{"id":"https://openalex.org/W4414973802","doi":"https://doi.org/10.1145/3786335.3813166","title":"Malice in Agentland: Down the Rabbit Hole of Backdoors in the AI Supply Chain","display_name":"Malice in Agentland: Down the Rabbit Hole of Backdoors in the AI Supply Chain","publication_year":2026,"publication_date":"2026-05-22","ids":{"openalex":"https://openalex.org/W4414973802","doi":"https://doi.org/10.1145/3786335.3813166"},"language":"en","primary_location":{"id":"doi:10.1145/3786335.3813166","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3786335.3813166","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Conference on AI and Agentic Systems","raw_type":"proceedings-article"},"type":"article","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3786335.3813166","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5094134758","display_name":"L\u00e9o Boisvert","orcid":null},"institutions":[{"id":"https://openalex.org/I4210164802","display_name":"Mila - Quebec Artificial Intelligence Institute","ror":"https://ror.org/05c22rx21","country_code":"CA","type":"facility","lineage":["https://openalex.org/I4210164802"]},{"id":"https://openalex.org/I45683168","display_name":"Polytechnique Montr\u00e9al","ror":"https://ror.org/05f8d4e86","country_code":"CA","type":"education","lineage":["https://openalex.org/I45683168"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"L\u00e9o Boisvert","raw_affiliation_strings":["ServiceNow Research, Mila -Quebec AI institute, Polytechnique Montr\u00e9al, Montr\u00e9al, QC, Canada"],"raw_orcid":"https://orcid.org/0009-0009-1106-2358","affiliations":[{"raw_affiliation_string":"ServiceNow Research, Mila -Quebec AI institute, Polytechnique Montr\u00e9al, Montr\u00e9al, QC, Canada","institution_ids":["https://openalex.org/I45683168","https://openalex.org/I4210164802"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103305840","display_name":"Abhay Puri","orcid":null},"institutions":[{"id":"https://openalex.org/I4210167196","display_name":"Minnow Environmental (Canada)","ror":"https://ror.org/05petyd50","country_code":"CA","type":"company","lineage":["https://openalex.org/I4210167196"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Abhay Puri","raw_affiliation_strings":["ServiceNow Research, Montr\u00e9al, QC, Canada"],"raw_orcid":"https://orcid.org/0009-0003-9370-0814","affiliations":[{"raw_affiliation_string":"ServiceNow Research, Montr\u00e9al, QC, Canada","institution_ids":["https://openalex.org/I4210167196"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5119770536","display_name":"Chandra Kiran Reddy Evuru","orcid":null},"institutions":[{"id":"https://openalex.org/I4210167039","display_name":"ServiceNow (United States)","ror":"https://ror.org/05xr0bc04","country_code":"US","type":"company","lineage":["https://openalex.org/I4210167039"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chandra Kiran Reddy Evuru","raw_affiliation_strings":["ServiceNow, Santa Clara, CA, USA"],"raw_orcid":"https://orcid.org/0009-0000-3285-3225","affiliations":[{"raw_affiliation_string":"ServiceNow, Santa Clara, CA, USA","institution_ids":["https://openalex.org/I4210167039"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Nazanin Mohammadi Sepahvand","orcid":"https://orcid.org/0000-0002-0717-0606"},"institutions":[{"id":"https://openalex.org/I4210167196","display_name":"Minnow Environmental (Canada)","ror":"https://ror.org/05petyd50","country_code":"CA","type":"company","lineage":["https://openalex.org/I4210167196"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Nazanin Mohammadi Sepahvand","raw_affiliation_strings":["ServiceNow Research, Montr\u00e9al, QC, Canada"],"raw_orcid":"https://orcid.org/0000-0002-0717-0606","affiliations":[{"raw_affiliation_string":"ServiceNow Research, Montr\u00e9al, QC, Canada","institution_ids":["https://openalex.org/I4210167196"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039831068","display_name":"Nicolas Chapados","orcid":"https://orcid.org/0000-0003-0249-7607"},"institutions":[{"id":"https://openalex.org/I45683168","display_name":"Polytechnique Montr\u00e9al","ror":"https://ror.org/05f8d4e86","country_code":"CA","type":"education","lineage":["https://openalex.org/I45683168"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Nicolas Chapados","raw_affiliation_strings":["Mila -Quebec AI institute, Polytechnique Montr\u00e9al, Montr\u00e9al, QC, Canada"],"raw_orcid":"https://orcid.org/0000-0003-0249-7607","affiliations":[{"raw_affiliation_string":"Mila -Quebec AI institute, Polytechnique Montr\u00e9al, Montr\u00e9al, QC, Canada","institution_ids":["https://openalex.org/I45683168"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065781444","display_name":"Quentin Cappart","orcid":"https://orcid.org/0000-0002-8742-0774"},"institutions":[{"id":"https://openalex.org/I4210164802","display_name":"Mila - Quebec Artificial Intelligence