{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,7]],"date-time":"2026-08-07T16:40:43Z","timestamp":1786120843176,"version":"build-2736575974"},"publisher-location":"New York, NY, USA","reference-count":67,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,8,8]],"date-time":"2026-08-08T00:00:00Z","timestamp":1786147200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"National Key RD Program of China","award":["2022ZD0114804"],"award-info":[{"award-number":["2022ZD0114804"]}]},{"name":"Shanghai Munic- ipal Science and Technology Major Project","award":["2021SHZDZX0102"],"award-info":[{"award-number":["2021SHZDZX0102"]}]},{"name":"National Natural Science Foundation of China","award":["624B2096, 62322603, 62502310, 72595872, 72542012"],"award-info":[{"award-number":["624B2096, 62322603, 62502310, 72595872, 72542012"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,8,9]]},"DOI":"10.1145\/3770855.3817471","type":"proceedings-article","created":{"date-parts":[[2026,8,6]],"date-time":"2026-08-06T17:15:47Z","timestamp":1786036547000},"page":"10360-10371","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Passing the Turing Test on Screen: A Benchmark for Mobile GUI Agent Humanization"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9140-1429","authenticated-orcid":false,"given":"Jiachen","family":"Zhu","sequence":"first","affiliation":[{"name":"Shanghai Jiao Tong University, Shanghai, PA, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-5395-9997","authenticated-orcid":false,"given":"Lingyu","family":"Yang","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-8905-1817","authenticated-orcid":false,"given":"Rong","family":"Shan","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-5821-154X","authenticated-orcid":false,"given":"Congmin","family":"Zheng","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-4681-9989","authenticated-orcid":false,"given":"Zeyu","family":"Zheng","sequence":"additional","affiliation":[{"name":"Carnegie Mellon University, Pittsburgh, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9148-3997","authenticated-orcid":false,"given":"Weiwen","family":"Liu","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4457-2820","authenticated-orcid":false,"given":"Yong","family":"Yu","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0127-2425","authenticated-orcid":false,"given":"Weinan","family":"Zhang","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8953-3203","authenticated-orcid":false,"given":"Jianghao","family":"Lin","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,8,8]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/TBIOM.2022.3206321"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"crossref","unstructured":"Amine Allouah Omar Besbes Josu\u00e9 D Figueroa Yash Kanoria and Akshit Kumar. 2025. What Is Your AI Agent Buying? Evaluation Biases Model Dependence & Emerging Implications for Agentic E-Commerce. arXiv:2508.02630 [cs.AI] https:\/\/arxiv.org\/abs\/2508.02630","DOI":"10.2139\/ssrn.5381574"},{"key":"e_1_3_2_1_3_1","volume-title":"Comprehensive Survey: Biometric User Authentication Application, Evaluation, and Discussion. arXiv:2311.13416 [cs.CR] https:\/\/arxiv.org\/abs\/2311.13416","author":"Alrawili Reem","year":"2024","unstructured":"Reem Alrawili, Ali Abdullah S. AlQahtani, and Muhammad Khurram Khan. 2024. Comprehensive Survey: Biometric User