mlsanityData to 14 Oct 2026

Securing Agentic AI: Threat Modeling and Risk Analysis for Network Monitoring Agentic AI System

arXiv 2508.10043 ↗First posted 12 Aug 2025cs.CR cs.AIcited by 6

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

When combining Large Language Models (LLMs) with autonomous agents, used in network monitoring and decision-making systems, this will create serious security issues. In this research, the MAESTRO framework consisting of the seven layers threat modeling architecture in the system was used to expose, evaluate, and eliminate vulnerabilities of agentic AI. The prototype agent system was constructed and implemented, using Python, LangChain, and telemetry in WebSockets, and deployed with inference, memory, parameter tuning, and anomaly detection modules. Two practical threat cases were confirmed as follows: (i) resource denial of service by traffic replay denial-of-service, and (ii) memory poisoning by tampering with the historical log file maintained by the agent. These situations resulted in measurable levels of performance degradation, i.e. telemetry updates were delayed, and computational loads were increased, as a result of poor system adaptations. It was suggested to use a multilayered defense-in-depth approach with memory isolation, validation of planners and anomaly response systems in real-time. These findings verify that MAESTRO is viable in operational threat mapping, prospective risk scoring, and the basis of the resilient system design. The authors bring attention to the importance of the enforcement of memory integrity, paying attention to the adaptation logic monitoring, and cross-layer communication protection that guarantee the agentic AI reliability in adversarial settings.

Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 12 of its 33 references that are in the map. First posted on arXiv 12 Aug 2025.

Builds on

12 of 33 references.

Closest ancestors · 1

Same direction, newest first

  1. 2024AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases17 Jul

Other references · 11

  1. 2018The Malicious Use of Artificial Intelligence: Forecasting, Prevention, and Mitigationcited by 165
  2. 2025Forewarned is Forearmed: A Survey on Large Language Model-based Agents in Autonomous Cyberattackscited by 16
  3. 2024Advancing Generalizable Remote Physiological Measurement through the Integration of Explicit and Implicit Prior Knowledgecited by 13
  4. 2024LLM-driven Imitation of Subrational Behavior : Illusion or Reality?cited by 12
  5. 2024Security Threats in Agentic AI Systemcited by 11
  6. 2023Optimizing delegation between human and AI collaborative agentscited by 9
  7. 2024Threat Modelling and Risk Analysis for Large Language Model (LLM)-Powered Applicationscited by 8
  8. 2023Survey on Memory-Augmented Neural Networks: Cognitive Insights to AI Applicationscited by 7
  9. 2023Autonomous Threat Hunting: A Future Paradigm for AI-Driven Threat Intelligencecited by 4
  10. 2024PILLAR: an AI-Powered Privacy Threat Modeling Toolcited by 4
  11. 2025Towards Pervasive Distributed Agentic Generative AI -- A State of The Artcited by 4

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 1; 2026: 5.

6 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025NetMoniAI: An Agentic AI Framework for Network Security & Monitoring
  2. 2026ProtoArena: Can AI Agents Discover and Exploit Real-World Cross-Component Protocol Vulnerabilities?
  3. 2025Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges
  4. 2025Automating Prompt Leakage Attacks on Large Language Models Using Agentic Approach
  5. 2026LLM-Based Agents for Software and Systems Security: Approaches, Applications, and Assessment
  6. 2026CHASE: LLM Agents for Dissecting Malicious PyPI Packages
  7. 2025Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms
  8. 2026ClawSentry: A Progressive Multi-Tier Security Monitor for Safeguarding Autonomous LLM Agents