Institute","ror":"https://ror.org/05c22rx21","country_code":"CA","type":"facility","lineage":["https://openalex.org/I4210164802"]},{"id":"https://openalex.org/I45683168","display_name":"Polytechnique Montr\u00e9al","ror":"https://ror.org/05f8d4e86","country_code":"CA","type":"education","lineage":["https://openalex.org/I45683168"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Quentin Cappart","raw_affiliation_strings":["UCLouvain, Polytechnique Montr\u00e9al, Mila -Quebec AI institute, Montr\u00e9al, QC, Canada"],"raw_orcid":"https://orcid.org/0000-0002-8742-0774","affiliations":[{"raw_affiliation_string":"UCLouvain, Polytechnique Montr\u00e9al, Mila -Quebec AI institute, Montr\u00e9al, QC, Canada","institution_ids":["https://openalex.org/I45683168","https://openalex.org/I4210164802"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040248599","display_name":"Alexandre Lacoste","orcid":null},"institutions":[{"id":"https://openalex.org/I4210167196","display_name":"Minnow Environmental (Canada)","ror":"https://ror.org/05petyd50","country_code":"CA","type":"company","lineage":["https://openalex.org/I4210167196"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Alexandre Lacoste","raw_affiliation_strings":["ServiceNow Research, Montr\u00e9al, QC, Canada"],"raw_orcid":"https://orcid.org/0000-0002-8989-5052","affiliations":[{"raw_affiliation_string":"ServiceNow Research, Montr\u00e9al, QC, Canada","institution_ids":["https://openalex.org/I4210167196"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050954769","display_name":"Krishnamurthy Dvijotham","orcid":"https://orcid.org/0000-0002-1328-4677"},"institutions":[{"id":"https://openalex.org/I4210167039","display_name":"ServiceNow (United States)","ror":"https://ror.org/05xr0bc04","country_code":"US","type":"company","lineage":["https://openalex.org/I4210167039"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Krishnamurthy Dvijotham","raw_affiliation_strings":["ServiceNow Research, Santa Clara, CA, USA"],"raw_orcid":"https://orcid.org/0000-0002-1328-4677","affiliations":[{"raw_affiliation_string":"ServiceNow Research, Santa Clara, CA, USA","institution_ids":["https://openalex.org/I4210167039"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028239106","display_name":"Alexandre Drouin","orcid":"https://orcid.org/0000-0001-7718-0319"},"institutions":[{"id":"https://openalex.org/I4210167196","display_name":"Minnow Environmental (Canada)","ror":"https://ror.org/05petyd50","country_code":"CA","type":"company","lineage":["https://openalex.org/I4210167196"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Alexandre Drouin","raw_affiliation_strings":["ServiceNow Research, Montr\u00e9al, QC, Canada"],"raw_orcid":"https://orcid.org/0000-0001-7718-0319","affiliations":[{"raw_affiliation_string":"ServiceNow Research, Montr\u00e9al, QC, Canada","institution_ids":["https://openalex.org/I4210167196"]}]},{"author_position":"last","author":{"id":null,"display_name":"Jason Stanley","orcid":"https://orcid.org/0009-0003-9760-9671"},"institutions":[{"id":"https://openalex.org/I4210167196","display_name":"Minnow Environmental (Canada)","ror":"https://ror.org/05petyd50","country_code":"CA","type":"company","lineage":["https://openalex.org/I4210167196"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Jason Stanley","raw_affiliation_strings":["ServiceNow Research, Mon, QC, Canada"],"raw_orcid":"https://orcid.org/0009-0003-9760-9671","affiliations":[{"raw_affiliation_string":"ServiceNow Research, Mon, QC, Canada","institution_ids":["https://openalex.org/I4210167196"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.00268258,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"755","last_page":"772"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.9639999866485596,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.9639999866485596,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.7440999746322632},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6126000285148621},{"id":"https://openalex.org/keywords/vetting","display_name":"Vetting","score":0.5471000075340271},{"id":"https://openalex.org/keywords/malice","display_name":"Malice","score":0.4871000051498413},{"id":"https://openalex.org/keywords/flagging","display_name":"Flagging","score":0.44040000438690186},{"id":"https://openalex.org/keywords/supply-chain","display_name":"Supply chain","score":0.41920000314712524},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.41179999709129333},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.36570000648498535},{"id":"https://openalex.org/keywords/interdiction","display_name":"Interdiction","score":0.3653999865055084},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.35899999737739563}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7447999715805054},{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.7440999746322632},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6366999745368958},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6126000285148621},{"id":"https://openalex.org/C2777230681","wikidata":"https://www.wikidata.org/wiki/Q7923820","display_name":"Vetting","level":2,"score":0.5471000075340271},{"id":"https://openalex.org/C2778068216","wikidata":"https://www.wikidata.org/wiki/Q55019500","display_name":"Malice","level":2,"score":0.4871000051498413},{"id":"https://openalex.org/C2777548347","wikidata":"https://www.wikidata.org/wiki/Q5456937","display_name":"Flagging","level":2,"score":0.44040000438690186},{"id":"https://openalex.org/C108713360","wikidata":"https://www.wikidata.org/wiki/Q1824206","display_name":"Supply