{"total":28,"rows":[{"id":"2503.18813","title":"Defeating Prompt Injections by Design","created":"2025-03-24","cited_by_count":297,"area":"agents"},{"id":"2503.21460","title":"Large Language Model Agent: A Survey on Methodology, Applications and Challenges","created":"2025-03-27","cited_by_count":205,"area":"agents"},{"id":"2505.02279","title":"A survey of agent interoperability protocols: Model Context Protocol (MCP), Agent Communication Protocol (ACP), Agent-to-Agent Protocol (A2A), and Agent Network Protocol (ANP)","created":"2025-05-04","cited_by_count":101,"area":"agents"},{"id":"2507.06134","title":"OpenAgentSafety: A Comprehensive Framework for Evaluating Real-World AI Agent Safety","created":"2025-07-08","cited_by_count":75,"area":"agents"},{"id":"2506.08837","title":"Design Patterns for Securing LLM Agents against Prompt Injections","created":"2025-06-10","cited_by_count":73,"area":"agents"},{"id":"2508.13220","title":"MCPSecBench: A Systematic Security Benchmark and Playground for Testing Model Context Protocols","created":"2025-08-17","cited_by_count":51,"area":"agents"},{"id":"2504.14064","title":"DoomArena: A framework for Testing AI Agents Against Evolving Security Threats","created":"2025-04-18","cited_by_count":32,"area":"agents"},{"id":"2505.24019","title":"LLM Agents Should Employ Security Principles","created":"2025-05-29","cited_by_count":29,"area":"agents"},{"id":"2603.11088","title":"The Attack and Defense Landscape of Agentic AI: A Comprehensive Survey","created":"2026-03-11","cited_by_count":28,"area":"agents"},{"id":"2508.10880","title":"Searching for Privacy Risks in LLM Agents via Simulation","created":"2025-08-14","cited_by_count":22,"area":"agents"},{"id":"2601.09923","title":"CaMeLs Can Use Computers Too: System-level Security for Computer Use Agents","created":"2026-01-14","cited_by_count":17,"area":"agents"},{"id":"2510.17276","title":"Breaking and Fixing Defenses Against Control-Flow Hijacking in Multi-Agent Systems","created":"2025-10-20","cited_by_count":12,"area":"agents"},{"id":"2510.14312","title":"Terrarium: Revisiting the Blackboard for Multi-Agent Safety, Privacy, and Security Studies","created":"2025-10-16","cited_by_count":10,"area":"agents"},{"id":"2603.02983","title":"Contextualized Privacy Defense for LLM Agents","created":"2026-03-03","cited_by_count":7,"area":"agents"},{"id":"2605.09530","title":"MemPrivacy: Privacy-Preserving Personalized Memory Management for Edge-Cloud Agents","created":"2026-05-10","cited_by_count":7,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2505.12247","title":"LAMeTA: Intent-Aware Agentic Network Optimization via a Large AI Model-Empowered Two-Stage Approach","created":"2025-05-18","cited_by_count":5,"area":"agents"},{"id":"2506.13324","title":"Towards Pervasive Distributed Agentic Generative AI -- A State of The Art","created":"2025-06-16","cited_by_count":4,"area":"agents"},{"id":"2604.26274","title":"Enforcing Benign Trajectories: A Behavioral Firewall for Structured-Workflow AI Agents","created":"2026-04-29","cited_by_count":3,"area":"agents"},{"id":"2603.17639","title":"VeriGrey: Greybox Agent Validation","created":"2026-03-18","cited_by_count":1,"area":"agents"},{"id":"2605.00081","title":"Alignment Contracts for Agentic Security Systems","created":"2026-04-30","cited_by_count":1,"area":"agents"},{"id":"2607.05743","title":"The Balkanization of Execution-Security Research for AI Coding Agents: Isolation, Access Control, and Time-of-Check-to-Time-of-Use Vulnerabilities","created":"2026-07-07","cited_by_count":0,"area":"agents"},{"id":"2608.12977","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","created":"2026-08-13","cited_by_count":0,"area":"agents"},{"id":"2608.27427","title":"Persona-Execution Separation: An Architecture Pattern for Evolving LLM Agents under Execution Audit","created":"2026-08-27","cited_by_count":0,"area":"agents"},{"id":"2609.14003","title":"Confuse the Model, Control the Flow: Understanding and Mitigating Privacy Leakage from LLM Agents with Information Flow Control","created":"2026-09-12","cited_by_count":0,"area":"agents"},{"id":"2609.17648","title":"Trust propagation and structural containment in Multi-agent LLM pipelines","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2609.28900","title":"Codetta: High-Capacity, Keyless, and Undetectable Multi-Agent Collusion","created":"2026-09-24","cited_by_count":0,"area":"agents"},{"id":"2610.03089","title":"Securing Computer-Use Agents Against Branch Steering Attacks","created":"2026-10-02","cited_by_count":0,"area":"agents"}],"next_cursor":null}