{"total":101,"rows":[{"id":"2512.13564","title":"Memory in the Age of AI Agents","created":"2025-12-15","cited_by_count":303,"area":"agents"},{"id":"2503.21460","title":"Large Language Model Agent: A Survey on Methodology, Applications and Challenges","created":"2025-03-27","cited_by_count":205,"area":"agents"},{"id":"2507.21046","title":"A Survey of Self-Evolving Agents: What, When, How, and Where to Evolve on the Path to Artificial Super Intelligence","created":"2025-07-28","cited_by_count":170,"area":"agents"},{"id":"2503.23350","title":"A Survey of WebAgents: Towards Next-Generation AI Agents for Web Automation with Large Foundation Models","created":"2025-03-30","cited_by_count":87,"area":"agents"},{"id":"2510.02373","title":"A-MemGuard: A Proactive Defense Framework for LLM-Based Agent Memory","created":"2025-09-29","cited_by_count":67,"area":"agents"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2606.04990","title":"From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents","created":"2026-06-03","cited_by_count":37,"area":"agents"},{"id":"2505.24019","title":"LLM Agents Should Employ Security Principles","created":"2025-05-29","cited_by_count":29,"area":"agents"},{"id":"2506.23844","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","created":"2025-06-30","cited_by_count":29,"area":"agents"},{"id":"2510.15186","title":"MAGPIE: A benchmark for Multi-AGent contextual PrIvacy Evaluation","created":"2025-10-16","cited_by_count":29,"area":"agents"},{"id":"2604.16548","title":"A Survey on Long-Term Memory Security in LLM Agents: Attacks, Defenses, and Governance Across the Memory Lifecycle","created":"2026-04-17","cited_by_count":27,"area":"agents"},{"id":"2505.10924","title":"A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?","created":"2025-05-16","cited_by_count":23,"area":"agents"},{"id":"2603.15125","title":"From Storage to Steering: Memory Control Flow Attacks on LLM Agents","created":"2026-03-16","cited_by_count":19,"area":"agents"},{"id":"2603.11768","title":"Governing Evolving Memory in LLM Agents: Risks, Mechanisms, and the Stability and Safety Governed Memory (SSGM) Framework","created":"2026-03-12","cited_by_count":18,"area":"agents"},{"id":"2604.13630","title":"SafeHarness: Lifecycle-Integrated Security Architecture for LLM-based Agent Deployment","created":"2026-04-15","cited_by_count":15,"area":"agents"},{"id":"2508.01186","title":"A Survey on Agent Workflow -- Status and Future","created":"2025-08-02","cited_by_count":14,"area":"agents"},{"id":"2606.24535","title":"Governed Shared Memory for Multi-Agent LLM Systems","created":"2026-06-23","cited_by_count":13,"area":"agents"},{"id":"2512.04668","title":"Topology Matters: Measuring Memory Leakage in Multi-Agent LLMs","created":"2025-12-04","cited_by_count":11,"area":"agents"},{"id":"2512.16310","title":"Agent Tools Orchestration Leaks More: Dataset, Benchmark, and Mitigation","created":"2025-12-18","cited_by_count":11,"area":"agents"},{"id":"2604.23338","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","created":"2026-04-25","cited_by_count":11,"area":"agents"},{"id":"2604.05432","title":"Your LLM Agent Can Leak Your Data: Data Exfiltration via Backdoored Tool Use","created":"2026-04-07","cited_by_count":10,"area":"agents"},{"id":"2503.04596","title":"LLM Applications: Current Paradigms and the Next Frontier","created":"2025-03-06","cited_by_count":8,"area":"agents"},{"id":"2508.03098","title":"Privacy-Aware Decoding: Mitigating Privacy Leakage of Large Language Models in Retrieval-Augmented Generation","created":"2025-08-05","cited_by_count":8,"area":"rag"},{"id":"2509.03990","title":"Meta-Policy Reflexion: Reusable Reflective Memory and Rule Admissibility for Resource-Efficient LLM Agent","created":"2025-09-04","cited_by_count":7,"area":"agents"},{"id":"2605.09530","title":"MemPrivacy: Privacy-Preserving Personalized Memory Management for Edge-Cloud Agents","created":"2026-05-10","cited_by_count":7,"area":"agents"},{"id":"2605.17830","title":"Remembering More, Risking More: Longitudinal Safety Risks in Memory-Equipped LLM