Agent Security is a Systems Problem | Paper Citation Record

Observation c7c00658-3fac-4e49-8535-36e253583e45 · outbound

This paper cites AWS Identity and Access Management (IAM).https://aws.amazon.com/iam/.

Agent Security is a Systems Problem AWS Identity and Access Management (IAM).https://aws.amazon.com/iam/

Reference 1

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.378674Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 7cccb02b-fec1-4b76-b5d3-0214b1b02b2d · outbound

This paper cites Agent skills—Claude API docs.

Agent Security is a Systems Problem Agent skills—Claude API docs

Reference 2

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.385836Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 5e930f18-5635-4431-9e05-69c3c330d28b · outbound

This paper cites Next-generation constitutional classifiers: More efficient protection against universal jailbreaks.

Agent Security is a Systems Problem Next-generation constitutional classifiers: More efficient protection against universal jailbreaks

Reference 3

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.367387Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation a81e8bf0-5ed9-4fa6-ac73-a20c441d34e1 · outbound

This paper cites Poisoning fine-tuning datasets of constitutional classifiers.https://alignment.anthropic.com/2026/ backdooring-classifiers/, April 2026.

Agent Security is a Systems Problem Poisoning fine-tuning datasets of constitutional classifiers.https://alignment.anthropic.com/2026/ backdooring-classifiers/, April 2026

Reference 4

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.369804Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 2c4b5889-4ecd-4e64-8655-4e046e1a24ee · outbound

This paper cites Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples.

Agent Security is a Systems Problem Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples

Reference 5

Resolution: verified exact; local_arxiv, observed 2026-05-21T07:44:02.897958Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 90908b59-6171-4deb-9837-9032c7f693ae · outbound

This paper cites Information flows in causal networks.Advances in complex systems, 11(01):17–41.

Agent Security is a Systems Problem Information flows in causal networks.Advances in complex systems, 11(01):17–41

Reference 6

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.374912Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation cdd60bf2-9127-4e9f-b928-44f1b20d2ccf · outbound

This paper cites Introducing Guardrails: The Contextual Security Layer for the Agentic Era.https://invariantlabs.ai/blog/ guardrails, April 2025.

Agent Security is a Systems Problem Introducing Guardrails: The Contextual Security Layer for the Agentic Era.https://invariantlabs.ai/blog/ guardrails, April 2025

Reference 7

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.362009Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation c45ca4be-1ec1-461a-b984-227bc86d9cea · outbound

This paper cites StruQ: Defending against prompt injection with structured queries.

Agent Security is a Systems Problem StruQ: Defending against prompt injection with structured queries

Reference 8

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.391148Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 600205e2-4a6b-4577-b4a7-3841a0de1d52 · outbound

This paper cites Defending Against Prompt Injection With a Few DefensiveTokens.

Agent Security is a Systems Problem Defending Against Prompt Injection With a Few DefensiveTokens

Reference 9

Resolution: verified exact; arxiv_id, observed 2026-05-21T07:44:02.915798Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 4489fc60-5f4e-4484-9e37-99d8581c5665 · outbound

This paper cites SecAlign: Defending Against Prompt Injection with Preference Optimization.

Agent Security is a Systems Problem SecAlign: Defending Against Prompt Injection with Preference Optimization

Reference 10

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.387567Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 92ee5512-0fa4-4879-9380-12eefd86c9c5 · outbound

This paper cites Meta secalign: A secure foundation llm against prompt injection attacks.

Agent Security is a Systems Problem Meta secalign: A secure foundation llm against prompt injection attacks

Reference 11

Resolution: verified exact; arxiv_id, observed 2026-05-21T07:44:02.907676Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation ba30d816-53a4-4a7a-8321-2bd5359eb6be · outbound

This paper cites ShieldAgent: Shielding Agents via Verifiable Safety Policy Reasoning.

Agent Security is a Systems Problem ShieldAgent: Shielding Agents via Verifiable Safety Policy Reasoning

Reference 12

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.382183Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation d5f8c5c3-b3ad-4de7-859d-0cfa2cd2e065 · outbound

This paper cites arXiv preprint arXiv:2503.22738 , year=.

