{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,24]],"date-time":"2026-06-24T18:50:43Z","timestamp":1782327043677,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":98,"publisher":"ACM","funder":[{"name":"National Science Foundation","award":["NSF-CICI-2232911"],"award-info":[{"award-number":["NSF-CICI-2232911"]}]},{"name":"Institute of Information & Communications Technology Planning & Evaluation (IITP)","award":["RS-2024-004398199"],"award-info":[{"award-number":["RS-2024-004398199"]}]},{"name":"Institute of Information & Communications Technology Planning & Evaluation (IITP)","award":["RS-2024-00442085"],"award-info":[{"award-number":["RS-2024-00442085"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,7,8]]},"DOI":"10.1145\/3750555.3811881","type":"proceedings-article","created":{"date-parts":[[2026,6,24]],"date-time":"2026-06-24T18:14:56Z","timestamp":1782324896000},"page":"236-245","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Towards Agentic AI for Access Control in Cyber-infrastructures: Exploring the Security and Human Factors: [BlueSky Paper]"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8931-6412","authenticated-orcid":false,"given":"Carlos","family":"Rubio-Medrano","sequence":"first","affiliation":[{"name":"Texas A&M University - Corpus Christi, Corpus Christi, Texas, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7228-2316","authenticated-orcid":false,"given":"Souradip","family":"Nath","sequence":"additional","affiliation":[{"name":"Arizona State University, Tempe, Arizona, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3045-5183","authenticated-orcid":false,"given":"Ananta","family":"Soneji","sequence":"additional","affiliation":[{"name":"Arizona State University, Tempe, Arizona, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-0221-2481","authenticated-orcid":false,"given":"Jennifer","family":"Mondragon","sequence":"additional","affiliation":[{"name":"Texas A&M University - Corpus Christi, Corpus Christi, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8588-3524","authenticated-orcid":false,"given":"Jaejong","family":"Baek","sequence":"additional","affiliation":[{"name":"Arizona State University, Tempe, Arizona, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4271-1666","authenticated-orcid":false,"given":"Gail-Joon","family":"Ahn","sequence":"additional","affiliation":[{"name":"Arizona State University, Tempe, Arizona, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,7,8]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Securing large language models: Threats, vulnerabilities and responsible practices. arXiv preprint arXiv preprint arXiv:2403.12503","author":"Abdali Sara","year":"2024","unstructured":"Sara Abdali, Richard Anarfi, Carlos J Barberan, Jia He, and Erfan Shayegani. 2024. Securing large language models: Threats, vulnerabilities and responsible practices. arXiv preprint arXiv preprint arXiv:2403.12503 (2024)."},{"key":"e_1_3_2_1_2_1","volume-title":"Formalizing the Safety, Security, and Functional Properties of Agentic AI Systems. arXiv preprint arXiv:2510.14133","author":"Allegrini Edoardo","year":"2025","unstructured":"Edoardo Allegrini, Ananth Shreekumar, and Z Berkay Celik. 2025. Formalizing the Safety, Security, and Functional Properties of Agentic AI Systems. arXiv preprint arXiv:2510.14133 (2025)."},{"key":"e_1_3_2_1_3_1","unstructured":"Arizona State University. 2024. Large-scale computational resources. https: \/\/cores.research.asu.edu\/research-computing\/about."