{"id":"https://openalex.org/W7161690932","doi":"https://doi.org/10.48550/arxiv.2605.17380","title":"ADR: An Agentic Detection System for Enterprise Agentic AI Security","display_name":"ADR: An Agentic Detection System for Enterprise Agentic AI Security","publication_year":2026,"publication_date":"2026-05-17","ids":{"openalex":"https://openalex.org/W7161690932","doi":"https://doi.org/10.48550/arxiv.2605.17380"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.17380","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17380","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.17380","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135370976","display_name":"Chenning Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Chenning","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101435456","display_name":"Pan Hu","orcid":"https://orcid.org/0000-0003-1952-0666"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hu, Pan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136492454","display_name":"Justin Xu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xu, Justin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136456279","display_name":"Baris Ozbas","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ozbas, Baris","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136503413","display_name":"Olivia Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Olivia","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136476932","display_name":"Caroline Van","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Van, Caroline","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136454847","display_name":"Manxue Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Manxue","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136481810","display_name":"Wei Zhou","orcid":"https://orcid.org/0009-0002-8115-1793"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhou, Wei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136460611","display_name":"Mohammad Alizadeh","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Alizadeh, Mohammad","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136488679","display_name":"Pengyu Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Pengyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136486632","display_name":"KK Sriramadhesikan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sriramadhesikan, KK","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136473514","display_name":"Ming Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Ming","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.19519999623298645,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.19519999623298645,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.17110000550746918,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.0746999979019165,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.6646999716758728},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5390999913215637},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5383999943733215},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.4487000107765198},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.4277999997138977},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.4275999963283539},{"id":"https://openalex.org/keywords/observability","display_name":"Observability","score":0.3995000123977661},{"id":"https://openalex.org/keywords/triage","display_name":"Triage","score":0.37049999833106995}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7268999814987183},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.6646999716758728},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6412000060081482},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5390999913215637},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5383999943733215},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.4487000107765198},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.4277999997138977},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.4275999963283539},{"id":"https://openalex.org/C36299963","wikidata":"https://www.wikidata.org/wiki/Q1369844","display_name":"Observability","level":2,"score":0.3995000123977661},{"id":"https://openalex.org/C2777120189","wikidata":"https://www.wikidata.org/wiki/Q780067","display_name":"Triage","level":2,"score":0.37049999833106995},{"id":"https://openalex.org/C2989486834","wikidata":"https://www.wikidata.org/wiki/Q3808900","display_name":"True positive rate","level":2,"score":0.367000013589859},{"id":"https://openalex.org/C112789634","wikidata":"https://www.wikidata.org/wiki/Q18207010","display_name":"False positives and false negatives","level":3,"score":0.36000001430511475},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.34549999237060547},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.34220001101493835},{"id":"https://openalex.org/C2777810591","wikidata":"https://www.wikidata.org/wiki/Q16861606","display_name":"Credential","level":2,"score":0.33329999446868896},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.2978000044822693},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.2955000102519989},{"id":"https://openalex.org/C2777548347","wikidata":"https://www.wikidata.org/wiki/Q5456937","display_name":"Flagging","level":2,"score":0.29490000009536743},{"id":"https://openalex.org/C124119293","wikidata":"https://www.wikidata.org/wiki/Q6046081","display_name":"Interdiction","level":2,"score":0.2822999954223633},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.28209999203681946},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.2754000127315521},{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.2718999981880188},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.2694000005722046},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2515999972820282},{"id":"https://openalex.org/C2779356469","wikidata":"https://www.wikidata.org/wiki/Q502918","display_name":"Counterfeit","level":2,"score":0.2506999969482422}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.17380","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17380","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.17380","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17380","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.5840633511543274,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"We":[0,27],"present":[1],"the":[2,10,22,51,102,109,121,185],"Agentic":[3],"AI":[4,18],"Detection":[5,41],"and":[6,42,79,82,117,120,157,172,187],"Response":[7,43],"(ADR)":[8],"system,":[9],"first":[11],"large-scale,":[12],"production-proven":[13],"enterprise":[14,80],"framework":[15],"for":[16,105,112,124,138],"securing":[17],"agents":[19],"operating":[20],"through":[21],"Model":[23],"Context":[24],"Protocol":[25],"(MCP).":[26],"identify":[28],"three":[29,100,214,236],"persistent":[30],"challenges":[31,98],"in":[32,147,222],"this":[33],"domain:":[34],"(1)":[35],"limited":[36],"observability":[37],"--":[38,65,87,212],"existing":[39],"Endpoint":[40],"(EDR)":[44],"tools":[45],"see":[46],"file":[47],"writes":[48],"but":[49],"not":[50],"agent":[52,161],"reasoning,":[53],"prompts,":[54],"or":[55],"causal":[56],"chains":[57],"linking":[58],"intent":[59],"to":[60,73],"execution;":[61],"(2)":[62],"insufficient":[63],"robustness":[64],"static":[66],"defenses":[67],"constrained":[68],"by":[69,220],"pre-defined":[70],"rules":[71],"fail":[72],"generalize":[74],"across":[75,169],"diverse":[76],"attack":[77],"techniques":[78],"contexts;":[81],"(3)":[83],"high":[84],"detection":[85,128,146],"costs":[86],"LLM-based":[88],"inference":[89],"is":[90],"prohibitively":[91],"expensive":[92],"at":[93,136],"scale.":[94],"ADR":[95,103,110,122,142,202,230],"addresses":[96],"these":[97],"via":[99],"components:":[101],"Sensor":[104],"high-fidelity":[106],"agentic":[107],"telemetry,":[108],"Explorer":[111],"systematic":[113],"pre-deployment":[114],"red":[115],"teaming":[116],"hard-example":[118],"generation,":[119],"Detector":[123],"scalable,":[125],"two-tier":[126],"online":[127],"combining":[129],"fast":[130],"triage":[131],"with":[132,149,234],"context-aware":[133],"reasoning.":[134],"Deployed":[135],"Uber":[137],"over":[139,153,159],"ten":[140],"months,":[141],"has":[143],"sustained":[144],"reliable":[145],"production":[148],"growing":[150],"adoption":[151],"reaching":[152],"7,200":[154],"unique":[155],"hosts":[156],"processing":[158],"10,000":[160],"sessions":[162],"daily,":[163],"uncovering":[164],"hundreds":[165],"of":[166,210,240],"credential":[167],"exposures":[168],"26":[170],"categories":[171],"enabling":[173],"a":[174],"shift-left":[175],"prevention":[176],"layer":[177],"(97.2%":[178],"precision,":[179],"206":[180],"detected":[181],"credentials).":[182],"To":[183],"validate":[184],"approach":[186],"enable":[188],"community":[189],"adoption,":[190],"we":[191],"introduce":[192],"ADR-Bench":[193],"(302":[194],"tasks,":[195],"17":[196],"techniques,":[197],"133":[198],"MCP":[199],"servers),":[200],"where":[201],"achieves":[203],"zero":[204],"false":[205,237],"positives":[206],"while":[207],"detecting":[208],"67%":[209],"attacks":[211,233],"outperforming":[213],"state-of-the-art":[215],"baselines":[216],"(ALRPHFS,":[217],"GuardAgent,":[218],"LlamaFirewall)":[219],"2--4x":[221],"F1-score.":[223],"On":[224],"AgentDojo":[225],"(public":[226],"prompt":[227],"injection":[228],"benchmark),":[229],"detects":[231],"all":[232],"only":[235],"alarms":[238],"out":[239],"93":[241],"tasks.":[242]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-20T00:00:00"}