[arXiv]score: 0.29

ACE Framework Pairs Kernel Syscalls with Agent Telemetry for Security

September 25, 2026

The Agent Cross-Layer Evidence (ACE) framework bridges the gap between application-layer telemetry and kernel-level syscall traces to detect malicious instructions smuggled past the application boundary. The researchers introduced a corpus of 4,047 sessions covering 17 threat models across 14 OWASP agentic threat categories.

HOW THIS AFFECTS YOU

●

builderYou can use kernel-level tracing to detect threats that bypass application-layer monitoring.

●

researcherThe ACE corpus provides a new baseline for evaluating cross-layer security signals in agents.

●

policyThis highlights the need for OS-level visibility to ensure agent safety compliance.

read original ↗arxiv.org

DAILY DIGEST

you don't check 9 sources — we do. one email every morning, read in 2 min. free. unsubscribe anytime. privacy

← back to feed