{"total":22,"rows":[{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2508.13220","title":"MCPSecBench: A Systematic Security Benchmark and Playground for Testing Model Context Protocols","created":"2025-08-17","cited_by_count":51,"area":"agents"},{"id":"2510.15994","title":"MCP Security Bench (MSB): Benchmarking Attacks Against Model Context Protocol in LLM Agents","created":"2025-10-14","cited_by_count":42,"area":"agents"},{"id":"2512.15163","title":"MCP-SafetyBench: A Benchmark for Safety Evaluation of Large Language Models with Real-World MCP Servers","created":"2025-12-17","cited_by_count":34,"area":"agents"},{"id":"2510.21236","title":"AgentBound: Securing Execution Boundaries of AI Agents","created":"2025-10-24","cited_by_count":23,"area":"agents"},{"id":"2509.14295","title":"Aegis: Automated Error Generation and Attribution for Multi-Agent Systems","created":"2025-09-17","cited_by_count":22,"area":"agents"},{"id":"2508.10991","title":"MCP-Guard: A Multi-Stage Defense-in-Depth Framework for Securing Model Context Protocol in Agentic AI","created":"2025-08-14","cited_by_count":19,"area":"agents"},{"id":"2509.21011","title":"Automatic Red Teaming LLM-based Agents with Model Context Protocol Tools","created":"2025-09-25","cited_by_count":18,"area":"agents"},{"id":"2508.20412","title":"MindGuard: Intrinsic Decision Inspection for Securing LLM Agents Against Metadata Poisoning","created":"2025-08-28","cited_by_count":10,"area":"agents"},{"id":"2506.23474","title":"A Large-Scale Evolvable Dataset for Model Context Protocol Ecosystem and Security Analysis","created":"2025-06-30","cited_by_count":7,"area":"agents"},{"id":"2509.24380","title":"Agentic Services Computing","created":"2025-09-29","cited_by_count":6,"area":"agents"},{"id":"2509.23694","title":"SafeSearch: Automated Red-Teaming of LLM-Based Search Agents","created":"2025-09-28","cited_by_count":4,"area":"agents"},{"id":"2602.14281","title":"MCPShield: A Security Cognition Layer for Adaptive Trust Calibration in Model Context Protocol Agents","created":"2026-02-15","cited_by_count":3,"area":"agents"},{"id":"2508.06418","title":"Quantifying Conversation Drift in MCP via Latent Polytope","created":"2025-08-08","cited_by_count":2,"area":"agents"},{"id":"2603.24203","title":"Invisible Threats from Model Context Protocol: Generating Stealthy Injection Payload via Tree-based Adaptive Search","created":"2026-03-25","cited_by_count":2,"area":"agents"},{"id":"2604.07551","title":"MCP-DPT: A Defense-Placement Taxonomy and Coverage Analysis for Model Context Protocol Security","created":"2026-04-08","cited_by_count":2,"area":"agents"},{"id":"2509.22814","title":"Model Context Protocol for Vision Systems: Audit, Security, and Protocol Extensions","created":"2025-09-26","cited_by_count":1,"area":"agents"},{"id":"2603.01564","title":"From Secure Agentic AI to Secure Agentic Web: Challenges, Threats, and Future Directions","created":"2026-03-02","cited_by_count":1,"area":"agents"},{"id":"2603.10194","title":"MCP-in-SoS: Risk assessment framework for open-source MCP servers","created":"2026-03-10","cited_by_count":1,"area":"agents"},{"id":"2508.19500","title":"Servant, Stalker, Predator: How An Honest, Helpful, And Harmless (3H) Agent Unlocks Adversarial Skills","created":"2025-08-27","cited_by_count":0,"area":"agents"},{"id":"2608.23763","title":"TrustShiftProbe: Characterizing, Benchmarking, and Defending Staged Trust Attacks on MCP Servers","created":"2026-08-24","cited_by_count":0,"area":"agents"},{"id":"2609.23894","title":"Connecting the Dots in Agentic AI Security: A Cross-Dimensional Threat Taxonomy, Evaluation Maturity, and Open Challenges","created":"2026-09-20","cited_by_count":0,"area":"agents"}],"next_cursor":null}