{"id":"https://openalex.org/W7155195805","doi":"https://doi.org/10.2196/preprints.99050","title":"The Silent Risk: Security Vulnerabilities in AI-Enabled Pharmacovigilance Systems (Preprint)","display_name":"The Silent Risk: Security Vulnerabilities in AI-Enabled Pharmacovigilance Systems (Preprint)","publication_year":2026,"publication_date":"2026-04-22","ids":{"openalex":"https://openalex.org/W7155195805","doi":"https://doi.org/10.2196/preprints.99050"},"language":"en","primary_location":{"id":"doi:10.2196/preprints.99050","doi":"https://doi.org/10.2196/preprints.99050","is_oa":true,"landing_page_url":"https://doi.org/10.2196/preprints.99050","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"posted-content"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.2196/preprints.99050","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5134345115","display_name":"Vivek Poojary","orcid":"https://orcid.org/0009-0005-3861-7596","observed_orcids":["https://orcid.org/0009-0005-3861-7596"]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Vivek Poojary","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0009-0005-3861-7596","affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5134345115"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9574999809265137,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9574999809265137,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11943","display_name":"Pharmacovigilance and Adverse Drug Reactions","score":0.03099999949336052,"subfield":{"id":"https://openalex.org/subfields/3005","display_name":"Toxicology"},"field":{"id":"https://openalex.org/fields/30","display_name":"Pharmacology, Toxicology and Pharmaceutics"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},{"id":"https://openalex.org/T13295","display_name":"Safety Systems Engineering in Autonomy","score":0.004000000189989805,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/pharmacovigilance","display_name":"pharmacovigilance","score":0.9679999947547913},{"id":"https://openalex.org/keywords/ai-security-vulnerabilities","display_name":"AI security vulnerabilities","score":0.7509999871253967},{"id":"https://openalex.org/keywords/large-language-models","display_name":"large language models","score":0.9490000009536743},{"id":"https://openalex.org/keywords/agentic-ai","display_name":"agentic AI","score":0.9120000004768372},{"id":"https://openalex.org/keywords/adversarial-attacks","display_name":"adversarial attacks","score":0.8240000009536743},{"id":"https://openalex.org/keywords/prompt-injection","display_name":"prompt injection","score":0.9120000004768372},{"id":"https://openalex.org/keywords/data-poisoning-attacks","display_name":"data poisoning","score":0.9919999837875366},{"id":"https://openalex.org/keywords/jailbreaking","display_name":"jailbreaking","score":0.675000011920929},{"id":"https://openalex.org/keywords/membership-inference","display_name":"membership inference","score":0.746999979019165},{"id":"https://openalex.org/keywords/model-extraction","display_name":"model extraction","score":0.7099999785423279},{"id":"https://openalex.org/keywords/supply-chain-compromise","display_name":"supply chain compromise","score":0.7160000205039978},{"id":"https://openalex.org/keywords/individual-case-safety-reports","display_name":"individual case safety reports","score":0.8080000281333923},{"id":"https://openalex.org/keywords/regulatory-submissions","display_name":"regulatory submissions","score":0.3569999933242798},{"id":"https://openalex.org/keywords/ai-red-teaming","display_name":"AI red teaming","score":0.7269999980926514},{"id":"https://openalex.org/keywords/federated-anomaly-detection","display_name":"federated anomaly detection","score":0.9110000133514404},{"id":"https://openalex.org/keywords/defensive-architecture","display_name":"defensive architecture","score":0.41200000047683716}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8281999826431274},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6567999720573425},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6136999726295471},{"id":"https://openalex.org/C141141315","wikidata":"https://www.wikidata.org/wiki/Q2379942","display_name":"Guard (computer science)","level":2,"score":0.41600000858306885},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.3783000111579895},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.3668999969959259},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.36010000109672546},{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.3549000024795532},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.34549999237060547},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.3427000045776367},{"id":"https://openalex.org/C2776650110","wikidata":"https://www.wikidata.org/wiki/Q12891156","display_name":"Seriousness","level":2,"score":0.3336000144481659},{"id":"https://openalex.org/C57658597","wikidata":"https://www.wikidata.org/wiki/Q1550789","display_name":"Pharmacovigilance","level":3,"score":0.32100000977516174},{"id":"https://openalex.org/C521332185","wikidata":"https://www.wikidata.org/wiki/Q185816","display_name":"Analogy","level":2,"score":0.30250000953674316},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2976999878883362},{"id":"https://openalex.org/C59577422","wikidata":"https://www.wikidata.org/wiki/Q10265143","display_name":"False