{"guid":"0b883d09-1c27-4894-a46e-1e23b5528aa1","title":"Vier grüne Häkchen, trotzdem gehackt: Threat Modeling für KI-Agenten","subtitle":null,"slug":"god2026-110764-vier-grune-hakchen-trotzd","link":"https://c3voc.de","description":"Eine E-Mail liegt im Posteingang. Niemand öffnet sie, niemand klickt. Tage später fragt jemand seinen KI-Assistenten nach den letzten Mails — und der Agent schickt still interne Daten an einen fremden Server. So lief EchoLeak gegen Microsoft Copilot (CVE-2025-32711, CVSS 9.3): kein Exploit-Code, keine kaputte Authentifizierung. Jede Komponente hatte ihr Security-Review bestanden. Der Angriff lebte im Pfad dazwischen.\n\nWer agentenbasierte Systeme baut, kennt das Muster: Wir prüfen Komponenten einzeln, Angreifer denken in Ketten. Sobald ein Agent Daten abruft, Aufgaben plant, Tools aufruft, sich Dinge merkt und mit anderen Agenten redet, entstehen Angriffspfade quer über Vertrauensgrenzen, die kein Per-Komponenten-Review sichtbar macht. Gerade im Kontext von Agentic AI werden dabei die Grenzen klassischer STRIDE-Analysen sichtbar, weil sich Risiken oft erst entlang von Daten-, Entscheidungs- und Tool-Ketten über mehrere Komponenten hinweg entfalten.\n\nIch zeige eine Methode, kein weiteres Framework zum Auswendiglernen. Die Fünf-Zonen-Brille — Eingabe, Planung, Tool-Ausführung, Speicher, Agent-zu-Agent-Kommunikation — sagt, wo man hinschauen muss; die OWASP Top 10 for Agentic AI Applications sagen, was man dort findet. Wir gehen drei reale Architekturen durch: RAG-Pipeline-Poisoning, Missbrauch einer MCP-Tool-Chain und eine Multi-Agent-Kaskade. Für jede bauen wir einen Attack Tree und trennen die Kontrollen, die strukturell halten (Tool-Scoping pro Aufgabe, Egress-Inspektion, Credential-Trennung), von den prompt-basierten, die nur beruhigend klingen.\n\nAm Ende habt ihr eine wiederholbare Routine für euer eigenes Agentic AI System: Zonen kartieren, Pfade ablaufen, einen Baum bauen, Single Points of Failure finden, Kontrollen anhängen und validieren.\n\nLicensed to the public under https://creativecommons.org/licenses/by-sa/4.0/","original_language":"deu","persons":["Christian Schneider"],"view_count":16,"promoted":false,"date":"2026-09-24T11:20:00.000+02:00","release_date":"2026-09-24T00:00:00.000+02:00","updated_at":"2026-09-25T02:30:03.557+02:00","tags":["110764","2026","god2026","Saal Fidelitas","god2026-deu","god2026","Day 1"],"length":2656,"duration":2656,"thumb_url":"https://static.media.ccc.de/media/events/god/2026/110764-0b883d09-1c27-4894-a46e-1e23b5528aa1.jpg","poster_url":"https://static.media.ccc.de/media/events/god/2026/110764-0b883d09-1c27-4894-a46e-1e23b5528aa1_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/god/2026/110764-0b883d09-1c27-4894-a46e-1e23b5528aa1.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/god/2026/110764-0b883d09-1c27-4894-a46e-1e23b5528aa1.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/god2026-110764-vier-grune-hakchen-trotzd","url":"https://api.media.ccc.de/public/events/0b883d09-1c27-4894-a46e-1e23b5528aa1","conference_title":"German OWASP Day 2026","conference_url":"https://api.media.ccc.de/public/conferences/god2026","related":[],"recordings":[{"length":2656,"mime_type":"video/mp4","language":"deu","filename":"god2026-110764-deu-Vier_gruene_Haekchen_trotzdem_gehackt_Threat_Modeling_fuer_KI-Agenten_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2026-09-24T12:46:26.906+02:00","label":"deu 1080p","size":244,"recording_url":"https://cdn.media.ccc.de/events/god/2026/h264-hd/god2026-110764-deu-Vier_gruene_Haekchen_trotzdem_gehackt_Threat_Modeling_fuer_KI-Agenten_hd.mp4","url":"https://api.media.ccc.de/public/recordings/105349","event_url":"https://api.media.ccc.de/public/events/0b883d09-1c27-4894-a46e-1e23b5528aa1","conference_url":"https://api.media.ccc.de/public/conferences/god2026"},{"length":2656,"mime_type":"audio/mpeg","language":"deu","filename":"god2026-110764-deu-Vier_gruene_Haekchen_trotzdem_gehackt_Threat_Modeling_fuer_KI-Agenten_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2026-09-24T12:51:03.244+02:00","label":"deu","size":41,"recording_url":"https://cdn.media.ccc.de/events/god/2026/mp3/god2026-110764-deu-Vier_gruene_Haekchen_trotzdem_gehackt_Threat_Modeling_fuer_KI-Agenten_