Search papers, labs, and topics across Lattice.
This paper introduces AI-Infra-Guard, an open-source framework designed for multi-layer red teaming of AI agents, addressing the security challenges posed by the rapid evolution of open-source AI infrastructure. By stratifying the attack surface across various layers鈥攕uch as infrastructure, protocol, agent behavior, and model鈥攖he framework employs tailored detection paradigms for each layer, including deterministic rule matching and LLM-driven auditing. The key result is the establishment of a comprehensive security tool that integrates over 75 AI components and 1,400 vulnerability rules, enabling effective agent security assessments and supply-chain auditing of agent skills.
AI-Infra-Guard reveals that a unified security framework can effectively address the diverse attack surfaces of AI agents, making it a game-changer for AI safety.
The fast growth of open-source AI infrastructure, from model serving engines and agent platforms to the Model Context Protocol (MCP) ecosystem and the language models themselves, has outpaced the security tooling available to defend it. We present AI-Infra-Guard, an open-source framework that organizes AI red teaming around a single observation: the attack surface of an AI agent is stratified across layers (infrastructure, protocol/tool, agent behavior, and model), and no single detection paradigm fits all of them. The framework therefore matches a paradigm to each layer, from deterministic rule matching over 75+ AI components and 1{,}400+ vulnerability rules, through LLM-driven agentic auditing of MCP servers and agent-skill packages and multi-turn black-box agent red teaming, to a jailbreak harness with 26+ attack operators over sixteen datasets. To our knowledge it is the only open-source framework to span all of these, including supply-chain auditing of the agent skills that increasingly extend AI agents. We release AI-Infra-Guard as open source so that \emph{layer-paradigm matching} can serve as a practical foundation for agent security and a shared base for the community to build on.
