@inproceedings{10.1145/3750555.3811881,
author = {Rubio-Medrano, Carlos and Nath, Souradip and Soneji, Ananta and Mondragon, Jennifer and Baek, Jaejong and Ahn, Gail-Joon},
title = {Towards Agentic AI for Access Control in Cyber-infrastructures: Exploring the Security and Human Factors: [BlueSky Paper]},
year = {2026},
isbn = {9798400721076},
publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
url = {https://doi.org/10.1145/3750555.3811881},
doi = {10.1145/3750555.3811881},
abstract = {Access Control (AC) remains one of the fundamental paradigms of computer security due to its potential to mitigate serious threats by restricting access to sensitive resources within emerging technologies. However, despite decades of research, the life-cycle, i.e., specification, evaluation, and enforcement, of AC policies in modern cyber-infrastructures remains incomplete, inaccurate, and unverified, which largely decreases their effectiveness and efficiency to counteract emerging threats and vulnerabilities.The recent unparalleled advancements in the field of Generative Artificial Intelligence (AI) present a unique opportunity to address these challenges by introducing AC-Agents, an innovative solution for not only handling the life-cycle of AC policies, but also for collecting relevant threat intelligence and orchestrating the deployment of counteractions in a seamless, automated, and larger scale fashion with a high degree of effectiveness and efficiency.This paper presents an overview of existing problems affecting modern cyber-infrastructures, discusses potential solutions leveraging emerging AI agents, and elaborates on the security and human factors involved, hoping to inspire a thoughtful discussion within the AC, the security, and the AI communities, such that future approaches can benefit from interdisciplinary collaborations.},
booktitle = {Proceedings of the 31st ACM Symposium on Access Control Models and Technologies},
pages = {236–245},
numpages = {10},
keywords = {agentic access control, policy specification, policy evaluation, policy enforcement, intelligence collection, intelligence orchestration},
location = {Waterloo, ON, Canada},
series = {SACMAT '26}
}