{"id":"https://openalex.org/W7204446244","doi":"https://doi.org/10.68957/ejais-2026-115","title":"The Autonomy Paradox: Securing Agentic AI Systems Against MachineSpeed and Semantic Threats","display_name":"The Autonomy Paradox: Securing Agentic AI Systems Against MachineSpeed and Semantic Threats","publication_year":2026,"publication_date":"2026-07-16","ids":{"openalex":"https://openalex.org/W7204446244","doi":"https://doi.org/10.68957/ejais-2026-115"},"language":"en","primary_location":{"id":"doi:10.68957/ejais-2026-115","doi":"https://doi.org/10.68957/ejais-2026-115","is_oa":false,"landing_page_url":"https://doi.org/10.68957/ejais-2026-115","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Epistora Journal of Artificial Intelligence and Intelligent Systems","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.2139/ssrn.7350999","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5146443698","display_name":"Liudmyla Cherniakova","orcid":"https://orcid.org/0009-0002-6993-8606","observed_orcids":["https://orcid.org/0009-0002-6993-8606"]},"institutions":[{"id":"https://openalex.org/I118931453","display_name":"Santa Monica College","ror":"https://ror.org/01cntdd82","country_code":"US","type":"education","lineage":["https://openalex.org/I118931453"]},{"id":"https://openalex.org/I1299779963","display_name":"Project Management Institute","ror":"https://ror.org/03ppgma52","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1299779963"]},{"id":"https://openalex.org/I4210112098","display_name":"National University","ror":"https://ror.org/01zjrck77","country_code":"US","type":"education","lineage":["https://openalex.org/I4210086682","https://openalex.org/I4210112098"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Liudmyla Cherniakova","raw_affiliation_strings":["National University, 11255 North Torrey Pines Road, La Jolla, CA 92037, United States","Project Management Institute, Newtown Square, PA, United States","Santa Monica College, 1900 Pico Boulevard, Santa Monica, CA 90405, United States"],"raw_orcid":"https://orcid.org/0009-0002-6993-8606","affiliations":[{"raw_affiliation_string":"National University, 11255 North Torrey Pines Road, La Jolla, CA 92037, United States","institution_ids":["https://openalex.org/I4210112098"]},{"raw_affiliation_string":"Project Management Institute, Newtown Square, PA, United States","institution_ids":["https://openalex.org/I1299779963"]},{"raw_affiliation_string":"Santa Monica College, 1900 Pico Boulevard, Santa Monica, CA 90405, United States","institution_ids":["https://openalex.org/I118931453"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5146443698"],"corresponding_institution_ids":["https://openalex.org/I118931453","https://openalex.org/I1299779963","https://openalex.org/I4210112098"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"1","issue":"1","first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9854000210762024,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9854000210762024,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.0044999998062849045,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.003800000064074993,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/agentic-ai","display_name":"agentic AI","score":0.8619999885559082},{"id":"https://openalex.org/keywords/artificial-intelligence-security","display_name":"AI security","score":0.6470000147819519},{"id":"https://openalex.org/keywords/autonomy-paradox","display_name":"autonomy paradox","score":0.8539999723434448},{"id":"https://openalex.org/keywords/prompt-injection","display_name":"prompt injection","score":0.6959999799728394},{"id":"https://openalex.org/keywords/indirect-prompt-injection","display_name":"indirect prompt injection","score":0.8700000047683716},{"id":"https://openalex.org/keywords/privilege-escalation","display_name":"privilege escalation","score":0.9869999885559082},{"id":"https://openalex.org/keywords/model-context-protocol","display_name":"Model Context Protocol","score":0.8159999847412109},{"id":"https://openalex.org/keywords/supply-chain-compromise","display_name":"supply chain compromise","score":0.9240000247955322}],"concepts":[{"id":"https://openalex.org/C65414064","wikidata":"https://www.wikidata.org/wiki/Q484105","display_name":"Autonomy","level":2,"score":0.6840999722480774},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6583999991416931},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6162999868392944},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6040999889373779},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6019999980926514},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.4652000069618225},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.4602000117301941},{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.4498000144958496},{"id":"https://openalex.org/C67571701","wikidata":"https://www.wikidata.org/wiki/Q1318054","display_name":"Enterprise system","level":2,"score":0.37459999322891235},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.3732999861240387},{"id":"https://openalex.org/C121017731","wikidata":"https://www.wikidata.org/wiki/Q11661","display_name":"Information