LATIDIA · Ciberseguridad

Agente-Warden: Seguimiento de procedencia de procesos y archivos nativos del núcleo basado en eBPF para agentes de LLM

arXiv: 2609.38245v1Announce Type: new Resumen: Los agentes LLM ejecutan operaciones de proceso y archivo generadas dinámicamente que a menudo son invisibles para el rastreo de la capa de aplicación. Presentamos al Agente-Warden, un padre de Berkeley extendido

La noticia

arXiv:2609.38245v1 Announce Type: new Abstract: LLM agents execute dynamically generated process and file operations that are often invisible to application-layer tracing. We present Agent-Warden, an extended Berkeley Packet Filter (eBPF)-based provenance monitor for tracking task and regular-file states across process creation, file access, and process termination. Agent-Warden provides two interchangeable state backends: a PID-keyed hash-map backend for compatible kernels lacking BPF local-storage support and a task/inode-local-storage backend that couples state reclamation to kernel-object lifetimes. The system emits incremental causal edges to user space for asynchronous graph reconstruction and applies conservative exit-triggered causal aggregation to preserve causal context for short-lived proxy tasks. In a controlled file-mediated propagation scenario, Agent-Warden reconstructed a