@misc{mcp2024,
  author       = {Anthropic},
  title        = {Model Context Protocol Specification},
  year         = {2024},
  howpublished = {\url{https://modelcontextprotocol.io}},
  note         = {Accessed: 2026-05}
}

@misc{mcp_roadmap_2026,
  author       = {{Model Context Protocol Working Groups}},
  title        = {The 2026 MCP Roadmap},
  year         = {2026},
  howpublished = {\url{https://blog.modelcontextprotocol.io/posts/2026-mcp-roadmap/}},
  note         = {Updated 2026-03-05}
}

@article{iotmcp2025,
  title        = {{IoT-MCP}: Bridging {LLMs} and {IoT} Systems Through Model Context Protocol},
  author       = {Yang, Ningyuan and Lyu, Guanliang and Ma, Mingchen and Lu, Yiyi and Li, Yiming and Gao, Zhihui and Ye, Hancheng and Zhang, Jianyi and Chen, Tingjun and Chen, Yiran},
  journal      = {arXiv preprint arXiv:2510.01260},
  year         = {2025},
  url          = {https://arxiv.org/abs/2510.01260}
}

@misc{wot_td_2025,
  author       = {{W3C Web of Things Working Group}},
  title        = {Web of Things {(WoT)} Thing Description 2.0},
  year         = {2025},
  howpublished = {W3C Recommendation},
  url          = {https://www.w3.org/TR/wot-thing-description-2.0/}
}

@misc{azure_wot_2025,
  author       = {Microsoft},
  title        = {{W3C} Web of Things {(WoT)} support in {Azure IoT} Operations},
  year         = {2025},
  howpublished = {Microsoft Tech Community Blog},
  url          = {https://techcommunity.microsoft.com/blog/iotblog/w3c-web-of-things-wot-support-in-azure-iot-operations/4511215}
}

@misc{matter_spec,
  author       = {{Connectivity Standards Alliance}},
  title        = {Matter Specification},
  year         = {2024},
  howpublished = {\url{https://csa-iot.org/all-solutions/matter/}}
}

@misc{sparkplug,
  author       = {{Eclipse Sparkplug Working Group}},
  title        = {Sparkplug Specification},
  year         = {2024},
  howpublished = {Eclipse Foundation},
  url          = {https://sparkplug.eclipse.org/}
}

@misc{rfc8949,
  author       = {C. Bormann and P. Hoffman},
  title        = {Concise Binary Object Representation {(CBOR)}},
  year         = {2020},
  howpublished = {RFC 8949, IETF},
  url          = {https://www.rfc-editor.org/rfc/rfc8949}
}

@misc{rfc2104,
  author       = {H. Krawczyk and M. Bellare and R. Canetti},
  title        = {{HMAC}: Keyed-Hashing for Message Authentication},
  year         = {1997},
  howpublished = {RFC 2104, IETF},
  url          = {https://www.rfc-editor.org/rfc/rfc2104}
}

@misc{fips180,
  author       = {{NIST}},
  title        = {Secure Hash Standard {(SHS)}},
  year         = {2015},
  howpublished = {FIPS PUB 180-4}
}

@inproceedings{cobs1999,
  title        = {Consistent overhead byte stuffing},
  author       = {Cheshire, Stuart and Baker, Mary},
  booktitle    = {IEEE/ACM Transactions on Networking},
  volume       = {7},
  number       = {2},
  pages        = {159--172},
  year         = {1999}
}

@misc{oauth_scope,
  author       = {D. Hardt},
  title        = {The {OAuth 2.0} Authorization Framework},
  year         = {2012},
  howpublished = {RFC 6749, IETF}
}

@article{llm_hallucination,
  title        = {Survey of Hallucination in Natural Language Generation},
  author       = {Ji, Ziwei and Lee, Nayeon and Frieske, Rita and Yu, Tiezheng and others},
  journal      = {ACM Computing Surveys},
  volume       = {55},
  number       = {12},
  year         = {2023}
}

@misc{prompt_injection,
  author       = {Greshake, Kai and Abdelnabi, Sahar and others},
  title        = {Not what you've signed up for: Compromising Real-World {LLM}-Integrated Applications with Indirect Prompt Injection},
  year         = {2023},
  howpublished = {arXiv:2302.12173}
}

@misc{cborweb,
  author       = {{CBOR-Web Working Group}},
  title        = {{CBOR-Web}: The Binary Protocol for {AI} Agents},
  year         = {2026},
  howpublished = {\url{https://cborweb.com/}},
  note         = {Accessed: 2026-05}
}

@article{prompt_to_actuation,
  title        = {From Prompt to Physical Actuation: Holistic Threat Modeling of {LLM}-Enabled Robotic Systems},
  author       = {Nagaraja, Neha and Bahsi, Hayretdin and da Cunha, Carlo R.},
  journal      = {arXiv preprint arXiv:2604.27267},
  year         = {2026},
  url          = {https://arxiv.org/abs/2604.27267}
}

