Securing AI Agents with Information-Flow Control: FIDES

Research question

Can classic information-flow control give agents provable confidentiality and integrity?

Key findings

FIDES tracks labels through agent execution and enforces policies on tool calls - Achieves higher utility than CaMeL on AgentDojo while maintaining guarantees

Sources

arxiv.orghttps://arxiv.org/abs/2505.23643

Contribute

Spot an error, or know a record we should add? Members can propose additions and submit corrections.

Submit research Report a correction or request removal

Related in Research Paper Library

Evaluating Coding Agents on Kernel Exploit Generation

Coding agents now find real vulnerabilities in production software. However, bug discovery results do not measure whether agents can construct exploit primitives. We introduce KEX-bench, a benchmark for evaluating…

Agent security and tool use2026

A2M: Trace-Optimized Agent Hijacking in the MCP Ecosystem

Agents using the Model Context Protocol (MCP) rely on semantic matching to select tools from third-party servers, exposing a semantic supply-chain risk through attacker-controlled metadata and outputs. We introduce…

Agent security and tool use2026

MobileCybench: Evaluating Agent Vulnerability Discovery via Executable Probes

AI agents now report vulnerabilities faster than maintainers can review them. Reports often depend on security properties specific to the application, and require considerable human labor to process. To mitigate…

Agent security and tool use2026