Microsoft unveils Guardian Agents to police AI agents as insider threats
Microsoft on Monday announced new security features in Microsoft 365 E7 and its Project Perception platform that treat AI agents as potential insider threats, with Guardian Agents as the centerpiece: another set of AI agents that check other agents' actions, investigate anomalies and apply limits. Microsoft Security chief Hayete Gallot wrote that frontier models, regardless of origin, cannot be trusted because they are unpredictable, while CEO Satya Nadella argued companies must separate the supply of intelligence from authority over it. The rollout also includes dynamic permissions that give an agent only the access one task needs, dynamic risk scoring, conditional access that can restrict or stop an agent, and Defender discovery of agent types such as Claude Code, Codex and GitHub Copilot, with reports differing on whether the total is 60 types or 35 additional ones. Microsoft did not say when the features will be available or whether they cost extra beyond an E7 licence.
Microsoft's security chief said frontier models cannot be trusted because they are unpredictable, and the company is positioning agent oversight as a control layer separate from the model providers.
圖片來源:
Microsoft
隨著AI代理(AI agent)逐漸取得企業資料、應用程式及系統的存取權限,微軟於10月19日宣布推出新一波AI代理防護機制,主張企業應將AI代理視為可能帶來內部風險的行動者,即使代理未遭外部入侵,也可能因判斷錯誤或受到惡意輸入影響而執行非預期操作。
這批AI代理防護功能包括Dynamic Permissions、Dynamic Agent Risk及Dynamic Conditional Access。Dynamic Permissions可依任務需求與執行期間授予代理最小必要權限,並在任務變化或完成後縮減或撤銷權限。Dynamic Agent Risk則持續評估代理行為及環境訊號,動態判定風險。Dynamic Conditional Access據此調整存取控制,例如限制資料存取、阻擋特定操作或要求人工核准,必要時也可停止代理運作。
此外,微軟也將Microsoft Defender for Endpoint支援的用戶本機AI代理類型擴大至60種,新增Claude Code、OpenAI Codex及GitHub Copilot等工具。微軟也為今年7月發表的網路防護系統Project Perception,擴展AI代理防護方面的能力,加入Guardian Agents與Playbooks功能,協助調查AI代理的風險變化、協調防護措施並即時應變,構成結合身分、端點、網路、雲端及執行環境等訊號的防護機制,但安全政策與重要核准仍由人員掌握。
#Microsoft#Guardian Agents#Project Perception#Microsoft 365 E7#Microsoft Defender#Microsoft Entra Agent ID#Claude Code#OpenAI Codex#GitHub Copilot#OpenClaw#NVIDIA Open Agent Safety Platform#Microsoft Agent 365