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/3734436.3734438"},{"key":"e_1_3_2_1_5_1","volume-title":"https:\/\/github.com\/att\/xacml-3.0. [Online","author":"T.","year":"2021","unstructured":"AT&T. 2021. XACML-3.0. https:\/\/github.com\/att\/xacml-3.0. [Online; accessed June-20-2021]."},{"key":"e_1_3_2_1_6_1","volume-title":"HILTS: Human-LLM collaboration for effective data labeling. Information Systems","author":"Barbosa Juliana","year":"2025","unstructured":"Juliana Barbosa, Eduarda Alencar, Grace Fan, A\u00e9cio Santos, and Juliana Freire. 2025. HILTS: Human-LLM collaboration for effective data labeling. Information Systems (2025), 102660."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/3670009"},{"key":"e_1_3_2_1_8_1","first-page":"031","article-title":"CILogon: Enabling Federated Identity and Access Management for Scientific Collaborations","volume":"351","author":"Basney Jim","year":"2019","unstructured":"Jim Basney, Heather Flanagan, Terry Fleury, Jeff Gaynor, Scott Koranda, and Benn Oshrin. 2019. CILogon: Enabling Federated Identity and Access Management for Scientific Collaborations. Proc. of Science 351 (2019), 031.","journal-title":"Proc. of Science"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSEC.2021.3091195"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102436"},{"key":"e_1_3_2_1_11_1","volume-title":"Efficient prompting methods for large language models: A survey. arXiv preprint arXiv:2404.01077","author":"Chang Kaiyan","year":"2024","unstructured":"Kaiyan Chang, Songcheng Xu, Chenglong Wang, Yingfeng Luo, Xiaoqian Liu, Tong Xiao, and Jingbo Zhu. 2024. Efficient prompting methods for large language models: A survey. arXiv preprint arXiv:2404.01077 (2024)."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/3708359.3712156"},{"key":"e_1_3_2_1_13_1","volume-title":"Say what you mean: Natural language access control with large language models for internet of things. arXiv preprint arXiv:2505.23835","author":"Cheng Ye","year":"2025","unstructured":"Ye Cheng, Minghui Xu, Yue Zhang, Kun Li, Hao Wu, Yechao Zhang, Shaoyong Guo, Wangjie Qiu, Dongxiao Yu, and Xiuzhen Cheng. 2025. Say what you mean: Natural language access control with large language models for internet of things. arXiv preprint arXiv:2505.23835 (2025)."},{"key":"e_1_3_2_1_14_1","unstructured":"Katherine M Collins Ilia Sucholutsky Umang Bhatt Kartik Chandra Lionel Wong Mina Lee Cedegao E Zhang Tan Zhi-Xuan Mark Ho Vikash Mansinghka et al. 2024. Building machines that learn and think with people. Nature human behaviour 8 10 (2024) 1851-1863."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/3626772.3657834"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3712001"},{"key":"e_1_3_2_1_17_1","volume-title":"Beyond Jailbreaking: Auditing Contextual Privacy in LLM Agents. preprint arXiv:2506.10171","author":"Das Saswat","year":"2025","unstructured":"Saswat Das, Jameson Sandler, and Ferdinando Fioretto. 2025. Beyond Jailbreaking: Auditing Contextual Privacy in LLM Agents. preprint arXiv:2506.10171 (2025)."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/1377836.1377852"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCIS.2011.112"},{"key":"e_1_3_2_1_20_1","volume-title":"Multi-agent systems: an introduction to distributed artificial intelligence","author":"Ferber Jacques","unstructured":"Jacques Ferber and Gerhard Weiss. 1999. Multi-agent systems: an introduction to distributed artificial intelligence. Vol. 1. Addison-wesley Reading."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.csi.2024.103832"},{"key":"e_1_3_2_1_22_1","unstructured":"Yuyou Gan Yong Yang Zhe Ma Ping He Rui Zeng Yiming Wang Qingming Li Chunyi Zhou Songze Li Ting Wang et al. 2024. Navigating the risks: A survey of security privacy and ethics threats in llm-based agents. arXiv preprint arXiv:2411.09523 (2024)."