{"id":"https://openalex.org/W6966800372","doi":"https://doi.org/10.48550/arxiv.2508.06394","title":"When AIOps Become \"AI Oops\": Subverting LLM-driven IT Operations via Telemetry Manipulation","display_name":"When AIOps Become \"AI Oops\": Subverting LLM-driven IT Operations via Telemetry Manipulation","publication_year":2025,"publication_date":"2025-08-08","ids":{"openalex":"https://openalex.org/W6966800372","doi":"https://doi.org/10.48550/arxiv.2508.06394"},"language":"en","primary_location":{"id":"doi:10.48550/arxiv.2508.06394","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2508.06394","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2508.06394","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Pasquini, Dario","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Pasquini, Dario","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Kornaropoulos, Evgenios M.","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kornaropoulos, Evgenios M.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Ateniese, Giuseppe","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ateniese, Giuseppe","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Akgul, Omer","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Akgul, Omer","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Theocharis, Athanasios","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Theocharis, Athanasios","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":null,"display_name":"Efstathopoulos, Petros","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Efstathopoulos, Petros","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T12713","display_name":"Forest Ecology and Biodiversity Studies","score":0.1808999925851822,"subfield":{"id":"https://openalex.org/subfields/1109","display_name":"Insect Science"},"field":{"id":"https://openalex.org/fields/11","display_name":"Agricultural and Biological Sciences"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},"topics":[{"id":"https://openalex.org/T12713","display_name":"Forest Ecology and Biodiversity Studies","score":0.1808999925851822,"subfield":{"id":"https://openalex.org/subfields/1109","display_name":"Insect Science"},"field":{"id":"https://openalex.org/fields/11","display_name":"Agricultural and Biological Sciences"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},{"id":"https://openalex.org/T11594","display_name":"Tree-ring climate responses","score":0.09910000115633011,"subfield":{"id":"https://openalex.org/subfields/1902","display_name":"Atmospheric Science"},"field":{"id":"https://openalex.org/fields/19","display_name":"Earth and Planetary Sciences"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11164","display_name":"Remote Sensing and LiDAR Applications","score":0.05869999900460243,"subfield":{"id":"https://openalex.org/subfields/2305","display_name":"Environmental Engineering"},"field":{"id":"https://openalex.org/fields/23","display_name":"Environmental Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/telemetry","display_name":"Telemetry","score":0.7432000041007996},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7024000287055969},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5932999849319458},{"id":"https://openalex.org/keywords/compromise","display_name":"Compromise","score":0.49950000643730164},{"id":"https://openalex.org/keywords/automation","display_name":"Automation","score":0.4918999969959259},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.41990000009536743},{"id":"https://openalex.org/keywords/data-integrity","display_name":"Data integrity","score":0.3700999915599823}],"concepts":[{"id":"https://openalex.org/C183121708","wikidata":"https://www.wikidata.org/wiki/Q209867","display_name":"Telemetry","level":2,"score":0.7432000041007996},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7024000287055969},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6577000021934509},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5932999849319458},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5760999917984009},{"id":"https://openalex.org/C46355384","wikidata":"https://www.wikidata.org/wiki/Q726686","display_name":"Compromise","level":2,"score":0.49950000643730164},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.4918999969959259},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.41990000009536743},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.3700999915599823},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.35269999504089355},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.34619998931884766},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.2883000075817108},{"id":"https://openalex.org/C89611455","wikidata":"https://www.wikidata.org/wiki/Q6804646","display_name":"Mechanism (biology)","level":2,"score":0.27880001068115234},{"id":"https://openalex.org/C56288433","wikidata":"https://www.wikidata.org/wiki/Q58673","display_name":"Data manipulation language","level":2,"score":0.2775999903678894},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.2547000050544739},{"id":"https://openalex.org/C9628104","wikidata":"https://www.wikidata.org/wiki/Q788009","display_name":"Autonomous system (mathematics)","level":2,"score":0.251800000667572}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2508.06394","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2508.06394","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2508.06394","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2508.06394","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.508269190788269,"display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"AI":[0],"for":[1,203,211],"IT":[2],"Operations":[3],"(AIOps)":[4],"is":[5,134],"transforming":[6],"how":[7],"organizations":[8],"manage":[9],"complex":[10],"software":[11],"systems":[12],"by":[13,167],"automating":[14],"anomaly":[15],"detection,":[16],"incident":[17],"diagnosis,":[18],"and":[19,34,46,139,172,206],"remediation.":[20],"Modern":[21],"AIOps":[22,60,84,197,213],"solutions":[23],"increasingly":[24],"rely":[25],"on":[26],"autonomous":[27],"LLM-based":[28],"agents":[29,85],"to":[30,82,101],"interpret":[31],"telemetry":[32,81,104,165],"data":[33,105,166],"take":[35],"corrective":[36],"actions":[37,88],"with":[38,69],"minimal":[39,174],"human":[40],"intervention,":[41],"promising":[42],"faster":[43],"response":[44],"times":[45],"operational":[47],"cost":[48],"savings.":[49],"In":[50],"this":[51,155,194],"work,":[52],"we":[53,157],"perform":[54],"the":[55,91,94,127,150,173,208],"first":[56],"security":[57,72],"analysis":[58],"of":[59,93,116,149,176],"solutions,":[61],"showing":[62],"that,":[63],"once":[64],"again,":[65],"AI-driven":[66],"automation":[67],"comes":[68],"a":[70,114,160],"profound":[71],"cost.":[73],"We":[74,98],"demonstrate":[75],"that":[76,89,109,125,163,182],"adversaries":[77],"can":[78],"manipulate":[79],"system":[80,122,204],"mislead":[83],"into":[86],"taking":[87],"compromise":[90,205],"integrity":[92],"infrastructure":[95],"they":[96],"manage.":[97],"introduce":[99],"techniques":[100],"reliably":[102,184],"inject":[103],"using":[106],"error-inducing":[107],"requests":[108],"influence":[110],"agent":[111,191],"behavior":[112],"through":[113],"form":[115],"adversarial":[117,141],"reward-hacking;":[118],"plausible":[119],"but":[120],"incorrect":[121],"error":[123],"interpretations":[124],"steer":[126],"agent's":[128],"decision-making.":[129],"Our":[130,179],"attack":[131,201],"methodology,":[132],"AIOpsDoom,":[133],"fully":[135],"automated--combining":[136],"reconnaissance,":[137],"fuzzing,":[138],"LLM-driven":[140],"input":[142],"generation--and":[143],"operates":[144],"without":[145,188],"any":[146],"prior":[147],"knowledge":[148],"target":[151],"system.":[152],"To":[153],"counter":[154],"threat,":[156],"propose":[158],"AIOpsShield,":[159],"defense":[161],"mechanism":[162],"sanitizes":[164],"exploiting":[168],"its":[169],"structured":[170],"nature":[171],"role":[175],"user-generated":[177],"content.":[178],"experiments":[180],"show":[181],"AIOpsShield":[183],"blocks":[185],"telemetry-based":[186],"attacks":[187],"affecting":[189],"normal":[190],"performance.":[192],"Ultimately,":[193],"work":[195],"exposes":[196],"as":[198],"an":[199],"emerging":[200],"vector":[202],"underscores":[207],"urgent":[209],"need":[210],"security-aware":[212],"design.":[214]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2025-10-10T00:00:00"}