Authentication Application, Evaluation, and Discussion. arXiv:2311.13416 [cs.CR] https:\/\/arxiv.org\/abs\/2311.13416"},{"key":"e_1_3_2_1_4_1","unstructured":"Chaoran Chen Zhiping Zhang Bingcan Guo Shang Ma Ibrahim Khalilov Simret A Gebreegziabher Yanfang Ye Ziang Xiao Yaxing Yao Tianshi Li and Toby Jia-Jun Li. 2025b. The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections. arXiv:2504.11281 [cs.HC] https:\/\/arxiv.org\/abs\/2504.11281"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939785"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"crossref","unstructured":"Yurun Chen Xavier Hu Keting Yin Juncheng Li and Shengyu Zhang. 2025a. Evaluating the Robustness of Multimodal Agents Against Active Environmental Injection Attacks. arXiv:2502.13053 [cs.CL] https:\/\/arxiv.org\/abs\/2502.13053","DOI":"10.1145\/3746027.3755646"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2025.findings-acl.348"},{"key":"e_1_3_2_1_8_1","volume-title":"V20, 3","author":"Cortes Corinna","year":"1995","unstructured":"Corinna Cortes and Vladimir Vapnik. 1995. Support-vector networks. Machine learning, V20, 3 (1995), 273-297."},{"key":"e_1_3_2_1_9_1","volume-title":"Young Kyun Jang, and Ser-Nam Lim","author":"Cui Xuanming","year":"2023","unstructured":"Xuanming Cui, Alejandro Aparcedo, Young Kyun Jang, and Ser-Nam Lim. 2023. On the Robustness of Large Multimodal Models Against Image Adversarial Attacks. arXiv:2312.03777 [cs.CV] https:\/\/arxiv.org\/abs\/2312.03777"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1016\/0021-9045(72)90080-9"},{"key":"e_1_3_2_1_11_1","volume-title":"2024 IEEE International Workshop on Information Forensics and Security (WIFS). IEEE, 1-6.","author":"Rosa Vincenzo De","year":"2024","unstructured":"Vincenzo De Rosa, Fabrizio Guillaro, Giovanni Poggi, Davide Cozzolino, and Luisa Verdoliva. 2024. Exploring the adversarial robustness of clip for ai-generated image detection. In 2024 IEEE International Workshop on Information Forensics and Security (WIFS). IEEE, 1-6."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.52202\/075280-1220"},{"key":"e_1_3_2_1_13_1","volume-title":"How robust is google's bard to adversarial image attacks? arXiv preprint arXiv:2309.11751","author":"Dong Yinpeng","year":"2023","unstructured":"Yinpeng Dong, Huanran Chen, Jiawei Chen, Zhengwei Fang, Xiao Yang, Yichi Zhang, Yu Tian, Hang Su, and Jun Zhu. 2023. How robust is google's bard to adversarial image attacks? arXiv preprint arXiv:2309.11751 (2023)."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"crossref","unstructured":"Hao Fang Jiawei Kong Bin Chen Tao Dai Hao Wu and Shu-Tao Xia. 2024. CLIP-Guided Generative Networks for Transferable Targeted Adversarial Attacks. arXiv:2407.10179 [cs.CV] https:\/\/arxiv.org\/abs\/2407.10179","DOI":"10.1007\/978-3-031-73390-1_1"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/THS.2012.6459891"},{"key":"e_1_3_2_1_16_1","volume-title":"Touchalytics: On the applicability of touchscreen input as a behavioral biometric for continuous authentication","author":"Frank Mario","year":"2012","unstructured":"Mario Frank, Ralf Biedert, Eugene Ma, Ivan Martinovic, and Dawn Song. 2012. Touchalytics: On the applicability of touchscreen input as a behavioral biometric for continuous authentication. IEEE transactions on information forensics and security, V8, 1 (2012), 136-148."