{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T06:59:04Z","timestamp":1782975544580,"version":"3.54.5"},"reference-count":85,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000001","name":"NSF","doi-asserted-by":"publisher","award":["CNS2154930,CNS-2238635"],"award-info":[{"award-number":["CNS2154930,CNS-2238635"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"NSF","doi-asserted-by":"publisher","award":["CNS2154930,CNS-2238635"],"award-info":[{"award-number":["CNS2154930,CNS-2238635"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,18]]},"DOI":"10.1109\/sp63933.2026.00018","type":"proceedings-article","created":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T19:34:20Z","timestamp":1782934460000},"page":"2609-2627","source":"Crossref","is-referenced-by-count":0,"title":["Towards Automating Data Access Permissions in AI Agents"],"prefix":"10.1109","author":[{"given":"Yuhao","family":"Wu","sequence":"first","affiliation":[{"name":"Washington University in St. Louis"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ke","family":"Yang","sequence":"additional","affiliation":[{"name":"University of California,Irvine"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Franziska","family":"Roesner","sequence":"additional","affiliation":[{"name":"University of Washington"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tadayoshi","family":"Kohno","sequence":"additional","affiliation":[{"name":"Georgetown University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ning","family":"Zhang","sequence":"additional","affiliation":[{"name":"Washington University in St. Louis"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Umar","family":"Iqbal","sequence":"additional","affiliation":[{"name":"Washington University in St. Louis"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","year":"2025","journal-title":"Gpt action authentication"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3411764.3445122"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/2702123.2702210"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.65109\/PDWL4620"},{"key":"ref5","year":"2023","journal-title":"Permissions overview"},{"key":"ref6","year":"2023","journal-title":"Runtime permissions"},{"key":"ref7","year":"2024","journal-title":"Developing a computer use model"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3690350"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2019-0066"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2006.32"},{"key":"ref11","first-page":"769","article-title":"shhh\u2026 be {quiet!} reducing the unwanted interruptions of notification permission prompts on chrome","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Bilogrevic"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3508398.3511526"},{"key":"ref13","first-page":"1877","article-title":"Language models are fewshot learners","volume":"33","author":"Brown","year":"2020","journal-title":"Advances in neural information processing systems"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.4324\/9780203867266-22"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/MPRV.2018.03367733"},{"key":"ref16","article-title":"Defeating prompt injections by design","author":"Debenedetti","year":"2025","journal-title":"arXiv preprint"},{"key":"ref17","article-title":"Agentdojo: A dynamic environment to evaluate attacks and defenses for 11 m agents","author":"Debenedetti","year":"2024","journal-title":"arXiv preprint"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-28643-8_3"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.emnlp-main.64"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978313"},{"key":"ref21","first-page":"627","article-title":"Android permissions demystified","volume-title":"Proceedings of the 18th ACM conference on Computer and communications security","author":"Porter Felt"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/2335356.2335360"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/s10458-022-09579-1"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1177\/0038038587021001008"},{"key":"ref25","year":"2024","journal-title":"Introducing gemini 2.0: our new ai model for the agentic era"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2024.24108"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1016\/j.chb.2021.106833"},{"key":"ref28","volume-title":"Langchain","author":"Chase","year":"2025"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3397271.3401063"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3038912.3052569"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3703155"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3618257.3624803"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1609\/aies.v7i1.31664"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1609\/aies.v7i1.31664"},{"key":"ref35","article-title":"LlamaIndex Team","volume-title":"Llamaindex","author":"Liu","year":"2025"},{"key":"ref36","first-page":"2","article-title":"Contexlot: Towards providing contextual integrity to appified iot platforms","volume-title":"ndss","volume":"2","author":"Jack Jia","year":"2017"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-34638-5_6"},{"key":"ref38","author":"Lassak","year":"2023","journal-title":"Introducing data trustees: A vignette-based study approach to get users in the loop"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2025.241982"},{"issue":"CSCW","key":"ref40","first-page":"1","article-title":"Alexa, are you listening? privacy perceptions, concerns