{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T16:40:57Z","timestamp":1783010457091,"version":"3.54.6"},"reference-count":74,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["2229876"],"award-info":[{"award-number":["2229876"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,18]]},"DOI":"10.1109\/sp63933.2026.00042","type":"proceedings-article","created":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T19:34:20Z","timestamp":1782934460000},"page":"4497-4516","source":"Crossref","is-referenced-by-count":1,"title":["Investigating the Impact of Dark Patterns on LLM-Based Web Agents"],"prefix":"10.1109","author":[{"given":"Devin","family":"Ersoy","sequence":"first","affiliation":[{"name":"Purdue University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Brandon","family":"Lee","sequence":"additional","affiliation":[{"name":"Purdue University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ananth","family":"Shreekumar","sequence":"additional","affiliation":[{"name":"Purdue University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Arjun","family":"Arunasalam","sequence":"additional","affiliation":[{"name":"Florida International University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Muhammad","family":"Ibrahim","sequence":"additional","affiliation":[{"name":"Georgia Institute of Technology"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Antonio","family":"Bianchi","sequence":"additional","affiliation":[{"name":"Purdue University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Z.","family":"Berkay Celik","sequence":"additional","affiliation":[{"name":"Purdue University"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3695988"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3641289"},{"key":"ref3","author":"Hurst","year":"2024","journal-title":"Gpt-4o system card"},{"key":"ref4","author":"Team","year":"2023","journal-title":"Gemini: A family of highly capable multimodal models"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1007\/s11704-024-40231-1"},{"key":"ref6","volume-title":"Multion ai","year":"2024"},{"key":"ref7","volume-title":"Ai browser automation - skyvern","year":"2025"},{"key":"ref8","article-title":"Webarena: A realistic web environment for building autonomous agents","volume-title":"International Conference on Learning Representations","author":"Zhou","year":"2023"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.acl-long.50"},{"key":"ref10","volume-title":"Ftc audit of websites and apps finds three-fourths use dark patterns to trick consumers","year":"2024"},{"key":"ref11","volume-title":"Starbucks app traps users in \u2019vicious cycle\u2019 of shaken espresso, says consumer advocate","year":"2024"},{"key":"ref12","volume-title":"Fortnite was busted for using dark patterns, here\u2019s what that means","year":"2024"},{"key":"ref13","volume-title":"How \u2019dark patterns\u2019 influence travel bookings","year":"2019"},{"key":"ref14","volume-title":"How shein and temu are using \u2019dark patterns\u2019 to drive holiday sales","year":"2024"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.52202\/079017-2636"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.findings-acl.624"},{"key":"ref17","year":"2024","journal-title":"Dark patterns"},{"key":"ref18","volume-title":"Do Browser - AI-Powered Web Automation","year":"2025"},{"key":"ref19","volume-title":"Browser-use","year":"2025"},{"key":"ref20","author":"Abuelsaad","year":"2024","journal-title":"Agent-e: From autonomous web navigation to foundational design principles in agentic systems"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.52202\/075280-1220"},{"key":"ref22","volume-title":"Perplexity","year":"2025"},{"key":"ref23","volume-title":"Introducing chatgpt","year":"2022"},{"key":"ref24","author":"Abuelsaad","year":"2024","journal-title":"Agent-e: From autonomous web navigation to foundational design principles in agentic systems"},{"key":"ref25","author":"Yang","year":"2023","journal-title":"Set-of-mark prompting unleashes extraordinary visual grounding in gpt-4v"},{"key":"ref26","volume-title":"Firecrawl","year":"2024"},{"key":"ref27","volume-title":"Accessibility features reference | Chrome DevTools","year":"2025"},{"key":"ref28","volume-title":"Fast and reliable end-to-end testing for modern web apps | Playwright","year":"2025"},{"key":"ref29","volume-title":"Selenium","year":"2025"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3173574.3174108"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3613904.3642436"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3359183"},{"key":"ref33","author":"Board","year":"2022","journal-title":"Guidelines 3\/2022 on dark patterns in social media platform interfaces: How to recognise and avoid them"},{"key":"ref34","article-title":"Behavioural study on unfair commercial practices in the digital environment: dark patterns and manipulative personalisation","author":"Lupi\u00e1\u00f1ez-Villanueva","year":"2022","journal-title":"Publications Office of the European Union"},{"key":"ref35","article-title":"Dark commercial patterns","year":"2022","journal-title":"OECD Digital Economy Papers"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1515\/popets-2016-0038"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1093\/jla\/laaa006"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23386"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1093\/fampra\/10.1.76"},{"key":"ref40","volume-title":"Join the multion discord server!","year":"2025"},{"key":"ref41","volume-title":"Skyvern-AI","year":"2025"},{"key":"ref42","volume-title":"AI Agents","year":"2024"},{"key":"ref43","volume-title":"What are some things ai agents are soon going to be able to do?","year":"2025"},{"key":"ref44","volume-title":"Thomas\u2019 dark pattern cheatsheet","author":"Mildner","year":"2024"},{"key":"ref45","volume-title":"Chrome devtools protocol","year":"2025"},{"key":"ref46","author":"Bai","year":"2022","journal-title":"Constitutional ai: Harmlessness from ai feedback"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/3185511"},{"key":"ref48","article-title":"The users\u2019 perspective on the privacyutility trade-offs in health recommender systems","author":"Valdez","year":"2019","journal-title":"International Journal of Human-Computer Studies"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/3411495.3421352"},{"key":"ref50","volume-title":"Model Context Protocol (MCP) - Anthropic","year":"2025"},{"key":"ref51","volume-title":"Announcing the Agent2Agent Protocol (A2A)- Google Developers Blog","year":"2025"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00166"},{"key":"ref53","author":"Mildner","year":"2024","journal-title":"Hell is paved with good intentions: The intricate relationship between cognitive biases and dark patterns"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/3511265.3550448"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1108\/JICES-10-2023-0127"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/3419249.3420132"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.33621\/jdsr.v3i1.54"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/3532106.3533562"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/3491101.3519829"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1145\/3544549.3585676"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1145\/3613905.3636310"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2025.naacl-long.188"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.52202\/068431-1508"},{"key":"ref64","author":"Li","year":"2024","journal-title":"Websuite: Systematically evaluating why web agents fail"},{"key":"ref65","author":"Zhang","year":"2024","journal-title":"Agent security bench (asb): Formalizing and benchmarking attacks and defenses in 11m-based agents"},{"key":"ref66","author":"Wu","year":"2024","journal-title":"Wipi: A new web threat for llm-driven web agents"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/3605764.3623985"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2025.acl-long.411"},{"key":"ref69","author":"Liu","year":"2024","journal-title":"Evaluating large language model based personal information extraction and countermeasures"},{"key":"ref70","author":"Kim","year":"2024","journal-title":"When llms go online: The emerging threat of web-enabled 11 ms"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1145\/3772318.3791568"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1145\/3742413.3789111"},{"key":"ref73","volume-title":"Content security policy (csp) - http - mdn","year":"2025"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.3390\/app142311410"}],"event":{"name":"2026 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2026,5,18]]},"end":{"date-parts":[[2026,5,21]]}},"container-title":["2026 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11573355\/11573356\/11573392.pdf?arnumber=11573392","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T05:27:08Z","timestamp":1782970028000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11573392\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,18]]},"references-count":74,"URL":"https:\/\/doi.org\/10.1109\/sp63933.2026.00042","relation":{},"subject":[],"published":{"date-parts":[[2026,5,18]]}}}