@misc{owasp_asi_2025,
  author       = {{OWASP Foundation}},
  title        = {{OWASP Top 10 for Agentic Applications (ASI)}},
  year         = {2025},
  month        = dec,
  url          = {https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/},
  note         = {Accessed: 2026-05-19}
}

@inproceedings{zhang_asb_2025,
  author       = {Zhang, Hanrui and Guo, Jingyuan and Li, Jiaqi and Qin, Yujia and
                  Xiao, Bo and Wang, Liang},
  title        = {Agent Security Bench ({ASB}): Formalizing and Benchmarking Attacks
                  and Defenses in {LLM}-based Agents},
  booktitle    = {Proceedings of the International Conference on Learning
                  Representations (ICLR)},
  year         = {2025},
  eprint       = {2410.02644},
  archiveprefix = {arXiv},
  primaryclass = {cs.CR},
  doi          = {10.48550/arXiv.2410.02644}
}

@inproceedings{li_maspi_2026,
  author       = {Li, Jiaqi and Zhang, Zhiliang and others},
  title        = {{MASpi}: Multi-Agent System Prompt Injection and Attack Propagation},
  booktitle    = {Proceedings of the International Conference on Learning
                  Representations (ICLR)},
  year         = {2026}
}

@misc{derczynski_garak_2024,
  author       = {Derczynski, Leon and Galinkin, Erick and Bursztein, Elie and
                  Biber, Jeffrey and others},
  title        = {garak: A Framework for Security Probing Large Language Models},
  year         = {2024},
  eprint       = {2406.11036},
  archiveprefix = {arXiv},
  primaryclass = {cs.CL},
  doi          = {10.48550/arXiv.2406.11036}
}

@techreport{mehrotra_pyrit_2024,
  author       = {Mehrotra, Anay and Zampetakis, Manolis and Banburski-Fahey, Andrzej
                  and Garg, Siddharth},
  title        = {{PyRIT}: The {Python} Risk Identification Toolkit for Generative {AI}},
  institution  = {Microsoft Research},
  year         = {2024},
  url          = {https://github.com/Azure/PyRIT}
}

@misc{confident_ai_deepteam_2025,
  author       = {{Confident AI}},
  title        = {{DeepTeam}: A Red-Teaming Framework for {LLM} Applications},
  year         = {2025},
  url          = {https://docs.confident-ai.com/deepteam}
}

@misc{promptfoo_2025,
  author       = {{Promptfoo}},
  title        = {Promptfoo: Open-Source {LLM} Testing and Red-Teaming},
  year         = {2025},
  url          = {https://promptfoo.dev}
}

@misc{eu_ai_act_2024,
  author       = {{European Parliament and Council}},
  title        = {Regulation ({EU}) 2024/1689 on Artificial Intelligence ({EU AI Act})},
  year         = {2024},
  url          = {https://eur-lex.europa.eu/eli/reg/2024/1689/oj}
}

@misc{agentic_security_survey_2025,
  title        = {A Survey on Security of Agentic {AI} Systems},
  year         = {2025},
  eprint       = {2510.06445},
  archiveprefix = {arXiv},
  primaryclass = {cs.CR},
  doi          = {10.48550/arXiv.2510.06445}
}
