advisory automation

New AIBOM-Driven Framework Automates Advisory Generation for Agentic AI Cybersecurity

Researchers present a reproducible framework that automates the generation of CSAF VEX advisories for agentic AI by combining static SBOM/AIBOM artefacts with runtime telemetry, cryptographically signing them, and validating via deterministic replay. The evaluation uses approximately 10,000 component entries from synthetic workloads of 50 to 5,000 components, incorporating OSV, GitHub Advisory, KEV, and EPSS datasets.