{"total":77,"rows":[{"id":"2512.13564","title":"Memory in the Age of AI Agents","created":"2025-12-15","cited_by_count":303,"area":"agents"},{"id":"2503.21460","title":"Large Language Model Agent: A Survey on Methodology, Applications and Challenges","created":"2025-03-27","cited_by_count":205,"area":"agents"},{"id":"2507.21046","title":"A Survey of Self-Evolving Agents: What, When, How, and Where to Evolve on the Path to Artificial Super Intelligence","created":"2025-07-28","cited_by_count":170,"area":"agents"},{"id":"2503.23350","title":"A Survey of WebAgents: Towards Next-Generation AI Agents for Web Automation with Large Foundation Models","created":"2025-03-30","cited_by_count":87,"area":"agents"},{"id":"2510.02373","title":"A-MemGuard: A Proactive Defense Framework for LLM-Based Agent Memory","created":"2025-09-29","cited_by_count":67,"area":"agents"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2606.04990","title":"From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents","created":"2026-06-03","cited_by_count":37,"area":"agents"},{"id":"2505.24019","title":"LLM Agents Should Employ Security Principles","created":"2025-05-29","cited_by_count":29,"area":"agents"},{"id":"2506.23844","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","created":"2025-06-30","cited_by_count":29,"area":"agents"},{"id":"2510.15186","title":"MAGPIE: A benchmark for Multi-AGent contextual PrIvacy Evaluation","created":"2025-10-16","cited_by_count":29,"area":"agents"},{"id":"2604.16548","title":"A Survey on Long-Term Memory Security in LLM Agents: Attacks, Defenses, and Governance Across the Memory Lifecycle","created":"2026-04-17","cited_by_count":27,"area":"agents"},{"id":"2505.10924","title":"A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?","created":"2025-05-16","cited_by_count":23,"area":"agents"},{"id":"2603.15125","title":"From Storage to Steering: Memory Control Flow Attacks on LLM Agents","created":"2026-03-16","cited_by_count":19,"area":"agents"},{"id":"2603.11768","title":"Governing Evolving Memory in LLM Agents: Risks, Mechanisms, and the Stability and Safety Governed Memory (SSGM) Framework","created":"2026-03-12","cited_by_count":18,"area":"agents"},{"id":"2604.13630","title":"SafeHarness: Lifecycle-Integrated Security Architecture for LLM-based Agent Deployment","created":"2026-04-15","cited_by_count":15,"area":"agents"},{"id":"2508.01186","title":"A Survey on Agent Workflow -- Status and Future","created":"2025-08-02","cited_by_count":14,"area":"agents"},{"id":"2606.24535","title":"Governed Shared Memory for Multi-Agent LLM Systems","created":"2026-06-23","cited_by_count":13,"area":"agents"},{"id":"2512.04668","title":"Topology Matters: Measuring Memory Leakage in Multi-Agent LLMs","created":"2025-12-04","cited_by_count":11,"area":"agents"},{"id":"2512.16310","title":"Agent Tools Orchestration Leaks More: Dataset, Benchmark, and Mitigation","created":"2025-12-18","cited_by_count":11,"area":"agents"},{"id":"2604.23338","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","created":"2026-04-25","cited_by_count":11,"area":"agents"},{"id":"2604.05432","title":"Your LLM Agent Can Leak Your Data: Data Exfiltration via Backdoored Tool Use","created":"2026-04-07","cited_by_count":10,"area":"agents"},{"id":"2503.04596","title":"LLM Applications: Current Paradigms and the Next Frontier","created":"2025-03-06","cited_by_count":8,"area":"agents"},{"id":"2509.03990","title":"Meta-Policy Reflexion: Reusable Reflective Memory and Rule Admissibility for Resource-Efficient LLM Agent","created":"2025-09-04","cited_by_count":7,"area":"agents"},{"id":"2605.09530","title":"MemPrivacy: Privacy-Preserving Personalized Memory Management for Edge-Cloud Agents","created":"2026-05-10","cited_by_count":7,"area":"agents"},{"id":"2605.17830","title":"Remembering More, Risking More: Longitudinal Safety Risks in Memory-Equipped LLM Agents","created":"2026-05-18","cited_by_count":7,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2509.24380","title":"Agentic Services Computing","created":"2025-09-29","cited_by_count":6,"area":"agents"},{"id":"2601.14667","title":"INFA-Guard: Mitigating Malicious Propagation