MITRE ATLASmitigation
AML.M0032 Segmentation of AI Agent Components
- Created
- 2025-11-25
Description
Define security boundaries around agentic tools and data sources with methods such as API access, container isolation, code execution sandboxing, and rate limiting of tool invocation. When sandboxing, limit resource and network access and build the container or virtual machine from a clean base image before each run. This restricts untrusted processes or potential compromises from spreading throughout the system.
Related
Mitigates · MITRE ATLAS (6)
- AML.T0098 AI Agent Tool Credential Harvesting technique
- AML.T0085 Data from AI Services technique
- AML.T0085.000 RAG Databases sub-technique
- AML.T0085.001 AI Agent Tools sub-technique
- AML.T0086 Exfiltration via AI Agent Tool Invocation technique
- AML.T0053 AI Agent Tool Invocation technique