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2012.2225048"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/2897845.2897908"},{"key":"e_1_3_2_1_19_1","volume-title":"Advances in Neural Information Processing Systems","volume":"27","author":"Goodfellow Ian","year":"2014","unstructured":"Ian Goodfellow, Jean Pouget-Abadie, Mehdi Mirza, Bing Xu, David Warde-Farley, Sherjil Ozair, Aaron Courville, and Yoshua Bengio. 2014. Generative Adversarial Nets. In Advances in Neural Information Processing Systems, Vol. V27. 2672-2680. https:\/\/proceedings.neurips.cc\/paper\/2014\/file\/5ca3e9b122f61f8f06494c97b1afccf3-Paper.pdf"},{"key":"e_1_3_2_1_20_1","unstructured":"Jihao Gu Qihang Ai Yingyao Wang Pi Bu Jingxuan Xing Zekun Zhu Wei Jiang Ziming Wang Yingxiu Zhao Ming-Liang Zhang et al. 2025. Mobile-R1: Towards Interactive Reinforcement Learning for VLM-Based Mobile Agent via Task-Level Rewards. arXiv preprint arXiv:2506.20332 (2025)."},{"key":"e_1_3_2_1_21_1","volume-title":"Agent smith: A single image can jailbreak one million multimodal llm agents exponentially fast. arXiv preprint arXiv:2402.08567","author":"Gu Xiangming","year":"2024","unstructured":"Xiangming Gu, Xiaosen Zheng, Tianyu Pang, Chao Du, Qian Liu, Ye Wang, Jing Jiang, and Min Lin. 2024. Agent smith: A single image can jailbreak one million multimodal llm agents exponentially fast. arXiv preprint arXiv:2402.08567 (2024)."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.01354"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3640311"},{"key":"e_1_3_2_1_24_1","volume-title":"Kroeze and Katherine Mary Malan","author":"Christina","year":"2016","unstructured":"Christina J. Kroeze and Katherine Mary Malan. 2016. User Authentication based on Continuous Touch Biometrics. South Afr. Comput. J., V28 (2016). https:\/\/api.semanticscholar.org\/CorpusID:64342980"},{"key":"e_1_3_2_1_25_1","volume-title":"V14, 2","author":"Laperdrix Pierre","year":"2020","unstructured":"Pierre Laperdrix, Nataliia Bielova, Benoit Baudry, and Gildas Avoine. 2020. Browser fingerprinting: A survey. ACM Transactions on the Web (TWEB), V14, 2 (2020), 1-33."},{"key":"e_1_3_2_1_26_1","volume-title":"MobileUse: A GUI Agent with Hierarchical Reflection for Autonomous Mobile Operation. arXiv preprint arXiv:2507.16853","author":"Li Ning","year":"2025","unstructured":"Ning Li, Xiangmou Qu, Jiamu Zhou, Jun Wang, Muning Wen, Kounianhua Du, Xingyu Lou, Qiuying Peng, and Weinan Zhang. 2025. MobileUse: A GUI Agent with Hierarchical Reflection for Autonomous Mobile Operation. arXiv preprint arXiv:2507.16853 (2025)."},{"key":"e_1_3_2_1_27_1","volume-title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage. arXiv:2409.11295 [cs.CR] https:\/\/arxiv.org\/abs\/2409.11295","author":"Liao Zeyi","year":"2025","unstructured":"Zeyi Liao, Lingbo Mo, Chejian Xu, Mintong Kang, Jiawei Zhang, Chaowei Xiao, Yuan Tian, Bo Li, and Huan Sun. 2025. EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage. arXiv:2409.11295 [cs.CR] https:\/\/arxiv.org\/abs\/2409.11295"},{"key":"e_1_3_2_1_28_1","unstructured":"Jianghao Lin Jiachen Zhu Zheli Zhou Yunjia Xi Weiwen Liu Yong Yu and Weinan Zhang. 2025. Superplatforms Have to Attack AI Agents. arXiv:2505.17861 [cs.AI] https:\/\/arxiv.org\/abs\/2505.17861"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.52202\/075280-1516"},{"key":"e_1_3_2_1_30_1","unstructured":"Weiwen Liu Jiarui Qin Xu Huang Xingshan Zeng Yunjia Xi Jianghao Lin Chuhan Wu Yasheng Wang Lifeng Shang Ruiming Tang et al. 2025. The Real Barrier to LLM Agent Usability is Agentic ROI. arXiv preprint arXiv:2505.17767 (2025)."