Agent Security is a Systems Problem arXiv preprint arXiv:2503.22738 , year=

Reference 13

Resolution: verified exact; arxiv_id, observed 2026-05-21T07:44:02.905167Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 05bd67c5-0766-430b-8530-d5eb2fe0c96e · outbound

This paper cites How Not to Detect Prompt Injections with an LLM.

Agent Security is a Systems Problem How Not to Detect Prompt Injections with an LLM

Reference 14

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.381796Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation aaa6420d-7a50-4a2c-81f3-e1be8d1c533d · outbound

This paper cites Securing AI Agents with Information-Flow Control.

Agent Security is a Systems Problem Securing AI Agents with Information-Flow Control

Reference 15

Resolution: verified exact; local_arxiv, observed 2026-05-21T07:44:02.908148Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 889ea9b6-18d7-4bcf-afa9-b5fc09377db7 · outbound

This paper cites Cutler, Craig Disselkoen, Aaron Eline, Shaobo He, Kyle Headley, Michael Hicks, Kesha Hietala, Eleftherios Ioannidis, John H.

Agent Security is a Systems Problem Cutler, Craig Disselkoen, Aaron Eline, Shaobo He, Kyle Headley, Michael Hicks, Kesha Hietala, Eleftherios Ioannidis, John H

Reference 16

Resolution: verified exact; doi, observed 2026-05-21T07:44:02.472177Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation faa56cf5-4245-4b7f-91dc-5012f6561d6e · outbound

This paper cites Algorithmic transparency via quantitative input influence: Theory and experiments with learning systems.

Agent Security is a Systems Problem Algorithmic transparency via quantitative input influence: Theory and experiments with learning systems

Reference 17

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.390831Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 47089b14-e6e7-4a34-994f-36c50ea98e00 · outbound

This paper cites Defeating Prompt Injections by Design.

Agent Security is a Systems Problem Defeating Prompt Injections by Design

Reference 18

Resolution: verified exact; local_arxiv, observed 2026-05-21T07:44:02.910333Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 545ff882-ec11-4432-ae86-87bc8558863c · outbound

This paper cites A lattice model of secure information flow.

Agent Security is a Systems Problem A lattice model of secure information flow

Reference 19

Resolution: verified exact; arxiv_id, observed 2026-05-21T07:44:02.475036Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 3028ac84-e44a-46d5-b036-a8e1ab2e0d47 · outbound

This paper cites Binder, a Logic-based Security Language.

Agent Security is a Systems Problem Binder, a Logic-based Security Language

Reference 20

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.371446Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 6ff3d76b-a0f5-4e76-839c-8a2ed50cde8d · outbound

This paper cites Cox, Jaeyeon Jung, Patrick McDaniel, and Anmol N.

Agent Security is a Systems Problem Cox, Jaeyeon Jung, Patrick McDaniel, and Anmol N

Reference 21

Resolution: verified exact; doi, observed 2026-05-21T07:44:02.468777Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 3ee89bc7-12ab-433a-a3c0-18ce15ae4ff8 · outbound

This paper cites Causal abstractions of neural networks.Advances in neural information processing systems, 34:9574–9586.

Agent Security is a Systems Problem Causal abstractions of neural networks.Advances in neural information processing systems, 34:9574–9586

Reference 22

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.371187Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 500fd4c8-008f-4d22-b469-cbe36a4ad5ce · outbound

This paper cites CAPSEM: Contextual Agent Privacy and Security Manager.https://capsem.org/.

Agent Security is a Systems Problem CAPSEM: Contextual Agent Privacy and Security Manager.https://capsem.org/

Reference 23

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.376864Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 1b92ca6c-76be-4877-8048-61a8df14ded8 · outbound

This paper cites Identity and Access Management (IAM).https://cloud.google.com/iam/.