and privacy-seeking behaviors with smart speakers","volume-title":"Proceedings of the ACM on humancomputer interaction","volume":"2","author":"Lau"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.acl-long.99"},{"key":"ref42","first-page":"48","article-title":"A scenariobased exploration of expected usefulness, privacy concerns, and adoption likelihood of learning analytics","volume-title":"Proceedings of the ninth ACM conference on learning@ scale","author":"Vivian Li"},{"key":"ref43","first-page":"199","article-title":"Modeling \\{Users\u2019\\} mobile app privacy preferences: Restoring usability in a sea of permission settings","volume-title":"10th Symposium On Usable Privacy and Security (SOUPS 2014)","author":"Lin"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2023.emnlp-main.51"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2023.emnlp-main.51"},{"key":"ref46","first-page":"27","article-title":"Follow my recommendations: A personalized privacy assistant for mobile app permissions","volume-title":"Twelfth symposium on usable privacy and security (SOUPS 2016)","author":"Liu"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.56553\/popets-2022-0116"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/3368860.3368867"},{"key":"ref49","first-page":"633","article-title":"Runtime permissions for privacy in proactive intelligent assistants","volume-title":"Eighteenth Symposium on Usable Privacy and Security (SOUPS 2022)","author":"Malkin"},{"key":"ref50","volume-title":"Manus - an autonomous artificial intelligence agent","author":"Ai"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-17140-6_8"},{"key":"ref52","volume-title":"AI Controller Interface","author":"Moskal","year":"2024"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/1837110.1837112"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.emnlp-main.511"},{"key":"ref55","first-page":"399","article-title":"Privacy expectations and preferences in an {IoT} world","volume-title":"Thirteenth symposium on usable privacy and security (SOUPS 2017)","author":"Emami Naeini"},{"key":"ref56","first-page":"119","article-title":"Privacy as contextual integrity","volume":"79","author":"Nissenbaum","year":"2004","journal-title":"Wash. L. Rev."},{"key":"ref57","article-title":"Can generalist foundation models outcompete special-purpose tuning? case study in medicine","author":"Nori","year":"2023","journal-title":"arXiv preprint"},{"key":"ref58","volume-title":"Consequential flag","year":"2024"},{"key":"ref59","volume-title":"Introducing gpts","year":"2024"},{"key":"ref60","volume-title":"Chatgpt","year":"2025"},{"key":"ref61","year":"2025","journal-title":"Introducing operator"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1162\/99608f92.b033a087"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1145\/3355369.3355584"},{"key":"ref64","volume-title":"Prolific - recruitment platform for online research"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23353"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1017\/9781009170123"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978344"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.24"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.14722\/usec.2025.23010"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1145\/2721896.2721908"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/MSEC.2021.3106056"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1145\/3491101.3519778"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1145\/2078827.2078831"},{"key":"ref74","first-page":"3789","article-title":"{OVRseen}: Auditing network traffic and privacy policies in oculus {VR}","volume-title":"31st USENIX security symposium (USENIX security 22)","author":"Trimananda"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.52202\/079017-3142"},{"key":"ref76","volume-title":"Agents","author":"Wiesinger","year":"2025"},{"key":"ref77","first-page":"499","article-title":"Android permissions remystified: A field study on contextual integrity","volume-title":"24th USENIX Security Symposium (USENIX Security 15)","author":"Wijesekera"},{"key":"ref78","article-title":"An in-depth investigation of data collection in 11 m app ecosystems","volume-title":"ACM Internet Measurement Conference (IMC)","author":"Wu"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2025.241131"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1145\/2557500.2557504"},{"key":"ref81","article-title":"React: Synergizing reasoning and acting in language models","volume-title":"International Conference on Learning Representations (ICLR)","author":"Yao"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1016\/j.hcc.2024.100211"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.3233\/faia230614"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1145\/3514094.3534129"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1145\/3708530"}],"event":{"name":"2026 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2026,5,18]]},"end":{"date-parts":[[2026,5,21]]}},"container-title":["2026 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11573355\/11573356\/11573452.pdf?arnumber=11573452","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T05:27:17Z","timestamp":1782970037000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11573452\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,18]]},"references-count":85,"URL":"https:\/\/doi.org\/10.1109\/sp63933.2026.00018","relation":{},"subject":[],"published":{"date-parts":[[2026,5,18]]}}}