Collaborative penetration testing suite for emerging generative AI algorithms

Journal article

Generative artificial intelligence systems remain vulnerable to sophisticated cyber threats and the emerging challenges posed by quantum computing. This study proposes and evaluates a new penetration testing suite to address quantum security concerns. The suite integrates dynamic and static application security testing (DAST and SAST) using OWASP ZAP, Burp Suite, SonarQube, and Fortify to detect and resolve vulnerabilities across application lifecycles. Real-time monitoring through interactive application security testing (IAST) with Contrast Assess near-real-time analysis facilitates pre-emptive remediation and remediation of insecure data handling and encryption flaws. Blockchain-enhanced logging, implemented via Hyperledger Fabric, provides tamper-proof and auditable records of all security activities. Furthermore, quantum-resistant cryptographic protocols, including lattice-based cryptography and RLWE, safeguard against quantum decryption threats, validated through simulated quantum attack scenarios. AI-driven red team simulations emulate adversarial and quantum-assisted attacks, uncovering vulnerabilities overlooked by traditional methods. Key results include the identification and remediation of over 300 vulnerabilities, a 70% reduction in high-severity issues within two weeks of testing, and a 90% resolution efficiency for blockchain-logged vulnerabilities. Quantum-resistant protocols exhibited strong resilience under adversarial conditions against simulated quantum attacks, achieving secure API encryption and data transmission. This research establishes a new protocol for securing generative AI systems, combining advanced tools, methodologies, and industry-tested methods.

Authors: Radanliev, P

• Publication status: Published
• Peer review status: Peer reviewed
• Publisher: Springer
• Journal: Applied Intelligence
• Volume: 55
• Issue: 16
• Article number: 1030
• Publication date: 2025-10-16
• Acceptance date: 2025-09-09
• DOI: 10.1007/s10489-025-06908-1
• EISSN: 1573-7497
• ISSN: 0924669X, 0924-669X
• Language: English
• Keywords: Dynamic application security testing; Advanced persistent threats; Generative artificial intelligence security; Blockchain-Enhanced logging; Quantum-Resistant cryptography