},{"key":"e_1_3_2_1_31_1","unstructured":"Xiao Liu Bo Qin Dongzhu Liang Guang Dong Hanyu Lai Hanchen Zhang Hanlin Zhao Iat Long Iong Jiadai Sun Jiaqi Wang Junjie Gao Junjun Shan Kangning Liu Shudan Zhang Shuntian Yao Siyi Cheng Wentao Yao Wenyi Zhao Xinghan Liu Xinyi Liu Xinying Chen Xinyue Yang Yang Yang Yifan Xu Yu Yang Yujia Wang Yulin Xu Zehan Qi Yuxiao Dong and Jie Tang. 2024. AutoGLM: Autonomous Foundation Agents for GUIs. arXiv:2411.00820 [cs.HC] https:\/\/arxiv.org\/abs\/2411.00820"},{"key":"e_1_3_2_1_32_1","volume-title":"ARPO: End-to-End Policy Optimization for GUI Agents with Experience Replay. arXiv preprint arXiv:2505.16282","author":"Lu Fanbin","year":"2025","unstructured":"Fanbin Lu, Zhisheng Zhong, Shu Liu, Chi-Wing Fu, and Jiaya Jia. 2025. ARPO: End-to-End Policy Optimization for GUI Agents with Experience Replay. arXiv preprint arXiv:2505.16282 (2025)."},{"key":"e_1_3_2_1_33_1","volume-title":"Caution for the environment: Multimodal agents are susceptible to environmental distractions. arXiv preprint arXiv:2408.02544","author":"Ma Xinbei","year":"2024","unstructured":"Xinbei Ma, Yiting Wang, Yao Yao, Tongxin Yuan, Aston Zhang, Zhuosheng Zhang, and Hai Zhao. 2024a. Caution for the environment: Multimodal agents are susceptible to environmental distractions. arXiv preprint arXiv:2408.02544 (2024)."},{"key":"e_1_3_2_1_34_1","volume-title":"Coco-agent: A comprehensive cognitive mllm agent for smartphone gui automation. arXiv preprint arXiv:2402.11941","author":"Ma Xinbei","year":"2024","unstructured":"Xinbei Ma, Zhuosheng Zhang, and Hai Zhao. 2024b. Coco-agent: A comprehensive cognitive mllm agent for smartphone gui automation. arXiv preprint arXiv:2402.11941 (2024)."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2734062"},{"key":"e_1_3_2_1_36_1","unstructured":"OpenAI Josh Achiam Steven Adler and Sandhini Agarwal. 2024. GPT-4 Technical Report. arXiv:2303.08774 [cs.CL] https:\/\/arxiv.org\/abs\/2303.08774"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"crossref","first-page":"162","DOI":"10.1109\/TCIAIG.2010.2072506","article-title":"Game bot detection via avatar trajectory analysis","volume":"2","author":"Pao Hsing-Kuo","year":"2010","unstructured":"Hsing-Kuo Pao, Kuan-Ta Chen, and Hong-Chung Chang. 2010. Game bot detection via avatar trajectory analysis. IEEE Transactions on Computational Intelligence and AI in Games, V2, 3 (2010), 162-175.","journal-title":"IEEE Transactions on Computational Intelligence and AI in Games"},{"key":"e_1_3_2_1_38_1","unstructured":"Yujia Qin Yining Ye Junjie Fang Haoming Wang Shihao Liang Shizuo Tian Junda Zhang Jiahao Li Yunxin Li Shijue Huang Wanjun Zhong Kuanye Li Jiale Yang Yu Miao Woyu Lin Longxiang Liu Xu Jiang Qianli Ma Jingyu Li Xiaojun Xiao Kai Cai Chuang Li Yaowei Zheng Chaolin Jin Chen Li Xiao Zhou Minchao Wang Haoli Chen Zhaojian Li Haihua Yang Haifeng Liu Feng Lin Tao Peng Xin Liu and Guang Shi. 2025. UI-TARS: Pioneering Automated GUI Interaction with Native Agents. arXiv:2501.12326 [cs.AI] https:\/\/arxiv.org\/abs\/2501.12326"},{"key":"e_1_3_2_1_39_1","volume-title":"V18, 4","author":"Serwadda Abdul","year":"2016","unstructured":"Abdul Serwadda, Vir V Phoha, Zibo Wang, Rajesh Kumar, and Diksha Shukla. 