{"id":"https://openalex.org/W7224228228","doi":"https://doi.org/10.5281/zenodo.23770195","title":"AIHPRA: Evidence-Led Multi-Agent Assessment for Web Application Security","display_name":"AIHPRA: Evidence-Led Multi-Agent Assessment for Web Application Security","publication_year":2026,"publication_date":"2026-10-29","ids":{"openalex":"https://openalex.org/W7224228228","doi":"https://doi.org/10.5281/zenodo.23770195"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.23770195","doi":"https://doi.org/10.5281/zenodo.23770195","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23770195","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.23770195","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5160101297","display_name":"Saifullah A","orcid":"https://orcid.org/0009-0001-7953-2426","observed_orcids":["https://orcid.org/0009-0001-7953-2426"]},"institutions":[{"id":"https://openalex.org/I43663321","display_name":"Hindustan Institute of Technology and Science","ror":"https://ror.org/037tgdn13","country_code":"IN","type":"education","lineage":["https://openalex.org/I43663321"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Saifullah A","raw_affiliation_strings":["Hindustan Institute of Technology & Science, Chennai, India"],"raw_orcid":"https://orcid.org/0009-0001-7953-2426","affiliations":[{"raw_affiliation_string":"Hindustan Institute of Technology & Science, Chennai, India","institution_ids":["https://openalex.org/I43663321"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5160082123","display_name":"harsha","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I43663321","display_name":"Hindustan Institute of Technology and Science","ror":"https://ror.org/037tgdn13","country_code":"IN","type":"education","lineage":["https://openalex.org/I43663321"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"harsha","raw_affiliation_strings":["Hindustan Institute of Technology & Science, Chennai, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hindustan Institute of Technology & Science, Chennai, India","institution_ids":["https://openalex.org/I43663321"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5160145531","display_name":"musharaf","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I43663321","display_name":"Hindustan Institute of Technology and Science","ror":"https://ror.org/037tgdn13","country_code":"IN","type":"education","lineage":["https://openalex.org/I43663321"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"musharaf","raw_affiliation_strings":["Hindustan Institute of Technology & Science, Chennai, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hindustan Institute of Technology & Science, Chennai, India","institution_ids":["https://openalex.org/I43663321"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5160100577","display_name":"sameer","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I43663321","display_name":"Hindustan Institute of Technology and Science","ror":"https://ror.org/037tgdn13","country_code":"IN","type":"education","lineage":["https://openalex.org/I43663321"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"sameer","raw_affiliation_strings":["Hindustan Institute of Technology & Science, Chennai, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hindustan Institute of Technology & Science, Chennai, India","institution_ids":["https://openalex.org/I43663321"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I43663321"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/web-application-security","display_name":"web application security","score":0.8799999952316284},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"vulnerability assessment","score":0.5649999976158142},{"id":"https://openalex.org/keywords/multi-agent-systems","display_name":"multi-agent systems","score":0.8309999704360962},{"id":"https://openalex.org/keywords/vulnerability-classification","display_name":"vulnerability classification","score":0.7979999780654907},{"id":"https://openalex.org/keywords/security-report-generation","display_name":"security report generation","score":0.7160000205039978},{"id":"https://openalex.org/keywords/claim-verification","display_name":"claim verification","score":0.5830000042915344}],"concepts":[{"id":"https://openalex.org/C2778012447","wikidata":"https://www.wikidata.org/wiki/Q1034415","display_name":"Scope (computer science)","level":2,"score":0.6862999796867371},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.6759999990463257},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6157000064849854},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.5921000242233276},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5105000138282776},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.45590001344680786},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.4544000029563904},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4359999895095825},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.42320001125335693},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.4043999910354614},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.39980000257492065},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.38920000195503235},{"id":"https://openalex.org/C2777267654","wikidata":"https://www.wikidata.org/wiki/Q3519023","display_name":"Test (biology)","level":2,"score":0.382099986076355},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.36739999055862427},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3643999993801117},{"id":"https://openalex.org/C77109596","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Application security","level":5,"score":0.3553999960422516},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3005000054836273},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.2973000109195709},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.296099990606308},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.2919999957084656},{"id":"https://openalex.org/C132964779","wikidata":"https://www.wikidata.org/wiki/Q2110223","display_name":"Raw data","level":2,"score":0.2912999987602234},{"id":"https://openalex.org/C25343380","wikidata":"https://www.wikidata.org/wiki/Q277521","display_name":"Relation (database)","level":2,"score":0.2849000096321106},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.2847000062465668},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2766000032424927},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.25920000672340393},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.25699999928474426},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2502000033855438}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.23770195","doi":"https://doi.org/10.5281/zenodo.23770195","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23770195","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},{"id":"doi:10.5281/zenodo.23770196","doi":"https://doi.org/10.5281/zenodo.23770196","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23770196","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.5281/zenodo.23770195","doi":"https://doi.org/10.5281/zenodo.23770195","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23770195","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7204486064","https://openalex.org/W7124151464","https://openalex.org/W7150079490","https://openalex.org/W4379875335","https://openalex.org/W7220830928","https://openalex.org/W4411714740","https://openalex.org/W6907516631","https://openalex.org/W7118086705","https://openalex.org/W4280523245","https://openalex.org/W7162873430"],"abstract_inverted_index":{"This":[0],"paper":[1,161],"presents":[2],"AIHPRA":[3,44],"(AI-Powered":[4],"Halluscope":[5,71],"Research":[6],"Agents),":[7],"a":[8,23,96,111,157],"local":[9],"research":[10,172],"prototype":[11,91],"designed":[12],"to":[13,178,185],"support":[14],"evidence-led":[15],"web":[16,180],"application":[17],"security":[18,57,181],"assessment.":[19],"The":[20,90,108,116,160],"system":[21,164],"follows":[22],"staged":[24],"workflow":[25],"that":[26],"separates":[27],"raw":[28],"observations,":[29],"their":[30],"interpretation,":[31],"and":[32,67,83,147,170,189,194],"recommended":[33],"fixes":[34],"while":[35],"maintaining":[36],"an":[37],"evidence":[38,59,193],"trail":[39],"for":[40,53,87],"each":[41],"reported":[42],"finding.":[43],"consists":[45],"of":[46,105],"thirteen":[47],"cooperating":[48],"software":[49],"components,":[50],"including":[51],"modules":[52],"scope":[54,146],"control,":[55],"reconnaissance,":[56],"testing,":[58],"verification,":[60],"vulnerability":[61],"classification,":[62],"claim":[63],"checking,":[64],"remediation":[65],"guidance,":[66],"report":[68],"generation.":[69],"Its":[70,174],"component":[72],"evaluates":[73],"the":[74,122,131,141,163],"claims":[75],"associated":[76],"with":[77,102,121],"findings":[78],"through":[79,191],"six":[80],"independent":[81],"checks":[82],"flags":[84],"doubtful":[85],"results":[86,118,183],"human":[88],"review.":[89],"was":[92,143],"evaluated":[93],"on":[94],"Nexa,":[95],"fictional":[97],"online":[98],"store":[99],"deliberately":[100],"created":[101],"eight":[103],"types":[104],"planted":[106,123],"weaknesses.":[107],"evaluation":[109,142],"used":[110],"controlled,":[112],"non-destructive":[113],"testing":[114,166],"approach.":[115],"initial":[117],"show":[119],"agreement":[120],"signals":[124],"in":[125,145],"this":[126],"specific":[127],"test":[128,152],"environment;":[129],"however,":[130],"study":[132],"does":[133],"not":[134,149],"establish":[135],"general":[136],"real-world":[137],"scanner":[138],"accuracy":[139],"because":[140],"limited":[144],"did":[148],"include":[150],"clean":[151],"pages,":[153],"competing":[154],"scanners,":[155],"or":[156],"reviewer":[158],"study.":[159],"describes":[162],"architecture,":[165],"methodology,":[167],"findings,":[168],"limitations,":[169],"future":[171],"directions.":[173],"main":[175],"objective":[176],"is":[177],"make":[179],"assessment":[182],"easier":[184],"inspect,":[186],"verify,":[187],"challenge,":[188],"remediate":[190],"transparent":[192],"clearly":[195],"separated":[196],"processing":[197],"stages.":[198]},"counts_by_year":[],"updated_date":"2026-11-01T11:40:01.658920","created_date":"2026-10-30T00:00:00"}