Open Access Open Access  Restricted Access Subscription Access

An Al-Driven Cybersecurity Framework for Prompt Security, Repository Vulnerability Detection, and Static Code Analysis

Malkari Pranav Shankar, Manish Kumar KK, Manoj N, Pawan A N, Prof. Vasudevan S

Abstract


The rapid adoption of artificial intelligence (AI), large language models (LLMs), and AI-assisted development tools has introduced new security challenges that traditional application security mechanisms do not fully address. Threats such as prompt injection, sensitive information disclosure, inse-cure output handling, excessive agency, vulnerable dependencies, hard-coded secrets, and AI supply-chain attacks can affect both AI components and conventional software infrastructure. This paper presents an AI-Powered Security Intelligence Platform for Developers that integrates source-code analysis, dependency security analysis, AI threat detection, threat intelligence, risk pri-oritization, and security recommendations into a unified frame-work. The proposed architecture combines conventional security analysis with AI-assisted reasoning to identify and contextualize security weaknesses across the software development lifecycle. Detected threats are mapped to established security knowledge bases including OWASP GenAI LLM Top 10, NIST Artificial Intelligence Risk Management Framework, MITRE ATLAS, CWE, and CVE/NVD. The platform generates contextual security intelligence containing vulnerability severity, potential impact, attack vectors, related security classifications, and recommended remediation. The proposed framework provides a foundation for integrating AI security analysis with developer-oriented vulnerability management and continuous security monitoring.


Full Text:

PDF

References


OWASP Foundation,

“OWASP GenAI LLM Top 10 2026,”

OWASP Gen AI Security Project, 2026.

E. Tabassi,

“Artificial Intelligence Risk Management Framework (AI RMF 1.0),” NIST AI 100-1,

National Institute of Standards and Technology, Gaithersburg, MD, USA, Jan. 2023.

MITRE Corporation,

“MITRE Adversarial Threat Landscape for Artificial-Intelligence Sys-tems (ATLAS),”

MITRE, 2024.

“Bridging AI and software security: A comparative vulnerability assess-ment of LLM agent deployment paradigms,”

Information Sciences, vol. 740, 2026.

OWASP Gen AI Security Project,

“AI Security Solutions Landscape for LLM and Gen AI Apps,” 2026.

C. Autio, R. Schwartz, J. Dunietz, S. Jain, M. Stanley, E. Tabassi, P. Hall, and K. Roberts,

“Artificial Intelligence Risk Management Framework: Generative Arti-ficial IntelligenceProfile,”

NIST AI 600-1,

National Institute of Standards and Technology, Jul. 2024.

“Prompt Injection Attacks on Large Language Models: A Survey of Attack Methods, Root Causes, and Defense Strategies,”

Computers, Materials & Continua, vol. 87, no. 1, 2026.

S. Sudarsan, A. Patel, C. Upadhyay, V. Gudur, and P. Matam, “Secure Prompt Engineering Patterns for Cloud LLM Agents,”

in Proc. 2026 IEEE 5th International Conference on AI in Cybersecurity (ICAIC), Houston, TX, USA, 2026.

M. Fasha, F. Abul Rub, N. Matar, B. Sowan, and M. Al Khaldy, “Mitigating the OWASP Top 10 for Large Language Models Applica-tions using Intelligent Agents,”

arXiv:2601.18105, 2026.

National Institute of Standards and Technology, “AI Research: Security and Resilience,”

NIST, 2026.


Refbacks

  • There are currently no refbacks.