STRIDE Threat Model Applied to AI Agent Tool Interfaces
AI agents collapse STRIDE's trusted boundaries, requiring new threat models.
Kieran Voss-Nakamura
Section
Secure Development
8 stories in Secure Development.
Human-in-the-Loop Controls for High-Stakes Agent Actions
Blocking every action defeats autonomy; approving all defeats governance.
Madeleine Truchon
Security Testing in CI/CD Pipelines for AI Agent Releases
Securing AI agents in CI/CD requires enforcement at tool execution, not code scans.
Priya Subramaniam
Incident Response Playbooks for Compromised AI Agents
Security teams need new playbooks because AI agent compromises leave no binary signatures to patch.
Madeleine Truchon
Secure Configuration Baselines for MCP Server Deployments
Protocol leaves three security gaps; a new benchmark fills them.
Madeleine Truchon
Credential Management Patterns for Tool-Calling AI Agents
Separating credential storage from agent execution prevents exploitation through compromised tokens.
Madeleine Truchon
Threat Modeling Frameworks Specific to LLM-Powered Agents
Classical threat modeling frameworks fail to capture how LLM agents operate.
Desmond Okwuosa
Security Release Gates for AI Agent Deployments
Agents need security gates based on runtime behavior, not configuration checklists.
Madeleine Truchon