accusation","level":2,"score":0.29350000619888306},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2906999886035919},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.28769999742507935},{"id":"https://openalex.org/C49895821","wikidata":"https://www.wikidata.org/wiki/Q5227368","display_name":"Data verification","level":2,"score":0.28459998965263367},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.27000001072883606},{"id":"https://openalex.org/C94124525","wikidata":"https://www.wikidata.org/wiki/Q912550","display_name":"Categorization","level":2,"score":0.2621000111103058},{"id":"https://openalex.org/C55282118","wikidata":"https://www.wikidata.org/wiki/Q252683","display_name":"Snapshot (computer storage)","level":2,"score":0.25699999928474426},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.2513999938964844}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.2196/preprints.99050","doi":"https://doi.org/10.2196/preprints.99050","is_oa":true,"landing_page_url":"https://doi.org/10.2196/preprints.99050","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"posted-content"}],"best_oa_location":{"id":"doi:10.2196/preprints.99050","doi":"https://doi.org/10.2196/preprints.99050","is_oa":true,"landing_page_url":"https://doi.org/10.2196/preprints.99050","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"posted-content"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/3","display_name":"Good health and well-being","score":0.8048999905586243}],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7171679433","https://openalex.org/W7203724575","https://openalex.org/W7203928233","https://openalex.org/W7123895595","https://openalex.org/W7217496224","https://openalex.org/W7172498926","https://openalex.org/W7221613719","https://openalex.org/W6911768081","https://openalex.org/W7116438050","https://openalex.org/W7170037054"],"abstract_inverted_index":{"UNSTRUCTURED":[0],"The":[1,130],"integration":[2],"of":[3,108,157],"large":[4],"language":[5],"models":[6],"and":[7,57,68,81,91,102,106,118,145,163,179,202,210],"agentic":[8,164,200],"artificial":[9],"intelligence":[10],"(AI)":[11],"into":[12,171,194],"pharmacovigilance":[13],"(PV)":[14],"workflows":[15],"introduces":[16],"adversarial":[17,73,89,114,191],"vulnerabilities":[18],"that":[19,133],"are":[20,111],"not":[21],"well":[22],"addressed":[23],"by":[24],"conventional":[25],"IT":[26],"security":[27],"or":[28,48],"standard":[29],"GxP":[30,155],"validation":[31,156],"frameworks.":[32],"Unlike":[33],"infrastructure":[34],"breaches,":[35],"attacks":[36],"on":[37],"model":[38,96,100,169],"analytical":[39],"judgment":[40],"can":[41,160,166],"alter":[42],"seriousness":[43],"assessments,":[44],"suppress":[45],"safety":[46,175],"signals,":[47],"distort":[49],"aggregate":[50],"reports":[51],"while":[52],"case":[53],"records":[54],"remain":[55],"intact":[56],"operational":[58],"metrics":[59],"appear":[60],"normal.":[61],"This":[62],"paper":[63,131],"uses":[64],"structured":[65],"threat":[66],"modelling":[67],"war-gaming":[69],"to":[70],"map":[71],"nine":[72],"attack":[74],"classes":[75],"onto":[76],"PV":[77,128,134],"intake,":[78],"signal":[79],"detection,":[80],"regulatory":[82],"submission":[83,144,180],"workflows:":[84],"prompt":[85],"injection,":[86],"data":[87,147],"poisoning,":[88],"text":[90],"multimodal":[92],"manipulation,":[93,99],"supply-chain":[94],"compromise,":[95],"extraction,":[97],"context-window":[98],"inversion":[101],"membership":[103],"inference,":[104],"jailbreaking,":[105],"denial":[107],"service.":[109],"Scenarios":[110],"grounded":[112],"in":[113],"machine":[115],"learning":[116],"research":[117],"assessed":[119],"for":[120,199],"structural":[121],"plausibility":[122],"rather":[123],"than":[124],"presented":[125],"as":[126,206],"confirmed":[127],"incidents.":[129],"argues":[132],"faces":[135],"distinctive":[136],"systemic":[137],"amplifiers:":[138],"mandatory":[139],"Individual":[140],"Case":[141],"Safety":[142],"Reports":[143],"cross-MAH":[146],"exchange":[148],"may":[149],"propagate":[150],"manipulated":[151],"content":[152],"across":[153,174],"organizations;":[154],"version-locked":[158],"systems":[159],"delay":[161],"remediation;":[162],"architectures":[165],"convert":[167],"local":[168],"failures":[170],"executed":[172],"actions":[173],"databases,":[176],"follow-up":[177],"communication,":[178],"workflows.":[181],"A":[182],"three-tier":[183],"defense":[184],"architecture":[185],"is":[186],"proposed,":[187],"spanning":[188],"procedural":[189],"controls,":[190],"testing":[192],"integrated":[193],"validation,":[195],"deterministic":[196],"enforcement":[197],"approaches":[198],"workflows,":[201],"frontier":[203],"measures":[204],"such":[205],"AI":[207],"red":[208],"teaming":[209],"federated":[211],"anomaly":[212],"detection.":[213]},"counts_by_year":[],"updated_date":"2026-11-09T13:22:03.289127","created_date":"2026-04-23T00:00:00"}