AI Agent Security

Ask about this topic

Momentum

43 papers in the last four weeks, up 258% on the four weeks before. 0.4% of all new papers.

Jul 13Week of Sep 28
View on map

Latest papers 311

All topics
CardsList

  1. A Comparative Evaluation of AI Agent Security Guardrails

    Apr 27, 2026Qi Li, Jiu Li, Pingtao Wei +8LLM GuardrailsAI Agent Security

    Beijing Caizhi Tech, Beijing, China

  2. Poster: ClawdGo: Endogenous Security Awareness Training for Autonomous AI Agents

    Apr 27, 2026Jiaqi Li, Yang Zhao, Bin Sun +3AI Agent SecurityLLM Agent Training

    Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China · School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China · Network Management Center, China Mobile Group Liaoning Company Limited, Liaoning, China +2

  3. Proof of Execution: Runtime Verification for Governed AI Agent Actions

    Apr 26, 2026James Rhodes, George KangAI Agent SecurityFormal Verification

    AlphaBitCore, Inc.

  4. Structural Enforcement of Goal Integrity in AI Agents via Separation-of-Powers Architecture

    Apr 26, 2026Rong XiangAI Agent SecurityAI Agent Safety

  5. A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework

    Apr 25, 2026Kexin ChuAI Agent SecurityLLM Agent Security

    School of Computing, University of Connecticut

  6. AI Identity: Standards, Gaps, and Research Directions for AI Agents

    Apr 25, 2026Takumi Otsuka, Kentaroh Toyoda, Alex LeungAI AccountabilityAI Agent Security

    1AIFT, Singapore · 2Graduate School of Fundamental Science and Engineering, Department of Computer Science and Communications Engineering, Waseda University, Japan · 3Keio Global Research Institute (KGRI), Japan

  7. Semantic Denial of Service in LLM-controlled robots

    Apr 25, 2026Jonathan Steinberg, Oren GalLanguage Model Safety EvaluationAdversarial Attacks on LLMs

    Swarms & AI Lab (SAIL) · University of Haifa

  8. UNSEEN: A Cross-Stack LLM Unlearning Defense against AR-LLM Social Engineering Attacks

    Apr 25, 2026Tianlong Yu, Yang Yang, Xiao Luo +6Privacy-Preserving Language ModelsLLM Guardrails

    Hubei University, Wuhan, China · University of Southern California, Los Angeles, USA · Huazhong University of Science and Technology, Wuhan, China

  9. Operationalizing Reconstructive Authority: Runtime Construction, Dependency Resolution, and Execution Gating in Autonomous Agent Systems

    Apr 24, 2026Marcelo Fernandez - TraslaIAAI Agent SecurityAI Agent Safety

    TraslaIA

  10. Cross-Session Threats in AI Agents: Benchmark, Evaluation, and Algorithms

    Apr 22, 2026Ari AzarafroozCybersecurityAI Agent Security

    Intrinsec AI

  11. Breaking MCP with Function Hijacking Attacks: Novel Threats for Function Calling and Agentic Models

    Apr 22, 2026Yannis Belkhiter, Giulio Zizzo, Sergio Maffeis +2Adversarial Attacks on LLMsAI Agent Security

    IBM Research Europe · Trinity College Dublin · Imperial College London +1

  12. AgentSOC: A Multi-Layer Agentic AI Framework for Security Operations Automation

    Apr 22, 2026Joyjit Roy, Samaresh Kumar SinghAutonomous Cyber DefenseCybersecurity

    Austin, Texas, USA · Leander, Texas, USA

  13. An AI Agent Execution Environment to Safeguard User Data

    Apr 21, 2026Robert Stanley, Avi Verma, Lillian Tsai +2AI Agent SecurityPrivacy Leakage in Language Models

    University of California, Los Angeles · Google

  14. If you're waiting for a sign... that might not be it! Mitigating Trust Boundary Confusion from Visual Injections on Vision-Language Agentic Systems

    Apr 21, 2026Jiamin Chang, Minhui Xue, Ruoxi Sun +3VLM RobustnessAdversarial Attacks on VLMs

    University of New South Wales, Sydney, NSW 2052, Australia · CSIRO’s Data61, Marsfield, NSW 2122, Australia · Macquarie University, NSW 2109, Australia

