{"total":67,"rows":[{"id":"2601.10156","title":"ToolSafe: Enhancing Tool Invocation Safety of LLM-based agents via Proactive Step-level Guardrail and Feedback","created":"2026-01-15","cited_by_count":72,"area":"agents"},{"id":"2509.26354","title":"Your Agent May Misevolve: Emergent Risks in Self-evolving LLM Agents","created":"2025-09-30","cited_by_count":62,"area":"agents"},{"id":"2601.05504","title":"Memory Poisoning Attack and Defense on Memory Based LLM-Agents","created":"2026-01-09","cited_by_count":44,"area":"agents"},{"id":"2602.06052","title":"A Survey of Agent Memory in the Second Half: Towards Self-Evolving and Long-Horizon Agents","created":"2026-01-14","cited_by_count":44,"area":"agents"},{"id":"2606.04990","title":"From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents","created":"2026-06-03","cited_by_count":37,"area":"agents"},{"id":"2603.11619","title":"Taming OpenClaw: Security Analysis and Mitigation of Autonomous LLM Agent Threats","created":"2026-03-12","cited_by_count":29,"area":"agents"},{"id":"2604.16548","title":"A Survey on Long-Term Memory Security in LLM Agents: Attacks, Defenses, and Governance Across the Memory Lifecycle","created":"2026-04-17","cited_by_count":27,"area":"agents"},{"id":"2603.15125","title":"From Storage to Steering: Memory Control Flow Attacks on LLM Agents","created":"2026-03-16","cited_by_count":19,"area":"agents"},{"id":"2605.14421","title":"MemLineage: Lineage-Guided Enforcement for LLM Agent Memory","created":"2026-05-14","cited_by_count":16,"area":"agents"},{"id":"2605.25002","title":"MemMark: State-Evolution Attribution Watermarking for Agent Long-Term Memory Systems","created":"2026-05-24","cited_by_count":16,"area":"agents"},{"id":"2604.13630","title":"SafeHarness: Lifecycle-Integrated Security Architecture for LLM-based Agent Deployment","created":"2026-04-15","cited_by_count":15,"area":"agents"},{"id":"2510.11108","title":"A Vision for Access Control in LLM-based Agent Systems","created":"2025-10-13","cited_by_count":14,"area":"agents"},{"id":"2605.18930","title":"OEP: Poisoning Self-Evolving LLM Agents via Locally Correct but Non-Transferable Experiences","created":"2026-05-18","cited_by_count":14,"area":"agents"},{"id":"2512.23343","title":"AI Meets Brain: Memory Systems from Cognitive Neuroscience to Autonomous Agents","created":"2025-12-29","cited_by_count":12,"area":"agents"},{"id":"2605.01970","title":"Trojan Hippo: Weaponizing Agent Memory for Data Exfiltration","created":"2026-05-03","cited_by_count":12,"area":"agents"},{"id":"2512.06914","title":"SoK: Trust-Authorization Mismatch in LLM Agent Interactions","created":"2025-12-07","cited_by_count":11,"area":"agents"},{"id":"2602.03224","title":"TAME: A Trustworthy Test-Time Evolution of Agent Memory with Systematic Benchmarking","created":"2026-02-03","cited_by_count":10,"area":"agents"},{"id":"2602.19555","title":"SOK: A Taxonomy of Attack Vectors and Defense Strategies for Agentic Supply Chain Runtime","created":"2026-02-23","cited_by_count":8,"area":"agents"},{"id":"2607.05029","title":"Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses","created":"2026-07-06","cited_by_count":8,"area":"lr"},{"id":"2608.01679","title":"When Memory Becomes Authority: Benchmarking Authority Collapse at the Memory Consolidation Boundary","created":"2026-08-03","cited_by_count":8,"area":"agents"},{"id":"2605.17830","title":"Remembering More, Risking More: Longitudinal Safety Risks in Memory-Equipped LLM Agents","created":"2026-05-18","cited_by_count":7,"area":"agents"},{"id":"2605.23723","title":"MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection","created":"2026-05-22","cited_by_count":7,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2607.14651","title":"MemPoison: Uncovering Persistent Memory Threats and Structural Blind Spots in LLM Agents","created":"2026-07-16","cited_by_count":7,"area":"agents"},{"id":"2604.01350","title":"No Attacker Needed: Unintentional Cross-User Contamination in Shared-State LLM Agents","created":"2026-04-01","cited_by_count":6,"area":"agents"},{"id":"2606.22030","title":"When Does Belief-Based Agent Memory Help? Reliability-Conditional Updating and Provenance-Capped Poisoning Defense","created":"2026-06-20","cited_by_count":6,"area":"agents"},{"id":"2607.06595","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","created":"2026-07-06","cited_by_count":6,"area":"agents"},{"id":"2510.07505","title":"PEAR: Planner-Executor Agent Robustness Benchmark","created":"2025-10-08","cited_by_count":5,"area":"agents"},{"id":"2604.16966","title":"Visual Inception: Compromising Long-term Planning in Agentic Recommenders via Multimodal Memory Poisoning","created":"2026-04-18","cited_by_count":5,"area":"agents"},{"id":"2605.09278","title":"EquiMem: Calibrating Shared Memory in Multi-Agent Debate via Game-Theoretic Equilibrium","created":"2026-05-10","cited_by_count":4,"area":"agents"},{"id":"2605.09330","title":"The Trap of Trajectory: Towards Understanding and Mitigating Spurious Correlations in Agentic Memory","created":"2026-05-10","cited_by_count":4,"area":"agents"},{"id":"2606.12703","title":"SMSR: Certified Defence Against Runtime Memory Poisoning in Persistent LLM Agent Systems","created":"2026-06-10","cited_by_count":4,"area":"rag"},{"id":"2607.29167","title":"Memory Provenance Laundering in LLM Agents: A Non-Amplification Firewall for Persistent Memory","created":"2026-07-31","cited_by_count":4,"area":"agents"},{"id":"2605.03482","title":"MEMSAD: Gradient-Coupled Anomaly Detection for Memory Poisoning in Retrieval-Augmented Agents","created":"2026-05-05","cited_by_count":3,"area":"rag"},{"id":"2608.00017","title":"Memory Reward Inflation in Self-Improving LLM Agents","created":"2026-06-29","cited_by_count":3,"area":"agents"},{"id":"2603.09134","title":"AgenticCyOps: Securing Multi-Agentic AI Integration in Enterprise Cyber Operations","created":"2026-03-10","cited_by_count":2,"area":"agents"},{"id":"2606.05976","title":"The Self-Correction Illusion: Role Relabeling Gates Explicit Error Flagging in Large Language Models","created":"2026-06-04","cited_by_count":2,"area":"lr"},{"id":"2608.16032","title":"Proof-of-Execution Memory: Defending LLM Agents Against Forged-Reasoning Attacks by Verifying What Actually Happened","created":"2026-08-17","cited_by_count":2,"area":"agents"},{"id":"2603.21231","title":"When Convenience Becomes Risk: A Semantic View of Under-Specification in Host-Acting Agents","created":"2026-03-22","cited_by_count":1,"area":null},{"id":"2604.24657","title":"AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents","created":"2026-04-27","cited_by_count":1,"area":"agents"},{"id":"2605.22842","title":"The Misattribution Gap: When Memory Poisoning Looks Like Model Failure in Agentic AI Systems","created":"2026-05-12","cited_by_count":1,"area":"agents"},{"id":"2605.25435","title":"Security of OpenClaw Agents: Fundamentals, Attacks, and Countermeasures","created":"2026-05-25","cited_by_count":1,"area":"agents"},{"id":"2606.18874","title":"Making AI Scientists Auditable from Evidence to Claim","created":"2026-06-17","cited_by_count":1,"area":null},{"id":"2607.19865","title":"DocOps: A Verifiable Benchmark for Autonomous Agents in Complex Document Operations","created":"2026-07-22","cited_by_count":1,"area":null},{"id":"2608.02683","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","created":"2026-08-03","cited_by_count":1,"area":"agents"},{"id":"2608.06947","title":"When Context Bites: Detecting RAG Poisoning via Document-Level Attention Collapse","created":"2026-08-07","cited_by_count":1,"area":"rag"},{"id":"2609.30813","title":"A Benchmark and Diagnostic Study of Epistemic Admission in Shared Agent Memory","created":"2026-09-25","cited_by_count":1,"area":null},{"id":"2609.36580","title":"SafeCoEvo: Co-Evolving Safety Harnesses and Guards for LLM Agents at Test-Time","created":"2026-09-29","cited_by_count":1,"area":"agents"},{"id":"2602.21127","title":"\"Are You Sure?