Using MITRE ATLAS to Make AISecOps Threat-Informed
MITRE ATLAS gives AI security teams a shared map of adversary behavior for threat modeling, detection engineering, red teaming, and incident response.
notebook / 13 entries
Notes from building and testing AI agents.
I write about security problems, useful patterns, local tools, and what I learn when an agent has to do real work.
essential reading / foundation
Zero Trust Is the Foundation AI Agents Need
Anthropic's framework connects agent identity, least agency, tool boundaries, memory integrity, and recovery into one practical security model.
Using OWASP's Agentic Top 10 to Govern Systems That Act
The OWASP Agentic Top 10 moves security beyond model output and into goals, tools, identities, memory, delegation, and runtime control.
Using the OWASP LLM Top 10 as an Engineering Baseline
The OWASP LLM Top 10 turns common language-model failure modes into security requirements, tests, telemetry, and response plans.
Using NIST AI RMF to Build an AISecOps Program
NIST AI RMF gives an AI security program its operating model: govern the work, map the context, measure the risk, and manage what happens next.
A Feature Is Not Shipped Until It Works
Four failures in Aria's voice input taught me why a green build and a working development demo are not enough.
When Agent Autonomy Produces Activity Instead of Work
An audit of Aria's autonomous loop found hundreds of goals, almost no progress, and a completion system that rewarded plausible output.
Your Research Agent Needs a Consumer
Aria produced hundreds of useful research reports that nothing ever read. The fix was a small, idempotent consumer pipeline.
The Observer Changes the Agent
A self-observation feature for Aria showed why metrics should remain available without becoming permanent instructions.
The Bigger Model Lost the Bakeoff
What two rounds of testing Aria's language and image models taught me about speed, benchmarks, and knowing when a score is wrong.
The Fourth-Agent Test
A quick way to tell whether your agent setup is ready to grow or still held together by one-off fixes.
Threat Modeling the Agent on Your Laptop
A practical security review for agents that can read files, run commands, and use outside services.
A Small Pattern Library for Tool-Calling Agents
Four simple work patterns for agents that use tools, make changes, test the result, and recover from interruptions.
all tags