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3605764.3623985"},{"key":"e_1_3_2_1_24_1","volume-title":"Proc. of the 29th ACM SACMAT. 41-46","author":"Mehri Gelareh Hasel","year":"2024","unstructured":"Gelareh Hasel Mehri, Tien Dung Le, Bram Cappers, Jerry Den Hartog, and Nicola Zannone. 2024. WiP: Enhancing the Comprehension of XACML Policies. In Proc. of the 29th ACM SACMAT. 41-46."},{"key":"e_1_3_2_1_25_1","volume-title":"Proc. of the 29th ACM SACMAT. 127-138","author":"Mehri Gelareh Hasel","year":"2024","unstructured":"Gelareh Hasel Mehri, Benjamin Monmege, Clara Bertolissi, and Nicola Zannone. 2024. A bargaining-game framework for multi-party access control. In Proc. of the 29th ACM SACMAT. 127-138."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/3734436.3734439"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/3716498"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1155\/2022\/6476274"},{"key":"e_1_3_2_1_29_1","first-page":"45","article-title":"Security of ai agents. In 2025 IEEE\/ACM Int.Workshop on Responsible AI Engineering (RAIE)","author":"He Yifeng","year":"2025","unstructured":"Yifeng He, EthanWang, Yuyang Rong, Zifei Cheng, and Hao Chen. 2025. Security of ai agents. In 2025 IEEE\/ACM Int.Workshop on Responsible AI Engineering (RAIE). IEEE, 45-52.","journal-title":"IEEE"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00117"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/1998441.1998472"},{"key":"e_1_3_2_1_32_1","first-page":"800","article-title":"Verification and test methods for access control policies\/models","volume":"800","author":"Hu Vincent C","year":"2017","unstructured":"Vincent C Hu, Rick Kuhn, Dylan Yaga, et al. 2017. Verification and test methods for access control policies\/models. NIST Special Pub. 800, 192 (2017), 800-192.","journal-title":"NIST Special Pub."},{"key":"e_1_3_2_1_33_1","volume-title":"Muhammad Zeeshan Baig, and Sree Bhargavi Balija","author":"Huang Ken","year":"2025","unstructured":"Ken Huang, Yasir Mehmood, Hammad Atta, Jerry Huang, Muhammad Zeeshan Baig, and Sree Bhargavi Balija. 2025. Fortifying the AgenticWeb: A Unified Zero- Trust Architecture Against Logic-layer Threats. arXiv preprint arXiv2508.12259 (2025)."},{"key":"e_1_3_2_1_34_1","volume-title":"John Yeoh, Jason Ross, Ramesh Raskar, Youssef Harkati, Jerry Huang, Idan Habler, and Chris Hughes.","author":"Huang Ken","year":"2025","unstructured":"Ken Huang, Vineeth Sai Narajala, John Yeoh, Jason Ross, Ramesh Raskar, Youssef Harkati, Jerry Huang, Idan Habler, and Chris Hughes. 2025. A novel zero-trust identity framework for agentic AI: Decentralized authentication and fine-grained access control. arXiv preprint arXiv:2505.19301 (2025)."},{"key":"e_1_3_2_1_35_1","volume-title":"To Trust or Not to Trust? Enhancing Large Language Models' Situated Faithfulness to External Contexts. arXiv preprint arXiv:2410.14675","author":"Huang Yukun","year":"2024","unstructured":"Yukun Huang, Sanxing Chen, Hongyi Cai, and Bhuwan Dhingra. 2024. To Trust or Not to Trust? Enhancing Large Language Models' Situated Faithfulness to External Contexts. arXiv preprint arXiv:2410.14675 (2024)."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/990036.990053"},{"key":"e_1_3_2_1_37_1","volume-title":"Nalin Asanka Gamagedara Arachchilage, and Giovanni Russello","author":"Jayasundara Sakuna Harinda","year":"2024","unstructured":"Sakuna Harinda Jayasundara, Nalin Asanka Gamagedara Arachchilage, and Giovanni Russello. 