{"id":"https://openalex.org/W4415134960","doi":"https://doi.org/10.1145/3779208.3785380","title":"ATAG: AI-Agent Application Threat Assessment with Attack Graphs","display_name":"ATAG: AI-Agent Application Threat Assessment with Attack Graphs","publication_year":2026,"publication_date":"2026-06-01","ids":{"openalex":"https://openalex.org/W4415134960","doi":"https://doi.org/10.1145/3779208.3785380"},"language":"en","primary_location":{"id":"doi:10.1145/3779208.3785380","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3779208.3785380","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2506.02859","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5116167489","display_name":"Parth Atulbhai Gandhi","orcid":null},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Parth Atulbhai Gandhi","raw_affiliation_strings":["Ben Gurion University of the Negev, Beer-Sheva, Israel"],"raw_orcid":"https://orcid.org/0000-0001-6063-1451","affiliations":[{"raw_affiliation_string":"Ben Gurion University of the Negev, Beer-Sheva, Israel","institution_ids":["https://openalex.org/I124227911"]}]},{"author_position":"middle","author":{"id":null,"display_name":"David Tayouri","orcid":"https://orcid.org/0000-0001-7745-1377"},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"David Tayouri","raw_affiliation_strings":["Ben-Gurion University of the Negev, Beer-Sheva, Israel"],"raw_orcid":"https://orcid.org/0000-0001-7745-1377","affiliations":[{"raw_affiliation_string":"Ben-Gurion University of the Negev, Beer-Sheva, Israel","institution_ids":["https://openalex.org/I124227911"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Akansha Shukla","orcid":"https://orcid.org/0000-0001-5622-8045"},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Akansha Shukla","raw_affiliation_strings":["Ben Gurion University of the Negev, Beer-Sheva, Israel"],"raw_orcid":"https://orcid.org/0000-0001-5622-8045","affiliations":[{"raw_affiliation_string":"Ben Gurion University of the Negev, Beer-Sheva, Israel","institution_ids":["https://openalex.org/I124227911"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104435494","display_name":"Beni Ifland","orcid":null},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Beni Ifland","raw_affiliation_strings":["Ben Gurion University of the Negev, Beer-Sheva, Israel"],"raw_orcid":"https://orcid.org/0009-0008-2952-5392","affiliations":[{"raw_affiliation_string":"Ben Gurion University of the Negev, Beer-Sheva, Israel","institution_ids":["https://openalex.org/I124227911"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072913672","display_name":"Yuval Elovici","orcid":"https://orcid.org/0000-0002-9641-128X"},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Yuval Elovici","raw_affiliation_strings":["Ben-Gurion University of the Negev, Beer-Sheva, Israel"],"raw_orcid":"https://orcid.org/0000-0002-9641-128X","affiliations":[{"raw_affiliation_string":"Ben-Gurion University of the Negev, Beer-Sheva, Israel","institution_ids":["https://openalex.org/I124227911"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059447087","display_name":"Rami Puzis","orcid":"https://orcid.org/0000-0002-7229-3899"},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Rami Puzis","raw_affiliation_strings":["Ben Gurion University of the Negev, Beer-Sheva, Israel"],"raw_orcid":"https://orcid.org/0000-0002-7229-3899","affiliations":[{"raw_affiliation_string":"Ben Gurion University of the Negev, Beer-Sheva, Israel","institution_ids":["https://openalex.org/I124227911"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5002391103","display_name":"Asaf Shabtai","orcid":"https://orcid.org/0000-0003-0630-4059"},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Asaf Shabtai","raw_affiliation_strings":["Ben Gurion University of the Negev, Beer-Sheva, Israel"],"raw_orcid":"https://orcid.org/0000-0003-0630-4059","affiliations":[{"raw_affiliation_string":"Ben Gurion University of the Negev, Beer-Sheva, Israel","institution_ids":["https://openalex.org/I124227911"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I124227911"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"805","last_page":"819"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9908000230789185,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9908000230789185,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9904000163078308,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10994","display_name":"Terrorism, Counterterrorism, and Political Violence","score":0.9894999861717224,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6822999715805054},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.617900013923645},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.6078000068664551},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.6025000214576721},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5338000059127808},{"id":"https://openalex.org/keywords/threat-assessment","display_name":"Threat