ASTRIDE: A Security Threat Modeling Platform for Agentic-AI Applications Article Swipe

MAKE IMPACT

Ross Gore , Sachin Shetty , Ravi Mukkamala , Xueping Liang , Wee Keong Ng , Kasun De Zoysa , Nilaan Loganathan · YOU? · · 2025 · Open Access · · DOI: https://doi.org/10.48550/arxiv.2512.04785

AI agent-based systems are becoming increasingly integral to modern software architectures, enabling autonomous decision-making, dynamic task execution, and multimodal interactions through large language models (LLMs). However, these systems introduce novel and evolving security challenges, including prompt injection attacks, context poisoning, model manipulation, and opaque agent-to-agent communication, that are not effectively captured by traditional threat modeling frameworks. In this paper, we introduce ASTRIDE, an automated threat modeling platform purpose-built for AI agent-based systems. ASTRIDE extends the classical STRIDE framework by introducing a new threat category, A for AI Agent-Specific Attacks, which encompasses emerging vulnerabilities such as prompt injection, unsafe tool invocation, and reasoning subversion, unique to agent-based applications. To automate threat modeling, ASTRIDE combines a consortium of fine-tuned vision-language models (VLMs) with the OpenAI-gpt-oss reasoning LLM to perform end-to-end analysis directly from visual agent architecture diagrams, such as data flow diagrams(DFDs). LLM agents orchestrate the end-to-end threat modeling automation process by coordinating interactions between the VLM consortium and the reasoning LLM. Our evaluations demonstrate that ASTRIDE provides accurate, scalable, and explainable threat modeling for next-generation intelligent systems. To the best of our knowledge, ASTRIDE is the first framework to both extend STRIDE with AI-specific threats and integrate fine-tuned VLMs with a reasoning LLM to fully automate diagram-driven threat modeling in AI agent-based applications.

Type

preprint

Landing Page

http://arxiv.org/abs/2512.04785

PDF

https://arxiv.org/pdf/2512.04785

OA Status

green

OpenAlex ID

https://openalex.org/W4417087056

Raw OpenAlex JSON

OpenAlex ID

https://openalex.org/W4417087056

Canonical identifier for this work in OpenAlex

DOI

https://doi.org/10.48550/arxiv.2512.04785

Digital Object Identifier

Title

ASTRIDE: A Security Threat Modeling Platform for Agentic-AI Applications

Work title

Type

preprint

OpenAlex work type

Publication year

2025

Year of publication

Publication date

2025-12-04

Full publication date if available

Authors

Ross Gore, Sachin Shetty, Ravi Mukkamala, Xueping Liang, Wee Keong Ng, Kasun De Zoysa, Nilaan Loganathan

List of authors in order

Landing page

https://arxiv.org/abs/2512.04785

Publisher landing page

PDF URL

https://arxiv.org/pdf/2512.04785

Direct link to full text PDF

Open access

Yes

Whether a free full text is available

OA status

green

Open access status per OpenAlex

OA URL

https://arxiv.org/pdf/2512.04785

Direct OA link when available

Cited by

0

Total citation count in OpenAlex

Full payload