2024. Ragent: Retrieval-based access control policy generation. arXiv preprint arXiv:2409.07489 (2024)."},{"key":"e_1_3_2_1_38_1","volume-title":"Taming Various Privilege Escalation in LLMBased Agent Systems: A Mandatory Access Control Framework. arXiv preprint arXiv:2601.11893","author":"Ji Zimo","year":"2026","unstructured":"Zimo Ji, Daoyuan Wu, Wenyuan Jiang, Pingchuan Ma, Zongjie Li, Yudong Gao, Shuai Wang, and Yingjiu Li. 2026. Taming Various Privilege Escalation in LLMBased Agent Systems: A Mandatory Access Control Framework. arXiv preprint arXiv:2601.11893 (2026)."},{"key":"e_1_3_2_1_39_1","volume-title":"Khair Eddin Sabri, and Nadim Obeid","author":"Abu Kaf Hebah I","year":"2026","unstructured":"Hebah I Abu Kaf, Khair Eddin Sabri, and Nadim Obeid. 2026. Temporal Defeasible Role-Group-Task Access Control: A Logic-Based Framework for Explainable Authorization. IEEE Access (2026)."},{"key":"e_1_3_2_1_40_1","volume-title":"Forty-first Int. Conf. on Machine Learning.","author":"Kambhampati Subbarao","year":"2024","unstructured":"Subbarao Kambhampati, Karthik Valmeekam, Lin Guan, Mudit Verma, Kaya Stechly, Siddhant Bhambri, Lucas Paul Saldyt, and Anil B Murthy. 2024. Position: LLMs can't plan, but can help planning in LLM-modulo frameworks. In Forty-first Int. Conf. on Machine Learning."},{"key":"e_1_3_2_1_41_1","volume-title":"Role-Conditioned Refusals: Evaluating Access Control Reasoning in Large Language Models. arXiv preprint arXiv:2510.07642","author":"Khoury Joseph","year":"2025","unstructured":"\u00d0or?e Klisura, Joseph Khoury, Ashish Kundu, Ram Krishnan, and Anthony Rios. 2025. Role-Conditioned Refusals: Evaluating Access Control Reasoning in Large Language Models. arXiv preprint arXiv:2510.07642 (2025)."},{"key":"e_1_3_2_1_42_1","unstructured":"Dezhang Kong Shi Lin Zhenhua Xu Zhebo Wang Minghao Li Yufeng Li Yilun Zhang Hujin Peng Xiang Chen Zeyang Sha et al. 2025. A survey of llm-driven ai agent communication: Protocols security risks and defense countermeasures. arXiv preprint arXiv:2506.19676 (2025)."},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.4018\/978-1-4666-6324-4.ch001"},{"key":"e_1_3_2_1_44_1","volume-title":"Sagarika Singh, and Swathy Ragupathy.","author":"Kumar Ashutosh","year":"2024","unstructured":"Ashutosh Kumar, Shiv Vignesh Murthy, Sagarika Singh, and Swathy Ragupathy. 2024. The ethics of interaction: Mitigating security threats in llms. arXiv preprint arXiv:2401.12273 (2024)."},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-91293-2_1"},{"key":"e_1_3_2_1_46_1","volume-title":"Llm-pbe: Assessing data privacy in large language models. preprint arXiv:2408.12787","author":"Li Qinbin","year":"2024","unstructured":"Qinbin Li, Junyuan Hong, Chulin Xie, Jeffrey Tan, Rachel Xin, Junyi Hou, Xavier Yin, Zhun Wang, Dan Hendrycks, Zhangyang Wang, et al. 2024. Llm-pbe: Assessing data privacy in large language models. preprint arXiv:2408.12787 (2024)."},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/3696630.3728533"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/3733816.3760753"},{"key":"e_1_3_2_1_49_1","volume-title":"Proc. of the 29th ACM SACMAT","author":"Mondragon Jennifer","year":"2024","unstructured":"Jennifer Mondragon, Gael Cruz, Dvijesh Shastri, and Carlos E. Rubio-Medrano. 2024. Circles of Trust: A Voice-Based Authorization Scheme for Securing IoT Smart Homes. In Proc. of the 29th ACM SACMAT (San Antonio, TX, USA) (SACMAT 2024). Association for Computing Machinery, New York, NY, USA, 193-195."