AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents

Introduces AgentSentinel, which intercepts sensitive computer-agent operations and audits them using task context together with system traces. BadComputerUse evaluates this enforcement approach across attack scenarios involving tool and computer control.

AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.

What is this resource?

Resource type

Research papers

Environment

desktop, linux, web

Topics

safety-security, observability, evaluation

Record publication date

2025-09-09

Evidence retrieved

2026-10-16T06:36:50Z

Resource ID

arxiv:2509.07764

Recorded paper version

arXiv v1

Version updated: 2025-09-09T13:59:00Z.

This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.

Authors

Haitao Hu, Peng Chen, Yanpeng Zhao, Yuqi Chen

Cite this paper

Download BibTeX · Download CSL JSON

Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.

Explore related topics

Scope and limitations

Reviewed against the complete retained original arXiv abstract. Experimental results and artifact availability have not been independently reproduced. The official full paper confirms GUI/desktop interaction alongside Bash and file tools. Its abstract and body enumerate attack categories differently; no category count is promoted into this annotation.

Primary evidence and verification

Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.

1. arxiv api

   Retrieved 2026-10-16T06:36:50Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.

   Content fingerprint

   26fb4922c4c0bb5c9069935ed0aef0a9f56938cf8ae1af9724894fa1409955fb
2. editorial primary review

   Retrieved 2026-10-16T06:36:50Z. Supports: name, kind, summary, topics, notes.

   Content fingerprint

   26fb4922c4c0bb5c9069935ed0aef0a9f56938cf8ae1af9724894fa1409955fb
3. editorial primary review

   Retrieved 2026-10-17T11:25:42Z. Supports: summary, environments, scope, notes.

   Content fingerprint

   7f303629ef6d9c7df128c6d12d472abd9bf238e0204515f18839249adef317b9

Suggest a correction

Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.