Agent Security is a Systems Problem Identity and Access Management (IAM).https://cloud.google.com/iam/

Reference 24

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.358321Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation dec5e04d-bbf7-4601-9bfb-28c4793ad8b0 · outbound

This paper cites Not what You’ve Signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection.

Agent Security is a Systems Problem Not what You’ve Signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection

Reference 25

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.360150Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation f92f1157-2a68-46bd-8f0e-8ea5acde25a9 · outbound

This paper cites Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection.

Agent Security is a Systems Problem Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection

Reference 26

Resolution: verified exact; local_arxiv, observed 2026-05-21T07:44:02.895835Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation f95cc9bf-01df-453a-8747-a762fe3078d6 · outbound

This paper cites Quantifying causal influences.

Agent Security is a Systems Problem Quantifying causal influences

Reference 27

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.353803Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation c23d812e-7665-4fcf-8f21-ccdb87dea708 · outbound

This paper cites A critical evaluation of defenses against prompt injection attacks.

Agent Security is a Systems Problem A critical evaluation of defenses against prompt injection attacks

Reference 28

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.359740Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 79133e4d-fb4c-4213-be4f-53769c1fa681 · outbound

This paper cites Manipulating LLM Web Agents with Indirect Prompt Injection Attack via HTML Accessibility Tree.

Agent Security is a Systems Problem Manipulating LLM Web Agents with Indirect Prompt Injection Attack via HTML Accessibility Tree

Reference 29

Resolution: metadata mismatch; arxiv_id, observed 2026-05-21T07:44:02.899096Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation ea9aba54-67d5-42d4-b56f-4d39a66e60a8 · outbound

This paper cites Optimizing agent planning for security and autonomy.

Agent Security is a Systems Problem Optimizing agent planning for security and autonomy

Reference 30

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.363611Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 62777396-33b9-44dd-9ef0-2dbbd3ad9f61 · outbound

This paper cites ACE: A Security Architecture for LLM-Integrated App Systems.

Agent Security is a Systems Problem ACE: A Security Architecture for LLM-Integrated App Systems

Reference 31

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.348779Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 898e5be1-e2c9-4ec8-aaeb-5434084c3e69 · outbound

This paper cites In: IEEE Symposium on Security and Privacy (S&P).

Agent Security is a Systems Problem In: IEEE Symposium on Security and Privacy (S&P)

Reference 32

Resolution: metadata mismatch; arxiv_id, observed 2026-05-21T07:44:02.471908Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 7a9a73d9-29d0-4f53-bfb5-d8480f1248f7 · outbound

This paper cites PRP: Propagating Universal Perturbations to Attack Large Language Model Guard-Rails.

Agent Security is a Systems Problem PRP: Propagating Universal Perturbations to Attack Large Language Model Guard-Rails

Reference 33

Resolution: verified exact; arxiv_id, observed 2026-05-21T07:44:02.881062Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation fc5a4e01-e2d4-4b85-ab3f-1d8351ae1663 · outbound

This paper cites ceLLMate: Sandboxing Browser AI Agents.

Agent Security is a Systems Problem ceLLMate: Sandboxing Browser AI Agents

Reference 34

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.350266Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 7d9ab52a-ec60-4426-ba59-686c49f289af · outbound

This paper cites cellmate: Sandboxing browser ai agents.

Agent Security is a Systems Problem cellmate: Sandboxing browser ai agents

Reference 35

Resolution: verified exact; arxiv_id, observed 2026-05-21T07:44:02.884203Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 92e916e0-c9fe-4f8b-b8aa-55f9b31addfc · outbound

This paper cites Azure Policy Documentation.https://learn.microsoft.com/en-us/azure/governance/policy/.

Agent Security is a Systems Problem Azure Policy Documentation.https://learn.microsoft.com/en-us/azure/governance/policy/

Reference 36

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.373115Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 136737c5-2b2a-4cb8-acf4-fcc1f7deaee9 · outbound

This paper cites VeriGuard: enhancing LLM agent safety via verified code generation.

