DROS-VEP Lite

DROS-VEP Lite is an open-source security benchmark and sandbox environment designed to assess the runtime security of AI agents in enterprise settings. This innovative platform evaluates critical dimensions of AI agent operations, focusing on Runtime Tool-Call Authorization and Privileged Execution Governance, setting it apart from traditional benchmarks that primarily measure intelligence and coding capabilities.

Key Features

• Runtime Governance: DROS-VEP takes a unique approach to AI security by addressing scenarios like unauthorized tool calls and privilege violations that existing benchmarks overlook.

• Defense Architecture: Integrated into a modern Defense-in-Depth framework, DROS provides the essential last-mile runtime defenses for AI agents, complementing existing cybersecurity measures like WAF and EDR.

  ┌───────────────────────────┐
  │ Layer 1: Network Perimeter  │
  │ WAF (Cloudflare, Palo Alto) │  → Blocks L3-L7 SQLi/DDoS
  ├───────────────────────────┤
  │ Layer 2: Endpoint & Host   │
  │ EDR (CrowdStrike, Sentinel) │  → Blocks OS Ransomware
  ├───────────────────────────┤
  │ Layer 3: Identity & IAM    │
  │ Keycloak, Active Directory   │  → Manages Human OAuth/JWT
  ├───────────────────────────┤
  │ ★ Layer 4: AI Agent Runtime │
  │ DROS PEP/PDP + ATR Sandbox │  → Blocks Unauthorized Tools
  └───────────────────────────┘
  

• Benchmarking Methodology: Measure policy decision latencies to ensure operational efficiency, with current benchmarks indicating an impressive median latency of 26.1 μs.

• Threat Scenario Reproduction: The system replicates and neutralizes a range of real-world AI incidents, using a structured approach mapped to the MITRE ATLAS framework, resulting in enhanced detection and response capabilities.

Getting Started

To use DROS-VEP Lite, easily set up a containerized sandbox and access the interactive web dashboard:

# Clone the repository  
git clone https://github.com/Top-Celestial-Company-Ltd/DROS-VEP-lite.git  
cd dros-vep-lite  
# Launch the sandbox  
docker compose up -d  
# Access the dashboard  
http://localhost:8080  

Engage with the Community

DROS-VEP Lite continuously evolves through community engagement and real-time contributions. Interested parties can explore various licensing options, engage in discussions over potential vulnerabilities, and claim rewards through successful participation in the $40,000 DROS Red Team Grand Challenge.

Additional Resources

For a comprehensive understanding of the platform, the following resources are available:

• Full Whitepaper on Zero-Trust Execution Governance.
• RFC-010 Draft Protocol detailing the security standards for AI agents.

Explore the world of AI agent security with DROS-VEP Lite, ensuring your AI operations are safeguarded in real enterprise environments.