assessment","score":0.5223000049591064},{"id":"https://openalex.org/keywords/attack-patterns","display_name":"Attack patterns","score":0.4219000041484833}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7445999979972839},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7081000208854675},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6822999715805054},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.617900013923645},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.6078000068664551},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.6025000214576721},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5338000059127808},{"id":"https://openalex.org/C2778868856","wikidata":"https://www.wikidata.org/wiki/Q18394273","display_name":"Threat assessment","level":2,"score":0.5223000049591064},{"id":"https://openalex.org/C2780741293","wikidata":"https://www.wikidata.org/wiki/Q4818019","display_name":"Attack patterns","level":3,"score":0.4219000041484833},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.35089999437332153},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.3273000121116638},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3167000114917755},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.3100999891757965},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.3034999966621399},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.2782000005245209},{"id":"https://openalex.org/C3018725008","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber threats","level":2,"score":0.25859999656677246},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.25519999861717224}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3779208.3785380","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3779208.3785380","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2506.02859","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2506.02859","pdf_url":"https://arxiv.org/pdf/2506.02859","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2506.02859","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2506.02859","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2506.02859","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2506.02859","pdf_url":"https://arxiv.org/pdf/2506.02859","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4415134960.pdf","grobid_xml":"https://content.openalex.org/works/W4415134960.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Evaluating":[0],"the":[1,18,24,37,63,72,101,108,130],"security":[2,64],"of":[3,17,27,95,110,192],"multi-agent":[4,124,182,196],"systems":[5,184],"(MASs)":[6],"powered":[7],"by":[8],"large":[9],"language":[10],"models":[11],"(LLMs)":[12],"is":[13,162],"challenging,":[14],"primarily":[15],"because":[16],"systems'":[19],"complex":[20,178],"internal":[21],"dynamics":[22],"and":[23,81,90,135,154,170,176,190],"evolving":[25],"nature":[26],"LLM":[28,102,112],"vulnerabilities.":[29],"Traditional":[30],"attack":[31,91,141,179],"graph":[32],"(AG)":[33],"methods":[34],"often":[35],"lack":[36],"specific":[38],"capabilities":[39],"to":[40,60,84,106,122,133,172],"model":[41,134],"attacks":[42],"on":[43],"LLMs.":[44],"This":[45],"paper":[46],"introduces":[47],"AI-agent":[48,68,87,193],"application":[49],"Threat":[50],"assessment":[51],"with":[52,67,78],"Attack":[53],"Graphs":[54],"(ATAG),":[55],"a":[56,167],"novel":[57],"framework":[58],"designed":[59],"systematically":[61],"analyze":[62],"risks":[65],"associated":[66],"applications.":[69,125,197],"ATAG":[70,161],"extends":[71],"MulVAL":[73],"logic-based":[74],"AG":[75],"generation":[76],"tool":[77],"custom":[79],"facts":[80],"interaction":[82],"rules":[83],"accurately":[85],"represent":[86],"topologies,":[88],"vulnerabilities,":[89],"scenarios.":[92],"As":[93],"part":[94],"this":[96],"research,":[97],"we":[98,119],"also":[99],"created":[100],"vulnerability":[103],"database":[104],"(LVD)":[105],"initiate":[107],"process":[109],"standardizing":[111],"vulnerabilities":[113,144],"documentation.":[114],"To":[115],"demonstrate":[116],"ATAG's":[117],"efficacy,":[118],"applied":[120],"it":[121],"two":[123],"Our":[126],"case":[127],"studies":[128],"demonstrated":[129],"framework's":[131],"ability":[132],"generate":[136],"AGs":[137],"for":[138],"sophisticated,":[139],"multi-step":[140],"scenarios":[142],"exploiting":[143],"such":[145],"as":[146],"prompt":[147],"injection,":[148],"excessive":[149],"agency,":[150],"sensitive":[151],"information":[152],"disclosure,":[153],"insecure":[155],"output":[156],"handling":[157],"across":[158],"interconnected":[159],"agents.":[160],"an":[163],"important":[164],"step":[165],"toward":[166],"robust":[168],"methodology":[169],"toolset":[171],"help":[173],"understand,":[174],"visualize,":[175],"prioritize":[177],"paths":[180],"in":[181,195],"AI":[183],"(MAASs).":[185],"It":[186],"facilitates":[187],"proactive":[188],"identification":[189],"mitigation":[191],"threats":[194]},"counts_by_year":[],"updated_date":"2026-07-21T08:15:58.654021","created_date":"2025-10-14T00:00:00"}