Agent Security is a Systems Problem VeriGuard: enhancing LLM agent safety via verified code generation

Reference 37

Resolution: verified exact; arxiv_id, observed 2026-05-21T07:44:02.879144Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 35f96165-4709-467f-9659-06062c1dc3ac · outbound

This paper cites Measuring information leakage using generalized gain functions.

Agent Security is a Systems Problem Measuring information leakage using generalized gain functions

Reference 38

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.337972Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 32486bf0-c6fc-4ce8-b0f8-e5bc9a0926c8 · outbound

This paper cites The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections.

Agent Security is a Systems Problem The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections

Reference 39

Resolution: metadata mismatch; local_arxiv, observed 2026-05-21T07:44:02.885247Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 6c448298-782c-40b4-82cf-8e1dee02b3d2 · outbound

This paper cites Automatically hardening web applications using precise tainting.

Agent Security is a Systems Problem Automatically hardening web applications using precise tainting

Reference 40

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.332415Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 22c63825-9b8a-45d1-a19c-0af95b4d2b49 · outbound

This paper cites NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails.

Agent Security is a Systems Problem NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails

Reference 41

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.331171Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation a0a33788-bc67-4f86-a1ea-29cbd217cc55 · outbound

This paper cites ClawHub, the skill dock for sharp agents.

Agent Security is a Systems Problem ClawHub, the skill dock for sharp agents

Reference 42

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.356095Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation ba88d5ed-78d3-430b-9628-ce7e99136d03 · outbound

This paper cites Formal Policy Enforcement for Real-World Agentic Systems.

Agent Security is a Systems Problem Formal Policy Enforcement for Real-World Agentic Systems

Reference 43

Resolution: verified exact; local_arxiv, observed 2026-05-21T07:44:02.912940Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 1ec7edb6-6064-4a5c-bfe4-fcd7c5382e16 · outbound

This paper cites Validating mechanistic interpretations: An axiomatic approach.

Agent Security is a Systems Problem Validating mechanistic interpretations: An axiomatic approach

Reference 44

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.334303Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation d8a278c2-1262-4d40-9b19-592cc36099e7 · outbound

This paper cites Pandya, Andrey Labunets, Sicun Gao, and Earlence Fernandes.

Agent Security is a Systems Problem Pandya, Andrey Labunets, Sicun Gao, and Earlence Fernandes

Reference 45

Resolution: verified exact; arxiv_id, observed 2026-05-21T07:44:02.891790Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 0ff5fbf4-a095-463d-b2ce-947bad2a3be2 · outbound

This paper cites Defending against injection attacks through context-sensitive string evaluation.

Agent Security is a Systems Problem Defending against injection attacks through context-sensitive string evaluation

Reference 46

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.342974Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 14df11c6-79e1-4547-8390-e99195b083ca · outbound

This paper cites Rehberger (wunderwuzzi).

Agent Security is a Systems Problem Rehberger (wunderwuzzi)

Reference 47

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.363772Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 2177bfa5-3000-492e-a7c3-644cc4d8641d · outbound

This paper cites Rehberger (wunderwuzzi).

Agent Security is a Systems Problem Rehberger (wunderwuzzi)

Reference 48

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.346491Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 2ed2b8ac-6498-4600-a6f1-b22159408f3a · outbound

This paper cites Rehberger (wunderwuzzi).

Agent Security is a Systems Problem Rehberger (wunderwuzzi)

Reference 49

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.365348Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 90768332-4cdd-4fd2-ad33-990faa7a34c5 · outbound

This paper cites an unresolved cited work.

Agent Security is a Systems Problem Unresolved cited work

Reference 50

Resolution: unresolved; raw_fallback, observed 2026-05-21T07:44:03.336121Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 61fcc5e8-215a-4337-ba01-b15dd2a12a57 · outbound

This paper cites Rehberger (wunderwuzzi).

Agent Security is a Systems Problem Rehberger (wunderwuzzi)

Reference 51

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.340002Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 0348d896-b265-4e12-9426-88a0ef8a3ba4 · outbound

This paper cites Rehberger (wunderwuzzi).

