{"id":"https://openalex.org/W7170159520","doi":"https://doi.org/10.48550/arxiv.2607.20255","title":"The Ethics of Autonomous AI Agents for Offensive Security","display_name":"The Ethics of Autonomous AI Agents for Offensive Security","publication_year":2026,"publication_date":"2026-07-22","ids":{"openalex":"https://openalex.org/W7170159520","doi":"https://doi.org/10.48550/arxiv.2607.20255"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2607.20255","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.20255","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2607.20255","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5002108091","display_name":"Andreas Happe","orcid":"https://orcid.org/0009-0000-2484-0109"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Happe, Andreas","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5143529107","display_name":"J\u00fcrgen Cito","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cito, J\u00fcrgen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5082964903","display_name":"Jasmin Wachter","orcid":"https://orcid.org/0000-0003-0560-8974"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wachter, Jasmin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.2897999882698059,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.2897999882698059,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.13339999318122864,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.12189999967813492,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/offensive","display_name":"Offensive","score":0.9684000015258789},{"id":"https://openalex.org/keywords/agency","display_name":"Agency (philosophy)","score":0.5138999819755554},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.4796999990940094},{"id":"https://openalex.org/keywords/stakeholder","display_name":"Stakeholder","score":0.42820000648498535},{"id":"https://openalex.org/keywords/attribution","display_name":"Attribution","score":0.4036000072956085},{"id":"https://openalex.org/keywords/drone","display_name":"Drone","score":0.398499995470047},{"id":"https://openalex.org/keywords/population","display_name":"Population","score":0.34790000319480896},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.3458000123500824}],"concepts":[{"id":"https://openalex.org/C176856949","wikidata":"https://www.wikidata.org/wiki/Q2001676","display_name":"Offensive","level":2,"score":0.9684000015258789},{"id":"https://openalex.org/C108170787","wikidata":"https://www.wikidata.org/wiki/Q3951828","display_name":"Agency (philosophy)","level":2,"score":0.5138999819755554},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4884999990463257},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.4796999990940094},{"id":"https://openalex.org/C201305675","wikidata":"https://www.wikidata.org/wiki/Q852998","display_name":"Stakeholder","level":2,"score":0.42820000648498535},{"id":"https://openalex.org/C143299363","wikidata":"https://www.wikidata.org/wiki/Q900584","display_name":"Attribution","level":2,"score":0.4036000072956085},{"id":"https://openalex.org/C59519942","wikidata":"https://www.wikidata.org/wiki/Q650665","display_name":"Drone","level":2,"score":0.398499995470047},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.37290000915527344},{"id":"https://openalex.org/C39549134","wikidata":"https://www.wikidata.org/wiki/Q133080","display_name":"Public relations","level":1,"score":0.35670000314712524},{"id":"https://openalex.org/C2908647359","wikidata":"https://www.wikidata.org/wiki/Q2625603","display_name":"Population","level":2,"score":0.34790000319480896},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.3458000123500824},{"id":"https://openalex.org/C2780233690","wikidata":"https://www.wikidata.org/wiki/Q535347","display_name":"Transparency (behavior)","level":2,"score":0.3312999904155731},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3305000066757202},{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.3248000144958496},{"id":"https://openalex.org/C44725695","wikidata":"https://www.wikidata.org/wiki/Q288156","display_name":"Normative","level":2,"score":0.2971999943256378},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.289000004529953},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.28349998593330383},{"id":"https://openalex.org/C13687954","wikidata":"https://www.wikidata.org/wiki/Q4826847","display_name":"Autonomous agent","level":2,"score":0.27309998869895935},{"id":"https://openalex.org/C2779110517","wikidata":"https://www.wikidata.org/wiki/Q1240788","display_name":"Supervisor","level":2,"score":0.2703000009059906},{"id":"https://openalex.org/C190253527","wikidata":"https://www.wikidata.org/wiki/Q295354","display_name":"Law and economics","level":1,"score":0.2689000070095062},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.2680000066757202},{"id":"https://openalex.org/C2777211547","wikidata":"https://www.wikidata.org/wiki/Q17141490","display_name":"Training (meteorology)","level":2,"score":0.25619998574256897},{"id":"https://openalex.org/C121017731","wikidata":"https://www.wikidata.org/wiki/Q11661","display_name":"Information technology","level":2,"score":0.25110000371932983},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.2500999867916107}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2607.20255","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.20255","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2607.20255","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.20255","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"LLM-driven":[0],"autonomous":[1,176],"agents":[2,178],"are":[3,33,101,105],"reshaping":[4],"offensive":[5,93,126,180],"security.":[6,181],"Unlike":[7],"traditional":[8],"penetration-testing":[9],"tooling":[10],"-":[11,20],"deterministic,":[12],"narrowly":[13],"scoped,":[14],"and":[15,44,51,69,82,119,152,171,191],"operated":[16],"by":[17],"trained":[18],"practitioners":[19],"agentic":[21],"security":[22],"tools":[23],"exhibit":[24],"indeterminacy":[25],"along":[26],"three":[27,99],"independent":[28],"dimensions.":[29],"First,":[30],"their":[31,56,62,74],"actions":[32],"drawn":[34],"from":[35,108],"a":[36],"non-deterministic":[37,63],"policy":[38],"whose":[39],"outputs":[40],"resist":[41],"both":[42,80],"ex-ante":[43],"ex-post":[45],"explanation.":[46],"This":[47],"complicates":[48],"incident":[49],"attribution":[50,165],"pre-deployment":[52],"safety":[53],"reviews.":[54],"Second,":[55],"impact":[57,187],"is":[58,77],"open-ended":[59],"due":[60],"to":[61,146,156],"actions,":[64],"agency":[65],"of":[66,125,188],"utilized":[67],"models,":[68],"opaque":[70],"LLM":[71],"supply-chains.":[72],"Third,":[73],"user":[75],"population":[76],"indeterminate":[78],"in":[79,140],"size":[81],"required":[83],"skill:":[84],"the":[85,113,123,136,141,185],"operating":[86],"skill":[87],"floor":[88],"for":[89,179],"using":[90],"or":[91],"developing":[92],"capabilities":[94],"has":[95],"dropped":[96],"sharply.":[97],"These":[98],"properties":[100],"linked":[102],"thematically,":[103],"but":[104],"not":[106],"derivable":[107],"one":[109],"another.":[110],"Combined":[111],"with":[112],"structural":[114],"cost":[115],"asymmetry":[116],"between":[117,168],"offense":[118],"defense,":[120],"they":[121],"enable":[122],"industrialization":[124],"capability.":[127],"The":[128],"net":[129],"short-term":[130],"effect":[131],"favors":[132],"attackers,":[133],"even":[134],"if":[135],"same":[137],"technology":[138,190],"may,":[139],"long":[142],"run,":[143],"democratize":[144],"access":[145],"defensive":[147],"practice.":[148],"Existing":[149],"dual-use":[150],"cybersecurity":[151],"AI-ethics":[153],"frameworks":[154],"struggle":[155],"address":[157],"this":[158,189],"combination.":[159],"Our":[160],"work":[161],"analyzes":[162],"how":[163],"moral":[164],"becomes":[166],"diffuse":[167],"users,":[169],"tool-makers,":[170],"third":[172],"parties":[173],"when":[174],"employing":[175],"AI":[177],"We":[182],"also":[183],"examine":[184],"stakeholder":[186],"provide":[192],"stratified":[193],"recommendations.":[194]},"counts_by_year":[],"updated_date":"2026-08-11T07:18:39.950985","created_date":"2026-07-24T00:00:00"}