},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00197"},{"key":"e_1_3_2_1_51_1","volume-title":"Towards Collaboration-Aware Resource Sharing in Research Computing Infrastructures. In The 10th IEEE Int. Conf. on Collaboration and Internet Computing (CIC","author":"Nath Souradip","year":"2025","unstructured":"Souradip Nath, Ananta Soneji, Jaejong Baek, Carlos Rubio Medrano, and Gail- Joon Ahn. 2025. Towards Collaboration-Aware Resource Sharing in Research Computing Infrastructures. In The 10th IEEE Int. Conf. on Collaboration and Internet Computing (CIC 2025). 10."},{"key":"e_1_3_2_1_52_1","volume-title":"Role-Based Access Control\u2014RBAC. https:\/\/csrc.nist.gov\/projects\/role-based-access-control# economic-impact. [Online","author":"National Institute of Standards and Technology. 2020.","year":"2026","unstructured":"National Institute of Standards and Technology. 2020. Role-Based Access Control\u2014RBAC. https:\/\/csrc.nist.gov\/projects\/role-based-access-control# economic-impact. [Online; accessed May-4-2026]."},{"key":"e_1_3_2_1_53_1","volume-title":"CAESARS Framework Extension: An Enterprise Continuous Monitoring Technical Reference Architecture. https:\/\/csrc.nist.gov\/pubs\/ir\/7756\/2pd [Online","author":"National Institute of Standards and Technology (NIST). 2025.","year":"2026","unstructured":"National Institute of Standards and Technology (NIST). 2025. CAESARS Framework Extension: An Enterprise Continuous Monitoring Technical Reference Architecture. https:\/\/csrc.nist.gov\/pubs\/ir\/7756\/2pd [Online; accessed May-4-2026]."},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2017.2781126"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1145\/3701716.3715463"},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"crossref","unstructured":"Nitish Ojha and Abhishek Vaish. 2025. In Zero-Trust Learning. Apple Academic Press 305-328.","DOI":"10.1201\/9781779643575-15"},{"key":"e_1_3_2_1_57_1","volume-title":"Trustworthy AI in Practice: A Comprehensive Review of Human Oversight and Human-in-the-Loop Approaches. Authorea Preprints","author":"Olatunji Ottun Abdul-Rasheed","year":"2025","unstructured":"Abdul-Rasheed Olatunji Ottun and Huber Flores. 2025. Trustworthy AI in Practice: A Comprehensive Review of Human Oversight and Human-in-the-Loop Approaches. Authorea Preprints (2025)."},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","unstructured":"Sean Peisert Von Welch Andrew Adams RuthAnne Bevier Michael Dopheide Rich LeDuc Pascal Meunier Steve Schwab and Karen Stocks. 2017. Open Science Cyber Risk Profile (OSCRP). doi:10.5281\/zenodo.7268749","DOI":"10.5281\/zenodo.7268749"},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.36227\/techrxiv.177075184.43798334\/v1"},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.3390\/app152211854"},{"key":"e_1_3_2_1_61_1","volume-title":"International Conf. on machine learning. PMLR, 2817-2826","author":"Pinto Lerrel","year":"2017","unstructured":"Lerrel Pinto, James Davidson, Rahul Sukthankar, and Abhinav Gupta. 2017. Robust adversarial reinforcement learning. In International Conf. on machine learning. PMLR, 2817-2826."},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.3390\/fi17010035"},{"key":"e_1_3_2_1_63_1","unstructured":"rci-asu [n.d.]. RC - Arizona State University. https:\/\/cores.research.asu.edu\/ research-computing\/about. Accessed: 2026-01-15."},{"key":"e_1_3_2_1_64_1","unstructured":"rci-ub [n.d.]. RCI\u2014University at Buffalo. https:\/\/www.buffalo.edu\/ccr\/services\/ high-performance-computing.html. Accessed: 2025-05-28."},{"key":"e_1_3_2_1_65_1","unstructured":"rci-uch [n.d.]