Agent Security is a Systems Problem Rehberger (wunderwuzzi)

Reference 52

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.372853Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 61ab9720-8ed7-4ffe-b31e-05a0a482b7b9 · outbound

This paper cites Rehberger (wunderwuzzi).

Agent Security is a Systems Problem Rehberger (wunderwuzzi)

Reference 53

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.354050Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 812317bf-6459-4ae7-8de4-3c1a8ace4fdd · outbound

This paper cites Rehberger (wunderwuzzi).

Agent Security is a Systems Problem Rehberger (wunderwuzzi)

Reference 54

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.392885Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation dae67366-9e0d-4ccf-b8f5-464debc929fc · outbound

This paper cites an unresolved cited work.

Agent Security is a Systems Problem Unresolved cited work

Reference 55

Resolution: unresolved; raw_fallback, observed 2026-05-21T07:44:03.315598Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation fbaa7751-dede-4002-a925-da82a92ddcb3 · outbound

This paper cites Rehberger (wunderwuzzi).

Agent Security is a Systems Problem Rehberger (wunderwuzzi)

Reference 56

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.338927Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation dafecb2c-f6ac-478f-b104-20ce02c9a646 · outbound

This paper cites Rehberger (wunderwuzzi).

Agent Security is a Systems Problem Rehberger (wunderwuzzi)

Reference 57

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.313704Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation cc850188-ba86-4102-b0ba-03f9602fdd1b · outbound

This paper cites Rehberger (wunderwuzzi).

Agent Security is a Systems Problem Rehberger (wunderwuzzi)

Reference 58

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.317725Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 6c8e2a51-d084-49a9-b030-7d8cefaac4b0 · outbound

This paper cites an unresolved cited work.

Agent Security is a Systems Problem Unresolved cited work

Reference 59

Resolution: unresolved; raw_fallback, observed 2026-05-21T07:44:03.319460Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 8eb86a6d-b4f1-47bc-a66b-09c1872194d3 · outbound

This paper cites Rehberger (wunderwuzzi).

Agent Security is a Systems Problem Rehberger (wunderwuzzi)

Reference 60

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.321116Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 6ccc64f3-aeff-4ae4-aab4-3fddf44571c5 · outbound

This paper cites Rehberger (wunderwuzzi).

Agent Security is a Systems Problem Rehberger (wunderwuzzi)

Reference 61

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.309824Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation c192bab2-5c0f-4e4c-a6d7-f711d63bbebe · outbound

This paper cites User- driven access control: Rethinking permission granting in modern operating systems.

Agent Security is a Systems Problem User- driven access control: Rethinking permission granting in modern operating systems

Reference 62

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.322911Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 8a527a95-5330-40a5-97e4-0299be959661 · outbound

This paper cites Declassification: Dimensions and principles.Journal of Computer Security, 17(5):517–548.

Agent Security is a Systems Problem Declassification: Dimensions and principles.Journal of Computer Security, 17(5):517–548

Reference 63

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.325795Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 83f1bc08-b8b8-40fe-a51f-eab85cba01e6 · outbound

This paper cites Saltzer and M.D.

Agent Security is a Systems Problem Saltzer and M.D

Reference 64

Resolution: verified exact; arxiv_id, observed 2026-05-21T07:44:02.474477Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 091c616c-f380-4beb-8a59-83e76f17b9e3 · outbound

This paper cites Trojan-speak: Bypassing constitutional classifiers with no jailbreak tax via adversarial finetuning.

Agent Security is a Systems Problem Trojan-speak: Bypassing constitutional classifiers with no jailbreak tax via adversarial finetuning

Reference 65

Resolution: verified exact; arxiv_id, observed 2026-05-21T07:44:02.927637Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation aa875be3-7f05-4168-9111-3604a6d3adb7 · outbound

This paper cites The Geometry of Innocent Flesh on the Bone: Return-into-libc without Function Calls (on the x86).

