{"id":"https://openalex.org/W7135199417","doi":"https://doi.org/10.48550/arxiv.2603.12230","title":"Security Considerations for Artificial Intelligence Agents","display_name":"Security Considerations for Artificial Intelligence Agents","publication_year":2026,"publication_date":"2026-03-12","ids":{"openalex":"https://openalex.org/W7135199417","doi":"https://doi.org/10.48550/arxiv.2603.12230"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.12230","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.12230","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.12230","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5129095644","display_name":"Ninghui Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Ninghui","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120388322","display_name":"Kaiyuan Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Kaiyuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120480516","display_name":"Kyle Polley","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Polley, Kyle","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5101481224","display_name":"Jerry Ma","orcid":"https://orcid.org/0000-0003-4853-0724"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ma, Jerry","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.1467999964952469,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.1467999964952469,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12203","display_name":"Mobile Agent-Based Network Management","score":0.14470000565052032,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.10670000314712524,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/delegation","display_name":"Delegation","score":0.6930999755859375},{"id":"https://openalex.org/keywords/principal","display_name":"Principal (computer security)","score":0.527899980545044},{"id":"https://openalex.org/keywords/nist","display_name":"NIST","score":0.4447999894618988},{"id":"https://openalex.org/keywords/enforcement","display_name":"Enforcement","score":0.41440001130104065},{"id":"https://openalex.org/keywords/privilege","display_name":"Privilege (computing)","score":0.4108000099658966},{"id":"https://openalex.org/keywords/core","display_name":"Core (optical fiber)","score":0.3871999979019165},{"id":"https://openalex.org/keywords/downgrade","display_name":"Downgrade","score":0.38530001044273376},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.3720000088214874},{"id":"https://openalex.org/keywords/sociotechnical-system","display_name":"Sociotechnical system","score":0.31929999589920044}],"concepts":[{"id":"https://openalex.org/C86532276","wikidata":"https://www.wikidata.org/wiki/Q1184065","display_name":"Delegation","level":2,"score":0.6930999755859375},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6665999889373779},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6269999742507935},{"id":"https://openalex.org/C144559511","wikidata":"https://www.wikidata.org/wiki/Q2986279","display_name":"Principal (computer security)","level":2,"score":0.527899980545044},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.4609000086784363},{"id":"https://openalex.org/C111219384","wikidata":"https://www.wikidata.org/wiki/Q6954384","display_name":"NIST","level":2,"score":0.4447999894618988},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.41440001130104065},{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.4108000099658966},{"id":"https://openalex.org/C2164484","wikidata":"https://www.wikidata.org/wiki/Q5170150","display_name":"Core (optical fiber)","level":2,"score":0.3871999979019165},{"id":"https://openalex.org/C2779628075","wikidata":"https://www.wikidata.org/wiki/Q1253258","display_name":"Downgrade","level":2,"score":0.38530001044273376},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.3720000088214874},{"id":"https://openalex.org/C127627568","wikidata":"https://www.wikidata.org/wiki/Q1639361","display_name":"Sociotechnical system","level":2,"score":0.31929999589920044},{"id":"https://openalex.org/C143273055","wikidata":"https://www.wikidata.org/wiki/Q2382794","display_name":"Delegate","level":2,"score":0.3172999918460846},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.31349998712539673},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.29840001463890076},{"id":"https://openalex.org/C2780262971","wikidata":"https://www.wikidata.org/wiki/Q44554","display_name":"Law enforcement","level":2,"score":0.29280000925064087},{"id":"https://openalex.org/C184356942","wikidata":"https://www.wikidata.org/wiki/Q830382","display_name":"Best practice","level":2,"score":0.27799999713897705},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.2745000123977661},{"id":"https://openalex.org/C2777402240","wikidata":"https://www.wikidata.org/wiki/Q6783436","display_name":"Masking (illustration)","level":2,"score":0.2662999927997589},{"id":"https://openalex.org/C20136886","wikidata":"https://www.wikidata.org/wiki/Q749647","display_name":"Interoperability","level":2,"score":0.26499998569488525},{"id":"https://openalex.org/C95423123","wikidata":"https://www.wikidata.org/wiki/Q622178","display_name":"Workgroup","level":2,"score":0.2630999982357025},{"id":"https://openalex.org/C2780027415","wikidata":"https://www.wikidata.org/wiki/Q524648","display_name":"Language change","level":2,"score":0.2630999982357025},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.26269999146461487},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.2583000063896179},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.25769999623298645},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.25600001215934753}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.12230","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.12230","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.12230","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.12230","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.7257267832756042,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"This":[0],"article,":[1],"a":[2,108],"lightly":[3],"adapted":[4],"version":[5],"of":[6,23,41,45],"Perplexity's":[7,32],"response":[8],"to":[9],"NIST/CAISI":[10],"Request":[11],"for":[12,121,137,144],"Information":[13],"2025-0035,":[14],"details":[15],"our":[16],"observations":[17],"and":[18,43,50,63,70,84,96,112,117,128,139,142],"recommendations":[19],"concerning":[20],"the":[21],"security":[22,133],"frontier":[24],"AI":[25],"agents.":[26],"These":[27],"insights":[28],"are":[29],"informed":[30],"by":[31,39],"experience":[33],"operating":[34],"general-purpose":[35],"agentic":[36],"systems":[37],"used":[38],"millions":[40],"users":[42],"thousands":[44],"enterprises":[46],"in":[47,99],"both":[48],"controlled":[49],"open-world":[51],"environments.":[52],"Agent":[53],"architectures":[54],"change":[55],"core":[56],"assumptions":[57],"around":[58],"code-data":[59],"separation,":[60],"authority":[61],"boundaries,":[62,83],"execution":[64],"predictability,":[65],"creating":[66],"new":[67],"confidentiality,":[68],"integrity,":[69],"availability":[71],"failure":[72],"modes.":[73],"We":[74,102],"map":[75],"principal":[76],"attack":[77],"surfaces":[78],"across":[79],"tools,":[80],"connectors,":[81],"hosting":[82],"multi-agent":[85,146],"coordination,":[86],"with":[87,150],"particular":[88],"emphasis":[89],"on":[90],"indirect":[91],"prompt":[92],"injection,":[93],"confused-deputy":[94],"behavior,":[95],"cascading":[97],"failures":[98],"long-running":[100],"workflows.":[101],"then":[103],"assess":[104],"current":[105],"defenses":[106],"as":[107],"layered":[109],"stack:":[110],"input-level":[111],"model-level":[113],"mitigations,":[114],"sandboxed":[115],"execution,":[116],"deterministic":[118],"policy":[119,135],"enforcement":[120],"high-consequence":[122],"actions.":[123],"Finally,":[124],"we":[125],"identify":[126],"standards":[127],"research":[129],"gaps,":[130],"including":[131],"adaptive":[132],"benchmarks,":[134],"models":[136],"delegation":[138],"privilege":[140],"control,":[141],"guidance":[143],"secure":[145],"system":[147],"design":[148],"aligned":[149],"NIST":[151],"risk":[152],"management":[153],"principles.":[154]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-03-14T00:00:00"}