AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents

Haitao Hu , Peng Chen , Yanpeng Zhao , Yuqi Chen

🏛 Institutions: ShanghaiTech University , Independent Researcher
📅 Date: September 9, 2025
📑 Publisher: CCS 2025
💻 Env: Desktop
🔑 Keywords: security real-time defense security audit system traces sensitive operations BadComputerUse AgentSentinel

TLDR

AgentSentinel is a real-time defense layer for computer-use agents that intercepts sensitive operations and pauses execution until they are audited against both task context and system traces. The companion BadComputerUse benchmark contains 60 attacks across six categories, and the paper reports that AgentSentinel substantially improves defense success over baseline protections.

Open paper Code Report issue