Image de couverture de livre

MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools

Fuente: arXiv

Enregistré dans:

Détails bibliographiques
Auteurs principaux:	Tan, Zhuoran, Hao, Run, Singer, Jeremy, Tang, Yutian, Anagnostopoulos, Christos
Format:	Preprint
Publié:	2026
Sujets:	Cryptography and Security Software Engineering
Accès en ligne:	Acceder al recurso
Tags:	Ajouter un tag Pas de tags, Soyez le premier à ajouter un tag!

Documents similaires

MCP Pitfall Lab: Exposing Developer Pitfalls in MCP Tool Server Security under Multi-Vector Attacks
par: Hao, Run, et autres
Publié: (2026)

Auditing MCP Servers for Over-Privileged Tool Capabilities
par: Huang, Charoes, et autres
Publié: (2026)

Operational Runtime Behavior Mining for Open-Source Supply Chain Security
par: Tan, Zhuoran, et autres
Publié: (2026)

When MCP Servers Attack: Taxonomy, Feasibility, and Mitigation
par: Zhao, Weibo, et autres
Publié: (2025)

Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
par: Song, Hao, et autres
Publié: (2025)

We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems
par: Li, Zhihao, et autres
Publié: (2025)

From Component Manipulation to System Compromise: Understanding and Detecting Malicious MCP Servers
par: Huang, Yiheng, et autres
Publié: (2026)

WACANA: A Concolic Analyzer for Detecting On-chain Data Vulnerabilities in WASM Smart Contracts
par: Wang, Wansen, et autres
Publié: (2024)

Options, Not Clicks: Lattice Refinement for Consent-Driven MCP Authorization
par: Li, Ying, et autres
Publié: (2026)

Threadbox: Sandboxing for Modular Security
par: Alhindi, Maysara, et autres
Publié: (2025)

SandCell: Sandboxing Rust Beyond Unsafe Code
par: Zhang, Jialun, et autres
Publié: (2025)

Attesting LLM Pipelines: Enforcing Verifiable Training and Release Claims
par: Tan, Zhuoran, et autres
Publié: (2026)

Comparing Effectiveness and Efficiency of Interactive Application Security Testing (IAST) and Runtime Application Self-Protection (RASP) Tools in a Large Java-based System
par: Seth, Aishwarya, et autres
Publié: (2023)

ARAP: Demystifying Anti Runtime Analysis Code in Android Apps
par: Suo, Dewen, et autres
Publié: (2024)

Sandboxing Adoption in Open Source Ecosystems
par: Alhindi, Maysara, et autres
Publié: (2024)

KEENHash: Hashing Programs into Function-Aware Embeddings for Large-Scale Binary Code Similarity Analysis
par: Liu, Zhijie, et autres
Publié: (2025)

From Obfuscated to Obvious: A Comprehensive JavaScript Deobfuscation Tool for Security Analysis
par: Zhou, Dongchao, et autres
Publié: (2025)

Distributed Temporal Graph Learning with Provenance for APT Detection in Supply Chains
par: Tan, Zhuoran, et autres
Publié: (2025)

Static Security Vulnerability Scanning of Proprietary and Open-Source Software: An Adaptable Process with Variants and Results
par: Cusick, James J.
Publié: (2025)

Classport: Designing Runtime Dependency Introspection for Java
par: Cofano, Serena, et autres
Publié: (2025)

OSPtrack: A Labeled Dataset Targeting Simulated Execution of Open-Source Software
par: Tan, Zhuoran, et autres
Publié: (2024)

Improving Smart Contract Security with Contrastive Learning-based Vulnerability Detection
par: Chen, Yizhou, et autres
Publié: (2024)

Guiding Symbolic Execution with Static Analysis and LLMs for Vulnerability Discovery
par: Shafiuzzaman, Md, et autres
Publié: (2026)

SmartOracle: Generating Smart Contract Oracle via Fine-Grained Invariant Detection
par: Su, Jianzhong, et autres
Publié: (2024)

Smart Contract and DeFi Security Tools: Do They Meet the Needs of Practitioners?
par: Chaliasos, Stefanos, et autres
Publié: (2023)

Fakeium: A Dynamic Execution Environment for JavaScript Program Analysis
par: Moreno, José Miguel, et autres
Publié: (2024)

Security study based on the Chatgptplugin system: ldentifying Security Vulnerabilities
par: Ren, Ruomai
Publié: (2025)

LLMs as Firmware Experts: A Runtime-Grown Tree-of-Agents Framework
par: Zhang, Xiangrui, et autres
Publié: (2025)

Many Tools, Few Exploitable Vulnerabilities: A Survey of 246 Static Code Analyzers for Security
par: Hermann, Kevin, et autres
Publié: (2026)

SoK: Analysis of Software Supply Chain Security by Establishing Secure Design Properties
par: Okafor, Chinenye, et autres
Publié: (2024)

GoLeash: Mitigating Golang Software Supply Chain Attacks with Runtime Policy Enforcement
par: Cesarano, Carmine, et autres
Publié: (2025)

Synergistic Directed Execution and LLM-Driven Analysis for Zero-Day AI-Generated Malware Detection
par: Edwards, George, et autres
Publié: (2026)

Machine Learning-Based Detection of MCP Attacks
par: Mattsson, Tobias, et autres
Publié: (2026)

SBOM Generation Tools in the Python Ecosystem: an In-Detail Analysis
par: Cofano, Serena, et autres
Publié: (2024)

Exploring the Security Threats of Retriever Backdoors in Retrieval-Augmented Code Generation
par: Li, Tian, et autres
Publié: (2025)

"False negative -- that one is going to kill you": Understanding Industry Perspectives of Static Analysis based Security Testing
par: Ami, Amit Seal, et autres
Publié: (2023)

Artemis: Toward Accurate Detection of Server-Side Request Forgeries through LLM-Assisted Inter-Procedural Path-Sensitive Taint Analysis
par: Ji, Yuchen, et autres
Publié: (2025)

An Empirical Analysis of EOS Blockchain: Architecture, Contract, and Security
par: Liu, Haiyang, et autres
Publié: (2025)

ColorGo: Directed Concolic Execution
par: Li, Jia, et autres
Publié: (2025)

SAGA: Detecting Security Vulnerabilities Using Static Aspect Analysis
par: Marquer, Yoann, et autres
Publié: (2026)