Systematizing System-Level Security Risks of Integrating Frontier AI into Critical Infrastructure

A systematization of knowledge study published on arXiv examines the evolving system-level security risks introduced when integrating frontier artificial intelligence into critical infrastructure, such as power grids and telecommunication networks. Rather than simply adding isolated software vulnerabilities, the deployment of autonomous AI agents fundamentally restructures established security boundaries and trust models across entire systems, creating new propagation paths for attacks. Traditional critical infrastructure security heavily relies on static, rule-based defenses and deterministic system behaviors. However, the introduction of autonomous reasoning processes and dynamic feedback loops in AI agents transitions system operations into unpredictable states, rendering conventional defensive assumptions obsolete. The study details how malicious interference with training data or real-time inference can propagate directly to physical-layer disruptions. To address these emerging threats, security teams must transition from component-level protection to dynamic, system-wide risk management. While this paper provides a robust theoretical framework for understanding these shifting security boundaries, implementing concrete mitigations and verifying their efficacy in specific infrastructure environments will require dedicated, case-by-case empirical validation.