technology","level":2,"score":0.3580999970436096},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.34940001368522644},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.3278000056743622},{"id":"https://openalex.org/C2776139661","wikidata":"https://www.wikidata.org/wiki/Q288928","display_name":"Agnosticism","level":2,"score":0.32089999318122864},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.29660001397132874},{"id":"https://openalex.org/C27295321","wikidata":"https://www.wikidata.org/wiki/Q831795","display_name":"Enterprise information system","level":2,"score":0.28540000319480896},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2825999855995178},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.2775000035762787},{"id":"https://openalex.org/C25810664","wikidata":"https://www.wikidata.org/wiki/Q44325","display_name":"Ontology","level":2,"score":0.27709999680519104},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.2678999900817871},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.26669999957084656},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.26570001244544983},{"id":"https://openalex.org/C6881194","wikidata":"https://www.wikidata.org/wiki/Q7449091","display_name":"Semantic technology","level":4,"score":0.2563000023365021},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.2551000118255615},{"id":"https://openalex.org/C166052673","wikidata":"https://www.wikidata.org/wiki/Q83021","display_name":"Empirical evidence","level":2,"score":0.2529999911785126},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.2508000135421753}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.68957/ejais-2026-115","doi":"https://doi.org/10.68957/ejais-2026-115","is_oa":false,"landing_page_url":"https://doi.org/10.68957/ejais-2026-115","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Epistora Journal of Artificial Intelligence and Intelligent Systems","raw_type":"journal-article"},{"id":"doi:10.2139/ssrn.7350999","doi":"https://doi.org/10.2139/ssrn.7350999","is_oa":true,"landing_page_url":"https://doi.org/10.2139/ssrn.7350999","pdf_url":null,"source":{"id":"https://openalex.org/S4210172589","display_name":"SSRN Electronic Journal","issn_l":"1556-5068","issn":["1556-5068"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I1318003438","host_organization_name":"RELX Group (Netherlands)","host_organization_lineage":["https://openalex.org/I1318003438"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"posted-content"}],"best_oa_location":{"id":"doi:10.2139/ssrn.7350999","doi":"https://doi.org/10.2139/ssrn.7350999","is_oa":true,"landing_page_url":"https://doi.org/10.2139/ssrn.7350999","pdf_url":null,"source":{"id":"https://openalex.org/S4210172589","display_name":"SSRN Electronic Journal","issn_l":"1556-5068","issn":["1556-5068"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I1318003438","host_organization_name":"RELX Group (Netherlands)","host_organization_lineage":["https://openalex.org/I1318003438"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"posted-content"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7140300304","https://openalex.org/W7163380448","https://openalex.org/W7160450034","https://openalex.org/W7172509540","https://openalex.org/W7204459839","https://openalex.org/W4409650883","https://openalex.org/W7214554156","https://openalex.org/W7138839765","https://openalex.org/W7152005641","https://openalex.org/W4411895123"],"abstract_inverted_index":{"As":[0],"enterprises":[1],"transition":[2],"from":[3,122],"static":[4],"Generative":[5],"AI":[6,37],"to":[7,27,95,125],"autonomous":[8],"Agentic":[9],"AI,":[10],"they":[11],"unlock":[12],"unprecedented":[13],"productivity":[14],"while":[15],"dramatically":[16],"expanding":[17],"their":[18],"attack":[19],"surface.":[20],"This":[21,46,117],"shift":[22],"introduces":[23],"the":[24,39,49,79],"Autonomy":[25],"Paradox:":[26],"defend":[28],"against":[29],"machine-speed,":[30],"AI-driven":[31,97],"attacks,":[32],"organizations":[33],"must":[34],"grant":[35],"defensive":[36],"systems":[38],"very":[40],"autonomy":[41],"that":[42],"makes":[43],"them":[44],"vulnerable.":[45],"paper":[47],"explores":[48],"emerging":[50],"threat":[51,90],"landscape":[52],"of":[53],"agentic":[54],"systems,":[55],"detailing":[56],"critical":[57],"vectors":[58],"such":[59],"as":[60],"Indirect":[61],"Prompt":[62],"Injection":[63],"(IPI),":[64],"privilege":[65],"escalation,":[66],"and":[67,84,114],"Model":[68],"Context":[69],"Protocol":[70],"(MCP)":[71],"supply":[72],"chain":[73],"compromises.":[74],"Through":[75],"empirical":[76],"case":[77],"studies\u2014including":[78],"2026":[80],"Obsidian":[81],"plugin":[82],"abuse":[83],"Axios":[85],"npm":[86],"compromise\u2014we":[87],"analyze":[88],"how":[89],"actors":[91],"exploit":[92],"software":[93],"trust":[94],"deliver":[96],"backdoors.":[98],"Finally,":[99],"we":[100],"propose":[101],"a":[102],"multi-layered,":[103],"secure-by-design":[104],"architectural":[105],"framework":[106,118],"combining":[107],"Double-Agent":[108],"Semantic":[109],"Firewalls,":[110],"System":[111],"Vectors":[112],"(SysVec),":[113],"Cisco":[115],"SnortML.":[116],"shifts":[119],"enterprise":[120],"defense":[121],"perimeter-based":[123],"scanning":[124],"real-time,":[126],"runtime":[127],"reasoning":[128],"governance.":[129]},"counts_by_year":[],"updated_date":"2026-11-13T13:42:25.865203","created_date":"2026-08-28T00:00:00"}