{ "@context": "https://schema.org", "schema_version": "1.0.0", "domain": "https://indra.center", "generated_date": "2026-11-01", "counts": { "total_nodes": 155, "verified_classes": 46, "canonical_pages": 99, "total_edges": 55 }, "@graph": [ { "id": "org:iss", "type": "Organization", "name_en": "Autonomous Non-Profit Organization \"Research Institute of System Synthesis\"", "name_ru": "Автономная некоммерческая организация «Научно-исследовательский институт системного синтеза»", "ogrn": "1267700083617", "inn": "9731161602", "url": "https://indra.center/en/", "sameAs": [ "https://isslab.ru", "https://fishchuk.su" ] }, { "id": "person:alexander-fishchuk", "type": "Person", "name_en": "Alexander Fishchuk", "name_ru": "Александр Фищук", "role": "Principal Author of the Security 3.0 Doctrine & INDRA Verification Architecture", "affiliation": "org:iss", "url": "https://indra.center/en/#author-collegium" }, { "id": "software:indra-core", "type": "SoftwareApplication", "name": "INDRA Deterministic API, MCP & Agent Pentesting Platform", "passport_streebog256": "12893d4741eac397918241743e88a613d6b1b1c6309ee77ebe6bb21fbccc9be3", "stand_sample_n": 28, "confusion_matrix": { "TP": 14, "FP": 0, "TN": 14, "FN": 0 }, "url": "https://indra.center/api/v1/passport.json" }, { "id": "pkg:mcp_sentinel-1.1.2-py3-none-any.whl", "type": "SoftwareSourceCode", "name": "mcp_sentinel-1.1.2-py3-none-any.whl", "bytes": "31 573", "sha256": "681a4db59a1a44e89a2b1386ec4b4f2e1fc23c1025c295b9ebf00fd5d20901ea", "license": "Apache-2.0" }, { "id": "pkg:mcp_sentinel-1.1.2.tar.gz", "type": "SoftwareSourceCode", "name": "mcp_sentinel-1.1.2.tar.gz", "bytes": "36 254", "sha256": "abb88978db7b34a2f1f56e0eff42bcd1365b9cc0eb17e4a4380f7815e4f1b79e", "license": "Apache-2.0" }, { "id": "pkg:iss_ledger_117-1.1.1-py3-none-any.whl", "type": "SoftwareSourceCode", "name": "iss_ledger_117-1.1.1-py3-none-any.whl", "bytes": "30 396", "sha256": "8d4ffe60f41ebd377c476f369655aaef5e0ac91858a3d294be37fd1e3100bc87", "license": "Apache-2.0" }, { "id": "pkg:iss_ledger_117-1.1.1.tar.gz", "type": "SoftwareSourceCode", "name": "iss_ledger_117-1.1.1.tar.gz", "bytes": "33 714", "sha256": "6eccef523e24fa60fed29c78866ff12afbab092bd17d51642e00d34dfcea9fa5", "license": "Apache-2.0" }, { "id": "pkg:iss_agent_kit-0.1.1-py3-none-any.whl", "type": "SoftwareSourceCode", "name": "iss_agent_kit-0.1.1-py3-none-any.whl", "bytes": "9 226", "sha256": "7ed0ae9073f512a5cfd71b62904094ca36d0ae2fdb1b4bfff5900d3e368781c3", "license": "Apache-2.0" }, { "id": "pkg:iss_agent_kit-0.1.1.tar.gz", "type": "SoftwareSourceCode", "name": "iss_agent_kit-0.1.1.tar.gz", "bytes": "9 685", "sha256": "0314047404888c29a231fc8710874f15bc2bd75e2b89ba7c4c882da3c792116a", "license": "Apache-2.0" }, { "id": "pkg:iss_verifier.py", "type": "SoftwareSourceCode", "name": "iss_verifier.py", "bytes": "12 456", "sha256": "1ff894574407307d33ec99115652bcaec4e53d06189178696d0db1c767a8608f", "license": "Apache-2.0" }, { "id": "class:INJ-SQL", "type": "DefinedTerm", "code": "INJ-SQL", "slug": "sql-injection", "volume": "Volume II · Baseline Stand", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-SQL-01", "witness_hash": "85de2412c34d4965", "compiled_rule": "IMMUNE-SQL-85DE2412", "name_en": "Database Query Injection", "name_ru": "Внедрение кода в запросы реляционного хранилища", "url_en": "https://indra.center/en/vectors/sql-injection/", "url_ru": "https://indra.center/ru/vectors/sql-injection/" }, { "id": "class:INJ-CMD", "type": "DefinedTerm", "code": "INJ-CMD", "slug": "command-injection", "volume": "Volume II · Baseline