Tagged articles
Runtime Protection
10 articles · Page 1 of 1
This article details how Agent Sandbox Container Edition constructs a defense-in-depth security system for enterprise AI agents, covering identity and credential management via RRSA and OAuth, baseline storage and network isolation with least-privilege policies, and runtime protection through AI asset inventory, guardrails, and eBPF-based observability using Tetragon.
AI AgentCredential ManagementOWASP ASI
0 likes · 29 min read
On May 14, 2026 three malicious versions of the node‑ipc package were published to npm, injecting obfuscated payloads that steal cloud credentials, SSH keys, AI tool configurations and other sensitive files, and the article analyses the attack stages, historical repeats, npm's structural flaws, and concrete blue‑team mitigation steps.
Runtime Protectioncredential theftdetection rules
0 likes · 12 min read
The article outlines practical principles and concrete measures—starting with a simple coordinator‑sub‑agent pattern, evolving only when bottlenecks appear, and controlling dimensions such as agent splitting, count, roles, communication, and orchestration—to prevent complexity overload in multi‑agent AI systems, and adds runtime safeguards and a step‑by‑step deployment roadmap.
AI agentsRuntime Protectionarchitectural design
0 likes · 7 min read
The article analyzes how malicious prompt injections can hijack OpenClaw agents' decision logic, outlines three core risk categories—intent deviation, workflow hijack, and data leakage—and presents AgentArmor's runtime protection framework that uses intent alignment, control‑flow integrity, and data‑flow confidentiality checks to mitigate these threats.
AI securityAgentArmorOpenClaw
0 likes · 19 min read
The article analyzes OpenClaw’s rapidly growing Skill ecosystem, exposing over 600 malicious plugins hidden among 13,000+ skills, details four poisoning techniques, presents a multi‑source detection pipeline with AI‑driven semantic audit, and offers practical defenses for both enterprises and ordinary users.
AI securityAgentArmorOpenClaw
0 likes · 18 min read
This guide walks you through a ten‑step zero‑trust framework for hardening container security—from supply‑chain image signing and SBOM generation to runtime threat detection, network policies, secret encryption, and continuous monitoring—targeted at production Kubernetes clusters of any scale.
Image SigningRuntime Protectioncontainer security
0 likes · 31 min read
This comprehensive guide walks you through securing container workloads by defining applicable scenarios, setting up prerequisites, installing Trivy and Falco, hardening Dockerfiles, integrating CI/CD scanning and signing, configuring Kubernetes security contexts, network policies, pod security admission, runtime protection, Harbor registry hardening, regular scanning, monitoring, troubleshooting, and best‑practice recommendations.
KubernetesRuntime Protectioncontainer security
0 likes · 32 min read
AntTechJul 18, 2023 · Information Security
Researchers from Shanghai Jiao Tong University, Ant Security Light-Year Lab, and Zhejiang University present HODOR, a system that reduces the attack surface of Node.js applications by generating fine-grained system‑call allowlists using Seccomp, achieving an average 80% reduction in exploit surface with negligible runtime overhead.
Node.jsRuntime Protectionseccomp
0 likes · 12 min read
JD TechMay 26, 2023 · Information Security
This article examines JD Cloud's Runtime Application Self‑Protection (RASP) technology, detailing its background, architecture, working principles, security advantages over traditional WAF and SAST/DAST, practical 0‑day protection examples, deployment scenarios, operational practices, and real‑world performance in large‑scale promotions and national‑level cyber‑exercises.
Application SecurityRASPRuntime Protection
0 likes · 14 min read
Container security demands vigilant mitigation of risks such as image poisoning, unsafe images, compliance violations, high‑risk vulnerabilities, and container escape by preferring official images, scanning for malware and secrets, enforcing CIS benchmarks, applying cgroup and namespace isolation, and deploying runtime detection agents on each Kubernetes node for rapid response.
DockerRuntime Protectioncontainer security
0 likes · 13 min read