. RCI\u2014Ohio State College of Medicine. https:\/\/medicine.osu.edu\/ research\/research-information-technology\/services-and-products\/researchcomputing- infrastructure. Accessed: 2025-05-28."},{"key":"e_1_3_2_1_66_1","volume-title":"Handbook of Human-Centered Artificial Intelligence","author":"Rezaei Hirad","unstructured":"Hirad Rezaei, Amin Beheshti, and Fethi Rabhi. 2025. Training LLM with Human Feedback. In Handbook of Human-Centered Artificial Intelligence. Springer, 1-62."},{"key":"e_1_3_2_1_67_1","volume-title":"20th Symp. on Usable Privacy and Security. 41-60","author":"Roch Neele","year":"2024","unstructured":"Neele Roch, Hannah Sievers, Lorin Sch\u00f6ni, and Verena Zimmermann. 2024. Navigating autonomy: unveiling security experts' perspectives on augmented intelligence in cybersecurity. In 20th Symp. on Usable Privacy and Security. 41-60."},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800-207"},{"key":"e_1_3_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.1145\/3649158.3657032"},{"key":"e_1_3_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.1145\/3140549.3140553"},{"key":"e_1_3_2_1_71_1","doi-asserted-by":"publisher","DOI":"10.1145\/2752952.2752977"},{"key":"e_1_3_2_1_72_1","doi-asserted-by":"crossref","unstructured":"Zaynab Sai'd. 2025. Explainable AI (XAI) in Identity Access Management: Bridging Trust and Transparency in User Authentication. (2025).","DOI":"10.22541\/au.175207868.84087923\/v1"},{"key":"e_1_3_2_1_73_1","first-page":"88","article-title":"Zero-trust hierarchical management in IoT. In 2018 IEEE Int. congress on Internet of Things (ICIOT)","author":"Samaniego Mayra","year":"2018","unstructured":"Mayra Samaniego and Ralph Deters. 2018. Zero-trust hierarchical management in IoT. In 2018 IEEE Int. congress on Internet of Things (ICIOT). IEEE, 88-95.","journal-title":"IEEE"},{"key":"e_1_3_2_1_74_1","doi-asserted-by":"publisher","DOI":"10.1109\/2.485845"},{"key":"e_1_3_2_1_75_1","volume-title":"Shirish Karande, Mohan Kankanhalli, and Murari Mandal.","author":"Sanyal Debdeep","year":"2025","unstructured":"Debdeep Sanyal, Umakanta Maharana, Yash Sinha, Hong Ming Tan, Shirish Karande, Mohan Kankanhalli, and Murari Mandal. 2025. Orgaccess: A benchmark for role based access control in organization scale llms. arXiv preprint arXiv:2505.19165 (2025)."},{"key":"e_1_3_2_1_76_1","volume-title":"Understanding and Mitigating Data Poisoning in LLMs. In 2025 Int. Conf. on Responsible, Generative and Explainable AI (ResGenXAI). IEEE, 1-4.","author":"Shah Atharva","year":"2025","unstructured":"Atharva Shah, Ishani Mathur, and Harshil Kanakia. 2025. Understanding and Mitigating Data Poisoning in LLMs. In 2025 Int. Conf. on Responsible, Generative and Explainable AI (ResGenXAI). IEEE, 1-4."},{"key":"e_1_3_2_1_77_1","volume-title":"Conf. on network and system security. IEEE, 144-151","author":"Sharma Aashish","year":"2010","unstructured":"Aashish Sharma, Zbigniew Kalbarczyk, R Iyer, and James Barlow. 2010. Analysis of credential stealing attacks in an open networked environment. In 2010 fourth Int. Conf. on network and system security. IEEE, 144-151."},{"key":"e_1_3_2_1_78_1","unstructured":"Mrinank Sharma Meg Tong Tomasz Korbak David Duvenaud Amanda Askell Samuel R Bowman Newton Cheng Esin Durmus Zac Hatfield-Dodds Scott R Johnston et al. 2023. Towards understanding sycophancy in language models. arXiv preprint arXiv:2310.13548 (2023)."},{"key":"e_1_3_2_1_79_1","volume-title":"Progent: Programmable privilege control for llm agents. arXiv preprint arXiv:2504.11703","author":"Shi Tianneng","year":"2025","unstructured":"Tianneng Shi, Jingxuan He, Zhun Wang, Hongwei Li, Linyu Wu, Wenbo Guo, and Dawn Song. 2025. Progent: Programmable privilege control for llm agents. arXiv preprint arXiv:2504.11703 (2025)."