Securing Agentic AI: Threat Modeling and Risk Analysis for Network Monitoring Agentic AI System
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
When combining Large Language Models (LLMs) with autonomous agents, used in network monitoring and decision-making systems, this will create serious security issues. In this research, the MAESTRO framework consisting of the seven layers threat modeling architecture in the system was used to expose, evaluate, and eliminate vulnerabilities of agentic AI. The prototype agent system was constructed and implemented, using Python, LangChain, and telemetry in WebSockets, and deployed with inference, memory, parameter tuning, and anomaly detection modules. Two practical threat cases were confirmed as follows: (i) resource denial of service by traffic replay denial-of-service, and (ii) memory poisoning by tampering with the historical log file maintained by the agent. These situations resulted in measurable levels of performance degradation, i.e. telemetry updates were delayed, and computational loads were increased, as a result of poor system adaptations. It was suggested to use a multilayered defense-in-depth approach with memory isolation, validation of planners and anomaly response systems in real-time. These findings verify that MAESTRO is viable in operational threat mapping, prospective risk scoring, and the basis of the resilient system design. The authors bring attention to the importance of the enforcement of memory integrity, paying attention to the adaptation logic monitoring, and cross-layer communication protection that guarantee the agentic AI reliability in adversarial settings.
Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 12 of its 33 references that are in the map. First posted on arXiv 12 Aug 2025.
Builds on
12 of 33 references.
Closest ancestors · 1
Same direction, newest first
Other references · 11
- 2018The Malicious Use of Artificial Intelligence: Forecasting, Prevention, and Mitigationcited by 165
- 2025Forewarned is Forearmed: A Survey on Large Language Model-based Agents in Autonomous Cyberattackscited by 16
- 2024Advancing Generalizable Remote Physiological Measurement through the Integration of Explicit and Implicit Prior Knowledgecited by 13
- 2024LLM-driven Imitation of Subrational Behavior : Illusion or Reality?cited by 12
- 2024Security Threats in Agentic AI Systemcited by 11
- 2023Optimizing delegation between human and AI collaborative agentscited by 9
- 2024Threat Modelling and Risk Analysis for Large Language Model (LLM)-Powered Applicationscited by 8
- 2023Survey on Memory-Augmented Neural Networks: Cognitive Insights to AI Applicationscited by 7
- 2023Autonomous Threat Hunting: A Future Paradigm for AI-Driven Threat Intelligencecited by 4
- 2024PILLAR: an AI-Powered Privacy Threat Modeling Toolcited by 4
- 2025Towards Pervasive Distributed Agentic Generative AI -- A State of The Artcited by 4
Built on by
Citing papers per year: 2025: 1; 2026: 5.
6 papers.
- 2026A Survey of Agentic AI and Cybersecurity: Challenges, Opportunities and Use-case Prototypescited by 22
- 2026AgenTRIM: Tool Risk Mitigation for Agentic AIcited by 11
- 2026When Bots Take the Bait: Exposing and Mitigating the Emerging Social Engineering Attack in Web Automation Agentcited by 7
- 2025From Failure Modes to Reliability Awareness in Generative and Agentic AI Systemcited by 1
- 2026A Systematic Review of Algorithmic Red Teaming Methodologies for Assurance and Security of AI Applicationscited by 1
- 2026Trust propagation and structural containment in Multi-agent LLM pipelinescited by 0
- 2026Trust propagation and structural containment in Multi-agent LLM pipelines15 Sep 2026
- 2026A Systematic Review of Algorithmic Red Teaming Methodologies for Assurance and Security of AI Applications24 Feb 2026
- 2026AgenTRIM: Tool Risk Mitigation for Agentic AI18 Jan 2026
- 2026When Bots Take the Bait: Exposing and Mitigating the Emerging Social Engineering Attack in Web Automation Agent12 Jan 2026
- 2026A Survey of Agentic AI and Cybersecurity: Challenges, Opportunities and Use-case Prototypes8 Jan 2026
- 2025From Failure Modes to Reliability Awareness in Generative and Agentic AI System24 Oct 2025
Similar, not cited
Close in wording, no citation either way
- 2025NetMoniAI: An Agentic AI Framework for Network Security & Monitoring
- 2026ProtoArena: Can AI Agents Discover and Exploit Real-World Cross-Component Protocol Vulnerabilities?
- 2025Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges
- 2025Automating Prompt Leakage Attacks on Large Language Models Using Agentic Approach
- 2026LLM-Based Agents for Software and Systems Security: Approaches, Applications, and Assessment
- 2026CHASE: LLM Agents for Dissecting Malicious PyPI Packages
- 2025Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms
- 2026ClawSentry: A Progressive Multi-Tier Security Monitor for Safeguarding Autonomous LLM Agents