via Infection-Aware Safeguarding in LLM-Based Multi-Agent Systems","created":"2026-01-21","cited_by_count":6,"area":"agents"},{"id":"2603.07557","title":"AgentRaft: Automated Detection of Data Over-Exposure in LLM Agents","created":"2026-03-08","cited_by_count":6,"area":"agents"},{"id":"2508.20282","title":"Network-Level Prompt and Trait Leakage in Local Research Agents","created":"2025-08-27","cited_by_count":5,"area":"agents"},{"id":"2510.07505","title":"PEAR: Planner-Executor Agent Robustness Benchmark","created":"2025-10-08","cited_by_count":5,"area":"agents"},{"id":"2512.04129","title":"Don't Trust Your Upstream: Exploiting LLM Multi-Agent System via Topology-Guided Adversarial Propagation","created":"2025-12-03","cited_by_count":5,"area":"agents"},{"id":"2604.09747","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","created":"2026-04-10","cited_by_count":5,"area":"agents"},{"id":"2605.16746","title":"State Contamination in Memory-Augmented LLM Agents","created":"2026-05-16","cited_by_count":5,"area":"agents"},{"id":"2510.08238","title":"Chain-of-Trigger: An Agentic Backdoor that Paradoxically Enhances Agentic Robustness","created":"2025-10-09","cited_by_count":4,"area":"agents"},{"id":"2606.10062","title":"Deployment-Time Memorization in Foundation-Model Agents","created":"2026-06-08","cited_by_count":4,"area":"agents"},{"id":"2606.15609","title":"FragFuse: Bypassing Access Control of Large Language Model Agents via Memory-Based Query Fragmentation and Fusion","created":"2026-06-14","cited_by_count":4,"area":"agents"},{"id":"2608.18104","title":"Self-Evolving Agents as Dynamic Graph Transformation: A Survey and New Perspective","created":"2026-06-10","cited_by_count":4,"area":"agents"},{"id":"2608.21867","title":"MemGuard: Persisting Verifier Signals for LLM-Agent Memory Governance","created":"2026-08-22","cited_by_count":4,"area":"agents"},{"id":"2608.23471","title":"InjecMEM: Memory Injection Attack on LLM Agent Memory Systems","created":"2026-08-24","cited_by_count":4,"area":"agents"},{"id":"2511.21758","title":"A Longitudinal Measurement of Privacy Policy Evolution for Large Language Models","created":"2025-11-24","cited_by_count":2,"area":"agents"},{"id":"2603.09134","title":"AgenticCyOps: Securing Multi-Agentic AI Integration in Enterprise Cyber Operations","created":"2026-03-10","cited_by_count":2,"area":"agents"},{"id":"2603.15968","title":"MAC: Multi-Agent Constitution Learning","created":"2026-03-16","cited_by_count":2,"area":"agents"},{"id":"2605.07242","title":"MEMOREPAIR: Barrier-First Cascade Repair in Agentic Memory","created":"2026-05-08","cited_by_count":2,"area":"agents"},{"id":"2605.11047","title":"Red-Teaming Agent Execution Contexts: Open-World Security Evaluation on OpenClaw","created":"2026-05-11","cited_by_count":2,"area":"agents"},{"id":"2606.09084","title":"Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps","created":"2026-06-08","cited_by_count":2,"area":"agents"},{"id":"2606.13949","title":"Minim: Privacy-Aware Minimal View for Agents via Trusted Local Sanitization","created":"2026-06-11","cited_by_count":2,"area":"agents"},{"id":"2607.23444","title":"Isolated but Exposed: Persistence-Based Memory Extraction Attack on LLM Agents","created":"2026-07-26","cited_by_count":2,"area":"agents"},{"id":"2603.01564","title":"From Secure Agentic AI to Secure Agentic Web: Challenges, Threats, and Future Directions","created":"2026-03-02","cited_by_count":1,"area":"agents"},{"id":"2604.11666","title":"Playing Along: Learning a Double-Agent Defender for Belief Steering via Theory of Mind","created":"2026-04-13","cited_by_count":1,"area":"agents"},{"id":"2605.25435","title":"Security of OpenClaw Agents: Fundamentals, Attacks, and Countermeasures","created":"2026-05-25","cited_by_count":1,"area":"agents"},{"id":"2606.02302","title":"SeClaw: Spec-Driven Security Task Synthesis for Evaluating Autonomous Agents","created":"2026-06-01","cited_by_count":1,"area":"agents"},{"id":"2607.06807","title":"When Agents Go Rogue: Activation-Based Detection of Malicious Behaviors in Multi-Agent Systems","created":"2026-07-07","cited_by_count":1,"area":"agents"},{"id":"2607.29254","title":"Tool