Stand", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-CMD-01", "witness_hash": "e22a45273df881ef", "compiled_rule": "IMMUNE-CMD-E22A4527", "name_en": "Operating System Command Injection", "name_ru": "Внедрение команд операционной системы", "url_en": "https://indra.center/en/vectors/command-injection/", "url_ru": "https://indra.center/ru/vectors/command-injection/" }, { "id": "class:DIR-TRV", "type": "DefinedTerm", "code": "DIR-TRV", "slug": "path-traversal", "volume": "Volume II · Baseline Stand", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-FS-01", "witness_hash": "a17dfc4aef33a97d", "compiled_rule": "IMMUNE-FS-A17DFC4A", "name_en": "Filesystem Path Traversal", "name_ru": "Обход каталога файловой системы", "url_en": "https://indra.center/en/vectors/path-traversal/", "url_ru": "https://indra.center/ru/vectors/path-traversal/" }, { "id": "class:AUTH-BOLA", "type": "DefinedTerm", "code": "AUTH-BOLA", "slug": "idor-bola", "volume": "Volume II · Baseline Stand", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-AUTH-01", "witness_hash": "e3ff9c8cdc04a3d1", "compiled_rule": "IMMUNE-BOLA-E3FF9C8C", "name_en": "Broken Object Level Authorization", "name_ru": "Неправомерный доступ к клиентским записям", "url_en": "https://indra.center/en/vectors/idor-bola/", "url_ru": "https://indra.center/ru/vectors/idor-bola/" }, { "id": "class:SSRF-INT", "type": "DefinedTerm", "code": "SSRF-INT", "slug": "ssrf", "volume": "Volume II · Baseline Stand", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-SSRF-01", "witness_hash": "275905904349f049", "compiled_rule": "IMMUNE-SSRF-27590590", "name_en": "Server-Side Request Forgery and Redirect Bypass", "name_ru": "Подделка серверных запросов и обход через перенаправления", "url_en": "https://indra.center/en/vectors/ssrf/", "url_ru": "https://indra.center/ru/vectors/ssrf/" }, { "id": "class:SEC-LEAK", "type": "DefinedTerm", "code": "SEC-LEAK", "slug": "secret-exposure", "volume": "Volume II · Baseline Stand", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-SEC-01", "witness_hash": "2c95eab46a673898", "compiled_rule": "IMMUNE-SEC-2C95EAB4", "name_en": "Authentication Token and Secret Exposure", "name_ru": "Утечка аутентификационных токенов и секретов", "url_en": "https://indra.center/en/vectors/secret-exposure/", "url_ru": "https://indra.center/ru/vectors/secret-exposure/" }, { "id": "class:HDR-SEC", "type": "DefinedTerm", "code": "HDR-SEC", "slug": "security-headers", "volume": "Volume II · Baseline Stand", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-HDR-01", "witness_hash": "82f5eb1f4842ff2b", "compiled_rule": "IMMUNE-HDR-82F5EB1F", "name_en": "Missing Transport and Framing Security Headers", "name_ru": "Отсутствие защитных заголовков ответа", "url_en": "https://indra.center/en/vectors/security-headers/", "url_ru": "https://indra.center/ru/vectors/security-headers/" }, { "id": "class:DOS-RSRC", "type": "DefinedTerm", "code": "DOS-RSRC", "slug": "resource-exhaustion", "volume": "Volume II · Baseline Stand", "mode": "LAB_ONLY", "sandbox_rule": "SEC-ZD-DOS-01", "witness_hash": "cf88675b91a40e12", "compiled_rule": "IMMUNE-DOS-CF88675B", "name_en": "Computational Resource Exhaustion (Isolated Lab Mode)", "name_ru": "Истощение вычислительных ресурсов (лабораторный режим)", "url_en": "https://indra.center/en/vectors/resource-exhaustion/", "url_ru": "https://indra.center/ru/vectors/resource-exhaustion/" }, { "id": "class:API-JWT-01", "type": "DefinedTerm", "code": "API-JWT-01", "slug": "jwt-oauth-auth-bypass", "volume": "Volume II · Extended Infra & API", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-V2-01", "witness_hash": "7a14f903e2c81b52", "compiled_rule": "IMMUNE-JWT-7A14F903", "name_en": "Authentication