},{"key":"e_1_3_2_1_80_1","volume-title":"Audit-llm: Multi-agent collaboration for log-based insider threat detection. arXiv preprint arXiv:2408.08902","author":"Song Chengyu","year":"2024","unstructured":"Chengyu Song, Linru Ma, Jianming Zheng, Jinzhi Liao, Hongyu Kuang, and Lin Yang. 2024. Audit-llm: Multi-agent collaboration for log-based insider threat detection. arXiv preprint arXiv:2408.08902 (2024)."},{"key":"e_1_3_2_1_81_1","volume-title":"LMN: A tool for generating machine enforceable policies from natural language access control rules using LLMs. arXiv preprint arXiv:2502.12460","author":"Sonune Pratik","year":"2025","unstructured":"Pratik Sonune, Ritwik Rai, Shamik Sural, Vijayalakshmi Atluri, and Ashish Kundu. 2025. LMN: A tool for generating machine enforceable policies from natural language access control rules using LLMs. arXiv preprint arXiv:2502.12460 (2025)."},{"key":"e_1_3_2_1_82_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2023.3273282"},{"key":"e_1_3_2_1_83_1","unstructured":"Yuxi Sun Wenbo Shang Wei Gao Xin Huang and Jing Ma. 2026. Insist when Know Caution when Not Know? Unveiling LLMs' Fact-Checking Behavior Amidst Knowledge Conflicts. https:\/\/openreview.net\/pdf?id=VgEEl1UDlg."},{"key":"e_1_3_2_1_84_1","volume-title":"Saga: A security architecture for governing ai agentic systems. arXiv preprint arXiv:2504.21034","author":"Syros Georgios","year":"2025","unstructured":"Georgios Syros, Anshuman Suri, Jacob Ginesin, Cristina Nita-Rotaru, and Alina Oprea. 2025. Saga: A security architecture for governing ai agentic systems. arXiv preprint arXiv:2504.21034 (2025)."},{"key":"e_1_3_2_1_85_1","volume-title":"http:\/\/www.apache.org\/licenses\/LICENSE-2.0 [Last Visited","author":"Foundation The Apache","year":"2026","unstructured":"The Apache Foundation. 2026. Apache License, Version 2.0. http:\/\/www.apache.org\/licenses\/LICENSE-2.0 [Last Visited: January 13, 2026]."},{"key":"e_1_3_2_1_86_1","doi-asserted-by":"publisher","DOI":"10.1145\/3713082.3730378"},{"key":"e_1_3_2_1_87_1","first-page":"16612","article-title":"Two tales of persona in llms: A survey of role-playing and personalization. In Findings of the Assoc","volume":"2024","author":"Tseng Yu-Min","year":"2024","unstructured":"Yu-Min Tseng, Yu-Chao Huang, Teng-Yun Hsiao,Wei-Lin Chen, Chao-Wei Huang, Yu Meng, and Yun-Nung Chen. 2024. Two tales of persona in llms: A survey of role-playing and personalization. In Findings of the Assoc. for Computational Linguistics: EMNLP 2024. 16612-16631.","journal-title":"for Computational Linguistics: EMNLP"},{"key":"e_1_3_2_1_88_1","unstructured":"Kun Wang Guibin Zhang Zhenhong Zhou Jiahao Wu Miao Yu Shiqian Zhao Chenlong Yin Jinhu Fu Yibo Yan Hanjun Luo et al. 2025. A comprehensive survey in llm (-agent) full stack safety: Data training and deployment. arXiv preprint arXiv:2504.15585 (2025)."},{"key":"e_1_3_2_1_89_1","volume-title":"NLACPs Dataset Expansion with AI: Leveraging ChatGPT for Policy Generation","author":"Wang Wenbo","year":"2026","unstructured":"Wenbo Wang, Ying Zhang, Tao Xue, Haibin Zhang, and Yanbin Wang. 2026. NLACPs Dataset Expansion with AI: Leveraging ChatGPT for Policy Generation. IEEE Internet of Things Journal (2026)."