{"total":24,"rows":[{"id":"2507.15219","title":"PromptArmor: Simple yet Effective Prompt Injection Defenses","created":"2025-07-21","cited_by_count":108,"area":"agents"},{"id":"2508.01249","title":"AgentArmor: Enforcing Program Analysis on Agent Runtime Trace to Defend Against Prompt Injection","created":"2025-08-02","cited_by_count":46,"area":"agents"},{"id":"2601.08012","title":"Towards Verifiably Safe Tool Use for LLM Agents","created":"2026-01-12","cited_by_count":36,"area":"agents"},{"id":"2603.11088","title":"The Attack and Defense Landscape of Agentic AI: A Comprehensive Survey","created":"2026-03-11","cited_by_count":28,"area":"agents"},{"id":"2602.12194","title":"MalTool: Malicious Tool Attacks on LLM Agents","created":"2026-02-12","cited_by_count":20,"area":"agents"},{"id":"2603.19469","title":"A Framework for Formalizing LLM Agent Security","created":"2026-03-19","cited_by_count":16,"area":"agents"},{"id":"2506.05739","title":"To Protect the LLM Agent Against the Prompt Injection Attack with Polymorphic Prompt","created":"2025-06-06","cited_by_count":15,"area":"agents"},{"id":"2510.08829","title":"CommandSans: Securing AI Agents with Surgical Precision Prompt Sanitization","created":"2025-10-09","cited_by_count":12,"area":"agents"},{"id":"2510.17276","title":"Breaking and Fixing Defenses Against Control-Flow Hijacking in Multi-Agent Systems","created":"2025-10-20","cited_by_count":12,"area":"agents"},{"id":"2602.14161","title":"When Benchmarks Lie: Evaluating Malicious Prompt Classifiers Under True Distribution Shift","created":"2026-02-15","cited_by_count":11,"area":"agents"},{"id":"2509.25926","title":"Preventing Prompt Injection with Type-Directed Privilege Separation","created":"2025-09-30","cited_by_count":9,"area":"agents"},{"id":"2601.13186","title":"Prompt Injection Mitigation with Agentic AI, Nested Learning, and AI Sustainability via Semantic Caching","created":"2026-01-19","cited_by_count":4,"area":"agents"},{"id":"2605.31042","title":"From Prompt Injection to Persistent Control: Defending Agentic Harness Against Trojan Backdoors","created":"2026-05-29","cited_by_count":4,"area":"agents"},{"id":"2608.23471","title":"InjecMEM: Memory Injection Attack on LLM Agent Memory Systems","created":"2026-08-24","cited_by_count":4,"area":"agents"},{"id":"2508.06418","title":"Quantifying Conversation Drift in MCP via Latent Polytope","created":"2025-08-08","cited_by_count":2,"area":"agents"},{"id":"2603.13424","title":"Agent Privilege Separation in OpenClaw: A Structural Defense Against Prompt Injection","created":"2026-03-13","cited_by_count":2,"area":"agents"},{"id":"2609.06972","title":"AgentDrift: A Step-Labeled Benchmark of Injection-Hijacked LLM Agent Trajectories","created":"2026-09-07","cited_by_count":2,"area":"agents"},{"id":"2604.09056","title":"Conversations Risk Detection LLMs in Financial Agents via Multi-Stage Generative Rollout","created":"2026-04-10","cited_by_count":0,"area":"agents"},{"id":"2607.18826","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","created":"2026-07-21","cited_by_count":0,"area":"agents"},{"id":"2607.18847","title":"Data Leakage Prevention in Agentic Applications via Preemptive Hardening","created":"2026-07-21","cited_by_count":0,"area":"agents"},{"id":"2607.19595","title":"Twin Agent: Context Residual Compression for Privilege Separated Agents","created":"2026-07-21","cited_by_count":0,"area":"agents"},{"id":"2609.10892","title":"DriftNet: A Dual-Head Trajectory Transformer for Detecting and Localizing Prompt Injection in LLM Agents","created":"2026-09-09","cited_by_count":0,"area":"agents"},{"id":"2609.16694","title":"Toward Secure AI-Powered Penetration Testing Agents: Security Threats, Guardrails, and Architectural Perspectives","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2610.03448","title":"Passing the Test You Trained On: Re-evaluating Prompt-Injection Detectors for LLM Agents","created":"2026-10-02","cited_by_count":0,"area":"agents"}],"next_cursor":null}