Bypass and Token Forgery in OAuth 2.0 and Signed Session Tokens", "name_ru": "Обход проверки подлинности, подмена алгоритма и подделка подписанных маркеров доступа в протоколах единого входа", "url_en": "https://indra.center/en/vectors/jwt-oauth-auth-bypass/", "url_ru": "https://indra.center/ru/vectors/jwt-oauth-auth-bypass/" }, { "id": "class:API-BOP-02", "type": "DefinedTerm", "code": "API-BOP-02", "slug": "mass-assignment-bopla", "volume": "Volume II · Extended Infra & API", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-V2-02", "witness_hash": "d830a519c47e2064", "compiled_rule": "IMMUNE-BOP-D830A519", "name_en": "Broken Object Property Level Authorization and Mass Assignment", "name_ru": "Нарушение разграничения доступа на уровне отдельных свойств объекта, массовое присваивание и выдача скрытых полей", "url_en": "https://indra.center/en/vectors/mass-assignment-bopla/", "url_ru": "https://indra.center/ru/vectors/mass-assignment-bopla/" }, { "id": "class:API-RAC-03", "type": "DefinedTerm", "code": "API-RAC-03", "slug": "race-conditions-toctou", "volume": "Volume II · Extended Infra & API", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-V2-03", "witness_hash": "4c91e720b38d51a6", "compiled_rule": "IMMUNE-RAC-4C91E720", "name_en": "Check-to-Use Concurrency Race Conditions and Double-Spend Logic Flaws", "name_ru": "Состояния гонки между проверкой условия и изменением ресурса (TOCTOU) и ошибки двойного списания со счёта", "url_en": "https://indra.center/en/vectors/race-conditions-toctou/", "url_ru": "https://indra.center/ru/vectors/race-conditions-toctou/" }, { "id": "class:API-GQL-04", "type": "DefinedTerm", "code": "API-GQL-04", "slug": "graphql-grpc-websocket", "volume": "Volume II · Extended Infra & API", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-V2-04", "witness_hash": "b208d461a95c3e78", "compiled_rule": "IMMUNE-GQL-B208D461", "name_en": "GraphQL Introspection, Alias Batching, gRPC Reflection, and WebSocket Tunnel Pentesting", "name_ru": "Пентестинг открытой интроспекции и пакетных запросов GraphQL, рефлексии gRPC и постоянных туннелей WebSocket", "url_en": "https://indra.center/en/vectors/graphql-grpc-websocket/", "url_ru": "https://indra.center/ru/vectors/graphql-grpc-websocket/" }, { "id": "class:WEB-DES-05", "type": "DefinedTerm", "code": "WEB-DES-05", "slug": "deserialization-xxe-ssti", "volume": "Volume II · Extended Infra & API", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-V2-05", "witness_hash": "9e53c184f6027d91", "compiled_rule": "IMMUNE-DES-9E53C184", "name_en": "Insecure Deserialization, XML External Entities (XXE), and Server-Side Template Injection (SSTI)", "name_ru": "Небезопасная десериализация бинарных объектов, внешние сущности XML (XXE) и внедрение выражений в серверные шаблоны (SSTI)", "url_en": "https://indra.center/en/vectors/deserialization-xxe-ssti/", "url_ru": "https://indra.center/ru/vectors/deserialization-xxe-ssti/" }, { "id": "class:CLD-K8S-06", "type": "DefinedTerm", "code": "CLD-K8S-06", "slug": "cloud-iam-kubernetes-escape", "volume": "Volume II · Extended Infra & API", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-V2-06", "witness_hash": "1d76b309e48a5c23", "compiled_rule": "IMMUNE-K8S-1D76B309", "name_en": "Cloud Identity Privilege Escalation, Metadata Extraction, and Kubernetes Cluster Escape", "name_ru": "Пентестинг облачных ролей доступа, службы метаданных узлов, прав кластера Kubernetes и побега из контейнеров", "url_en": "https://indra.center/en/vectors/cloud-iam-kubernetes-escape/", "url_ru": "https://indra.center/ru/vectors/cloud-iam-kubernetes-escape/" }, { "id": "class:DEV-CIC-07", "type": "DefinedTerm", "code": "DEV-CIC-07", "slug": "cicd-pipeline-supply-chain", "volume": "Volume