abdussalam@stmiki.ac.id +6281260272238 Online Submission Open
Vol. 3 No. 2 (2026) • Articles
Open Access

Analisis Ancaman Social Engineering Berbasis Agentic AI dan Strategi Mitigasi Menggunakan Pendekatan Zero Trust

Teguh Pradana
Institut Teknologi dan Bisnis Yadika Pasuruan image/svg+xml
Nur Amalia Hasma
Universitas Islam Kebangsaan Indonesia
Handry Eldo
Universitas Muhammadiyah mahakarya Aceh
Renita Selviana
Institut Teknologi dan Bisnis Yadika Pasuruan image/svg+xml
Ayuliana Ayuliana
Universitas Bina Nusantara image/svg+xml
Published: September 28, 2026 Pages: 162-171
Original Full-Text Article
Download published version for reading and archiving
Download PDF
Abstract

The development of Agentic Artificial Intelligence (Agentic AI) presents new challenges in cybersecurity due to its ability to plan, adapt, and act autonomously. This study aims to analyze the threat of social engineering based on Agentic AI and to formulate mitigation strategies using the Zero Trust approach. The research method employs literature review and threat modeling to identify attack vectors, user vulnerabilities, and potential impacts. The analysis shows that Agentic AI can enhance the personalization, scale, speed, and effectiveness of social engineering attacks. This study develops a conceptual framework for mitigating social engineering attacks based on Agentic AI by applying Zero Trust principles as a layered defense approach that places identity, context, and risk at the center of security decision-making.

Keywords:
Agentic AI Social Engineering Zero Trust Cybersecurity Threat Modeling Artificial Intelligence
Article Metrics & Downloads Graph
Monthly Download Trends:
Author Biographies
Teguh Pradana Institut Teknologi dan Bisnis Yadika Pasuruan

Program Studi Sistem Dan Teknologi Informasi, Fakultas Teknik, Institut Teknologi dan Bisnis Yadika Pasuruan, Kabupaten Pasuruan, Provinsi Jawa Timur, Indonesia.

Nur Amalia Hasma Universitas Islam Kebangsaan Indonesia

Program Studi Informatika, Fakultas Komputer dan Multimedia, Universitas Islam Kebangsaan Indonesia, Kabupaten Bireuen, Provinsi Aceh, Indonesia.

Handry Eldo Universitas Muhammadiyah mahakarya Aceh

Program Studi Teknologi Informasi, Fakultas Ilmu Komputer dan Teknologi Informasi, Universitas Muhammadiyah mahakarya Aceh, Kabupaten Bireuen, Provinsi Aceh, Indonesia.

Renita Selviana Institut Teknologi dan Bisnis Yadika Pasuruan

Program Studi Sistem Informasi, Fakultas Teknologi Informasi, Institut Teknologi dan Bisnis Yadika Pasuruan, Kabupaten Pasuruan, Jawa Timur, Indonesia.

Ayuliana Ayuliana Universitas Bina Nusantara

Program Studi Informatika, Fakultas Ilmu Komputer, Universitas Bina Nusantara, Kota Jakarta Barat, Jakarta Barat, Indonesia.

How to Cite
Pradana, T., Hasma, N. A., Eldo, H., Selviana, R., & Ayuliana, A. (2026). Analisis Ancaman Social Engineering Berbasis Agentic AI dan Strategi Mitigasi Menggunakan Pendekatan Zero Trust. Jurnal Ilmu Komputer Dan Teknologi Informasi, 3(2), 162-171. https://doi.org/10.63447/jikti.v3i2.2057
License

This work is licensed under a Copyright (c) 2026 Teguh Pradana, Nur Amalia Hasma, Handry Eldo, Renita Selviana, Ayuliana Ayuliana .

Creative Commons Attribution 4.0 International License (CC BY 4.0)

This is an open-access article distributed under the terms of the Creative Commons Attribution 4.0 International License .

  • Share: You are free to copy, distribute, and transmit the work in any medium or format.
  • Adapt: You are free to remix, transform, and build upon the work for any purpose, even commercially.
  • Attribution: You must give appropriate credit, provide a link to the license, and indicate if changes were made. You may do so in any reasonable manner, but not in any way that suggests the licensor endorses you or your use.
Copyright & Retention: Authors retain copyright without restrictions and grant this journal the right of first publication under an open-access model. The journal retains non-exclusive publishing rights for archiving, indexing, and scholarly dissemination.

