mlsanityData to 7 Oct 2026

AI Native Asset Intelligence

arXiv 2605.09115 ↗First posted 9 May 2026cs.CR cs.AIcited by 1

Not on the map. Why?

Abstract (arXiv)

Modern security environments generate fragmented signals across cloud resources, identities, configurations, and third-party security tools. Although AI-native security assistants improve access to this data, they remain largely reactive: users must ask the right questions and interpret disconnected findings. This does not scale in enterprise environments, where signal importance depends on exposure, exploitability, dependencies, and business context. Repeated AI queries may therefore produce unstable prioritization without a structured basis for comparing assets. This paper introduces AI-native asset intelligence, a framework that transforms heterogeneous security data into a structured intelligence layer for consistent, contextual, and proactive asset-level reasoning. The framework combines a modeling layer, representing assets, identities, relationships, controls, attack vectors, and blast-radius patterns, with a scoring layer that converts fragmented signals into a normalized measure of asset importance. The scoring system separates intrinsic exposure, based on misconfigurations and attack-vector evidence, from contextual importance, based on anomaly, blast radius, business criticality, and data criticality. AI contextualization refines severity and business/data classifications, while deterministic aggregation preserves consistency. We evaluate the scoring system on a production snapshot with 131,625 resources across 15 vendors and 178 asset types. Sensitivity analyses and ablations show that severity mappings control finding sensitivity, AI severity adjustment refines prioritization, attack-vector scoring responds to rare exploitability evidence, and contextual modulation selectively modifies exposed resources based on business or data importance. The results support AI-native asset intelligence as a foundation for stable prioritization and proactive security-posture reasoning.

Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 15 of its 37 references that are in the map. First posted on arXiv 9 May 2026.

Builds on

15 of 37 references.

References · 15

  1. 2023Reasoning on Graphs: Faithful and Interpretable Large Language Model Reasoningcited by 326
  2. 2024ProSA: Assessing and Understanding the Prompt Sensitivity of LLMscited by 145
  3. 2024Efficient multi-prompt evaluation of LLMscited by 72
  4. 2024Large Language Models for Cyber Security: A Systematic Literature Reviewcited by 65
  5. 2025Flaw or Artifact? Rethinking Prompt Sensitivity in Evaluating LLMscited by 23
  6. 2019Exploit Prediction Scoring System (EPSS)cited by 21
  7. 2025CORTEX: Collaborative LLM Agents for High-Stakes Alert Triagecited by 14
  8. 2023Graph Mining for Cybersecurity: A Surveycited by 5
  9. 2024Toward Intelligent and Secure Cloud: Large Language Model Empowered Proactive Defensecited by 4
  10. 2025A Survey on Vulnerability Prioritization: Taxonomy, Metrics, and Research Challengescited by 4
  11. 2026Sola-Visibility-ISPM: Benchmarking Agentic AI for Identity Security Posture Management Visibilitycited by 3
  12. 2023Model Checking Access Control Policies: A Case Study using Google Cloud IAMcited by 2
3 more
  1. 2026Design and Implementation of an Open-Source Security Framework for Cloud Infrastructurecited by 2
  2. 2024Rethinking Software Misconfigurations in the Real World: An Empirical Study and Literature Analysiscited by 1
  3. 2026SecureCAI: Injection-Resilient LLM Assistants for Cybersecurity Operationscited by 1

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 1.

1 paper.