II · Extended Infra & API", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-V2-07", "witness_hash": "6f42a815c3094b87", "compiled_rule": "IMMUNE-CIC-6F42A815", "name_en": "CI/CD Pipeline Poisoning, Dependency Confusion, and Build Secret Exfiltration", "name_ru": "Компрометация сборочных конвейеров CI/CD, внедрение команд в сценарии, подмена зависимостей и кража секретов выкладки", "url_en": "https://indra.center/en/vectors/cicd-pipeline-supply-chain/", "url_ru": "https://indra.center/ru/vectors/cicd-pipeline-supply-chain/" }, { "id": "class:INF-ADK-08", "type": "DefinedTerm", "code": "INF-ADK-08", "slug": "active-directory-kerberos", "volume": "Volume II · Extended Infra & API", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-V2-08", "witness_hash": "3b89d042f7168e35", "compiled_rule": "IMMUNE-ADK-3B89D042", "name_en": "Active Directory, Kerberos Delegation, and Internal Lateral Movement Pentesting", "name_ru": "Внутренний пентестинг службы каталогов Active Directory, билетов Kerberos, ретрансляции и путей бокового перемещения", "url_en": "https://indra.center/en/vectors/active-directory-kerberos/", "url_ru": "https://indra.center/ru/vectors/active-directory-kerberos/" }, { "id": "class:CRY-PQC-09", "type": "DefinedTerm", "code": "CRY-PQC-09", "slug": "post-quantum-tls-cryptography", "volume": "Volume II · Extended Infra & API", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-V2-09", "witness_hash": "8c15e637a9204d49", "compiled_rule": "IMMUNE-PQC-8C15E637", "name_en": "Cryptographic Protocol Downgrade, Cipher Audit, and Post-Quantum Readiness (ML-KEM-768 and Streebog-256)", "name_ru": "Аудит криптографии, стойкость к понижению версии защищённого транспорта и постквантовая готовность (ML-KEM-768 и ГОСТ)", "url_en": "https://indra.center/en/vectors/post-quantum-tls-cryptography/", "url_ru": "https://indra.center/ru/vectors/post-quantum-tls-cryptography/" }, { "id": "class:NET-EAS-10", "type": "DefinedTerm", "code": "NET-EAS-10", "slug": "external-perimeter-easm", "volume": "Volume II · Extended Infra & API", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-V2-10", "witness_hash": "5a70c928d1436f62", "compiled_rule": "IMMUNE-EAS-5A70C928", "name_en": "External Attack Surface Management (EASM), Subdomain Takeover, and Perimeter Exposure", "name_ru": "Пентестинг внешнего сетевого периметра, перехват брошенных поддоменов и контроль внешней поверхности атаки (EASM)", "url_en": "https://indra.center/en/vectors/external-perimeter-easm/", "url_ru": "https://indra.center/ru/vectors/external-perimeter-easm/" }, { "id": "class:API-BFA-11", "type": "DefinedTerm", "code": "API-BFA-11", "slug": "api-business-flow-abuse", "volume": "Volume II · Extended Infra & API", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-V2-11", "witness_hash": "e412b750c8391a08", "compiled_rule": "IMMUNE-BFA-E412B750", "name_en": "Unrestricted Access to Sensitive Business Flows and State-Machine Bypass", "name_ru": "Нарушение логики защищаемых бизнес-потоков, пропуск обязательных шагов конечного автомата и автоматизированный выкуп", "url_en": "https://indra.center/en/vectors/api-business-flow-abuse/", "url_ru": "https://indra.center/ru/vectors/api-business-flow-abuse/" }, { "id": "class:API-SHD-12", "type": "DefinedTerm", "code": "API-SHD-12", "slug": "shadow-zombie-api-discovery", "volume": "Volume II · Extended Infra & API", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-V2-12", "witness_hash": "29c6f183e5047b19", "compiled_rule": "IMMUNE-SHD-29C6F183", "name_en": "Shadow, Zombie, and