activity
20112026
most citedPoisoning Attacks to Graph-Based Recommender Systems

217 citations · 1.8k across the 154 of their papers we have counts for

collaborators
Showing cs.CRShow all

115 papers · 1 filter

cs.CR2026

Secure Speculative Decoding for Large Language Models

Yichi Zhang, Zhiqi Wang, Neil Gong +1

Speculative decoding accelerates inference for a large language model (LLM), referred to as the \emph{target model}, by first using a smaller model, referred to as the \emph{draft…

cs.CR2026

Divide and Doubt: Diverse Distributed Poisoning for Retrieval-Augmented Generation

Tianhao Chen, Yuhan Wei, Weifei Jin +3

Multi-passage corpus poisoning often repeats one target claim across similar documents, creating correlated lexical and semantic patterns that similarity- and conflict-aware defens…

cs.CR2026

LongPIBench: A Long-Context Benchmark for Prompt Injection

Yupei Liu, Yuqi Jia, Neil Zhenqiang Gong +1

Prompt injection attacks pose a serious security risk to large language models in real-world applications. However, existing prompt injection benchmarks primarily focus on short-co…

cs.CR2026

ContextLeak: Exfiltrating LLM Agent Context via Malicious Tools

Yuqi Jia, Ruiqi Wang, Patrick Li +3

Exfiltrating an LLM agent's runtime context -- such as the user prompt, execution trajectory, and tool list -- poses severe security and privacy risks to users. Such attacks can be…

cs.CR2026

Same-Origin Policy for Agentic Browsers

Xilong Wang, Xiaoxing Chen, Patrick Li +2

Agentic browsers integrate autonomous AI agents into web browsers, enabling users to accomplish web tasks through natural-language instructions. The same-origin policy (SOP) is a f…

cs.CR2026

Dynamic Malicious Skills in Agentic AI

Tianhao Chen, Zhengyuan Jiang, Yuepeng Hu +2

Skills are a key enabling component of agentic AI. While they enhance agents' capabilities, they also introduce new attack surfaces. In this work, we investigate one such attack su…