\": An Empirical Study of Human Perception Vulnerability in LLM-Driven Agentic Systems","created":"2026-02-24","cited_by_count":0,"area":"agents"},{"id":"2605.12535","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","created":"2026-05-02","cited_by_count":0,"area":"agents"},{"id":"2607.17951","title":"RT-SHCUA: Real-Time Self-Hosted Computer-Use Agent for UAV Control","created":"2026-07-20","cited_by_count":0,"area":"agents"},{"id":"2607.28103","title":"MIND: Lightweight and Effective Memory Injection Defense for LLM Agents via Intent-Aware Information Bottleneck","created":"2026-07-30","cited_by_count":0,"area":"agents"},{"id":"2608.00426","title":"MAPLE-Guard: Memory-Aware Link Enforcement Against Memory-Link Poisoning in Multi-Agent Systems","created":"2026-08-01","cited_by_count":0,"area":"agents"},{"id":"2608.01637","title":"Salami Attack: Stealthy Collusive Memory Poisoning against OpenClaw","created":"2026-08-03","cited_by_count":0,"area":"agents"},{"id":"2608.03844","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","created":"2026-08-04","cited_by_count":0,"area":"agents"},{"id":"2609.00523","title":"Transferable End-to-End Optimization for Indirect Long-Term Memory Poisoning in LLM Agents","created":"2026-09-01","cited_by_count":0,"area":"agents"},{"id":"2609.08747","title":"MemSentry: A Framework for Detecting Persistent Memory Poisoning in Agentic AI","created":"2026-09-08","cited_by_count":0,"area":"agents"},{"id":"2609.16694","title":"Toward Secure AI-Powered Penetration Testing Agents: Security Threats, Guardrails, and Architectural Perspectives","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2609.22818","title":"The Price of Safety: Benign-Case Utility and Token Overhead of Memory-Poisoning Defenses in LLM Agents","created":"2026-09-19","cited_by_count":0,"area":"agents"},{"id":"2609.23700","title":"When the Agent Becomes the Kernel: A Systematization of Security on the Path to AI-Native Operating Systems","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.38270","title":"VirusCascade: Hijacking Collaborative Reflection in LLM-Powered Recommender Agents","created":"2026-09-29","cited_by_count":0,"area":"agents"},{"id":"2609.38275","title":"When Correct Memory Goes Wrong: Fuzzing Persistent Memory Use in LLM Agents","created":"2026-09-29","cited_by_count":0,"area":"agents"},{"id":"2610.02569","title":"Pincer: Resource Authorization for Agents using a Digital Twin","created":"2026-10-01","cited_by_count":0,"area":"agents"},{"id":"2610.07311","title":"Understanding and Mitigating Inference-Time Overreliance Using Agentic Memory","created":"2026-10-05","cited_by_count":0,"area":"agents"},{"id":"2610.13267","title":"Forgetting is Not Always Bad: A Neuro-Inspired Memory Repair Mechanism for Poisoned LLM Agents","created":"2026-10-09","cited_by_count":0,"area":"agents"},{"id":"2610.14431","title":"MemForm: Benchmarking Memory Formation Poisoning in LLM Agents","created":"2026-10-10","cited_by_count":0,"area":"agents"},{"id":"2610.15390","title":"From Acoustic Sensing to Physical Actions: A Comprehensive Survey of Security Risks in Edge-Deployed Audio LLM-Based Agents","created":"2026-10-11","cited_by_count":0,"area":"agents"}],"next_cursor":null}