},{"key":"e_1_3_2_1_90_1","volume-title":"Gabrielle Appleton, Myles Axton, Arie Baak, Niklas Blomberg, Jan-Willem Boiten, Luiz Bonino da Silva Santos, Philip E Bourne, et al.","author":"Wilkinson Mark D","year":"2016","unstructured":"Mark D Wilkinson, Michel Dumontier, IJsbrand Jan Aalbersberg, Gabrielle Appleton, Myles Axton, Arie Baak, Niklas Blomberg, Jan-Willem Boiten, Luiz Bonino da Silva Santos, Philip E Bourne, et al. 2016. The FAIR Guiding Principles for scientific data management and stewardship. Scientific data 3, 1 (2016), 1-9."},{"key":"e_1_3_2_1_91_1","volume-title":"Towards automating data access permissions in ai agents. arXiv preprint arXiv:2511.17959","author":"Yang Ke","year":"2025","unstructured":"YuhaoWu, Ke Yang, Franziska Roesner, Tadayoshi Kohno, Ning Zhang, and Umar Iqbal. 2025. Towards automating data access permissions in ai agents. arXiv preprint arXiv:2511.17959 (2025)."},{"key":"e_1_3_2_1_92_1","doi-asserted-by":"publisher","DOI":"10.1145\/3734436.3734447"},{"key":"e_1_3_2_1_93_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.dcan.2022.09.002"},{"key":"e_1_3_2_1_94_1","volume-title":"LLM Agents Should Employ Security Principles. arXiv preprint arXiv:2505.24019","author":"Zhang Kaiyuan","year":"2025","unstructured":"Kaiyuan Zhang, Zian Su, Pin-Yu Chen, Elisa Bertino, Xiangyu Zhang, and Ninghui Li. 2025. LLM Agents Should Employ Security Principles. arXiv preprint arXiv:2505.24019 (2025)."},{"key":"e_1_3_2_1_95_1","unstructured":"Zhehao Zhang Ryan A Rossi Branislav Kveton Yijia Shao Diyi Yang Hamed Zamani Franck Dernoncourt Joe Barrow Tong Yu Sungchul Kim et al. 2024. Personalization of large language models: A survey. arXiv preprint arXiv2411.00027 (2024)."},{"key":"e_1_3_2_1_96_1","volume-title":"Rtbas: Defending llm agents against prompt injection and privacy leakage. arXiv preprint arXiv:2502.08966","author":"Zhong Peter Yong","year":"2025","unstructured":"Peter Yong Zhong, Siyuan Chen, Ruiqi Wang, McKenna McCall, Ben L Titzer, Heather Miller, and Phillip B Gibbons. 2025. Rtbas: Defending llm agents against prompt injection and privacy leakage. arXiv preprint arXiv:2502.08966 (2025)."},{"key":"e_1_3_2_1_97_1","volume-title":"MiniScope: A Least Privilege Framework for Authorizing Tool Calling Agents. arXiv preprint arXiv:2512.11147","author":"Zhu Jinhao","year":"2025","unstructured":"Jinhao Zhu, Kevin Tseng, Gil Vernik, Xiao Huang, Shishir G Patil, Vivian Fang, and Raluca Ada Popa. 2025. MiniScope: A Least Privilege Framework for Authorizing Tool Calling Agents. arXiv preprint arXiv:2512.11147 (2025)."},{"key":"e_1_3_2_1_98_1","volume-title":"LLMAC: A Global and Explainable Access Control Framework with Large Language Model. In 2026 IEEE 23rd Consumer Communications & Networking Conf. (CCNC). IEEE, 1-6.","author":"Zisad Sharif Noor","year":"2026","unstructured":"Sharif Noor Zisad and Ragib Hasan. 2026. LLMAC: A Global and Explainable Access Control Framework with Large Language Model. In 2026 IEEE 23rd Consumer Communications & Networking Conf. (CCNC). IEEE, 1-6."}],"event":{"name":"SACMAT '26: The 31st ACM Symposium on Access Control Models and Technologies","location":"Waterloo ON Canada","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 31st ACM Symposium on Access Control Models and Technologies"],"original-title":[],"deposited":{"date-parts":[[2026,6,24]],"date-time":"2026-06-24T18:22:53Z","timestamp":1782325373000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3750555.3811881"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7,8]]},"references-count":98,"alternative-id":["10.1145\/3750555.3811881","10.1145\/3750555"],"URL":"https:\/\/doi.org\/10.1145\/3750555.3811881","relation":{},"subject":[],"published":{"date-parts":[[2026,7,8]]},"assertion":[{"value":"2026-07-08","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}