activity
20112026
most citedData Poisoning Attacks on Factorization-Based Collaborative Filtering

154 citations · 639 across the 138 of their papers we have counts for

collaborators

153 papers

cs.LG2026

Self-Reflection Fine-Tuning: Enhancing Agent Security against Prompt Injection Attacks from Failure Experience

Zixuan Wang, Hao Li, Fengyu Gao +5

Large language model (LLM) agents are increasingly deployed in tool-augmented environments, but their reliance on external inputs makes them highly vulnerable to prompt injection a…

cs.LG2026

Protecting Sensitive Data in Image Synthesis via PAC-Private Adaptation for Diffusion Models

Boming Miao, Tao Zhang, Netanel Raviv +3

Synthetic data are increasingly used as an alternative to sharing sensitive records. However, synthetic data generation does not guarantee privacy, as diffusion models trained or a…

cs.AI2026

Symbolic Guidance for LLM Agents in Distributed Multiagent Coordination

Ben Rachmut, Ning Zhang, Yevgeniy Vorobeychik +1

Large language models (LLMs) are increasingly deployed as autonomous agents in multi-agent systems, yet their ability to reliably execute distributed coordination protocols remains…

cs.GT2026

Efficient Nash Equilibrium Computation for Cybersecurity Games

Michael Lanier, David Farmer, Yevgeniy Vorobeychik

Game-theoretic analyses of cyber defence often compute equilibria of games whose payoffs exist only as the output of a simulator. Iterative equilibrium-finding methods grow a set o…

cs.LG2026

LATS: Levy Adaptive Tree Sampling for Feedback-Driven Diverse Target Discovery

Binglin Ji, Anindya Sarkar, Hengchang Lu +3

While diffusion models excel at capturing complex data distributions, scientific discovery often requires steering generation toward specific, uncharacterized regions that maximize…

cs.CR2026

ROPE: Routed Origin Policy Enforcement against Indirect Prompt Injection

Xinhang Ma, Chaowei Xiao, William Yeoh +2

Indirect prompt injection (IPI) plants instructions in the content a tool-using LLM agent reads, steering the agent into harmful tool calls. The strongest defenses are system-level…