Undocumented Interface Version Discovery and Inventory Drift", "name_ru": "Выявление теневых, устаревших и недокументированных версий программных интерфейсов и строгий контроль реестра маршрутов", "url_en": "https://indra.center/en/vectors/shadow-zombie-api-discovery/", "url_ru": "https://indra.center/ru/vectors/shadow-zombie-api-discovery/" }, { "id": "class:AI-IPI-01", "type": "DefinedTerm", "code": "AI-IPI-01", "slug": "indirect-prompt-injection", "volume": "Volume I · AI-Agent, MCP & LLM", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-AI-01", "witness_hash": "91a4c08fe3127b40", "compiled_rule": "IMMUNE-AI-91A4C08F", "name_en": "Indirect Prompt Injection and Context Poisoning", "name_ru": "Косвенное внедрение инструкций и отравление контекста", "url_en": "https://indra.center/en/ai-pentest/indirect-prompt-injection/", "url_ru": "https://indra.center/ru/ai-pentest/indirect-prompt-injection/" }, { "id": "class:AI-MCP-02", "type": "DefinedTerm", "code": "AI-MCP-02", "slug": "mcp-tool-poisoning", "volume": "Volume I · AI-Agent, MCP & LLM", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-AI-02", "witness_hash": "4b82d19ac7053e11", "compiled_rule": "IMMUNE-AI-4B82D19A", "name_en": "Model Context Protocol Tool Poisoning and Schema Rug-Pulls", "name_ru": "Отравление схем инструментов протокола контекста модели и подмена после одобрения", "url_en": "https://indra.center/en/ai-pentest/mcp-tool-poisoning/", "url_ru": "https://indra.center/ru/ai-pentest/mcp-tool-poisoning/" }, { "id": "class:AI-AGN-03", "type": "DefinedTerm", "code": "AI-AGN-03", "slug": "excessive-agency-confused-deputy", "volume": "Volume I · AI-Agent, MCP & LLM", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-AI-03", "witness_hash": "7c31e5028a941d63", "compiled_rule": "IMMUNE-AI-7C31E502", "name_en": "Excessive Agency and Confused Deputy Privilege Escalation", "name_ru": "Избыточные полномочия помощника и повышение привилегий через обманутого посредника", "url_en": "https://indra.center/en/ai-pentest/excessive-agency-confused-deputy/", "url_ru": "https://indra.center/ru/ai-pentest/excessive-agency-confused-deputy/" }, { "id": "class:AI-RAG-04", "type": "DefinedTerm", "code": "AI-RAG-04", "slug": "rag-vector-poisoning", "volume": "Volume I · AI-Agent, MCP & LLM", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-AI-04", "witness_hash": "3e60b81df4290c54", "compiled_rule": "IMMUNE-AI-3E60B81D", "name_en": "Retrieval-Augmented Generation Vector Poisoning and Cross-Tenant Leakage", "name_ru": "Отравление баз знаний поискового дополнения и утечка фрагментов между клиентами", "url_en": "https://indra.center/en/ai-pentest/rag-vector-poisoning/", "url_ru": "https://indra.center/ru/ai-pentest/rag-vector-poisoning/" }, { "id": "class:AI-SBX-05", "type": "DefinedTerm", "code": "AI-SBX-05", "slug": "agent-sandbox-escape", "volume": "Volume I · AI-Agent, MCP & LLM", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-AI-05", "witness_hash": "d095f23c18e74a90", "compiled_rule": "IMMUNE-AI-D095F23C", "name_en": "Agent Code Interpreter and Container Sandbox Escape", "name_ru": "Побег из песочницы интерпретатора кода и контейнера программного помощника", "url_en": "https://indra.center/en/ai-pentest/agent-sandbox-escape/", "url_ru": "https://indra.center/ru/ai-pentest/agent-sandbox-escape/" }, { "id": "class:AI-MAS-06", "type": "DefinedTerm", "code": "AI-MAS-06", "slug": "multi-agent-collusion-loops", "volume": "Volume I · AI-Agent, MCP & LLM", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-AI-06", "witness_hash": "6a19c47eb0382f15", "compiled_rule": "IMMUNE-AI-6A19C47E", "name_en": "Multi-Agent