{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T10:14:03Z","timestamp":1783764843465,"version":"3.55.0"},"publisher-location":"Singapore","reference-count":25,"publisher":"Springer Nature Singapore","isbn-type":[{"value":"9789819228584","type":"print"},{"value":"9789819228591","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,7,12]],"date-time":"2026-07-12T00:00:00Z","timestamp":1783814400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,7,12]],"date-time":"2026-07-12T00:00:00Z","timestamp":1783814400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2027]]},"DOI":"10.1007\/978-981-92-2859-1_2","type":"book-chapter","created":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T10:04:58Z","timestamp":1783764298000},"page":"19-31","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Reaching the\u00a0Right Shore: Securing Smartphone LLM Agents via\u00a0Execution Verification"],"prefix":"10.1007","author":[{"given":"Bojun","family":"Zhang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lin","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Meikang","family":"Qiu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,7,12]]},"reference":[{"issue":"6","key":"2_CR1","doi-asserted-by":"publisher","first-page":"3820","DOI":"10.1109\/COMST.2025.3527641","volume":"27","author":"G Qu","year":"2025","unstructured":"Qu, G., Chen, Q., Wei, W., Lin, Z., Chen, X., Huang, K.: Mobile edge intelligence for large language models: a contemporary survey. IEEE Commun. Surv. Tutorials 27(6), 3820\u20133860 (2025)","journal-title":"IEEE Commun. Surv. Tutorials"},{"key":"2_CR2","unstructured":"Thawakar, O., et al.: Mobillama: towards accurate and lightweight fully transparent GPT. arXiv preprint arXiv:2402.16840 (2024)"},{"key":"2_CR3","unstructured":"Liu, Z., et al.: MOBILELLM: optimizing sub-billion parameter language models for on-device use cases. In: Forty-first International Conference on Machine Learning (2024)"},{"issue":"4","key":"2_CR4","doi-asserted-by":"publisher","first-page":"3256","DOI":"10.1109\/TMC.2024.3513457","volume":"24","author":"D Xu","year":"2024","unstructured":"Xu, D., et al.: EDGELLM: fast on-device LLM inference with speculative decoding. IEEE Trans. Mob. Comput. 24(4), 3256\u20133273 (2024)","journal-title":"IEEE Trans. Mob. Comput."},{"key":"2_CR5","unstructured":"Yin, W., Xu, M., Li, Y., Liu, X.: LLM as a system service on mobile devices. arXiv preprint arXiv:2403.11805 (2024)"},{"issue":"5","key":"2_CR6","doi-asserted-by":"publisher","first-page":"1339","DOI":"10.1109\/TC.2015.2470247","volume":"65","author":"Y Li","year":"2015","unstructured":"Li, Y., Dai, W., Ming, Z., Qiu, M.: Privacy protection for preventing data over-collection in smart city. IEEE Trans. Comput. 65(5), 1339\u20131350 (2015)","journal-title":"IEEE Trans. Comput."},{"issue":"1","key":"2_CR7","doi-asserted-by":"publisher","first-page":"20","DOI":"10.1109\/MCOM.2017.1600349CM","volume":"55","author":"W Dai","year":"2017","unstructured":"Dai, W., Qiu, M., Qiu, L., Chen, L., Wu, A.: Who moved my data? Privacy protection in smartphones. IEEE Commun. Mag. 55(1), 20\u201325 (2017)","journal-title":"IEEE Commun. Mag."},{"key":"2_CR8","unstructured":"Du, C., Huang, Q., Tang, T., Wang, Z., Nadkarni, A., Xiao, Y.: Measuring the security of mobile LLM agents under adversarial prompts from untrusted third-party channels. arXiv preprint arXiv:2510.27140 (2025)"},{"key":"2_CR9","unstructured":"Wu, L., Wang, C., Liu, T., Zhao, Y., Wang, H.: From assistants to adversaries: Exploring the security risks of mobile LLM agents. arXiv preprint arXiv:2505.12981 (2025)"},{"issue":"7","key":"2_CR10","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3716628","volume":"57","author":"Z Deng","year":"2025","unstructured":"Deng, Z., et al.: Ai agents under threat: a survey of key security challenges and future pathways. ACM Comput. Surv. 57(7), 1\u201336 (2025)","journal-title":"ACM Comput. Surv."},{"issue":"6","key":"2_CR11","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3773080","volume":"58","author":"F He","year":"2025","unstructured":"He, F., Zhu, T., Ye, D., Liu, B., Zhou, W., Yu, P.S.: The emerged security and privacy of LLM agent: a survey with case studies. ACM Comput. Surv. 58(6), 1\u201336 (2025)","journal-title":"ACM Comput. Surv."