  15. How Adversarial Environments Mislead Agentic AI?

    Apr 20, 2026Zhonghao Zhan, Huichi Zhou, Zhenhao Li +3Adversarial RobustnessAI Agent Evaluation

    Imperial College London

  16. Temporal UI State Inconsistency in Desktop GUI Agents: Formalizing and Defending Against TOCTOU Attacks on Computer-Use Agents

    Apr 20, 2026Wenpeng XuAdversarial AttacksComputer-Use Agents

    University of California, San Diego

  17. Owner-Harm: A Missing Threat Model for AI Agent Safety

    Apr 20, 2026Dongcheng Zhang, Yiqing JiangAI Agent SecurityAI Agent Safety

    BlueFocus Communication Group · Tongji University

  18. From Craft to Kernel: A Governance-First Execution Architecture and Semantic ISA for Agentic Computers

    Apr 20, 2026Xiangyu Wen, Yuang Zhao, Xiaoyu Xu +9AI Agent SecurityAI Agent Safety

    CUHK · Hong Kong SAR, China · Shanghai Jiao Tong University +6

  19. SafeAgent: A Runtime Protection Architecture for Agentic Systems

    Apr 19, 2026Hailin Liu, Eugene Ilyushin, Jie Ni +1Adversarial Attacks on LLMsAI Agent Security

    Lomonosov Moscow State University · Central University

  20. Visual Inception: Compromising Long-term Planning in Agentic Recommenders via Multimodal Memory Poisoning

    Apr 18, 2026Jiachen QianAI Agent SecurityAgent Memory Poisoning

    City University of Hong Kong

  21. Governed MCP: Kernel-Level Tool Governance for AI Agents via Logit-Based Safety Primitives

    Apr 18, 2026Daeyeon SonMCP SecurityAI Agent Security

    Independent Researcher · Republic of Korea

  22. enclawed: A Configurable, Sector-Neutral Hardening Framework for Single-User AI Assistant Gateways

    Apr 18, 2026Alfredo MetereAI AssuranceAI Agent Security

    Metere Consulting, LLC.

  23. CapSeal: Capability-Sealed Secret Mediation for Secure Agent Execution

    Apr 18, 2026Shutong Jin, Ruiyi Guo, Ray C. C. CheungAI Agent SecurityLLM Agent Security

    City University of Hong Kong, Hong Kong · Beijing Foreign Studies University

  24. Don't Make Models Guess Security and Safety: Symbolic Guardrails for Domain-Specific AI Agents

    Apr 16, 2026Yining Hong, Yining She, Eunsuk Kang +2LLM GuardrailsAI Agent Security

    Carnegie Mellon University

  25. Bounded Autonomy for Enterprise AI: Typed Action Contracts and Consumer-Side Execution

    Apr 16, 2026Sarmad Sohail, Ghufran HaiderLLM GuardrailsAI Agent Security

  26. LinuxArena: A Control Setting for AI Agents in Live Production Software Environments

    Apr 16, 2026Tyler Tracy, Ram Potham, Nick Kuhn +31Software Engineering AgentsAI Agent Security

    Redwood Research · EquiStamp

  27. Hardening x402: PII-Safe Agentic Payments via Pre-Execution Metadata Filtering

    Apr 13, 2026Vladimir StantchevAI Agent SecuritySafety Filtering

    SRH University Heidelberg, Germany · PRESIDIO Group, Sofia, Bulgaria

  28. Are GUI Agents Focused Enough? Automated Distraction via Semantic-level UI Element Injection

    Apr 9, 2026Wenkui Yang, Chao Jin, Haisu Zhu +7GUI AgentsAI Agent Security

    School of Advanced Interdisciplinary Sciences, University of Chinese Academy of Sciences · 2MAIS&NLPR, Institute of Automation, Chinese Academy of Sciences · 4ShanghaiTech University +2

  29. Auditable Agents

    Apr 7, 2026Yi Nian, Aojie Yuan, Haiyue Zhang +7AI AccountabilityAI Agent Auditing

    University of Southern California · Arizona State University · University of Tennessee, Knoxville +1

  30. T-MAP: Red-Teaming LLM Agents with Trajectory-aware Evolutionary Search

    Mar 21, 2026Hyomin Lee, Sangwoo Park, Yumin Choi +3Adversarial Prompt GenerationLLM Red Teaming

    KAIST · University of California, Los Angeles