{"id":"https://openalex.org/W7165197086","doi":"https://doi.org/10.48550/arxiv.2606.18532","title":"AI Sandboxes: A Threat Model, Taxonomy, and Measurement Framework","display_name":"AI Sandboxes: A Threat Model, Taxonomy, and Measurement Framework","publication_year":2026,"publication_date":"2026-06-16","ids":{"openalex":"https://openalex.org/W7165197086","doi":"https://doi.org/10.48550/arxiv.2606.18532"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.18532","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.18532","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.18532","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5138886886","display_name":"Inderjeet Singh","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Singh, Inderjeet","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136079034","display_name":"Haitham Mahmoud","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mahmoud, Haitham","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5126902183","display_name":"Andr\u00e9s Murillo","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Murillo, Andr\u00e9s","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6434999704360962,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6434999704360962,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13295","display_name":"Safety Systems Engineering in Autonomy","score":0.14149999618530273,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.03759999945759773,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/sandbox","display_name":"Sandbox (software development)","score":0.9746999740600586},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.7630000114440918},{"id":"https://openalex.org/keywords/bounded-function","display_name":"Bounded function","score":0.3928999900817871},{"id":"https://openalex.org/keywords/embodied-cognition","display_name":"Embodied cognition","score":0.37209999561309814},{"id":"https://openalex.org/keywords/testbed","display_name":"Testbed","score":0.3594000041484833},{"id":"https://openalex.org/keywords/boundary","display_name":"Boundary (topology)","score":0.3452000021934509},{"id":"https://openalex.org/keywords/perspective","display_name":"Perspective (graphical)","score":0.3305000066757202},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.3206000030040741}],"concepts":[{"id":"https://openalex.org/C167981075","wikidata":"https://www.wikidata.org/wiki/Q2667186","display_name":"Sandbox (software development)","level":2,"score":0.9746999740600586},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.7630000114440918},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6632999777793884},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.47049999237060547},{"id":"https://openalex.org/C34388435","wikidata":"https://www.wikidata.org/wiki/Q2267362","display_name":"Bounded function","level":2,"score":0.3928999900817871},{"id":"https://openalex.org/C100609095","wikidata":"https://www.wikidata.org/wiki/Q1335050","display_name":"Embodied cognition","level":2,"score":0.37209999561309814},{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.3594000041484833},{"id":"https://openalex.org/C62354387","wikidata":"https://www.wikidata.org/wiki/Q875399","display_name":"Boundary (topology)","level":2,"score":0.3452000021934509},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3447999954223633},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.3305000066757202},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.3206000030040741},{"id":"https://openalex.org/C2780009758","wikidata":"https://www.wikidata.org/wiki/Q6804172","display_name":"Measure (data warehouse)","level":2,"score":0.31940001249313354},{"id":"https://openalex.org/C39389867","wikidata":"https://www.wikidata.org/wiki/Q380767","display_name":"Corporate governance","level":2,"score":0.30630001425743103},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2973000109195709},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2971000075340271},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.2727999985218048},{"id":"https://openalex.org/C2779619698","wikidata":"https://www.wikidata.org/wiki/Q176763","display_name":"Rules of evidence","level":2,"score":0.2703000009059906},{"id":"https://openalex.org/C153701036","wikidata":"https://www.wikidata.org/wiki/Q659974","display_name":"Trustworthiness","level":2,"score":0.2655999958515167},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.2572999894618988},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.2533000111579895},{"id":"https://openalex.org/C2777267654","wikidata":"https://www.wikidata.org/wiki/Q3519023","display_name":"Test (biology)","level":2,"score":0.25}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.18532","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.18532","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.18532","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.18532","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"AI":[0,58],"systems":[1],"are":[2],"increasingly":[3],"evaluated":[4],"in":[5],"bounded":[6,92],"environments":[7,62],"that":[8,104],"combine":[9],"isolation,":[10],"simulation,":[11],"instrumentation,":[12],"supervision,":[13],"and":[14,21,41,48,67,74,82,112,123,140,155,166],"evidence":[15,89,159],"capture.":[16],"For":[17],"physical":[18,44],"AI,":[19,71],"AIoT,":[20],"cyber-physical":[22,75,101],"systems,":[23],"this":[24],"shift":[25],"is":[26],"not":[27],"a":[28,83,91,100,114,145],"matter":[29],"of":[30,57,132,158],"terminology:":[31],"the":[32,79,108],"system":[33],"under":[34],"test":[35],"may":[36],"sense,":[37],"decide,":[38],"actuate,":[39],"communicate,":[40],"fail":[42],"through":[43],"processes,":[45],"networked":[46],"devices,":[47],"human":[49],"operators.":[50],"This":[51],"article":[52],"develops":[53],"an":[54],"assurance-oriented":[55],"account":[56],"sandboxes":[59],"as":[60],"controlled":[61],"for":[63,86,163],"testing,":[64],"evaluation,":[65],"verification,":[66],"validation":[68],"across":[69],"digital":[70],"embodied":[72],"autonomy,":[73],"deployments.":[76],"We":[77],"formalize":[78],"sandbox":[80,97,146],"boundary":[81],"weakest-link":[84],"rule":[85],"composing":[87],"per-dimension":[88],"into":[90],"deployment":[93],"claim;":[94],"separate":[95],"major":[96],"archetypes;":[98],"define":[99],"threat":[102,137],"model":[103],"includes":[105],"attacks":[106],"on":[107,127],"assurance":[109],"apparatus":[110],"itself;":[111],"introduce":[113],"measurement":[115,141],"framework":[116,142],"spanning":[117],"fidelity,":[118],"controllability,":[119],"observability,":[120],"containment,":[121],"reproducibility,":[122],"governance":[124],"artifacts,":[125],"instantiated":[126],"three":[128],"worked":[129],"case":[130],"studies":[131],"real":[133],"sandboxes.":[134],"The":[135],"resulting":[136],"model,":[138],"taxonomy,":[139],"clarify":[143],"what":[144,156],"can":[147,153,161],"validly":[148],"test,":[149],"which":[150],"risks":[151],"it":[152,160],"contain,":[154],"forms":[157],"support":[162],"safety,":[164],"security,":[165],"regulatory":[167],"assurance.":[168]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-19T00:00:00"}