{"list":"closest","total":99,"rows":[{"id":"2606.28425","title":"Tool Use Enables Undetectable Steganography in Multi-Agent LLM Systems","created":"2026-06-25","cited_by_count":5},{"id":"2606.15008","title":"Security Engineering of OpenClaw: Analyzing Attack Surface Expansion and Trust-Boundary Violations","created":"2026-06-12","cited_by_count":2},{"id":"2606.12709","title":"Smarter Saboteurs, Better Fixers: Scaling & Security in Linear Multi-Agent Workflows","created":"2026-06-10","cited_by_count":2},{"id":"2606.12474","title":"SAIGuard: Communication-State Simulation for Proactive Defense of LLM Multi-Agent Systems","created":"2026-06-10","cited_by_count":1},{"id":"2606.07805","title":"Beyond Goodhart's Law: A Dynamic Benchmark for Evaluating Compliance in Multi-Agent Systems","created":"2026-06-05","cited_by_count":1},{"id":"2605.28104","title":"Defending LLM-based Multi-Agent Systems Against Cooperative Attacks with Sentence-Level Rectification","created":"2026-05-27","cited_by_count":2},{"id":"2605.27489","title":"HARP: Measuring Harm Amplification in Multi-Agent LLM Systems","created":"2026-05-26","cited_by_count":2},{"id":"2605.22001","title":"Blind Spots in the Guard: How Domain-Camouflaged Injection Attacks Evade Detection in Multi-Agent LLM Systems","created":"2026-05-21","cited_by_count":3},{"id":"2605.19240","title":"CASPIAN: Online Detection and Attribution of Cascade Attacks in LLM Multi-Agent Systems via Cross-Channel Causal Monitoring","created":"2026-05-19","cited_by_count":3},{"id":"2605.17480","title":"The Capability Paradox: How Smarter Auditors Make Multi-Agent Systems Less Secure","created":"2026-05-17","cited_by_count":2},{"id":"2605.14271","title":"Auditing Agent Harness Safety","created":"2026-05-14","cited_by_count":11},{"id":"2605.11514","title":"FlowSteer: Prompt-Only Workflow Steering Exposes Planning-Time Vulnerabilities in Multi-Agent LLM Systems","created":"2026-05-12","cited_by_count":7},{"id":"2605.10614","title":"PRISM: Generation-Time Detection and Mitigation of Secret Leakage in Multi-Agent LLM Pipelines","created":"2026-05-11","cited_by_count":2},{"id":"2605.09823","title":"CalBench: Evaluating Coordination-Privacy Trade-offs in Multi-Agent LLMs","created":"2026-05-10","cited_by_count":7},{"id":"2605.09027","title":"GAMBIT: A Three-Mode Benchmark for Adversarial Robustness in Multi-Agent LLM Collectives","created":"2026-05-09","cited_by_count":1},{"id":"2605.16346","title":"PropGuard: Safeguarding LLM-MAS via Propagation-Aware Exploration and Remediation","created":"2026-05-08","cited_by_count":3},{"id":"2605.08460","title":"When Child Inherits: Modeling and Exploiting Subagent Spawn in Multi-Agent Networks","created":"2026-05-08","cited_by_count":2},{"id":"2605.08268","title":"Insider Attacks in Multi-Agent LLM Consensus Systems","created":"2026-05-08","cited_by_count":1},{"id":"2605.06812","title":"Towards Security-Auditable LLM Agents: A Unified Graph Representation","created":"2026-05-07","cited_by_count":6},{"id":"2605.05632","title":"Architecture Matters: Comparing RAG Systems under Knowledge Base Poisoning","created":"2026-05-07","cited_by_count":2},{"id":"2605.02812","title":"Autonomous LLM Agent Worms: Cross-Platform Propagation, Automated Discovery and Temporal Re-Entry Defense","created":"2026-05-04","cited_by_count":6},{"id":"2605.01133","title":"When Embedding-Based Defenses Fail: Rethinking Safety in LLM-Based Multi-Agent Systems","created":"2026-05-01","cited_by_count":2},{"id":"2604.24477","title":"GAMMAF: A Common Framework for Graph-Based Anomaly Monitoring Benchmarking in LLM Multi-Agent Systems","created":"2026-04-27","cited_by_count":2},{"id":"2604.22879","title":"Beyond Single-Agent Alignment: Preventing Context-Fragmented Violations in Multi-Agent