},{"key":"2_CR12","unstructured":"Li, Y., et al.: Personal LLM agents: insights and survey about the capability, efficiency and security. arXiv preprint arXiv:2401.05459 (2024)"},{"key":"2_CR13","unstructured":"Yang, P., Ci, H., Shou, M.Z.: In-context defense in computer agents: an empirical study. arXiv preprint arXiv:2503.09241 (2025)"},{"key":"2_CR14","unstructured":"Debenedetti, E., et al.: Defeating prompt injections by design. arXiv preprint arXiv:2503.18813 (2025)"},{"key":"2_CR15","unstructured":"Xiang, Z., et al.: Guardagent: safeguard LLM agents via knowledge-enabled reasoning. In: ICML 2025 Workshop on Computer use Agents (2025)"},{"key":"2_CR16","unstructured":"Tian, Y., Yang, X., Zhang, J., Dong, Y., Su, H.: Evil geniuses: delving into the safety of LLM-based agents. arXiv preprint arXiv:2311.11855 (2023)"},{"key":"2_CR17","doi-asserted-by":"crossref","unstructured":"Wang, Z., Nagaraja, N., Zhang, L., Bahsi, H., Patil, P., Liu, P.: To protect the LLM agent against the prompt injection attack with polymorphic prompt. In: 2025 55th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks-Supplemental Volume (DSN-S). IEEE, pp. 22\u201328 (2025)","DOI":"10.1109\/DSN-S65789.2025.00037"},{"key":"2_CR18","unstructured":"Lee, D., Tiwari, M.: Prompt infection: LLM-to-LLM prompt injection within multi-agent systems. arXiv preprint arXiv:2410.07283 (2024)"},{"key":"2_CR19","first-page":"7101","volume":"2025","author":"Q Zhan","year":"2025","unstructured":"Zhan, Q., Fang, R., Panchal, H.S., Kang, D.: Adaptive attacks break defenses against indirect prompt injection attacks on LLM agents. Find. Assoc. Comput. Linguist. NAACL 2025, 7101\u20137117 (2025)","journal-title":"Find. Assoc. Comput. Linguist. NAACL"},{"key":"2_CR20","doi-asserted-by":"crossref","unstructured":"Greshake, K., Abdelnabi, S., Mishra, S., Endres, C., Holz, T., Fritz, M.: Not what you\u2019ve signed up for: compromising real-world LLM-integrated applications with indirect prompt injection. In: Proceedings of the 16th ACM Workshop on Artificial Intelligence and Security, pp. 79\u201390 (2023)","DOI":"10.1145\/3605764.3623985"},{"key":"2_CR21","doi-asserted-by":"crossref","unstructured":"Shi, J., Yuan, Z., Tie, G., Zhou, P., Gong, N.Z., Sun, L.: Prompt injection attack to tool selection in LLM agents. arXiv preprint arXiv:2504.19793 (2025)","DOI":"10.14722\/ndss.2026.230675"},{"key":"2_CR22","unstructured":"Liang, J., et al.: Graphrag under fire. arXiv preprint arXiv:2501.14050 (2025)"},{"key":"2_CR23","doi-asserted-by":"crossref","unstructured":"Ferrag, M.A., Tihanyi, N., Hamouda, D., Maglaras, L., Lakas, A., Debbah, M.: From prompt injections to protocol exploits: threats in LLM-powered ai agents workflows. ICT Express (2025)","DOI":"10.1016\/j.icte.2025.12.001"},{"key":"2_CR24","unstructured":"Lu, Y., et al.: Proactive agent: shifting LLM agents from reactive responses to active assistance. arXiv preprint arXiv:2410.12361 (2024)"},{"key":"2_CR25","unstructured":"MITRE: MITRE ATT&CK: A knowledge base of adversary tactics and techniques. https:\/\/attack.mitre.org\/. Accessed 01 Mar 2026"}],"container-title":["Lecture Notes in Computer Science","Knowledge Science, Engineering and Management"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-92-2859-1_2","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T10:04:59Z","timestamp":1783764299000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-981-92-2859-1_2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7,12]]},"ISBN":["9789819228584","9789819228591"],"references-count":25,"URL":"https:\/\/doi.org\/10.1007\/978-981-92-2859-1_2","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,7,12]]},"assertion":[{"value":"12 July 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"KSEM","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Knowledge Science, Engineering and Management","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Beijing","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"China","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2026","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"17 July 2026","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"19 July 2026","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"19","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"ksem2026","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/ksem2026.rosc.org.cn\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}