Agents","created":"2026-05-18","cited_by_count":7,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2509.24380","title":"Agentic Services Computing","created":"2025-09-29","cited_by_count":6,"area":"agents"},{"id":"2601.14667","title":"INFA-Guard: Mitigating Malicious Propagation via Infection-Aware Safeguarding in LLM-Based Multi-Agent Systems","created":"2026-01-21","cited_by_count":6,"area":"agents"},{"id":"2603.07557","title":"AgentRaft: Automated Detection of Data Over-Exposure in LLM Agents","created":"2026-03-08","cited_by_count":6,"area":"agents"},{"id":"2505.13957","title":"Beyond Text: Unveiling Privacy Vulnerabilities in Multi-modal Retrieval-Augmented Generation","created":"2025-05-20","cited_by_count":5,"area":"rag"},{"id":"2508.20282","title":"Network-Level Prompt and Trait Leakage in Local Research Agents","created":"2025-08-27","cited_by_count":5,"area":"agents"},{"id":"2510.07505","title":"PEAR: Planner-Executor Agent Robustness Benchmark","created":"2025-10-08","cited_by_count":5,"area":"agents"},{"id":"2512.04129","title":"Don't Trust Your Upstream: Exploiting LLM Multi-Agent System via Topology-Guided Adversarial Propagation","created":"2025-12-03","cited_by_count":5,"area":"agents"},{"id":"2602.15028","title":"Long Context, Less Focus: A Scaling Gap in LLMs Revealed through Privacy and Personalization","created":"2026-02-16","cited_by_count":5,"area":null},{"id":"2604.09747","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","created":"2026-04-10","cited_by_count":5,"area":"agents"},{"id":"2604.27914","title":"Geometry-Calibrated Conformal Abstention for Language Models","created":"2026-04-30","cited_by_count":5,"area":null},{"id":"2605.16746","title":"State Contamination in Memory-Augmented LLM Agents","created":"2026-05-16","cited_by_count":5,"area":"agents"},{"id":"2510.08005","title":"Past, Present, and Future of Bug Tracking in the Generative AI Era","created":"2025-10-09","cited_by_count":4,"area":null},{"id":"2510.08238","title":"Chain-of-Trigger: An Agentic Backdoor that Paradoxically Enhances Agentic Robustness","created":"2025-10-09","cited_by_count":4,"area":"agents"},{"id":"2606.10062","title":"Deployment-Time Memorization in Foundation-Model Agents","created":"2026-06-08","cited_by_count":4,"area":"agents"},{"id":"2606.15609","title":"FragFuse: Bypassing Access Control of Large Language Model Agents via Memory-Based Query Fragmentation and Fusion","created":"2026-06-14","cited_by_count":4,"area":"agents"},{"id":"2607.25560","title":"Agent Skills Matter: Inferring Proprietary Skills from Execution Trajectories","created":"2026-07-28","cited_by_count":4,"area":null},{"id":"2608.18104","title":"Self-Evolving Agents as Dynamic Graph Transformation: A Survey and New Perspective","created":"2026-06-10","cited_by_count":4,"area":"agents"},{"id":"2608.21867","title":"MemGuard: Persisting Verifier Signals for LLM-Agent Memory Governance","created":"2026-08-22","cited_by_count":4,"area":"agents"},{"id":"2608.23471","title":"InjecMEM: Memory Injection Attack on LLM Agent Memory Systems","created":"2026-08-24","cited_by_count":4,"area":"agents"},{"id":"2601.14662","title":"Query-Efficient Agentic Graph Extraction Attacks on GraphRAG Systems","created":"2026-01-21","cited_by_count":3,"area":"lr"},{"id":"2504.17833","title":"The Role of Open-Source LLMs in Shaping the Future of GeoAI","created":"2025-04-24","cited_by_count":2,"area":null},{"id":"2510.17491","title":"Empowering Real-World: A Survey on the Technology, Practice, and Evaluation of LLM-driven Industry Agents","created":"2025-10-20","cited_by_count":2,"area":"lr"},{"id":"2511.21758","title":"A Longitudinal Measurement of Privacy Policy Evolution for Large Language Models","created":"2025-11-24","cited_by_count":2,"area":"agents"},{"id":"2602.07517","title":"MemPot: Defending Against Memory Extraction Attack with Optimized Honeypots","created":"2026-02-07","cited_by_count":2,"area":null},{"id":"2602.19844","title":"LLM-enabled Applications Require System-Level Threat Monitoring","created":"2026-02-23","cited_by_count":2,"area":null},{"id":"2603.09134","title":"AgenticCyOps: Securing Multi-Agentic AI Integration in Enterprise Cyber Operations","created":"2026-03-10","cited_by_count":2,"area":"agents"},{"id":"2603.15968","title":"MAC: Multi-Agent Constitution Learning","created":"2026-03-16","cited_by_count":2,"area":"agents"},{"id":"2605.07242","title":"MEMOREPAIR: Barrier-First Cascade Repair in Agentic Memory","created":"2026-05-08","cited_by_count":2,"area":"agents"},{"id":"2605.11047","title":"Red-Teaming Agent Execution Contexts: Open-World Security Evaluation on OpenClaw","created":"2026-05-11","cited_by_count":2,"area":"agents"},{"id":"2605.27825","title":"MRMMIA: Membership Inference Attacks on Memory in Chat Agents","created":"2026-05-27","cited_by_count":2,"area":"safety"},{"id":"2606.06055","title":"HUSH-Bench: Measuring Memory-Use Boundaries for Sensitive History in Conversational Agents","created":"2026-06-04","cited_by_count":2,"area":null},{"id":"2606.09084","title":"Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps","created":"2026-06-08","cited_by_count":2,"area":"agents"},{"id":"2606.13949","title":"Minim: Privacy-Aware Minimal View for Agents via Trusted Local Sanitization","created":"2026-06-11","cited_by_count":2,"area":"agents"},{"id":"2607.23444","title":"Isolated but Exposed: Persistence-Based Memory Extraction Attack on LLM Agents","created":"2026-07-26","cited_by_count":2,"area":"agents"},{"id":"2608.29381","title":"Safe to Resume? Breaking Execution Continuity of Agent Execution via Rollback","created":"2026-08-29","cited_by_count":2,"area":null},{"id":"2609.10439","title":"Forgetting Only What Matters: Layer-Selective Unlearning toward Robust LLMs","created":"2026-09-09","cited_by_count":2,"area":"safety"},{"id":"2602.23400","title":"U-CAN: Utility-Aware Contrastive Attenuation for Efficient Unlearning in Generative Recommendation","created":"2026-02-26","cited_by_count":1,"area":"safety"},{"id":"2603.01564","title":"From Secure Agentic AI to Secure Agentic Web: Challenges, Threats, and Future Directions","created":"2026-03-02","cited_by_count":1,"area":"agents"},{"id":"2604.11666","title":"Playing Along: Learning a Double-Agent Defender for Belief Steering via Theory of Mind","created":"2026-04-13","cited_by_count":1,"area":"agents"},{"id":"2605.25435","title":"Security of OpenClaw Agents: Fundamentals, Attacks, and Countermeasures","created":"2026-05-25","cited_by_count":1,"area":"agents"},{"id":"2606.02302","title":"SeClaw: Spec-Driven Security Task Synthesis for Evaluating Autonomous Agents","created":"2026-06-01","cited_by_count":1,"area":"agents"},{"id":"2606.10173","title":"Beyond Locality: Feature-Boundary Auditing for OS-Integrated AI","created":"2026-06-08","cited_by_count":1,"area":null},{"id":"2606.12666","title":"CAPED: Context-Aware Privacy Exposure Defense for Mobile GUI Agents","created":"2026-06-10","cited_by_count":1,"area":null},{"id":"2607.06807","title":"When Agents Go Rogue: Activation-Based Detection of Malicious Behaviors in Multi-Agent Systems","created":"2026-07-07","cited_by_count":1,"area":"agents"},{"id":"2607.19865","title":"DocOps: A Verifiable Benchmark for Autonomous Agents in Complex Document Operations","created":"2026-07-22","cited_by_count":1,"area":null},{"id":"2607.29254","title":"Tool Specifications Matter: Uncovering and Mitigating Safety Risks in AI Agents","created":"2026-07-31","cited_by_count":1,"area":"agents"},{"id":"2608.16551","title":"What to Remember, What to Reveal: Privacy-Aware Memory for Conversational Agents","created":"2026-08-17","cited_by_count":1,"area":"agents"},{"id":"2608.17148","title":"Authorization Before Context: A Model-Neutral Audience Boundary Against Cross-Audience Memory Leakage in Agentic Systems","created":"2026-08-17","cited_by_count":1,"area":"agents"},{"id":"2608.24957","title":"ToolMinimize: Auditing and Rewriting LLM Agent Tool Calls to Minimize Privacy Exposure","created":"2026-08-25","cited_by_count":1,"area":"agents"},{"id":"2609.13889","title":"When Malicious Instructions Persist: Persistent Memory Poisoning Attack on