References and Sources

This section lists the sources cited throughout the book. The numbered source index, ordered by source number, is the canonical bibliography: every inline citation of the form (N, author or organisation, year) links to the entry with that number. The index is grouped by category so that readers can locate European legislation, frameworks, threat assessments and practitioner literature quickly.

Most entries were carried over from the bibliographies of the earlier volumes of The Transformed Architecture, with the access dates recorded there. Entries for MITRE ATT&CK, MITRE D3FEND, TIBER-EU, Commission Implementing Regulation (EU) 2024/2690 and Sigma were added for this book on 2026-11-02 and checked on 2026-11-10 (Sigma only partly, because its host blocks automated access; see docs/SOURCE_CHECK.md); the entries for NIST IR 8596 and NIST SP 800-61 Rev. 3 were checked against the NIST publication pages on 2026-11-02 with scripts/verify_sources.py before release.

Numbered source index

European legislation and policy

Frameworks, standards and taxonomies

Threat assessments and agency guidance

AI-enabled threats and exploitation timelines

AI-assisted defence and vulnerability discovery

Agents, containment and AI incidents

Books and practitioner literature

The Transformed Architecture and the author

European legislation and case law added after review

How to cite

Inline citations give the source number, the author or organisation, and the year, for example (9, MITRE, n.d.), and link to the entry here. Where an author is named in the sentence, the citation carries the year. Each chapter closes with a ## Sources section that lists the works it cites, using the same numbering as this bibliography. New sources are appended to the appropriate category with the next free number; existing numbers are never reused.