{"total":22,"rows":[{"id":"2606.24322","title":"Securing LLM-Agent Long-Term Memory Against Poisoning: Non-Malleable, Origin-Bound Authority with Machine-Checked Guarantees","created":"2026-06-23","cited_by_count":18,"area":"agents"},{"id":"2605.25002","title":"MemMark: State-Evolution Attribution Watermarking for Agent Long-Term Memory Systems","created":"2026-05-24","cited_by_count":16,"area":"agents"},{"id":"2607.23929","title":"MemTX: Transactional Belief Commit for Stateful Agent Memory","created":"2026-07-27","cited_by_count":15,"area":"agents"},{"id":"2604.23338","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","created":"2026-04-25","cited_by_count":11,"area":"agents"},{"id":"2607.12893","title":"MemOps: Benchmarking Lifecycle Memory Operations in Long-Horizon Conversations","created":"2026-07-14","cited_by_count":7,"area":"agents"},{"id":"2607.14651","title":"MemPoison: Uncovering Persistent Memory Threats and Structural Blind Spots in LLM Agents","created":"2026-07-16","cited_by_count":7,"area":"agents"},{"id":"2606.10062","title":"Deployment-Time Memorization in Foundation-Model Agents","created":"2026-06-08","cited_by_count":4,"area":"agents"},{"id":"2607.08032","title":"What to Keep, What to Forget: A Rate--Distortion View of Memory Compaction in LLMs and Agents","created":"2026-07-09","cited_by_count":4,"area":"agents"},{"id":"2607.27080","title":"MemSecBench: Tracking Agent Memory Poisoning from Persistence to Consequence and Repair","created":"2026-07-29","cited_by_count":4,"area":"agents"},{"id":"2607.21962","title":"Ground Truth First: A Longitudinal Evaluation Instrument for Agent Memory, and the Tenure Crossover in Memory-Architecture Rankings","created":"2026-07-24","cited_by_count":3,"area":"agents"},{"id":"2608.16032","title":"Proof-of-Execution Memory: Defending LLM Agents Against Forged-Reasoning Attacks by Verifying What Actually Happened","created":"2026-08-17","cited_by_count":2,"area":"agents"},{"id":"2609.08258","title":"Revoked but Still Authoritative: An Empirical Study of Revocation Enforcement in Agent-Memory Systems","created":"2026-09-08","cited_by_count":1,"area":"agents"},{"id":"2604.27464","title":"Security Attack and Defense Strategies for Autonomous Agent Frameworks: A Layered Review with OpenClaw as a Case Study","created":"2026-04-30","cited_by_count":0,"area":"agents"},{"id":"2608.00426","title":"MAPLE-Guard: Memory-Aware Link Enforcement Against Memory-Link Poisoning in Multi-Agent Systems","created":"2026-08-01","cited_by_count":0,"area":"agents"},{"id":"2608.30177","title":"Understanding Stage-Wise Utility-Risk Trade-offs in LLM Agent Memory","created":"2026-08-31","cited_by_count":0,"area":"agents"},{"id":"2609.33013","title":"The Epistemics of Agent Memory: Measuring, and Governing, the Consolidation Decision in Long-Horizon LLM Agents","created":"2026-09-26","cited_by_count":0,"area":"agents"},{"id":"2609.34132","title":"From Attack Success to Attack Severity: Counterfactual Memory Attacks on LLM Agents","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2610.04083","title":"Self-Propagating Misalignment in LLM Agents, and Why Auditing or Disabling Memory Is Not Enough","created":"2026-10-02","cited_by_count":0,"area":"agents"},{"id":"2610.11561","title":"Workerville: Towards an Organizational Behavior Account of Agent Safety","created":"2026-10-08","cited_by_count":0,"area":"agents"},{"id":"2610.14431","title":"MemForm: Benchmarking Memory Formation Poisoning in LLM Agents","created":"2026-10-10","cited_by_count":0,"area":"agents"},{"id":"2610.15244","title":"EvolvAttack: Backdooring self Evolving VLM Agents","created":"2026-10-11","cited_by_count":0,"area":"agents"},{"id":"2610.15390","title":"From Acoustic Sensing to Physical Actions: A Comprehensive Survey of Security Risks in Edge-Deployed Audio LLM-Based Agents","created":"2026-10-11","cited_by_count":0,"area":"agents"}],"next_cursor":null}