2016. Toward robotic robbery on the touch screen. ACM Transactions on Information and System Security (TISSEC), V18, 4 (2016), 1-25."},{"key":"e_1_3_2_1_40_1","volume-title":"V27, 3","author":"Shannon Claude E","year":"1948","unstructured":"Claude E Shannon. 1948. A mathematical theory of communication. The Bell system technical journal, V27, 3 (1948), 379-423."},{"key":"e_1_3_2_1_41_1","volume-title":"IncreAuth: Incremental-Learning-Based Behavioral Biometric Authentication on Smartphones","author":"Shen Zhihao","year":"2024","unstructured":"Zhihao Shen, Shun Li, Xi Zhao, and Jianhua Zou. 2024. IncreAuth: Incremental-Learning-Based Behavioral Biometric Authentication on Smartphones. IEEE Internet of Things Journal, V11 (2024), 1589-1603. https:\/\/api.semanticscholar.org\/CorpusID:259676407"},{"key":"e_1_3_2_1_42_1","volume-title":"Gemini: A Family of Highly Capable Multimodal Models. arXiv:2312.11805 [cs.CL] https:\/\/arxiv.org\/abs\/2312.11805","author":"Team Gemini","year":"2025","unstructured":"Gemini Team, Rohan Anil, and Sebastian Borgeaud. 2025. Gemini: A Family of Highly Capable Multimodal Models. arXiv:2312.11805 [cs.CL] https:\/\/arxiv.org\/abs\/2312.11805"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1093\/mind\/LIX.236.433"},{"key":"e_1_3_2_1_44_1","first-page":"135","volume-title":"27th USENIX Security Symposium (USENIX Security 18)","author":"Vastel Antoine","year":"2018","unstructured":"Antoine Vastel, Pierre Laperdrix, Walter Rudametkin, and Romain Rouvoy. 2018. : The privacy implications of browser fingerprint inconsistencies. In 27th USENIX Security Symposium (USENIX Security 18). 135-150."},{"key":"e_1_3_2_1_45_1","volume-title":"Theory of Games and Economic Behavior","author":"von Neumann John","unstructured":"John von Neumann and Oskar Morgenstern. 1944. Theory of Games and Economic Behavior. Princeton University Press, Princeton, NJ."},{"key":"e_1_3_2_1_46_1","volume-title":"Mobile-Agent: Autonomous Multi-Modal Mobile Device Agent with Visual Perception. arXiv preprint arXiv:2401.16158","author":"Wang Junyang","year":"2024","unstructured":"Junyang Wang, Haiyang Xu, Jiabo Ye, Ming Yan, Weiezhou Shen, Ji Zhang, Fei Huang, and Jitao Sang. 2024a. Mobile-Agent: Autonomous Multi-Modal Mobile Device Agent with Visual Perception. arXiv preprint arXiv:2401.16158 (2024). https:\/\/arxiv.org\/abs\/2401.16158"},{"key":"e_1_3_2_1_47_1","unstructured":"Yifei Wang Dizhan Xue Shengjie Zhang and Shengsheng Qian. 2024b. BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents. arXiv:2406.03007 [cs.CL] https:\/\/arxiv.org\/abs\/2406.03007"},{"key":"e_1_3_2_1_48_1","unstructured":"Zhenhailong Wang Haiyang Xu Junyang Wang Xi Zhang Ming Yan Ji Zhang Fei Huang and Heng Ji. 2025. Mobile-Agent-E: Self-Evolving Mobile Assistant for Complex Tasks. arXiv:2501.11733 [cs.CL] https:\/\/arxiv.org\/abs\/2501.11733"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2025.emnlp-main.100"},{"key":"e_1_3_2_1_50_1","volume-title":"Ruslan Salakhutdinov, Daniel Fried, and Aditi Raghunathan.","author":"Wu Chen Henry","year":"2025","unstructured":"Chen Henry Wu, Rishi Shah, Jing Yu Koh, Ruslan Salakhutdinov, Daniel Fried, and Aditi Raghunathan. 