References
Total: 16 References
  1. An analysis of zero-trust architecture and its cost-effectiveness for organizational security. (2022). Computers & Security, 122, 102911. https://doi.org/10.1016/j.cose.2022.102911
  2. Buck, C., Olenberger, C., Schweizer, A., Völter, F., & Eymann, T. (2021). Never trust, always verify: A multivocal literature review on current knowledge and research gaps of zero-trust. Computers & Security, 110, 102436. https://doi.org/10.1016/j.cose.2021.102436
  3. Daoud, E., Garcia-Blas, J., Alawadi, S., & Carretero, J. (2026). Phishing in the age of distributed intelligence: Taxonomies, detection strategies, and the emerging role of federated learning. Progress in Artificial Intelligence. https://doi.org/10.1007/s13748-026-00448-6
  4. Ferretti, L., Magnanini, F., Andreolini, M., & Colajanni, M. (2021). Survivable zero trust for cloud computing environments. Computers & Security, 110, 102419. https://doi.org/10.1016/j.cose.2021.102419
  5. He, Y., Ma, X., & Zhang, Y. (2022). A survey on zero trust architecture: Challenges and future trends. Wireless Communications and Mobile Computing, 2022, Article 6476274. https://doi.org/10.1155/2022/6476274
  6. large language models’ ability to automate spear phishing. Expert Systems with Applications, 314, 131546. https://doi.org/10.1016/j.eswa.2026.131546
  7. Intelligent cybersecurity systems for phishing attack detection: An overview. (2026). Computers & Electrical Engineering, 130, 110829. https://doi.org/10.1016/j.compeleceng.2025.110829
  8. Kavya, S., & Sumathi, D. (2025). Staying ahead of phishers: A review of recent advances and emerging methodologies in phishing detection. Artificial Intelligence Review, 58, 50. https://doi.org/10.1007/s10462-024-11055-z
  9. Multivocal literature review on zero-trust security implementation. (2024). Computers & Security, 141, 103827. https://doi.org/10.1016/j.cose.2024.103827
  10. Nahar, N., Andersson, K., Schelén, O., & Saguna, S. (2024). A survey on zero trust architecture: Applications and challenges of 6G networks. IEEE Access, 12, 94753–94764. https://doi.org/10.1109/ACCESS.2024.3425350
  11. Rathod, T., Jadav, N. K., Tanwar, S., Alabdulatif, A., Garg, D., & Singh, A. (2025). A comprehensive survey on social engineering attacks, countermeasures, case study, and research challenges. Information Processing & Management, 62(1), 103928. https://doi.org/10.1016/j.ipm.2024.103928
  12. Schmitt, M., & Flechais, I. (2024). Digital deception: Generative artificial intelligence in social engineering and phishing. Artificial Intelligence Review, 57, 324. https://doi.org/10.1007/s10462-024-10973-2
  13. Syed, N. F., Shah, S. W., Shaghaghi, A., Anwar, A., Baig, Z., & Doss, R. R. M. (2022). Zero trust architecture (ZTA): A comprehensive survey. IEEE Access, 10, 57143–57179. https://doi.org/10.1109/ACCESS.2022.3174679
  14. Wicaksana, H. S., & Huda, K. (2025). Penerapan Word2Vec dan SVM dengan hyperparameter tuning untuk deteksi phishing. JURIKOM (Jurnal Riset Komputer, 12(3), 361–371. https://doi.org/10.30865/jurikom.v12i3.8729
  15. Wicaksana, H. S., Ependi, U., & Muzakir, A. (2026). URL-based phishing detection using a BERT-LSTM model. Journal of Information Systems and Informatics, 8(1), 1344–1367. https://doi.org/10.63158/journalisi.v8i1.1543
  16. Yeoh, W., Liu, M., Shore, M., & Jiang, F. (2023). Zero trust cybersecurity: Critical success factors and a maturity assessment framework. Computers & Security, 133, 103412. https://doi.org/10.1016/j.cose.2023.103412