"area":"rag"},{"id":"2606.04317","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","created":"2026-06-03","cited_by_count":0,"area":null},{"id":"2606.09182","title":"Understanding How Enterprises Adopt the Model Context Protocol for LLM-Driven Software Engineering","created":"2026-06-08","cited_by_count":0,"area":"agents"},{"id":"2606.26627","title":"Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agents","created":"2026-06-25","cited_by_count":0,"area":"agents"},{"id":"2607.25297","title":"Hybrid Analysis for Secure MCP Tool Use in LLM Agents","created":"2026-07-28","cited_by_count":0,"area":"agents"},{"id":"2609.22712","title":"Trustworthy Agentic AI: Failure Modes, Mitigation Strategies, and a Lifecycle Framework for Autonomous LLM Systems","created":"2026-09-19","cited_by_count":0,"area":"agents"},{"id":"2610.19422","title":"AgentSafeEvo: Adversarial Co-Evolution for LLM Agent Safety","created":"2026-10-14","cited_by_count":0,"area":"agents"}],"next_cursor":null}