Fall 2026 · CS 562 · Section SML
Hands-on Agent Security Labs
Course overview
This course examines how generative AI and agentic systems create new security and privacy risks, and how they can support security analysis. Students will connect current research with practical implementation in agent security, privacy, and applied agent for security analysis.
Teaching team
Taeung Yoon
Teaching assistant
Jiaxin Gao
Course assistant
Zheng Yi Lai
Course assistant
Tentative schedule
| Week | Date | Topic | Lab |
|---|---|---|---|
| Week 1 | Aug. 26 & Aug. 28 | Course Overview | — |
| Week 2 | Sept. 2 & Sept. 4 | Overview of Agent Harness | Jetstream Environment Setup and Build Your First Agent |
| Week 3 | Sept. 9 & Sept. 11 | Indirect Prompt Injection | Indirect Prompt Injection in a Document-Reading Agent |
| Week 4 | Sept. 16 & Sept. 18 | Tool Integration | Reverse Engineering with Ghidra Tools and an LLM Agent |
| Week 5 | Sept. 23 & Sept. 25 | Agent Governance | Governed Forensics Agent: BOTS v1 Investigation Challenge |
| Week 6 | Sept. 30 & Oct. 2 | Adaptive Reasoning 1 | Response-Guided SQL Injection Agent |
| Week 7 | Oct. 7 & Oct. 9 | Adaptive Reasoning 2 | Adaptive Agent Loops for Penetration Testing |
| Week 8 | Oct. 14 & Oct. 16 | Midterm project presentations | — |
| Week 9 | Oct. 21 & Oct. 23 | Agent Privacy | Dual-VM-Enforced Privacy-Aware Personal Assistant |
| Week 10 | Oct. 28 & Oct. 30 | Agent Memory and Context Integrity | Persistent Threat Intelligence with Secure Agent Memory |
| Week 11 | Nov. 4 & Nov. 6 | Multi-agent Coordination | Collaborative Multi-Artifact Incident Response |
| Week 12 | Nov. 11 & Nov. 13 | Multi-agent Access Control | Confused-deputy Attack on Multi-agent Systems |
| Week 13 | Nov. 18 & Nov. 20 | Self-Improving Agent | Self-Improving Agent for Autonomous SOC Operations |
| Week 14 | Nov. 25 & Nov. 27 | Fall Break — No Class | — |
| Week 15 | Dec. 2 & Dec. 4 | Course wrap-up and Invited talks | — |
| Week 16 | Dec. 9 | Team Project Poster Presentation Session (Siebel Center 2400D, second-floor atrium); final day of instruction | — |