Systems","created":"2026-04-24","cited_by_count":1},{"id":"2604.16543","title":"Conjunctive Prompt Attacks in Multi-Agent LLM Systems","created":"2026-04-17","cited_by_count":2},{"id":"2604.12461","title":"CIA: Inferring the Communication Topology from LLM-based Multi-Agent Systems","created":"2026-04-14","cited_by_count":3},{"id":"2604.08608","title":"Semantic Intent Fragmentation: A Single-Shot Compositional Attack on Multi-Agent AI Pipelines","created":"2026-04-08","cited_by_count":5},{"id":"2604.02767","title":"SentinelAgent: Intent-Verified Delegation Chains for Securing Federal Multi-Agent AI Systems","created":"2026-04-03","cited_by_count":3},{"id":"2604.01151","title":"Detecting Multi-Agent Collusion Through Multi-Agent Interpretability","created":"2026-04-01","cited_by_count":7},{"id":"2603.15809","title":"Don't Trust Stubborn Neighbors: A Security Framework for Agentic Networks","created":"2026-03-16","cited_by_count":4},{"id":"2603.15727","title":"AgentWorm: Self-Propagating Attacks Across LLM Agent Ecosystems","created":"2026-03-16","cited_by_count":17},{"id":"2603.11132","title":"WebWeaver: Breaking Topology Confidentiality in LLM Multi-Agent Systems with Stealthy Context-Based Inference","created":"2026-03-11","cited_by_count":3},{"id":"2603.15661","title":"DynaTrust: Defending Multi-Agent Systems Against Sleeper Agents via Dynamic Trust Graphs","created":"2026-03-09","cited_by_count":3},{"id":"2603.08852","title":"LDP: An Identity-Aware Protocol for Multi-Agent LLM Systems","created":"2026-03-09","cited_by_count":7},{"id":"2603.04474","title":"From Spark to Fire: Modeling and Mitigating Error Cascades in LLM-Based Multi-Agent Collaboration","created":"2026-03-04","cited_by_count":14},{"id":"2603.04469","title":"Cross-Layer Semantic Flow Reconstruction for Attack Detection in Agentic Systems","created":"2026-03-04","cited_by_count":3},{"id":"2602.13477","title":"OMNI-LEAK: Orchestrator Multi-Agent Network Induced Data Leakage","created":"2026-02-13","cited_by_count":9},{"id":"2602.11510","title":"AgentLeak: A Benchmark for Internal-Channel Privacy Leakage in Multi-Agent LLM Systems","created":"2026-02-12","cited_by_count":25},{"id":"2602.05176","title":"Among Us: Measuring and Mitigating Malicious Contributions in Model Collaboration Systems","created":"2026-02-05","cited_by_count":7},{"id":"2601.14667","title":"INFA-Guard: Mitigating Malicious Propagation via Infection-Aware Safeguarding in LLM-Based Multi-Agent Systems","created":"2026-01-21","cited_by_count":6},{"id":"2601.13186","title":"Prompt Injection Mitigation with Agentic AI, Nested Learning, and AI Sustainability via Semantic Caching","created":"2026-01-19","cited_by_count":4},{"id":"2601.01685","title":"Lying with Truths: Open-Channel Multi-Agent Collusion for Belief Manipulation via Generative Montage","created":"2026-01-04","cited_by_count":19},{"id":"2512.23557","title":"Toward Trustworthy Agentic AI: A Multimodal Framework for Preventing Prompt Injection Attacks","created":"2025-12-29","cited_by_count":8},{"id":"2512.20973","title":"DAO-Agent: Zero Knowledge-Verified Incentives for Decentralized Multi-Agent Coordination","created":"2025-12-24","cited_by_count":3},{"id":"2512.06914","title":"SoK: Trust-Authorization Mismatch in LLM Agent Interactions","created":"2025-12-07","cited_by_count":11},{"id":"2512.04668","title":"Topology Matters: Measuring Memory Leakage in Multi-Agent LLMs","created":"2025-12-04","cited_by_count":11},{"id":"2512.04129","title":"Don't Trust Your Upstream: Exploiting LLM Multi-Agent System via Topology-Guided Adversarial Propagation","created":"2025-12-03","cited_by_count":5},{"id":"2512.02410","title":"Decentralized Multi-Agent System with Trust-Aware Communication","created":"2025-12-02","cited_by_count":7},{"id":"2511.18467","title":"Shadows in the Code: Exploring the Risks and Defenses of LLM-based Multi-Agent Software Development Systems","created":"2025-11-23","cited_by_count":9},{"id":"2511.10949","title":"Exposing Weak Links in Multi-Agent Systems under Adversarial Prompting","created":"2025-11-14","cited_by_count":8},{"id":"2511.06448","title":"When AI Agents Collude Online: Financial Fraud Risks by Collaborative LLM Agents on Social Platforms","created":"2025-11-09","cited_by_count":8},{"id":"2511.05269","title":"TAMAS: Benchmarking Adversarial Risks in Multi-Agent LLM Systems","created":"2025-11-07","cited_by_count":26},{"id":"2510.19420","title":"Securing Multi-Agent Systems Against Corruptions via Node Contribution Backpropagation","created":"2025-10-22","cited_by_count":4},{"id":"2510.18563","title":"The Trust Paradox in LLM-Based Multi-Agent Systems: When Collaboration Becomes a Security Vulnerability","created":"2025-10-21","cited_by_count":12},{"id":"2510.17276","title":"Breaking and Fixing Defenses Against Control-Flow Hijacking in Multi-Agent Systems","created":"2025-10-20","cited_by_count":12},{"id":"2510.16219","title":"SentinelNet: Safeguarding Multi-Agent Collaboration Through Credit-Based Dynamic Threat Detection","created":"2025-10-17","cited_by_count":8},{"id":"2510.15186","title":"MAGPIE: A benchmark for Multi-AGent contextual PrIvacy Evaluation","created":"2025-10-16","cited_by_count":29},{"id":"2510.14312","title":"Terrarium: Revisiting the Blackboard for Multi-Agent Safety, Privacy, and Security Studies","created":"2025-10-16","cited_by_count":10},{"id":"2510.11246","title":"Collaborative Shadows: Distributed Backdoor Attacks in LLM-Based Multi-Agent Systems","created":"2025-10-13","cited_by_count":3},{"id":"2510.07505","title":"PEAR: Planner-Executor Agent Robustness Benchmark","created":"2025-10-08","cited_by_count":5},{"id":"2510.01586","title":"AdvEvo-MARL: Shaping Internalized Safety through Adversarial Co-Evolution in Multi-Agent Reinforcement Learning","created":"2025-10-02","cited_by_count":5},{"id":"2511.02841","title":"AI Agents with Decentralized Identifiers and Verifiable Credentials","created":"2025-10-01","cited_by_count":18},{"id":"2509.16494","title":"Can an Individual Manipulate the Collective Decisions of Multi-Agents?","created":"2025-09-20","cited_by_count":5},{"id":"2509.14284","title":"The Sum Leaks More Than Its Parts: Compositional Privacy Risks and Mitigations in Multi-Agent Collaboration","created":"2025-09-16","cited_by_count":20},{"id":"2509.13597","title":"Agentic JWT: A Secure Delegation Protocol for Autonomous AI Agents","created":"2025-09-16","cited_by_count":9},{"id":"2508.08127","title":"BlindGuard: Safeguarding LLM-based Multi-Agent Systems under Unknown Attacks","created":"2025-08-11","cited_by_count":38},{"id":"2508.07667","title":"1-2-3 Check: Enhancing Contextual Privacy in LLM via Multi-Agent Reasoning","created":"2025-08-11","cited_by_count":17},{"id":"2508.05687","title":"Risk Analysis Techniques for Governed LLM-based Multi-Agent Systems","created":"2025-08-06","cited_by_count":18},{"id":"2508.03125","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","created":"2025-08-05","cited_by_count":17},{"id":"2507.06850","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","created":"2025-07-09","cited_by_count":4},{"id":"2507.04724","title":"Who's the Mole? Modeling and Detecting Intention-Hiding Malicious Agents in LLM-Based Multi-Agent Systems","created":"2025-07-07","cited_by_count":13},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57},{"id":"2506.07564","title":"SAFEFLOW: A Principled Protocol for Trustworthy and Transactional Autonomous Agent Systems","created":"2025-06-09","cited_by_count":25},{"id":"2506.04133","title":"TRiSM for Agentic AI: A Review of Trust, Risk, and Security Management in LLM-based Agentic