Goal Hijacking, Taint Laundering, and Recursive Collusion Loops", "name_ru": "Каскадный перехват цели в многоагентных цепочках и рекурсивные циклы поручений", "url_en": "https://indra.center/en/ai-pentest/multi-agent-collusion-loops/", "url_ru": "https://indra.center/ru/ai-pentest/multi-agent-collusion-loops/" }, { "id": "class:AI-EXF-07", "type": "DefinedTerm", "code": "AI-EXF-07", "slug": "system-prompt-secret-exfiltration", "volume": "Volume I · AI-Agent, MCP & LLM", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-AI-07", "witness_hash": "b540e82c91d63a07", "compiled_rule": "IMMUNE-AI-B540E82C", "name_en": "System Prompt, Credential, and Personal Record Exfiltration via Tool Calls", "name_ru": "Утечка системных инструкций, ключей доступа и клиентских карточек через вызовы и разметку", "url_en": "https://indra.center/en/ai-pentest/system-prompt-secret-exfiltration/", "url_ru": "https://indra.center/ru/ai-pentest/system-prompt-secret-exfiltration/" }, { "id": "class:AI-OUT-08", "type": "DefinedTerm", "code": "AI-OUT-08", "slug": "insecure-output-downstream-rce", "volume": "Volume I · AI-Agent, MCP & LLM", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-AI-08", "witness_hash": "1f48a90ec5127d3b", "compiled_rule": "IMMUNE-AI-1F48A90E", "name_en": "Improper Output Handling and Secondary Downstream Injection", "name_ru": "Небезопасная обработка вывода модели и вторичное внедрение кода в целевые службы", "url_en": "https://indra.center/en/ai-pentest/insecure-output-downstream-rce/", "url_ru": "https://indra.center/ru/ai-pentest/insecure-output-downstream-rce/" }, { "id": "class:AI-SUP-09", "type": "DefinedTerm", "code": "AI-SUP-09", "slug": "ai-supply-chain-model-backdoors", "volume": "Volume I · AI-Agent, MCP & LLM", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-AI-09", "witness_hash": "c803d74a59e12b86", "compiled_rule": "IMMUNE-AI-C803D74A", "name_en": "Supply Chain Compromise, Unsafe Model Serialization, and Adapter Backdoors", "name_ru": "Компрометация цепочки поставок моделей, вредоносная десериализация весов и закладки в плагинах", "url_en": "https://indra.center/en/ai-pentest/ai-supply-chain-model-backdoors/", "url_ru": "https://indra.center/ru/ai-pentest/ai-supply-chain-model-backdoors/" }, { "id": "class:AI-DOW-10", "type": "DefinedTerm", "code": "AI-DOW-10", "slug": "denial-of-wallet-token-exhaustion", "volume": "Volume I · AI-Agent, MCP & LLM", "mode": "LAB_ONLY", "sandbox_rule": "SEC-ZD-AI-10", "witness_hash": "5e92a10b84c31f72", "compiled_rule": "IMMUNE-AI-5E92A10B", "name_en": "Unbounded Consumption, Denial-of-Wallet, and Token Amplification (Isolated Lab Mode)", "name_ru": "Исчерпание вычислительного бюджета и лавинное размножение токенов (лабораторный режим)", "url_en": "https://indra.center/en/ai-pentest/denial-of-wallet-token-exhaustion/", "url_ru": "https://indra.center/ru/ai-pentest/denial-of-wallet-token-exhaustion/" }, { "id": "class:IB30-TTA-01", "type": "DefinedTerm", "code": "IB30-TTA-01", "slug": "thought-to-action-boundary", "volume": "Volume III · Security 3.0 Doctrine", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-IB30-01", "witness_hash": "a410f82e39c16b74", "compiled_rule": "IMMUNE-IB30-A410F82E", "name_en": "The Thought-to-Action Boundary: Why Text Guardrails Fail Autonomous Agents", "name_ru": "Водораздел «Мысль — Действие»: почему текстовые экраны не удерживают автономных помощников с правом записи", "url_en": "https://indra.center/en/ib30/thought-to-action-boundary/", "url_ru": "https://indra.center/ru/ib30/thought-to-action-boundary/" }, { "id": "class:IB30-SMT-02", "type": "DefinedTerm", "code": "IB30-SMT-02", "slug": "z3-smt-formal-admissibility", "volume": "Volume