activity
20112026
most citedOn the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Models

280 citations · 1.4k across the 75 of their papers we have counts for

collaborators

83 papers

cs.AI2026

VEPA: Verified Evolving Formal Policy for Lifelong LLM Agent Guardrails

Duy Nguyen, Lesly Miculicich, Bhavana Dalvi Mishra +5

LLM agents increasingly operate over sensitive resources, such as private documents and mutable system states, which can create serious safety and security risks. Runtime guardrail…

cs.AI2026

SpecGuard: Proving a Task Is Broken Before the Agent Cheats

Param Biyani, Krishnamurthy Dvijotham

As autonomous coding agents get increasingly deployed, the risk that accidental or adversarially injected misspecifications in tasks lead to dangerous agent behavior is critical to…

cs.CR2026

Efficient and Sound Probabilistic Verification for AI Agents

Alaia Solko-Breslin, Pramod Kaushik Mudrakarta, Mihai Christodorescu +2

Securing AI agents that operate in complex digital environments has become a critical need, and runtime monitoring approaches that formulate and enforce policies expressed in a for…

cs.CR2026

CausalArmor: Efficient Indirect Prompt Injection Guardrails via Causal Attribution

Minbeom Kim, Mihir Parmar, Phillip Wallis +5

AI agents equipped with tool-calling capabilities are susceptible to Indirect Prompt Injection (IPI) attacks. In this attack scenario, malicious commands hidden within untrusted co…

cs.SE2025

VeriGuard: Enhancing LLM Agent Safety via Verified Code Generation

Lesly Miculicich, Mihir Parmar, Hamid Palangi +4

The deployment of autonomous AI agents in sensitive domains, such as healthcare, introduces critical risks to safety, security, and privacy. These agents may deviate from user obje…

cs.CR2025

Indirect Prompt Injections: Are Firewalls All You Need, or Stronger Benchmarks?

Rishika Bhagwatkar, Kevin Kasa, Abhay Puri +5

AI agents are vulnerable to indirect prompt injection attacks, where malicious instructions embedded in external content or tool outputs cause unintended or harmful behavior. Inspi…