{"total":57,"rows":[{"id":"2604.08224","title":"Externalization in LLM Agents: A Unified Review of Memory, Skills, Protocols and Harness Engineering","created":"2026-04-09","cited_by_count":74,"area":"agents"},{"id":"2510.21236","title":"AgentBound: Securing Execution Boundaries of AI Agents","created":"2025-10-24","cited_by_count":23,"area":"agents"},{"id":"2601.05293","title":"A Survey of Agentic AI and Cybersecurity: Challenges, Opportunities and Use-case Prototypes","created":"2026-01-08","cited_by_count":22,"area":"agents"},{"id":"2508.11548","title":"Copyright Protection for Large Language Models: A Survey of Methods, Challenges, and Trends","created":"2025-08-15","cited_by_count":20,"area":"safety"},{"id":"2510.06445","title":"A Survey on Agentic Security: Applications, Threats and Defenses","created":"2025-10-07","cited_by_count":20,"area":"agents"},{"id":"2511.02841","title":"AI Agents with Decentralized Identifiers and Verifiable Credentials","created":"2025-10-01","cited_by_count":18,"area":"agents"},{"id":"2603.15727","title":"AgentWorm: Self-Propagating Attacks Across LLM Agent Ecosystems","created":"2026-03-16","cited_by_count":17,"area":"agents"},{"id":"2511.18538","title":"From Code Foundation Models to Agents and Applications: A Comprehensive Survey and Practical Guide to Code Intelligence","created":"2025-11-23","cited_by_count":15,"area":"agents"},{"id":"2602.11327","title":"Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP","created":"2026-02-11","cited_by_count":15,"area":"agents"},{"id":"2601.10955","title":"Beyond Max Tokens: Stealthy Resource Amplification via Tool Calling Chains in LLM Agents","created":"2026-01-16","cited_by_count":14,"area":"agents"},{"id":"2603.04474","title":"From Spark to Fire: Modeling and Mitigating Error Cascades in LLM-Based Multi-Agent Collaboration","created":"2026-03-04","cited_by_count":14,"area":"agents"},{"id":"2512.06556","title":"Semantic Attacks on Tool-Augmented LLMs: Securing the Model Context Protocol Against Descriptor-Level Manipulation","created":"2025-12-06","cited_by_count":13,"area":"agents"},{"id":"2509.09703","title":"CTCC: A Robust and Stealthy Fingerprinting Framework for Large Language Models via Cross-Turn Contextual Correlation Backdoor","created":"2025-09-05","cited_by_count":12,"area":"safety"},{"id":"2509.01211","title":"Web Fraud Attacks Against LLM-Driven Multi-Agent Systems","created":"2025-09-01","cited_by_count":10,"area":"agents"},{"id":"2511.03841","title":"Security Analysis of Agentic AI Communication Protocols: A Comparative Evaluation","created":"2025-11-05","cited_by_count":9,"area":"agents"},{"id":"2601.11007","title":"AdaMARP: An Adaptive Multi-Agent Interaction Framework for General Immersive Role-Playing","created":"2026-01-16","cited_by_count":9,"area":"agents"},{"id":"2604.15367","title":"SoK: Security of Autonomous LLM Agents in Agentic Commerce","created":"2026-04-15","cited_by_count":8,"area":"agents"},{"id":"2509.20175","title":"Federation of Agents: A Semantics-Aware Communication Fabric for Large-Scale Agentic AI","created":"2025-09-24","cited_by_count":7,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2509.24240","title":"Takedown: How It's Done in Modern Coding Agent Exploits","created":"2025-09-29","cited_by_count":6,"area":"agents"},{"id":"2511.11332","title":"UFO3: Weaving the Digital Agent Galaxy","created":"2025-11-14","cited_by_count":6,"area":"agents"},{"id":"2602.03580","title":"Don't believe everything you read: Understanding and Measuring MCP Behavior under Misleading Tool Descriptions","created":"2026-02-03","cited_by_count":5,"area":"agents"},{"id":"2602.19547","title":"CIBER: A Comprehensive Benchmark for Security Evaluation of Code Interpreter Agents","created":"2026-02-23","cited_by_count":5,"area":"agents"},{"id":"2603.15408","title":"TrinityGuard: A Unified Framework for Safeguarding Multi-Agent Systems","created":"2026-03-16","cited_by_count":5,"area":"agents"},{"id":"2605.07069","title":"Social Theory Should Be a Structural Prior for Agentic AI: A Formal Framework for Multi-Agent Social Systems","created":"2026-05-08","cited_by_count":5,"area":"agents"},{"id":"2601.19752","title":"Agentic Design Patterns: A System-Theoretic Framework","created":"2026-01-27","cited_by_count":4,"area":"agents"},{"id":"2604.10938","title":"AgentWebBench: Benchmarking Multi-Agent Coordination in Agentic Web","created":"2026-04-13","cited_by_count":4,"area":"agents"},{"id":"2608.10218","title":"Mind Viruses: Self-Propagating Ideas in Multi-Agent LLM Systems","created":"2026-08-10","cited_by_count":4,"area":"agents"},{"id":"2602.20493","title":"AWCP: A Workspace Delegation Protocol for Deep-Engagement Collaboration across Remote Agents","created":"2026-02-24","cited_by_count":3,"area":"agents"},{"id":"2604.12461","title":"CIA: Inferring the Communication Topology from LLM-based Multi-Agent Systems","created":"2026-04-14","cited_by_count":3,"area":"agents"},{"id":"2510.23245","title":"Multi-Stakeholder Alignment in LLM-Powered Collaborative AI Systems: A Multi-Agent Framework for Intelligent Tutoring","created":"2025-10-27","cited_by_count":2,"area":"agents"},{"id":"2601.15330","title":"ICPO: Illocution-Calibrated Policy Optimization for Multi-Turn Conversation","created":"2026-01-20","cited_by_count":2,"area":null},{"id":"2602.01942","title":"Human Society-Inspired Approaches to Agentic AI Security: The 4C Framework","created":"2026-02-02","cited_by_count":2,"area":"agents"},{"id":"2604.02369","title":"Beyond Message Passing: A Semantic View of Agent Communication Protocols","created":"2026-03-30","cited_by_count":2,"area":"agents"},{"id":"2606.09549","title":"SecureClaw: Clawing Back Control of LLM Agents","created":"2026-06-08","cited_by_count":2,"area":"agents"},{"id":"2509.25204","title":"Spectral Logit Sculpting: Adaptive Low-Rank Logit Transformation for Controlled Text Generation","created":"2025-09-19","cited_by_count":1,"area":null},{"id":"2601.08189","title":"ForgetMark: Stealthy Fingerprint Embedding via Targeted Unlearning in Language Models","created":"2026-01-13","cited_by_count":1,"area":"safety"},{"id":"2603.07473","title":"Give Them an Inch and They Will Take a Mile:Understanding and Measuring Caller Identity Confusion in MCP-Based AI Systems","created":"2026-03-08","cited_by_count":1,"area":"agents"},{"id":"2603.07496","title":"From Thinker to Society: Security in Hierarchical Autonomy Evolution of AI Agents","created":"2026-03-08","cited_by_count":1,"area":"agents"},{"id":"2605.24069","title":"When the Manual Lies: A Realistic Benchmark to Evaluate MCP Poisoning Attacks for LLM Agents","created":"2026-05-22","cited_by_count":1,"area":"agents"},{"id":"2606.19135","title":"A Technical Taxonomy of LLM Agent Communication Protocols","created":"2026-06-17","cited_by_count":1,"area":"agents"},{"id":"2606.21445","title":"AutoRAS: Learning Robust Agentic Systems with Primitive Representations","created":"2026-06-19","cited_by_count":1,"area":"lr"},{"id":"2607.26836","title":"Before Agents Speak: Pre-hoc Failure Risk Inference in Multi-Agent Systems","created":"2026-07-29","cited_by_count":1,"area":"agents"},{"id":"2608.00747","title":"When Prompts Control Robots: Prompt Injection Attacks in Multi-Agent Robotic Systems","created":"2026-08-01","cited_by_count":1,"area":"agents"},{"id":"2608.04626","title":"Blockchain Empowered Trustworthy Agent Networks: Foundations, Taxonomy, and Future Directions","created":"2026-08-05","cited_by_count":1,"area":"agents"},{"id":"2609.00595","title":"SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems","created":"2026-09-01","cited_by_count":1,"area":"agents"},{"id":"2601.08223","title":"DNF: Dual-Layer Nested Fingerprinting for Large Language Model Intellectual Property Protection","created":"2026-01-13","cited_by_count":0,"area":"safety"},{"id":"2602.00766","title":"Communications-Incentivized Collaborative Reasoning in NetGPT through Agentic Reinforcement Learning","created":"2026-01-31","cited_by_count":0,"area":"agents"},{"id":"2605.03213","title":"When Agents Handle Secrets: A Survey of Confidential Computing for Agentic AI","created":"2026-05-04","cited_by_count":0,"area":"agents"},{"id":"2607.03628","title":"Swarm-Driven Multi-Agent Reasoning for Smart City Security","created":"2026-07-03","cited_by_count":0,"area":"agents"},{"id":"2608.21101","title":"ClawSentry: A Progressive Multi-Tier Security Monitor for Safeguarding Autonomous LLM Agents","created":"2026-08-21","cited_by_count":0,"area":"agents"},{"id":"2608.22160","title":"AUDITA: certified auditing and causal attribution of adverse outcomes in autonomous multi-agent systems","created":"2026-08-23","cited_by_count":0,"area":null},{"id":"2609.22949","title":"Beyond Single-Model Injection: A Threat Model and Defense Architecture for Prompt Injection in Multi-Agent Systems","created":"2026-09-19","cited_by_count":0,"area":"agents"},{"id":"2609.31358","title":"A Safety-Bounded SDC-to-MCP Gateway for Medical AI Agents","created":"2026-09-25","cited_by_count":0,"area":"agents"},{"id":"2610.01826","title":"Token Communication-Assisted Collaborative Embodied Artificial Intelligence: Concepts, Framework, and Opportunities","created":"2026-10-01","cited_by_count":0,"area":null},{"id":"2610.15529","title":"Agent-Canary-Mas: End-to-End Evaluation of Protocol Risk in Long-Horizon Multi-Agent Systems","created":"2026-10-11","cited_by_count":0,"area":"agents"},{"id":"2610.17763","title":"Memory Echo in Single-Agent Long-Term Memory: Lifecycle Evaluation and Provenance-Guided Mitigation","created":"2026-10-13","cited_by_count":0,"area":null}],"next_cursor":null}