2025b. Dissecting Adversarial Robustness of Multimodal LM Agents. arXiv:2406.12814 [cs.LG] https:\/\/arxiv.org\/abs\/2406.12814"},{"key":"e_1_3_2_1_51_1","volume-title":"Verios: Query-driven proactive human-agent-gui interaction for trustworthy os agents. arXiv preprint arXiv:2509.07553","author":"Wu Zheng","year":"2025","unstructured":"Zheng Wu, Heyuan Huang, Xingyu Lou, Xiangmou Qu, Pengzhou Cheng, Zongru Wu, Weiwen Liu, Weinan Zhang, Jun Wang, Zhaoxiang Wang, et al., 2025a. Verios: Query-driven proactive human-agent-gui interaction for trustworthy os agents. arXiv preprint arXiv:2509.07553 (2025)."},{"key":"e_1_3_2_1_52_1","volume-title":"A survey of llm-based deep search agents: Paradigm, optimization, evaluation, and challenges. arXiv preprint arXiv:2508.05668","author":"Xi Yunjia","year":"2025","unstructured":"Yunjia Xi, Jianghao Lin, Yongzhao Xiao, Zheli Zhou, Rong Shan, Te Gao, Jiachen Zhu, Weiwen Liu, Yong Yu, and Weinan Zhang. 2025b. A survey of llm-based deep search agents: Paradigm, optimization, evaluation, and challenges. arXiv preprint arXiv:2508.05668 (2025)."},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11432-024-4222-0"},{"key":"e_1_3_2_1_54_1","unstructured":"Chejian Xu Mintong Kang Jiawei Zhang Zeyi Liao Lingbo Mo Mengqi Yuan Huan Sun and Bo Li. 2025. AdvAgent: Controllable Blackbox Red-teaming on Web Agents. arXiv:2410.17401 [cs.CR] https:\/\/arxiv.org\/abs\/2410.17401"},{"key":"e_1_3_2_1_55_1","volume-title":"Mobilerl: Advancing mobile use agents with adaptive online reinforcement learning","author":"Xu Yifan","year":"2025","unstructured":"Yifan Xu, Xiao Liu, Xinghan Liu, Jiaqi Fu, Hanchen Zhang, Bohao Jing, Shudan Zhang, Yuting Wang, Wenyi Zhao, and Yuxiao Dong. [n.d.]. Mobilerl: Advancing mobile use agents with adaptive online reinforcement learning, 2025. URL https:\/\/github.com\/THUDM\/MobileRL ([n.d.])."},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"crossref","unstructured":"Wenkai Yang Xiaohan Bi Yankai Lin Sishuo Chen Jie Zhou and Xu Sun. 2024. Watch Out for Your Agents! Investigating Backdoor Threats to LLM-Based Agents. arXiv:2402.11208 [cs.CR] https:\/\/arxiv.org\/abs\/2402.11208","DOI":"10.52202\/079017-3201"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.52202\/068431-1508"},{"key":"e_1_3_2_1_58_1","volume-title":"[n.d.]. Mobile-agent-v3: Fundamental agents for gui automation","author":"Ye Jiabo","year":"2025","unstructured":"Jiabo Ye, Xi Zhang, Haiyang Xu, Haowei Liu, Junyang Wang, Zhaoqing Zhu, Ziwei Zheng, Feiyu Gao, Junjie Cao, Zhengxi Lu, et al., [n.d.]. Mobile-agent-v3: Fundamental agents for gui automation, 2025. URL https:\/\/arxiv.org\/abs\/2508.15144, V4 ([n.d.]), 21-27."},{"key":"e_1_3_2_1_59_1","volume-title":"Zhe Jin, Rajendran Parthiban, and Ali Safaa Sadiq.","author":"Zaidi Ahmad Zairi","year":"2021","unstructured":"Ahmad Zairi Zaidi, Chun Yong Chong, Zhe Jin, Rajendran Parthiban, and Ali Safaa Sadiq. 2021. Touch-based continuous mobile device authentication: State-of-the-art, challenges and opportunities. Journal of Network and Computer Applications, V191 (2021), 103162."},{"key":"e_1_3_2_1_60_1","volume-title":"The Twelfth International Conference on Learning Representations. https:\/\/openreview.net\/forum?id=douVpgGL8y","author":"Zhang Chi","year":"2024","unstructured":"Chi Zhang, Zhao Yang, Jiaxuan Liu, Yucheng Han, Xin Chen, Zebiao Huang, Bin Fu, and Gang Yu. 2024. AppAgent: Multimodal Agents as Smartphone Users. In The Twelfth International Conference on Learning Representations. https:\/\/openreview.net\/forum?id=douVpgGL8y"},{"key":"e_1_3_2_1_61_1","unstructured":"Hanrong Zhang Jingyuan Huang Kai Mei Yifei Yao Zhenting Wang Chenlu Zhan Hongwei Wang and Yongfeng Zhang. 