{"id":"https://openalex.org/W7171486444","doi":"https://doi.org/10.48550/arxiv.2607.23365","title":"On AI Safety and Security Technical Debt in Engineering AI-Enabled Systems","display_name":"On AI Safety and Security Technical Debt in Engineering AI-Enabled Systems","publication_year":2026,"publication_date":"2026-07-25","ids":{"openalex":"https://openalex.org/W7171486444","doi":"https://doi.org/10.48550/arxiv.2607.23365"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2607.23365","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.23365","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2607.23365","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5143777733","display_name":"Muhammad Tukur","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tukur, Muhammad","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5143863189","display_name":"Hayatullahi B. Adeyemo","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Adeyemo, Hayatullahi B.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5143764879","display_name":"Tao Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Tao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5143785891","display_name":"Nour Ali","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ali, Nour","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067985992","display_name":"Anis Zarrad","orcid":"https://orcid.org/0000-0002-0422-4154"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zarrad, Anis","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102411014","display_name":"Rick Kazman","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kazman, Rick","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013856888","display_name":"Marco Agus","orcid":"https://orcid.org/0000-0003-2752-3525"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Agus, Marco","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5031155155","display_name":"Rami Bahsoon","orcid":"https://orcid.org/0000-0002-1139-5795"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bahsoon, Rami","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.541700005531311,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.541700005531311,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11636","display_name":"Artificial Intelligence in Healthcare and Education","score":0.17339999973773956,"subfield":{"id":"https://openalex.org/subfields/2718","display_name":"Health Informatics"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.15330000221729279,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/technical-debt","display_name":"Technical debt","score":0.6424000263214111},{"id":"https://openalex.org/keywords/documentation","display_name":"Documentation","score":0.42410001158714294},{"id":"https://openalex.org/keywords/liability","display_name":"Liability","score":0.4185999929904938},{"id":"https://openalex.org/keywords/software-quality","display_name":"Software quality","score":0.3799999952316284},{"id":"https://openalex.org/keywords/quality","display_name":"Quality (philosophy)","score":0.37290000915527344},{"id":"https://openalex.org/keywords/risk-management","display_name":"Risk management","score":0.34220001101493835},{"id":"https://openalex.org/keywords/fault-tree-analysis","display_name":"Fault tree analysis","score":0.31790000200271606},{"id":"https://openalex.org/keywords/reliability","display_name":"Reliability (semiconductor)","score":0.3001999855041504}],"concepts":[{"id":"https://openalex.org/C159198006","wikidata":"https://www.wikidata.org/wiki/Q1532172","display_name":"Technical debt","level":4,"score":0.6424000263214111},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.598800003528595},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.5332000255584717},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4474000036716461},{"id":"https://openalex.org/C56666940","wikidata":"https://www.wikidata.org/wiki/Q788790","display_name":"Documentation","level":2,"score":0.42410001158714294},{"id":"https://openalex.org/C2777834853","wikidata":"https://www.wikidata.org/wiki/Q96776939","display_name":"Liability","level":2,"score":0.4185999929904938},{"id":"https://openalex.org/C117447612","wikidata":"https://www.wikidata.org/wiki/Q1412670","display_name":"Software quality","level":4,"score":0.3799999952316284},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.37290000915527344},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.34220001101493835},{"id":"https://openalex.org/C107094494","wikidata":"https://www.wikidata.org/wiki/Q428453","display_name":"Fault tree analysis","level":2,"score":0.31790000200271606},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.3001999855041504},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.2793999910354614},{"id":"https://openalex.org/C24756922","wikidata":"https://www.wikidata.org/wiki/Q1757694","display_name":"Data