{"id":"https://openalex.org/W7155195206","doi":"https://doi.org/10.48550/arxiv.2604.18718","title":"Towards Optimal Agentic Architectures for Offensive Security Tasks","display_name":"Towards Optimal Agentic Architectures for Offensive Security Tasks","publication_year":2026,"publication_date":"2026-04-20","ids":{"openalex":"https://openalex.org/W7155195206","doi":"https://doi.org/10.48550/arxiv.2604.18718"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.18718","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.18718","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.18718","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102488506","display_name":"Isaac David","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"David, Isaac","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5063253761","display_name":"Arthur Gervais","orcid":"https://orcid.org/0000-0002-3565-3410"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gervais, Arthur","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.4242999851703644,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.4242999851703644,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.14409999549388885,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.09260000288486481,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/observability","display_name":"Observability","score":0.6629999876022339},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.6376000046730042},{"id":"https://openalex.org/keywords/core","display_name":"Core (optical fiber)","score":0.51910001039505},{"id":"https://openalex.org/keywords/offensive","display_name":"Offensive","score":0.4844000041484833},{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.46000000834465027},{"id":"https://openalex.org/keywords/baseline","display_name":"Baseline (sea)","score":0.44359999895095825},{"id":"https://openalex.org/keywords/binary-number","display_name":"Binary number","score":0.4377000033855438}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8640999794006348},{"id":"https://openalex.org/C36299963","wikidata":"https://www.wikidata.org/wiki/Q1369844","display_name":"Observability","level":2,"score":0.6629999876022339},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.6376000046730042},{"id":"https://openalex.org/C2164484","wikidata":"https://www.wikidata.org/wiki/Q5170150","display_name":"Core (optical fiber)","level":2,"score":0.51910001039505},{"id":"https://openalex.org/C176856949","wikidata":"https://www.wikidata.org/wiki/Q2001676","display_name":"Offensive","level":2,"score":0.4844000041484833},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.46000000834465027},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.44359999895095825},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.4377000033855438},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.38850000500679016},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.38839998841285706},{"id":"https://openalex.org/C199845137","wikidata":"https://www.wikidata.org/wiki/Q145490","display_name":"Network topology","level":2,"score":0.35839998722076416},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.3467000126838684},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.311599999666214},{"id":"https://openalex.org/C97399411","wikidata":"https://www.wikidata.org/wiki/Q825367","display_name":"Coin flipping","level":2,"score":0.310699999332428},{"id":"https://openalex.org/C125112378","wikidata":"https://www.wikidata.org/wiki/Q176640","display_name":"Randomness","level":2,"score":0.3027999997138977},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2937000095844269},{"id":"https://openalex.org/C111219384","wikidata":"https://www.wikidata.org/wiki/Q6954384","display_name":"NIST","level":2,"score":0.2847999930381775},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2565999925136566},{"id":"https://openalex.org/C78766204","wikidata":"https://www.wikidata.org/wiki/Q555032","display_name":"Multi-core processor","level":2,"score":0.25429999828338623}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.18718","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.18718","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.18718","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.18718","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.45107486844062805,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Agentic":[0],"security":[1],"systems":[2,12,37],"increasingly":[3],"audit":[4],"live":[5],"targets":[6,47],"with":[7,82],"tool-using":[8],"LLMs,":[9],"but":[10,180],"prior":[11],"fix":[13],"a":[14,41,83,171],"single":[15],"coordination":[16,176],"topology,":[17],"leaving":[18],"unclear":[19],"when":[20,25],"additional":[21],"agents":[22],"help":[23],"and":[24,50,62,78,101,135,146,157,189],"they":[26],"only":[27,89],"add":[28],"cost.":[29],"We":[30,39],"treat":[31],"topology":[32],"choice":[33],"as":[34],"an":[35],"empirical":[36],"question.":[38],"introduce":[40],"controlled":[42],"benchmark":[43],"of":[44],"20":[45],"interactive":[46],"(10":[48],"web/API":[49],"10":[51],"binary),":[52],"each":[53],"exposing":[54],"one":[55],"endpoint-reachable":[56],"ground-truth":[57],"vulnerability,":[58],"evaluated":[59],"in":[60,90],"whitebox":[61,162],"blackbox":[63,129],"modes.":[64],"The":[65,167],"core":[66,96],"study":[67],"executes":[68],"600":[69],"runs":[70],"over":[71],"five":[72],"architecture":[73],"families,":[74,77],"three":[75],"model":[76],"both":[79],"access":[80],"modes,":[81],"separate":[84],"60-run":[85],"long-context":[86],"pilot":[87],"reported":[88],"the":[91,94,108,117,152],"appendix.":[92],"On":[93],"completed":[95],"benchmark,":[97],"detection-any":[98],"reaches":[99,104],"58.0%":[100],"validated":[102,110,124,133],"detection":[103,111],"49.8%.":[105],"MAS-Indep":[106],"attains":[107],"highest":[109],"rate":[112],"(64.2%),":[113],"while":[114,159],"SAS":[115],"is":[116,170],"strongest":[118],"efficiency":[119],"baseline":[120],"at":[121],"$0.058":[122],"per":[123],"finding.":[125],"Whitebox":[126],"materially":[127,137],"outperforms":[128,138],"(67.0%":[130],"vs.":[131,141],"32.7%":[132],"detection),":[134],"web":[136],"binary":[139],"(74.3%":[140],"25.3%).":[142],"Bootstrap":[143],"confidence":[144],"intervals":[145],"paired":[147],"target-level":[148],"deltas":[149],"show":[150],"that":[151],"dominant":[153],"effects":[154],"are":[155,192],"observability":[156],"domain,":[158],"some":[160],"leading":[161],"topologies":[163],"remain":[164],"statistically":[165],"close.":[166],"main":[168],"result":[169],"non-monotonic":[172],"cost-quality":[173],"frontier:":[174],"broader":[175],"can":[177],"improve":[178],"coverage,":[179],"it":[181],"does":[182],"not":[183],"dominate":[184],"once":[185],"latency,":[186],"token":[187],"cost,":[188],"exploit-validation":[190],"difficulty":[191],"taken":[193],"into":[194],"account.":[195]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-04-23T00:00:00"}