2025a. Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents. arXiv:2410.02644 [cs.CR] https:\/\/arxiv.org\/abs\/2410.02644"},{"key":"e_1_3_2_1_62_1","volume-title":"QAVA: Query-Agnostic Visual Attack to Large Vision-Language Models. arXiv:2504.11038 [cs.CV] https:\/\/arxiv.org\/abs\/2504.11038","author":"Zhang Yudong","year":"2025","unstructured":"Yudong Zhang, Ruobing Xie, Jiansheng Chen, Xingwu Sun, Zhanhui Kang, and Yu Wang. 2025c. QAVA: Query-Agnostic Visual Attack to Large Vision-Language Models. arXiv:2504.11038 [cs.CV] https:\/\/arxiv.org\/abs\/2504.11038"},{"key":"e_1_3_2_1_63_1","unstructured":"Yanzhe Zhang Tao Yu and Diyi Yang. 2025d. Attacking Vision-Language Computer Agents via Pop-ups. arXiv:2411.02391 [cs.CL] https:\/\/arxiv.org\/abs\/2411.02391"},{"key":"e_1_3_2_1_64_1","doi-asserted-by":"crossref","unstructured":"Zhong Zhang Yaxi Lu Yikun Fu Yupeng Huo Shenzhi Yang Yesai Wu Han Si Xin Cong Haotian Chen Yankai Lin Jie Xie Wei Zhou Wang Xu Yuanheng Zhang Zhou Su Zhongwu Zhai Xiaoming Liu Yudong Mei Jianming Xu Hongyan Tian Chongyi Wang Chi Chen Yuan Yao Zhiyuan Liu and Maosong Sun. 2025b. AgentCPM-GUI: Building Mobile-Use Agents with Reinforcement Fine-Tuning. arXiv:2506.01391 [cs.AI] https:\/\/arxiv.org\/abs\/2506.01391","DOI":"10.18653\/v1\/2025.emnlp-demos.12"},{"key":"e_1_3_2_1_65_1","unstructured":"Chenyu Zhou Huacan Chai Wenteng Chen Zihan Guo Rong Shan Yuanyi Song Tianyi Xu Yingxuan Yang Aofan Yu Weiming Zhang et al. 2026. Externalization in llm agents: A unified review of memory skills protocols and harness engineering. arXiv preprint arXiv:2604.08224 (2026)."},{"key":"e_1_3_2_1_66_1","unstructured":"Jiachen Zhu Zhuoying Ou Congmin Zheng Yuxiang Chen Zeyu Zheng Rong Shan Lingyu Yang Lionel Z. Wang Weiwen Liu Yong Yu Weinan Zhang and Jianghao Lin. 2026. Contexting as Recommendation: Evolutionary Collaborative Filtering for Context Engineering. arXiv:2605.15721 [cs.CL] https:\/\/arxiv.org\/abs\/2605.15721"},{"key":"e_1_3_2_1_67_1","unstructured":"Jiachen Zhu Menghui Zhu Renting Rui Rong Shan Congmin Zheng Bo Chen Yunjia Xi Jianghao Lin Weiwen Liu Ruiming Tang et al. 2025. Evolutionary Perspectives on the Evaluation of LLM-Based AI Agents: A Comprehensive Survey. arXiv preprint arXiv:2506.11102 (2025)."}],"event":{"name":"KDD '26: The 32nd ACM SIGKDD Conference on Knowledge Discovery and Data Mining","location":"Jeju Island Republic of Korea","sponsor":["SIGMOD ACM Special Interest Group on Management of Data","SIGKDD ACM Special Interest Group on Knowledge Discovery in Data"]},"container-title":["Proceedings of the 32nd ACM SIGKDD Conference on Knowledge Discovery and Data Mining V.2"],"original-title":[],"deposited":{"date-parts":[[2026,8,7]],"date-time":"2026-08-07T01:26:03Z","timestamp":1786065963000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3770855.3817471"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,8,8]]},"references-count":67,"alternative-id":["10.1145\/3770855.3817471","10.1145\/3770855"],"URL":"https:\/\/doi.org\/10.1145\/3770855.3817471","relation":{},"subject":[],"published":{"date-parts":[[2026,8,8]]},"assertion":[{"value":"2026-08-08","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}