Multi-Agent Systems","created":"2025-06-04","cited_by_count":59},{"id":"2506.02859","title":"ATAG: AI-Agent Application Threat Assessment with Attack Graphs","created":"2025-06-03","cited_by_count":4},{"id":"2506.02546","title":"To trust or not to trust: Attention-based Trust Management for LLM Multi-Agent Systems","created":"2025-06-03","cited_by_count":6},{"id":"2505.24201","title":"SentinelAgent: Graph-based Anomaly Detection in Multi-Agent Systems","created":"2025-05-30","cited_by_count":22},{"id":"2505.23847","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","created":"2025-05-28","cited_by_count":12},{"id":"2505.20824","title":"MedSentry: Understanding and Mitigating Safety Risks in Medical LLM Multi-Agent Systems","created":"2025-05-27","cited_by_count":9},{"id":"2505.19234","title":"GUARDIAN: Safeguarding LLM Multi-Agent Collaborations with Temporal Graph Modeling","created":"2025-05-25","cited_by_count":36},{"id":"2505.11642","title":"PeerGuard: Defending Multi-Agent Systems Against Backdoor Attacks Through Mutual Reasoning","created":"2025-05-16","cited_by_count":11},{"id":"2505.04799","title":"Maris: A Formally Verifiable Privacy Policy Enforcement Paradigm for Multi-Agent Collaboration Systems","created":"2025-05-07","cited_by_count":8},{"id":"2504.16489","title":"Amplified Vulnerabilities: Structured Jailbreak Attacks on LLM-based Multi-Agent Debate","created":"2025-04-23","cited_by_count":10},{"id":"2504.07461","title":"Achilles Heel of Distributed Multi-Agent Systems","created":"2025-04-10","cited_by_count":6},{"id":"2504.00218","title":"$\\textit{Agents Under Siege}$: Breaking Pragmatic Multi-Agent LLM Systems with Optimized Prompt Attacks","created":"2025-03-31","cited_by_count":34},{"id":"2503.12188","title":"Multi-Agent Systems Execute Arbitrary Malicious Code","created":"2025-03-15","cited_by_count":53},{"id":"2503.09648","title":"A Survey on Trustworthy LLM Agents: Threats and Countermeasures","created":"2025-03-12","cited_by_count":96},{"id":"2503.04392","title":"AgentSafe: Safeguarding Large Language Model-based Multi-agent Systems via Hierarchical Data Management","created":"2025-03-06","cited_by_count":38},{"id":"2502.14847","title":"Red-Teaming LLM Multi-Agent Systems via Communication Attacks","created":"2025-02-20","cited_by_count":122},{"id":"2502.14529","title":"CORBA: Contagious Recursive Blocking Attacks on Multi-Agent Systems Based on Large Language Models","created":"2025-02-20","cited_by_count":20},{"id":"2502.11127","title":"G-Safeguard: A Topology-Guided Security Lens and Treatment on LLM-based Multi-agent Systems","created":"2025-02-16","cited_by_count":59},{"id":"2410.07283","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","created":"2024-10-09","cited_by_count":133},{"id":"2408.14972","title":"AgentMonitor: A Plug-and-Play Framework for Predictive and Secure Multi-Agent Systems","created":"2024-08-27","cited_by_count":9},{"id":"2407.19354","title":"The Emerged Security and Privacy of LLM Agent: A Survey with Case Studies","created":"2024-07-28","cited_by_count":131},{"id":"2407.07791","title":"Flooding Spread of Manipulated Knowledge in LLM-Based Multi-Agent Communities","created":"2024-07-10","cited_by_count":86},{"id":"2402.14859","title":"The Wolf Within: Covert Injection of Malice into MLLM Societies via an MLLM Operative","created":"2024-02-20","cited_by_count":21},{"id":"2402.08567","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","created":"2024-02-13","cited_by_count":153},{"id":"2402.07510","title":"Secret Collusion among AI Agents: Multi-Agent Deception via Steganography","created":"2024-02-12","cited_by_count":113},{"id":"2311.11855","title":"Evil Geniuses: Delving into the Safety of LLM-based Agents","created":"2023-11-20","cited_by_count":106}],"next_cursor":null}