{"total":17,"rows":[{"id":"2605.18991","title":"Agent Security is a Systems Problem","created":"2026-05-18","cited_by_count":5,"area":null},{"id":"2604.19657","title":"An AI Agent Execution Environment to Safeguard User Data","created":"2026-04-21","cited_by_count":4,"area":null},{"id":"2602.16729","title":"Intent Laundering: AI Safety Datasets Are Not What They Seem","created":"2026-02-17","cited_by_count":3,"area":null},{"id":"2605.14605","title":"A Few Steps Further: Why Defenses Against Malicious Finetuning Erode Under Continued Training","created":"2026-05-14","cited_by_count":2,"area":null},{"id":"2608.28327","title":"Layered LLM Defenses as an Ensemble: Access Tiers, Inference Cost, and the Measured Failure Correlation Between Defense Layers","created":"2026-08-28","cited_by_count":2,"area":null},{"id":"2602.21267","title":"A Systematic Review of Algorithmic Red Teaming Methodologies for Assurance and Security of AI Applications","created":"2026-02-24","cited_by_count":1,"area":null},{"id":"2606.25059","title":"What Does It Mean to Break a Distillation Defense?","created":"2026-06-23","cited_by_count":1,"area":null},{"id":"2607.27951","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","created":"2026-07-30","cited_by_count":1,"area":null},{"id":"2608.17829","title":"The Model's Tell: Measuring Context-Leakage Attack Signals with Behavior Gauges","created":"2026-08-18","cited_by_count":1,"area":null},{"id":"2605.25893","title":"$D^2$-Monitor: Dynamic Safety Monitoring for Diffusion LLMs via Hesitation Signals","created":"2026-05-25","cited_by_count":0,"area":null},{"id":"2608.12789","title":"PIPES: Securing Agent Perception with Provenance and Priors","created":"2026-08-13","cited_by_count":0,"area":null},{"id":"2609.00519","title":"The Safeguard Worked. Is the LLM System Safer?","created":"2026-09-01","cited_by_count":0,"area":null},{"id":"2610.00797","title":"Sapien: A Stateful Policy Engine for Autonomous AI Agents","created":"2026-09-30","cited_by_count":0,"area":null},{"id":"2610.01535","title":"False Floors: LLM Safety Routing Evaluations Break Under Distribution Shift","created":"2026-10-01","cited_by_count":0,"area":null},{"id":"2610.06994","title":"TARE: Weigh a Never-Poisoned Twin Before Reading Backdoor-Defense Costs","created":"2026-10-04","cited_by_count":0,"area":null},{"id":"2610.07323","title":"ATLAS-AL: Adaptive Trust-Region for Latent Adversarial Searches via Active Learning","created":"2026-10-05","cited_by_count":0,"area":null},{"id":"2610.16814","title":"StableJudge: A Lightweight Adversarial Defense Framework for LLM-as-a-Judge","created":"2026-10-12","cited_by_count":0,"area":null}],"next_cursor":null}