Securing Agentic AI Systems -- A Multilayer Security Framework
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
Securing Agentic Artificial Intelligence (AI) systems requires addressing the complex cyber risks introduced by autonomous, decision-making, and adaptive behaviors. Agentic AI systems are increasingly deployed across industries, organizations, and critical sectors such as cybersecurity, finance, and healthcare. However, their autonomy introduces unique security challenges, including unauthorized actions, adversarial manipulation, and dynamic environmental interactions. Existing AI security frameworks do not adequately address these challenges or the unique nuances of agentic AI. This research develops a lifecycle-aware security framework specifically designed for agentic AI systems using the Design Science Research (DSR) methodology. The paper introduces MAAIS, an agentic security framework, and the agentic AI CIAA (Confidentiality, Integrity, Availability, and Accountability) concept. MAAIS integrates multiple defense layers to maintain CIAA across the AI lifecycle. Framework validation is conducted by mapping with the established MITRE ATLAS (Adversarial Threat Landscape for Artificial-Intelligence Systems) AI tactics. The study contributes a structured, standardized, and framework-based approach for the secure deployment and governance of agentic AI in enterprise environments. This framework is intended for enterprise CISOs, security, AI platform, and engineering teams and offers a detailed step-by-step approach to securing agentic AI workloads.
Key facts. Cited by 3 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 1 of its 38 references that are in the map. First posted on arXiv 19 Dec 2025.
Builds on
1 of 38 references.
References · 1
Built on by
Citing papers per year: 2026: 3.
3 papers.
- 2026The Authorization-Execution Gap Is a Major Safety and Security Problem in Open-World Agentscited by 4
- 2026Agentic AI for Cybersecurity: A Meta-Cognitive Architecture for Governable Autonomycited by 0
- 2026Signals in the Noise: Open Source Intelligence (OSINT) for AI Loss of Control Detectioncited by 0
- 2026Signals in the Noise: Open Source Intelligence (OSINT) for AI Loss of Control Detection22 May 2026
- 2026The Authorization-Execution Gap Is a Major Safety and Security Problem in Open-World Agents10 May 2026
- 2026Agentic AI for Cybersecurity: A Meta-Cognitive Architecture for Governable Autonomy12 Feb 2026
Similar, not cited
Close in wording, no citation either way
- 2026The Attack and Defense Landscape of Agentic AI: A Comprehensive Survey
- 2025Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges
- 2026AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents
- 2025A Safety and Security Framework for Real-World Agentic Systems
- 2026A Survey of Agentic AI and Cybersecurity: Challenges, Opportunities and Use-case Prototypes
- 2026Security Considerations for Multi-agent Systems
- 2025Systems Security Foundations for Agentic Computing
- 2026Trustworthy Agentic AI: A Comprehensive Cybersecurity and Systems Survey on Threat Landscapes, Defense Architectures, and Open Challenges