chain","level":2,"score":0.41920000314712524},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.41179999709129333},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.38679999113082886},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.36570000648498535},{"id":"https://openalex.org/C124119293","wikidata":"https://www.wikidata.org/wiki/Q6046081","display_name":"Interdiction","level":2,"score":0.3653999865055084},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.35899999737739563},{"id":"https://openalex.org/C2777363581","wikidata":"https://www.wikidata.org/wiki/Q15098235","display_name":"Harm","level":2,"score":0.3587000072002411},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.3538999855518341},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.3472000062465668},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.3165000081062317},{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.3151000142097473},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.3012000024318695},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.3003000020980835},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.29829999804496765},{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.29670000076293945},{"id":"https://openalex.org/C2779797433","wikidata":"https://www.wikidata.org/wiki/Q632959","display_name":"Blacklisting","level":2,"score":0.2919999957084656},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.2913999855518341},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.27649998664855957},{"id":"https://openalex.org/C13743948","wikidata":"https://www.wikidata.org/wiki/Q45842","display_name":"Web crawler","level":2,"score":0.27639999985694885},{"id":"https://openalex.org/C47487241","wikidata":"https://www.wikidata.org/wiki/Q5227230","display_name":"Data access","level":2,"score":0.2590000033378601},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.258899986743927},{"id":"https://openalex.org/C11392498","wikidata":"https://www.wikidata.org/wiki/Q11288","display_name":"Web server","level":3,"score":0.25679999589920044},{"id":"https://openalex.org/C60643870","wikidata":"https://www.wikidata.org/wiki/Q1949683","display_name":"Deterrence theory","level":2,"score":0.2551000118255615},{"id":"https://openalex.org/C40842320","wikidata":"https://www.wikidata.org/wiki/Q19423","display_name":"Buffer overflow","level":2,"score":0.25099998712539673},{"id":"https://openalex.org/C2780253743","wikidata":"https://www.wikidata.org/wiki/Q132382","display_name":"Presumption","level":2,"score":0.2500999867916107}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1145/3786335.3813166","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3786335.3813166","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Conference on AI and Agentic Systems","raw_type":"proceedings-article"},{"id":"pmh:oai:publications.polymtl.ca:78408","is_oa":false,"landing_page_url":"https://publications.polymtl.ca/78408/","pdf_url":null,"source":{"id":"https://openalex.org/S4306401013","display_name":"PolyPublie (\u00c9cole Polytechnique de Montr\u00e9al)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I45683168","host_organization_name":"Polytechnique Montr\u00e9al","host_organization_lineage":["https://openalex.org/I45683168"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"Communication de conf\u00e9rence"},{"id":"pmh:oai:arXiv.org:2510.05159","is_oa":true,"landing_page_url":"https://arxiv.org/abs/2510.05159","pdf_url":"https://arxiv.org/pdf/2510.05159","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2510.05159","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2510.05159","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.1145/3786335.3813166","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3786335.3813166","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Conference on AI and Agentic Systems","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"While":[0],"finetuning":[1],"AI":[2,24],"agents":[3],"on":[4],"interaction":[5],"data\u2014such":[6],"as":[7],"web":[8],"browsing":[9],"or":[10],"tool":[11],"use\u2014improves":[12],"their":[13],"capabilities,":[14],"it":[15],"also":[16],"introduces":[17],"critical":[18],"security":[19],"vulnerabilities":[20],"within":[21],"the":[22],"agentic":[23],"supply":[25],"chain.":[26]},"counts_by_year":[],"updated_date":"2026-05-24T06:10:38.904174","created_date":"2025-10-10T00:00:00"}