{
  "aliases": [],
  "authors": [
    "Haitao Hu",
    "Peng Chen",
    "Yanpeng Zhao",
    "Yuqi Chen"
  ],
  "details": {
    "arxiv_snapshot": {
      "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
      "abstract_sha256": "ae582aceb31075c460a9e4a6dce9978574c3e0ada731b26c13738a4a4fafcc32",
      "submitted_at": "2025-09-09T13:59:00Z",
      "updated_at": "2025-09-09T13:59:00Z",
      "version": 1,
      "versioned_url": "https://arxiv.org/abs/2509.07764v1"
    }
  },
  "environments": [
    "desktop",
    "linux",
    "web"
  ],
  "evidence": [
    {
      "method": "arxiv_api",
      "retrieved_at": "2026-10-16T06:36:50Z",
      "role": "primary",
      "sha256": "26fb4922c4c0bb5c9069935ed0aef0a9f56938cf8ae1af9724894fa1409955fb",
      "supports": [
        "name",
        "authors",
        "published_at",
        "updated_at",
        "identifiers.arxiv",
        "details.arxiv_snapshot"
      ],
      "url": "https://export.arxiv.org/api/query?search_query=%28ti%3A%22computer+use%22+OR+ti%3A%22computer-use%22+OR+ti%3A%22GUI+agent%22+OR+ti%3A%22GUI+agents%22+OR+ti%3A%22GUI+grounding%22+OR+ti%3A%22web+agents%22+OR+ti%3A%22browser+agent%22%29+AND+submittedDate%3A%5B200001010000+TO+202610160636%5D&start=600&max_results=100&sortBy=submittedDate&sortOrder=descending"
    },
    {
      "method": "editorial_primary_review",
      "retrieved_at": "2026-10-16T06:36:50Z",
      "role": "primary",
      "sha256": "26fb4922c4c0bb5c9069935ed0aef0a9f56938cf8ae1af9724894fa1409955fb",
      "supports": [
        "name",
        "kind",
        "summary",
        "topics",
        "notes"
      ],
      "url": "https://export.arxiv.org/api/query?search_query=%28ti%3A%22computer+use%22+OR+ti%3A%22computer-use%22+OR+ti%3A%22GUI+agent%22+OR+ti%3A%22GUI+agents%22+OR+ti%3A%22GUI+grounding%22+OR+ti%3A%22web+agents%22+OR+ti%3A%22browser+agent%22%29+AND+submittedDate%3A%5B200001010000+TO+202610160636%5D&start=600&max_results=100&sortBy=submittedDate&sortOrder=descending"
    },
    {
      "method": "editorial_primary_review",
      "retrieved_at": "2026-10-17T11:25:42Z",
      "role": "primary",
      "sha256": "7f303629ef6d9c7df128c6d12d472abd9bf238e0204515f18839249adef317b9",
      "supports": [
        "summary",
        "environments",
        "scope",
        "notes"
      ],
      "url": "https://arxiv.org/html/2509.07764v1"
    }
  ],
  "id": "arxiv:2509.07764",
  "identifiers": {
    "arxiv": "2509.07764"
  },
  "kind": "paper",
  "last_verified_at": "2026-10-16T06:36:50Z",
  "licenses": {
    "code": null,
    "data": null,
    "document": null,
    "weights": null
  },
  "links": [
    {
      "rel": "primary",
      "url": "https://arxiv.org/abs/2509.07764"
    }
  ],
  "name": "AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents",
  "notes": "Reviewed against the complete retained original arXiv abstract. Experimental results and artifact availability have not been independently reproduced. The official full paper confirms GUI/desktop interaction alongside Bash and file tools. Its abstract and body enumerate attack categories differently; no category count is promoted into this annotation.",
  "published_at": "2025-09-09",
  "relations": [],
  "review_status": "curated",
  "scope": "core",
  "summary": "Introduces AgentSentinel, which intercepts sensitive computer-agent operations and audits them using task context together with system traces. BadComputerUse evaluates this enforcement approach across attack scenarios involving tool and computer control.",
  "topics": [
    "safety-security",
    "observability",
    "evaluation"
  ],
  "updated_at": "2025-09-09",
  "url": "https://arxiv.org/abs/2509.07764"
}