Skip to Main Content
Talk Beginner

Securing the Model Context Protocol: Building Defense Systems for AI Tool Ecosystems

Proposal status is Rejected
Session Description

1. Opening & Problem Statement

  • Hook: "Your AI assistant just executed rm -rf / because of a malicious tool description."

  • What is the Model Context Protocol (MCP)?

  • Why traditional security tools fail with MCP

  • The new attack surface: tools, prompts, and resources

2. MCP Attack Vectors Deep Dive

  • Prompt Injection in MCP Tools

  • Tool Poisoning

  • Toxic Flow Attacks

3. Security Architecture & Solution

  • Defense-in-Depth for MCP

  • Security Scanner Architecture

    • Pattern-based detection

    • AI-powered analysis (OpenAI, HuggingFace, NeMo)

    • Policy engine

    • Cross-reference validation

4. LIVE DEMO

  • Scanning a vulnerable MCP configuration

5. Implementation Insights

  • Key Technical Challenges

  • Integration Strategies

Key Takeaways

  1. Security scanning should be integrated into MCP development workflows

  2. Tool descriptions are attack vectors and need careful validation

  3. Cross-server communication requires special security considerations

  4. Whitelisting trusted entities reduces false positives in production

References

https://modelcontextprotocol.io/specification/2025-03-26

Which track are you applying for?

Main track

Speakers

Srinivasan Sekar
Srinivasan Sekar Director of Engineering | LambdaTest

Srinivasan Sekar serves as the Director of Engineering at LambdaTest. A passionate advocate for open-source, he is a recognized Appium Member and an active contributor to several prominent repositories, including Selenium, Webdriver.io, and Taiko. With deep expertise in testing microservices, event-driven applications, and both mobile and web platforms, Srinivasan is known for his skill in building robust automation frameworks. He has also shared his insights at numerous industry conferences such as SeleniumConf, AppiumConf, AgileIndia, XConf Singapore, Quest4Quality, BelgradeTestConf, and FOSDEM.

https://www.linkedin.com/in/srinivasan-sekar/
Sai Krishna
Sai Krishna Director of Engineering | LambdaTest

As a Director of Engineering at LambdaTest, Sai is an active contributor to Appium and a member of the Appium organization, with a strong commitment to the open-source community. Known for his passion for innovation, he consistently contributes to the growth of open-source technologies. In addition to his technical work, Sai is a blogger, community builder, mentor, international speaker, and conference organizer, playing a vital role in shaping and supporting the global testing and development community.

srinivasan sekar
srinivasan sekar .