5 citations · 9 across the 11 of their papers we have counts for
7 papers · 1 filter
Beyond Predictable Paths: Redefining AI Security Incident Reporting for Agents
Anastasia Pustozerova, Eugene Bagdasarian, Luca Beurer-Kellner +22
AI agents are being deployed rapidly, accompanied by a growing number of AI-specific attacks and corresponding incidents. As incident reporting becomes increasingly important for l…
Rising From the Ashes: How Agentic AI is Unblocking Challenges in Cybersecurity
Gabriela F. Ciocarlie, Kathrin Grosse, Somesh Jha +3
Security remains a high-cost challenge, with many problems historically deemed inefficient to address or effectively unsolvable. A significant number of these problems stem from la…
Efficient and Sound Probabilistic Verification for AI Agents
Alaia Solko-Breslin, Pramod Kaushik Mudrakarta, Mihai Christodorescu +2
Securing AI agents that operate in complex digital environments has become a critical need, and runtime monitoring approaches that formulate and enforce policies expressed in a for…
Confused ChatGPT: Cross-App Context Poisoning via First-Party APIs
Chao Wang, Somesh Jha, Zhiqiang Lin
ChatGPT Apps, launched by OpenAI on Oct. 6, 2025, introduce an app-in-app paradigm in which third-party applications share a single chat context with the user and with every other…
Agent Security is a Systems Problem
Mihai Christodorescu, Earlence Fernandes, Ashish Hooda +11
We take the position that agent security must be approached as a systems problem: the AI model powering the agent must be treated as an untrusted component, and security invariants…
Systems Security Foundations for Agentic Computing
Mihai Christodorescu, Earlence Fernandes, Ashish Hooda +11
In recent years, agentic artificial intelligence (AI) systems are becoming increasingly widespread. These systems allow agents to use various tools, such as web browsers, compilers…
Through the Stealth Lens: Attention-Aware Defenses Against Poisoning in RAG
Sarthak Choudhary, Nils Palumbo, Ashish Hooda +2
Retrieval-augmented generation (RAG) systems are vulnerable to attacks that inject poisoned passages into the retrieved context, even at low corruption rates. We show that existing…