Agent Security is a Systems Problem The Geometry of Innocent Flesh on the Bone: Return-into-libc without Function Calls (on the x86)

Reference 66

Resolution: verified exact; arxiv_id, observed 2026-05-21T07:44:02.477575Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 773a395e-8f3f-4abe-acef-defb52c3951a · outbound

This paper cites Progent: Securing AI Agents with Privilege Control.

Agent Security is a Systems Problem Progent: Securing AI Agents with Privilege Control

Reference 67

Resolution: verified exact; local_arxiv, observed 2026-05-21T07:44:02.911102Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 0e6cb85c-c8ae-4c51-b350-394db539d2ba · outbound

This paper cites AgentFlayer: When a Jira Ticket Can Steal Your Secrets.https://labs.zenity.io/p/when-a-jira- ticket-can-steal-your-secrets, August 2025.

Agent Security is a Systems Problem AgentFlayer: When a Jira Ticket Can Steal Your Secrets.https://labs.zenity.io/p/when-a-jira- ticket-can-steal-your-secrets, August 2025

Reference 68

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.383608Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 40adb646-d20d-421e-a36b-30c9154485fa · outbound

This paper cites On the foundations of quantitative information flow.

Agent Security is a Systems Problem On the foundations of quantitative information flow

Reference 69

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.389274Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 59fc45c5-2e39-4292-8fb3-af2fec4065b9 · outbound

This paper cites Muzzle: Adaptive agentic red-teaming of web agents against indirect prompt injection attacks.

Agent Security is a Systems Problem Muzzle: Adaptive agentic red-teaming of web agents against indirect prompt injection attacks

Reference 70

Resolution: verified exact; arxiv_id, observed 2026-05-21T07:44:02.920698Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 44d4dc1d-ad2f-4780-95cd-a8dfc9faac4e · outbound

This paper cites SAGA: A Security Architecture for Governing AI Agentic Systems.

Agent Security is a Systems Problem SAGA: A Security Architecture for Governing AI Agentic Systems

Reference 71

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.389111Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 45d85981-62ad-4218-8748-37b5138ca9d9 · outbound

This paper cites Lee, and G.

Agent Security is a Systems Problem Lee, and G

Reference 72

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.380162Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation eb086d68-01f4-464f-95c8-82f8eb339b0a · outbound

This paper cites AI Agent, AI Spy.https://media.ccc.de/v/39c3-ai-agent-ai-spy.

Agent Security is a Systems Problem AI Agent, AI Spy.https://media.ccc.de/v/39c3-ai-agent-ai-spy

Reference 73

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.387385Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 41b5147f-8858-4d46-845d-fe7f65bf9efd · outbound

This paper cites The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions.

Agent Security is a Systems Problem The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions

Reference 74

Resolution: verified exact; local_arxiv, observed 2026-05-21T07:44:02.923757Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation f3353e1c-a6ab-42ad-94a8-a09152700dd7 · outbound

This paper cites AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents.

Agent Security is a Systems Problem AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents

Reference 75

Resolution: verified exact; arxiv_id, observed 2026-05-21T07:44:02.914269Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation f74e7824-c3ed-417d-b32b-62f69ddd089b · outbound

This paper cites Instructional Segment Embedding: Improving LLM Safety with Instruction Hierarchy.

Agent Security is a Systems Problem Instructional Segment Embedding: Improving LLM Safety with Instruction Hierarchy

Reference 76

Resolution: verified exact; arxiv_id, observed 2026-05-21T07:44:02.917307Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation eae530ac-733a-47ed-a914-d8f12bdfcc5c · outbound

This paper cites Universal and Transferable Adversarial Attacks on Aligned Language Models.

Agent Security is a Systems Problem Universal and Transferable Adversarial Attacks on Aligned Language Models

Reference 77

Resolution: metadata mismatch; local_arxiv, observed 2026-05-21T07:44:02.930917Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 76e321e5-6af5-4b98-ae1a-52080a990d3c · outbound

This paper cites Terminal DiLLMa.

Agent Security is a Systems Problem Terminal DiLLMa

Reference 78

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T07:44:03.392470Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Coverage vector

Reference resolution

Outbound references

Pith citing papers