NetMoniAI: An Agentic AI Framework for Network Security & Monitoring
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
In this paper, we present NetMoniAI, an agentic AI framework for automatic network monitoring and security that integrates decentralized analysis with lightweight centralized coordination. The framework consists of two layers: autonomous micro-agents at each node perform local traffic analysis and anomaly detection. A central controller then aggregates insights across nodes to detect coordinated attacks and maintain system-wide situational awareness. We evaluated NetMoniAI on a local micro-testbed and through NS-3 simulations. Results confirm that the two-tier agentic-AI design scales under resource constraints, reduces redundancy, and improves response time without compromising accuracy. To facilitate broader adoption and reproducibility, the complete framework is available as open source. This enables researchers and practitioners to replicate, validate, and extend it across diverse network environments and threat scenarios. Github link: https://github.com/pzambare3/NetMoniAI
Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 3 of its 15 references that are in the map. First posted on arXiv 12 Aug 2025.
Builds on
3 of 15 references.
References · 3
Built on by
Citing papers per year: 2025: 1; 2026: 3.
4 papers.
- 2025CyberSleuth: Autonomous Blue-Team LLM Agent for Web Attack Forensicscited by 3
- 2026MA-IDS: Multi-Agent RAG Framework for IoT Network Intrusion Detection with an Experience Librarycited by 2
- 2026Multi-Agent Collaborative Intrusion Detection for Low-Altitude Economy IoT: An LLM-Enhanced Agentic AI Frameworkcited by 0
- 2026Policy-Guided Threat Hunting: An LLM enabled Framework with Splunk SOC Triagecited by 0
- 2026MA-IDS: Multi-Agent RAG Framework for IoT Network Intrusion Detection with an Experience Library7 Apr 2026
- 2026Policy-Guided Threat Hunting: An LLM enabled Framework with Splunk SOC Triage25 Mar 2026
- 2026Multi-Agent Collaborative Intrusion Detection for Low-Altitude Economy IoT: An LLM-Enhanced Agentic AI Framework25 Jan 2026
- 2025CyberSleuth: Autonomous Blue-Team LLM Agent for Web Attack Forensics28 Aug 2025
Similar, not cited
Close in wording, no citation either way
- 2026A Survey of Agentic AI and Cybersecurity: Challenges, Opportunities and Use-case Prototypes
- 2026Rethinking Agent Security as a Networking Problem
- 2026Agentic Network Traffic Monitoring
- 2025Systems Security Foundations for Agentic Computing
- 2025Agentic AI for Cyber Resilience: A New Security Paradigm and Its System-Theoretic Foundations
- 2025A Survey on Agentic Security: Applications, Threats and Defenses
- 2025AgenticCyber: A GenAI-Powered Multi-Agent System for Multimodal Threat Detection and Adaptive Response in Cybersecurity
- 2026ProtoArena: Can AI Agents Discover and Exploit Real-World Cross-Component Protocol Vulnerabilities?