quality","level":3,"score":0.2757999897003174},{"id":"https://openalex.org/C120527767","wikidata":"https://www.wikidata.org/wiki/Q3196867","display_name":"Debt","level":2,"score":0.2754000127315521},{"id":"https://openalex.org/C94279714","wikidata":"https://www.wikidata.org/wiki/Q6496962","display_name":"Safety engineering","level":2,"score":0.27219998836517334},{"id":"https://openalex.org/C83163435","wikidata":"https://www.wikidata.org/wiki/Q3954104","display_name":"Security management","level":2,"score":0.271699994802475},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.2669000029563904},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2628999948501587},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.262800008058548},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.2581000030040741},{"id":"https://openalex.org/C130963320","wikidata":"https://www.wikidata.org/wiki/Q1401207","display_name":"Root cause analysis","level":2,"score":0.2574000060558319},{"id":"https://openalex.org/C171078966","wikidata":"https://www.wikidata.org/wiki/Q111029","display_name":"Root (linguistics)","level":2,"score":0.2547999918460846}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2607.23365","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.23365","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2607.23365","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.23365","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Artificial":[0],"intelligence":[1],"(AI)":[2],"systems":[3,20],"are":[4,78,148],"increasingly":[5],"deployed":[6],"in":[7,240],"high-stakes":[8],"domains":[9],"such":[10],"as":[11,46],"healthcare,":[12],"autonomous":[13],"driving,":[14],"finance,":[15],"and":[16,24,31,69,80,93,107,127,140,172,187,194,218,221,244,253],"education.":[17],"While":[18],"these":[19,161,204],"offer":[21],"powerful":[22],"data-driven":[23],"adaptive":[25],"capabilities,":[26],"their":[27,250,255],"complexity,":[28],"rapid":[29],"evolution,":[30],"dependence":[32],"on":[33,124,203],"dynamic":[34],"data":[35,57],"pipelines":[36],"introduce":[37,207],"new":[38],"forms":[39],"of":[40,103,121,136,145,196],"engineering":[41],"liability":[42],"collectively":[43],"referred":[44],"to":[45,88,164,235],"AI":[47,85,104,125,200,230,237,242],"Technical":[48],"Debts":[49],"(AITDs).":[50],"AITDs":[51,77,197],"arise":[52],"from":[53],"root":[54,251],"causes":[55],"spanning":[56],"governance,":[58],"model":[59],"implementation,":[60],"algorithm":[61],"design,":[62],"architectural":[63],"decisions,":[64],"operational":[65],"processes,":[66],"documentation":[67],"practices,":[68],"testing":[70],"adequacy.":[71],"Unlike":[72],"conventional":[73],"technical":[74,115,129,246],"debt,":[75],"many":[76],"latent":[79],"propagate":[81],"across":[82,198],"tightly":[83],"coupled":[84],"pipelines,":[86],"leading":[87],"maintenance":[89],"challenges,":[90],"reliability":[91],"degradation,":[92],"heightened":[94],"safety":[95,126,170,186,243],"or":[96],"security":[97,128,174,245],"risks.":[98],"Guided":[99],"by":[100],"the":[101,118,179,191,199,214],"principles":[102],"Trust,":[105],"Risk,":[106],"Security":[108],"Management":[109],"(AI":[110],"TRiSM),":[111],"this":[112],"study":[113],"reinterprets":[114],"debt":[116],"through":[117],"interconnected":[119],"dimensions":[120],"trustworthiness,":[122],"focusing":[123],"debts.":[130],"We":[131],"conduct":[132],"a":[133,151,225],"systematic":[134],"review":[135,180],"60":[137],"primary":[138],"studies":[139],"identify":[141],"31":[142],"distinct":[143],"types":[144],"AITD,":[146],"which":[147],"organized":[149],"into":[150,224],"root-cause-oriented":[152],"taxonomy":[153],"comprising":[154],"seven":[155],"classes.":[156],"The":[157,232],"analysis":[158],"examines":[159],"how":[160],"debts":[162,247],"map":[163],"18":[165],"trust-related":[166],"concerns,":[167],"including":[168],"6":[169],"hazards":[171],"12":[173],"vulnerabilities.":[175],"To":[176],"support":[177],"mitigation,":[178],"synthesizes":[181],"34":[182],"actionable":[183],"guidelines":[184],"(8":[185],"26":[188],"security)":[189],"targeting":[190],"prevention,":[192],"detection,":[193],"reduction":[195],"lifecycle.":[201],"Building":[202],"findings,":[205],"we":[206],"AITD-MAP,":[208],"an":[209],"integrated":[210],"framework":[211,233],"that":[212],"connects":[213],"AITD":[215],"taxonomy,":[216],"quality":[217],"risk":[219],"impacts,":[220],"mitigation":[222],"strategies":[223],"unified":[226],"structure":[227],"for":[228],"risk-aware":[229],"engineering.":[231],"aims":[234],"assist":[236],"software":[238],"engineers":[239],"making":[241],"visible,":[248],"understanding":[249],"causes,":[252],"mitigating":[254],"presence.":[256]},"counts_by_year":[],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2026-07-29T00:00:00"}