LLM-Enabled IAM Risk Mapping

Wed, 27 May 2026 00:00:00 +0000

This research project examines how LLM-enabled identity and access management tools introduce new risk patterns across common IAM workflows.

The project uses the OWASP Top 10 for LLM Applications and NIST Cybersecurity Framework 2.0 as organizing lenses for analyzing use cases such as account recovery, MFA reset, access request triage, provisioning, deprovisioning, policy Q&A, and privileged-access handling.

The repository includes manuscript materials, experiment artifacts, local-model testing notes, and reproducibility instructions.

Key themes:

Workflow-centered AI risk assessment
Mapping LLM threat taxonomies to governance frameworks
Local model testing with open-weight LLMs
Reproducibility materials for research review

Next site pass: add the final abstract, paper status, and selected figures.

Research Artifacts and Reproducibility

Mon, 18 May 2026 00:00:00 +0000

A research result is easier to trust when the artifacts around it are clear. Code, data descriptions, experiments, logs, configuration, and limitations all help readers understand what was actually done.

Reproducibility is not only about rerunning a script. It is about making the work inspectable. What inputs were used? What assumptions were made? Which results are stable, and which are sensitive to data or parameter choices?

I want this website to become a place where projects can show that context instead of hiding it in private notes or scattered repositories.

Research |

LLM-Enabled IAM Risk Mapping

Research Artifacts and Reproducibility