@article{yang2026safeagentsfail,
  title   = {SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems},
  author  = {Yang, Rui and Xu, Junjie and Liu, Zhengyu and Fendley, Neil and Hong, Yang and Li, Ziyang and Cao, Yinzhi},
  journal = {arXiv preprint arXiv:2609.00595},
  year    = {2026},
  url     = {https://arxiv.org/abs/2609.00595}
}

@article{yang2026samerequest,
  title   = {Same Request, Different Boundary: Evaluating Cybersecurity Assistance across Conversational Contexts},
  author  = {Yang, Rui and Hong, Yang and Xu, Yichao and Liu, Zhengyu and Li, Ziyang and Cao, Yinzhi},
  journal = {arXiv preprint arXiv:2609.00578},
  year    = {2026},
  url     = {https://arxiv.org/abs/2609.00578}
}

@inproceedings{yang2026poisoned,
  title     = {Poisoned by the Host: Large-Scale Measurement of Host Name Poisoning in Web Applications},
  author    = {Yang, Rui and Wang, Haoyu and Sun, Zhicheng and Liu, Zhengyu and Cao, Yinzhi},
  booktitle = {2026 IEEE Symposium on Security and Privacy (SP)},
  pages     = {4730--4748},
  year      = {2026},
  doi       = {10.1109/SP63933.2026.00166},
  url       = {https://doi.org/10.1109/SP63933.2026.00166}
}