@inproceedings{web_of_drones,
  title        = {Say the Mission, Execute the Swarm: Agent-Enhanced {LLM} Reasoning in the Web-of-Drones},
  author       = {Iannoli, Andrea and Gigli, Lorenzo and Sciullo, Luca and Trotta, Angelo and Di Felice, Marco},
  booktitle    = {Proceedings of the 27th IEEE International Symposium on a World of Wireless, Mobile and Multimedia Networks ({WoWMoM})},
  year         = {2026},
  note         = {arXiv:2605.03788}
}

@article{aegismcp,
  title        = {{AegisMCP}: Online Graph Intrusion Detection for Tool-Augmented {LLMs} on Edge Devices},
  author       = {Zhan, Zhonghao and Al Sadi, Amir and Li, Krinos and Haddadi, Hamed},
  journal      = {arXiv preprint arXiv:2510.19462},
  year         = {2025},
  url          = {https://arxiv.org/abs/2510.19462}
}

@article{agentoptics,
  title        = {Agentic {AI} for Scalable and Robust Optical Systems Control},
  author       = {Wang, Zehao and Han, Mingzhe and Cheng, Wei and Huang, Yue-Kai and Ji, Philip and Wu, Denton and Safari, Mahdi and Holtorf, Flemming and AlQubaisi, Kenaish and Linke, Norbert M. and Zhuo, Danyang and Chen, Yiran and Wang, Ting and Englund, Dirk and Chen, Tingjun},
  journal      = {arXiv preprint arXiv:2602.20144},
  year         = {2026},
  url          = {https://arxiv.org/abs/2602.20144}
}

@article{robosafe,
  title        = {{RoboSafe}: Safeguarding Embodied Agents via Executable Safety Logic},
  author       = {Wang, Le and Ying, Zonghao and Yang, Xiao and Zou, Quanchen and Yin, Zhenfei and Li, Tianlin and Yang, Jian and Yang, Yaodong and Liu, Aishan and Liu, Xianglong},
  journal      = {arXiv preprint arXiv:2512.21220},
  year         = {2025},
  url          = {https://arxiv.org/abs/2512.21220}
}

@article{physical_safety_llm,
  title        = {Defining and Evaluating Physical Safety for Large Language Models},
  author       = {Tang, Yung-Chen and Chen, Pin-Yu and Ho, Tsung-Yi},
  journal      = {arXiv preprint arXiv:2411.02317},
  year         = {2024},
  url          = {https://arxiv.org/abs/2411.02317}
}

@article{iot_skillsbench,
  title        = {Skilled {AI} Agents for Embedded and {IoT} Systems Development},
  author       = {Li, Yiming and Cheng, Yuhan and Ma, Mingchen and Zou, Yihang and Yang, Ningyuan and Cheng, Wei and Li, Hai and Chen, Yiran and Chen, Tingjun},
  journal      = {arXiv preprint arXiv:2603.19583},
  year         = {2026},
  url          = {https://arxiv.org/abs/2603.19583}
}

@article{llm_iot_survey,
  title        = {Large Language Models in the {IoT} Ecosystem -- A Survey on Security Challenges and Applications},
  author       = {Khatiwada, Kushal and Hopper, Jayden and Cheatham, Joseph and Joshi, Ayan and Baidya, Sabur},
  journal      = {arXiv preprint arXiv:2505.17586},
  year         = {2025},
  url          = {https://arxiv.org/abs/2505.17586}
}

@inproceedings{agentdojo,
  title        = {{AgentDojo}: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for {LLM} Agents},
  author       = {Debenedetti, Edoardo and Zhang, Jie and Balunovi{\'c}, Mislav and Beurer-Kellner, Luca and Fischer, Marc and Tram{\`e}r, Florian},
  booktitle    = {NeurIPS Datasets and Benchmarks Track},
  year         = {2024},
  url          = {https://arxiv.org/abs/2406.13352}
}

@article{injecagent,
  title        = {{InjecAgent}: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents},
  author       = {Zhan, Qiusi and Liang, Zhixiang and Ying, Zifan and Kang, Daniel},
  journal      = {ACL Findings},
  year         = {2024},
  url          = {https://arxiv.org/abs/2403.02691}
}

@inproceedings{toolbench,
  title        = {{ToolLLM}: Facilitating Large Language Models to Master 16000+ Real-world {APIs}},
  author       = {Qin, Yujia and Liang, Shihao and Ye, Yining and Zhu, Kunlun and Yan, Lan and Lu, Yaxi and Lin, Yankai and Cong, Xin and Tang, Xiangru and Qian, Bill and Zhao, Sihan and Hong, Lauren and Tian, Runchu and Xie, Ruobing and Zhou, Jie and Gerstein, Mark and Li, Dahai and Liu, Zhiyuan and Sun, Maosong},
  booktitle    = {ICLR},
  year         = {2024},
  url          = {https://arxiv.org/abs/2307.16789}
}
