AI-Augmented Cybersecurity Professional bibliography

Standards-body + government · 6

1. MITRE Corporation (2025). Adversarial Threat Landscape for Artificial-Intelligence Systems (ATLAS). MITRE ATLAS Matrix. https://atlas.mitre.org/
2. OWASP Foundation (2025). OWASP Top 10 for LLM Applications. OWASP Project. https://owasp.org/www-project-top-10-for-large-language-model-applications/Cited in 2 modules
3. SANS Institute (2024). AI and Automation in Security Operations. SANS Reading Room. https://www.sans.org/white-papers/
4. NIST (2023). AI Risk Management Framework (AI RMF 1.0). NIST AI Research. https://www.nist.gov/itl/ai-risk-management-frameworkCited in 2 modules
5. NIST (2023). NIST Special Publication 800-61 Revision 3, Computer Security Incident Handling Guide. NIST Computer Security Resource Center. https://csrc.nist.gov/publications/detail/sp/800-61/rev-3/draft
6. NIST (2025). NIST Special Publication 800-218A, Secure Software Development Practices for Artificial Intelligence Systems. NIST Computer Security Resource Center. https://csrc.nist.gov/

Books + monographs · 4

1. Argyris, C., Schön, D. A. (1996). Organizational Learning II: Theory, Method, and Practice. Addison-Wesley. https://www.pearson.com/en-us/subject-catalog/p/organizational-learning-ii-theory-method-and-practice/P200000003570
2. Brown, J. S., Duguid, P. (2000). The Social Life of Information. Harvard Business School Press. https://www.hbs.edu/faculty/Pages/item.aspx?num=30
3. Schön, D. A. (1983). The Reflective Practitioner: How Professionals Think in Action. Basic Books. https://www.hachettebookgroup.com/titles/donald-a-schon/the-reflective-practitioner/9780465068784/
4. Schön, D. A. (1987). Educating the Reflective Practitioner. Jossey-Bass. https://www.wiley.com/en-us/Educating+the+Reflective+Practitioner%3A+Toward+a+New+Design+for+Teaching+and+Learning+in+the+Professions-p-9781555422202

Other primary sources · 7

1. Cloud Security Alliance (2024). LLM Threats and Security Controls. CSA Research. https://cloudsecurityalliance.org/
2. Brown, T. B., Mann, B., Ryder, N., Subbiah, M., Kaplan, J., Dhariwal, P., et al. (2020). Language Models are Few-Shot Learners. Advances in Neural Information Processing Systems. https://arxiv.org/abs/2005.14165
3. Greshake, K., Abdelnabi, S., Mishra, S., Endres, C., Holz, T., Fritz, M. (2023). Not What You've Signed Up For: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection. arXiv preprint. https://arxiv.org/abs/2302.12173
4. Ponemon Institute (2024). AI and Automation in Cybersecurity Operations. Ponemon Research. https://www.ponemon.org/
5. Mezirow, J. (1997). Transformative Learning: Theory to Practice. New Directions for Adult and Continuing Education, 1997(74), 5-12. https://onlinelibrary.wiley.com/doi/10.1002/ace.7401
6. Bureau of Labor Statistics (2024). Occupational Employment and Wage Statistics, Information Security Analysts. U.S. Department of Labor. https://www.bls.gov/oes/current/oes151212.htm
7. Vaswani, A., Shazeer, N., Parmar, N., Uszkoreit, J., Jones, L., Gomez, A. N., Kaiser, L., Polosukhin, I. (2017). Attention Is All You Need. Advances in Neural Information Processing Systems. https://arxiv.org/abs/1706.03762