Harness-Based Agents","created":"2026-09-12","cited_by_count":1,"area":"agents"},{"id":"2610.04985","title":"Hidden Risks of Jev: An Empirical Study of Security, Privacy, and Dual Use","created":"2026-10-04","cited_by_count":1,"area":"safety"},{"id":"2510.03495","title":"AgentHub: A Registry for Discoverable, Verifiable, and Reproducible AI Agents","created":"2025-10-03","cited_by_count":0,"area":"agents"},{"id":"2512.24008","title":"SPARK: Search Personalization via Agent-Driven Retrieval and Knowledge-sharing","created":"2025-12-30","cited_by_count":0,"area":"agents"},{"id":"2602.05016","title":"From Fragmentation to Integration: Exploring the Design Space of AI Agents for Human-as-the-Unit Privacy Management","created":"2026-02-04","cited_by_count":0,"area":null},{"id":"2602.12924","title":"Never say never: Exploring the effects of available knowledge on agent persuasiveness in controlled physiotherapy motivation dialogues","created":"2026-02-13","cited_by_count":0,"area":"agents"},{"id":"2605.12535","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","created":"2026-05-02","cited_by_count":0,"area":"agents"},{"id":"2606.22153","title":"$\\pi$-RAG: Oblivious Retrieval via Semantic Quantization and Transcendental Addressing for Large Language Models","created":"2026-06-20","cited_by_count":0,"area":null},{"id":"2606.25361","title":"Memory Makes the Difference: Evaluating How Different Memory Roles Shape Conversational Agents","created":"2026-06-24","cited_by_count":0,"area":"agents"},{"id":"2606.29030","title":"Memory as an Attack Surface in LLM Agents: A Study on Multiple-Choice Question Answering","created":"2026-06-27","cited_by_count":0,"area":"agents"},{"id":"2607.19292","title":"The safety failures we are not instrumenting: a perspective on hidden safety-critical challenges in modern AI systems","created":"2026-07-21","cited_by_count":0,"area":null},{"id":"2608.01719","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","created":"2026-08-03","cited_by_count":0,"area":"agents"},{"id":"2608.03130","title":"DP-MemView: A Memory Interface for Attribute-Level Transcript Privacy in Long-Term LLM Agents","created":"2026-08-04","cited_by_count":0,"area":"agents"},{"id":"2608.29028","title":"Facts Without Rules: Boundary Metadata Collapse in Multi-Agent LLM Handoffs","created":"2026-08-29","cited_by_count":0,"area":"agents"},{"id":"2609.02265","title":"CAPTURE: Disentangling Preference Drift from Memory Poisoning in Personalized LLM Agents","created":"2026-09-02","cited_by_count":0,"area":"agents"},{"id":"2609.03815","title":"Inferring Hidden User Models from the Behavior of Personalized LLM Agents","created":"2026-09-03","cited_by_count":0,"area":"agents"},{"id":"2609.08558","title":"Personalizing LLM Agent Memory Using Biometrics","created":"2026-09-08","cited_by_count":0,"area":"agents"},{"id":"2609.12320","title":"AIM: A Privacy-Aware Interoperable Memory Framework for Multi-Agent Multi-User LLM Systems","created":"2026-09-11","cited_by_count":0,"area":"agents"},{"id":"2609.15011","title":"Semantic-TVM: Structure-Preserving Trustworthy Virtual Memory for Memory-Augmented and Tool-Using Agents","created":"2026-09-14","cited_by_count":0,"area":"agents"},{"id":"2609.19226","title":"PAPC: Platform Mediation for Privacy-Propagation Externalities in AI-Mediated Workflows","created":"2026-09-16","cited_by_count":0,"area":"agents"},{"id":"2609.22712","title":"Trustworthy Agentic AI: Failure Modes, Mitigation Strategies, and a Lifecycle Framework for Autonomous LLM Systems","created":"2026-09-19","cited_by_count":0,"area":"agents"},{"id":"2609.23894","title":"Connecting the Dots in Agentic AI Security: A Cross-Dimensional Threat Taxonomy, Evaluation Maturity, and Open Challenges","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.38289","title":"Privacy in Personalized AI Is a System Property, Not Just a Model Property","created":"2026-09-29","cited_by_count":0,"area":null},{"id":"2610.01195","title":"Federated Agent Optimization","created":"2026-10-01","cited_by_count":0,"area":"agents"}],"next_cursor":"100"}