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/105353","event_url":"https://api.media.ccc.de/public/events/0b883d09-1c27-4894-a46e-1e23b5528aa1","conference_url":"https://api.media.ccc.de/public/conferences/god2026"},{"length":2656,"mime_type":"audio/opus","language":"deu","filename":"god2026-110764-deu-Vier_gruene_Haekchen_trotzdem_gehackt_Threat_Modeling_fuer_KI-Agenten_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2026-09-24T13:05:12.287+02:00","label":"deu","size":25,"recording_url":"https://cdn.media.ccc.de/events/god/2026/opus/god2026-110764-deu-Vier_gruene_Haekchen_trotzdem_gehackt_Threat_Modeling_fuer_KI-Agenten_opus.opus","url":"https://api.media.ccc.de/public/recordings/105359","event_url":"https://api.media.ccc.de/public/events/0b883d09-1c27-4894-a46e-1e23b5528aa1","conference_url":"https://api.media.ccc.de/public/conferences/god2026"},{"length":2656,"mime_type":"video/webm","language":"deu","filename":"god2026-110764-deu-Vier_gruene_Haekchen_trotzdem_gehackt_Threat_Modeling_fuer_KI-Agenten_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2026-09-24T13:16:32.944+02:00","label":"deu 576p","size":89,"recording_url":"https://cdn.media.ccc.de/events/god/2026/webm-sd/god2026-110764-deu-Vier_gruene_Haekchen_trotzdem_gehackt_Threat_Modeling_fuer_KI-Agenten_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/105360","event_url":"https://api.media.ccc.de/public/events/0b883d09-1c27-4894-a46e-1e23b5528aa1","conference_url":"https://api.media.ccc.de/public/conferences/god2026"},{"length":2656,"mime_type":"video/webm","language":"deu","filename":"god2026-110764-deu-Vier_gruene_Haekchen_trotzdem_gehackt_Threat_Modeling_fuer_KI-Agenten_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2026-09-24T13:31:55.285+02:00","label":"deu 1080p","size":226,"recording_url":"https://cdn.media.ccc.de/events/god/2026/webm-hd/god2026-110764-deu-Vier_gruene_Haekchen_trotzdem_gehackt_Threat_Modeling_fuer_KI-Agenten_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/105364","event_url":"https://api.media.ccc.de/public/events/0b883d09-1c27-4894-a46e-1e23b5528aa1","conference_url":"https://api.media.ccc.de/public/conferences/god2026"},{"length":2656,"mime_type":"video/webm;codecs=av01","language":"deu","filename":"god2026-110764-deu-Vier_gruene_Haekchen_trotzdem_gehackt_Threat_Modeling_fuer_KI-Agenten_av1-hd.webm","state":"new","folder":"av1-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2026-09-24T13:35:06.376+02:00","label":"deu 1080p","size":195,"recording_url":"https://cdn.media.ccc.de/events/god/2026/av1-hd/god2026-110764-deu-Vier_gruene_Haekchen_trotzdem_gehackt_Threat_Modeling_fuer_KI-Agenten_av1-hd.webm","url":"https://api.media.ccc.de/public/recordings/105365","event_url":"https://api.media.ccc.de/public/events/0b883d09-1c27-4894-a46e-1e23b5528aa1","conference_url":"https://api.media.ccc.de/public/conferences/god2026"},{"length":2656,"mime_type":"video/webm;codecs=av01","language":"deu","filename":"god2026-110764-deu-Vier_gruene_Haekchen_trotzdem_gehackt_Threat_Modeling_fuer_KI-Agenten_av1-sd.webm","state":"new","folder":"av1-sd","high_quality":false,"width":720,"height":576,"updated_at":"2026-09-24T13:35:32.570+02:00","label":"deu 576p","size":71,"recording_url":"https://cdn.media.ccc.de/events/god/2026/av1-sd/god2026-110764-deu-Vier_gruene_Haekchen_trotzdem_gehackt_Threat_Modeling_fuer_KI-Agenten_av1-sd.webm","url":"https://api.media.ccc.de/public/recordings/105366","event_url":"https://api.media.ccc.de/public/events/0b883d09-1c27-4894-a46e-1e23b5528aa1","conference_url":"https://api.media.ccc.de/public/conferences/god2026"},{"length":2656,"mime_type":"video/mp4","language":"deu","filename":"god2026-110764-deu-Vier_gruene_Haekchen_trotzdem_gehackt_Threat_Modeling_fuer_KI-Agenten_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2026-09-24T13:36:01.320+02:00","label":"deu 576p","size":84,"recording_url":"https://cdn.media.ccc.de/events/god/2026/h264-sd/god2026-110764-deu-Vier_gruene_Haekchen_trotzdem_gehackt_Threat_Modeling_fuer_KI-Agenten_sd.mp4","url":"https://api.media.ccc.de/public/recordings/105368","event_url":"https://api.media.ccc.de/public/events/0b883d09-1c27-4894-a46e-1e23b5528aa1","conference_url":"https://api.media.ccc.de/public/conferences/god2026"}]}