{"id":"https://openalex.org/W7165815123","doi":"https://doi.org/10.48550/arxiv.2606.23927","title":"RIFT-Bench: Dynamic Red-teaming For Agentic AI Systems","display_name":"RIFT-Bench: Dynamic Red-teaming For Agentic AI Systems","publication_year":2026,"publication_date":"2026-06-22","ids":{"openalex":"https://openalex.org/W7165815123","doi":"https://doi.org/10.48550/arxiv.2606.23927"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.23927","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.23927","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.23927","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5117112732","display_name":"Yarin Yerushalmi Levi","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Levi, Yarin Yerushalmi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139225947","display_name":"Roy Betser","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Betser, Roy","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074215663","display_name":"Amit Giloni","orcid":"https://orcid.org/0000-0001-6496-0148"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Giloni, Amit","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139220292","display_name":"Lidor Erez","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Erez, Lidor","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120590274","display_name":"Itay Gershon","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gershon, Itay","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114475508","display_name":"Oren Rachmil","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rachmil, Oren","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123507215","display_name":"Sindhu Padakandla","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Padakandla, Sindhu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5139227673","display_name":"Roman Vainshtein","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Vainshtein, Roman","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6606000065803528,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6606000065803528,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.057100001722574234,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.032600000500679016,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6868000030517578},{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.5304999947547913},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5221999883651733},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5174000263214111},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5167999863624573},{"id":"https://openalex.org/keywords/limiting","display_name":"Limiting","score":0.4147999882698059},{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.3995000123977661}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6942999958992004},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6868000030517578},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.5304999947547913},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5221999883651733},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5174000263214111},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5167999863624573},{"id":"https://openalex.org/C188198153","wikidata":"https://www.wikidata.org/wiki/Q1613840","display_name":"Limiting","level":2,"score":0.4147999882698059},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.3995000123977661},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.374099999666214},{"id":"https://openalex.org/C136197465","wikidata":"https://www.wikidata.org/wiki/Q1729295","display_name":"Variety (cybernetics)","level":2,"score":0.3709000051021576},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.35920000076293945},{"id":"https://openalex.org/C204323151","wikidata":"https://www.wikidata.org/wiki/Q905424","display_name":"Range (aeronautics)","level":2,"score":0.3276999890804291},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.32330000400543213},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.3176000118255615},{"id":"https://openalex.org/C182620335","wikidata":"https://www.wikidata.org/wiki/Q2852531","display_name":"Answer set programming","level":3,"score":0.3140000104904175},{"id":"https://openalex.org/C2777362162","wikidata":"https://www.wikidata.org/wiki/Q5594431","display_name":"Grand Challenges","level":2,"score":0.27230000495910645},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2721000015735626},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.2653999924659729}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.23927","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.23927","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.23927","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.23927","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.7976950407028198,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Agentic":[0],"AI":[1,169],"systems":[2,127,145],"powered":[3],"by":[4],"large":[5],"language":[6],"models":[7],"(LLMs)":[8],"are":[9,28],"rapidly":[10],"evolving":[11],"into":[12],"autonomous":[13],"decision-making":[14],"systems,":[15],"exposing":[16],"attack":[17,111],"vectors":[18,112],"beyond":[19],"those":[20],"of":[21,104,119,132,153,167],"traditional":[22],"LLM":[23],"vulnerabilities.":[24],"Existing":[25],"security":[26,165],"evaluations":[27,59],"often":[29],"tied":[30],"to":[31,140],"specific":[32],"implementations":[33],"or":[34],"domains,":[35],"limiting":[36],"unified":[37,58],"comparison":[38],"across":[39,60,109,124],"heterogeneous":[40,141],"systems.":[41,170],"To":[42],"address":[43],"this":[44],"gap,":[45],"we":[46],"introduce":[47],"RIFT-Bench,":[48],"a":[49,66,90,101,129,161],"graph":[50],"representation-driven":[51],"methodology":[52],"for":[53,164],"dynamic":[54],"red-teaming":[55],"that":[56,135],"enables":[57],"diverse":[61,110,130],"agentic":[62,126,142,168],"architectures.":[63,143],"Building":[64],"on":[65],"novel":[67],"hierarchical":[68],"representation,":[69],"RIFT-Bench":[70,148,160],"operates":[71],"in":[72],"two":[73],"automated":[74],"phases:":[75],"Discovery,":[76],"which":[77,83],"extracts":[78],"system":[79,98],"structure,":[80],"and":[81,88,113,146],"Scanning,":[82],"deploys":[84],"adaptive":[85],"adversarial":[86,107],"attacks":[87],"produces":[89],"comprehensive":[91],"evaluation":[92,122,152,166],"report.":[93],"It":[94],"evaluates":[95],"the":[96,117,120,136],"examined":[97],"itself,":[99],"leveraging":[100],"broad":[102],"set":[103],"dynamically":[105],"adaptable":[106],"probes":[108],"objectives.":[114],"We":[115],"demonstrate":[116],"effectiveness":[118],"proposed":[121],"pipeline":[123],"45":[125],"spanning":[128],"range":[131],"implementations,":[133],"showing":[134],"approach":[137],"generalizes":[138],"effectively":[139],"Beyond":[144],"attacks,":[147],"also":[149],"supports":[150],"direct":[151],"mitigation":[154],"strategies.":[155],"These":[156],"key":[157],"capabilities":[158],"make":[159],"scalable":[162],"foundation":[163]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-25T00:00:00"}