Specifications Matter: Uncovering and Mitigating Safety Risks in AI Agents","created":"2026-07-31","cited_by_count":1,"area":"agents"},{"id":"2608.16551","title":"What to Remember, What to Reveal: Privacy-Aware Memory for Conversational Agents","created":"2026-08-17","cited_by_count":1,"area":"agents"},{"id":"2608.17148","title":"Authorization Before Context: A Model-Neutral Audience Boundary Against Cross-Audience Memory Leakage in Agentic Systems","created":"2026-08-17","cited_by_count":1,"area":"agents"},{"id":"2608.24957","title":"ToolMinimize: Auditing and Rewriting LLM Agent Tool Calls to Minimize Privacy Exposure","created":"2026-08-25","cited_by_count":1,"area":"agents"},{"id":"2609.13889","title":"When Malicious Instructions Persist: Persistent Memory Poisoning Attack on Harness-Based Agents","created":"2026-09-12","cited_by_count":1,"area":"agents"},{"id":"2510.03495","title":"AgentHub: A Registry for Discoverable, Verifiable, and Reproducible AI Agents","created":"2025-10-03","cited_by_count":0,"area":"agents"},{"id":"2512.24008","title":"SPARK: Search Personalization via Agent-Driven Retrieval and Knowledge-sharing","created":"2025-12-30","cited_by_count":0,"area":"agents"},{"id":"2602.12924","title":"Never say never: Exploring the effects of available knowledge on agent persuasiveness in controlled physiotherapy motivation dialogues","created":"2026-02-13","cited_by_count":0,"area":"agents"},{"id":"2605.12535","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","created":"2026-05-02","cited_by_count":0,"area":"agents"},{"id":"2606.25361","title":"Memory Makes the Difference: Evaluating How Different Memory Roles Shape Conversational Agents","created":"2026-06-24","cited_by_count":0,"area":"agents"},{"id":"2606.29030","title":"Memory as an Attack Surface in LLM Agents: A Study on Multiple-Choice Question Answering","created":"2026-06-27","cited_by_count":0,"area":"agents"},{"id":"2608.01719","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","created":"2026-08-03","cited_by_count":0,"area":"agents"},{"id":"2608.03130","title":"DP-MemView: A Memory Interface for Attribute-Level Transcript Privacy in Long-Term LLM Agents","created":"2026-08-04","cited_by_count":0,"area":"agents"},{"id":"2608.29028","title":"Facts Without Rules: Boundary Metadata Collapse in Multi-Agent LLM Handoffs","created":"2026-08-29","cited_by_count":0,"area":"agents"},{"id":"2609.02265","title":"CAPTURE: Disentangling Preference Drift from Memory Poisoning in Personalized LLM Agents","created":"2026-09-02","cited_by_count":0,"area":"agents"},{"id":"2609.03815","title":"Inferring Hidden User Models from the Behavior of Personalized LLM Agents","created":"2026-09-03","cited_by_count":0,"area":"agents"},{"id":"2609.08558","title":"Personalizing LLM Agent Memory Using Biometrics","created":"2026-09-08","cited_by_count":0,"area":"agents"},{"id":"2609.12320","title":"AIM: A Privacy-Aware Interoperable Memory Framework for Multi-Agent Multi-User LLM Systems","created":"2026-09-11","cited_by_count":0,"area":"agents"},{"id":"2609.15011","title":"Semantic-TVM: Structure-Preserving Trustworthy Virtual Memory for Memory-Augmented and Tool-Using Agents","created":"2026-09-14","cited_by_count":0,"area":"agents"},{"id":"2609.19226","title":"PAPC: Platform Mediation for Privacy-Propagation Externalities in AI-Mediated Workflows","created":"2026-09-16","cited_by_count":0,"area":"agents"},{"id":"2609.22712","title":"Trustworthy Agentic AI: Failure Modes, Mitigation Strategies, and a Lifecycle Framework for Autonomous LLM Systems","created":"2026-09-19","cited_by_count":0,"area":"agents"},{"id":"2609.23894","title":"Connecting the Dots in Agentic AI Security: A Cross-Dimensional Threat Taxonomy, Evaluation Maturity, and Open Challenges","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2610.01195","title":"Federated Agent Optimization","created":"2026-10-01","cited_by_count":0,"area":"agents"},{"id":"2610.15390","title":"From Acoustic Sensing to Physical Actions: A Comprehensive Survey of Security Risks in Edge-Deployed Audio LLM-Based Agents","created":"2026-10-11","cited_by_count":0,"area":"agents"}],"next_cursor":null}