III · Security 3.0 Doctrine", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-IB30-02", "witness_hash": "c925b314d08e7a61", "compiled_rule": "IMMUNE-IB30-C925B314", "name_en": "Formal Action Admissibility via Satisfiability Modulo Theories and Unsat Core Injection", "name_ru": "Формальная проверка допустимости действий в теории разрешимости и возврат ядра невыполнимости", "url_en": "https://indra.center/en/ib30/z3-smt-formal-admissibility/", "url_ru": "https://indra.center/ru/ib30/z3-smt-formal-admissibility/" }, { "id": "class:IB30-ZHS-03", "type": "DefinedTerm", "code": "IB30-ZHS-03", "slug": "zero-harm-pentest-sandbox", "volume": "Volume III · Security 3.0 Doctrine", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-IB30-03", "witness_hash": "e703d948a15c2f83", "compiled_rule": "IMMUNE-IB30-E703D948", "name_en": "Zero-Harm Pentesting Mechanism: In-Path Wire Filtering and Scope Confinement", "name_ru": "Устройство песочницы нулевого ущерба: программный перехват на проводе и удержание границ полигона", "url_en": "https://indra.center/en/ib30/zero-harm-pentest-sandbox/", "url_ru": "https://indra.center/ru/ib30/zero-harm-pentest-sandbox/" }, { "id": "class:IB30-WIT-04", "type": "DefinedTerm", "code": "IB30-WIT-04", "slug": "formal-witness-zero-fp", "volume": "Volume III · Security 3.0 Doctrine", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-IB30-04", "witness_hash": "3f81c620b49a5d17", "compiled_rule": "IMMUNE-IB30-3F81C620", "name_en": "Formal Vulnerability Witness Theorem and Zero False Positives via Paired Decoys", "name_ru": "Теорема формального свидетеля уязвимости и доказательство нулевого уровня ложных тревог на парных обманках", "url_en": "https://indra.center/en/ib30/formal-witness-zero-fp/", "url_ru": "https://indra.center/ru/ib30/formal-witness-zero-fp/" }, { "id": "class:IB30-IMM-05", "type": "DefinedTerm", "code": "IB30-IMM-05", "slug": "autonomous-immune-patching", "volume": "Volume III · Security 3.0 Doctrine", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-IB30-05", "witness_hash": "8b47e109f32d6c45", "compiled_rule": "IMMUNE-IB30-8B47E109", "name_en": "Autonomous Immune Patching: Deterministic Contract Compilation for Gateway Enforcement", "name_ru": "Автономный иммунный выпуск: автоматическая компиляция защитных контрактов для пограничного шлюза", "url_en": "https://indra.center/en/ib30/autonomous-immune-patching/", "url_ru": "https://indra.center/ru/ib30/autonomous-immune-patching/" }, { "id": "class:IB30-LED-06", "type": "DefinedTerm", "code": "IB30-LED-06", "slug": "gost-stribog-crypto-ledger", "volume": "Volume III · Security 3.0 Doctrine", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-IB30-06", "witness_hash": "5d19a736e8402b92", "compiled_rule": "IMMUNE-IB30-5D19A736", "name_en": "Cryptographic Evidence Chain with Streebog-256 Hashing and Offline Verification", "name_ru": "Криптографическая цепь квитанций по ГОСТ Р 34.11-2012 (Стрибог-256) и независимая автономная сверка", "url_en": "https://indra.center/en/ib30/gost-stribog-crypto-ledger/", "url_ru": "https://indra.center/ru/ib30/gost-stribog-crypto-ledger/" }, { "id": "class:IB30-PRP-07", "type": "DefinedTerm", "code": "IB30-PRP-07", "slug": "continuous-purple-teaming", "volume": "Volume III · Security 3.0 Doctrine", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-IB30-07", "witness_hash": "1a64f058c7394e28", "compiled_rule": "IMMUNE-IB30-1A64F058", "name_en": "Continuous Autonomous Purple Teaming and Closed-Loop Gateway Coupling", "name_ru": "Непрерывный автономный цикл нападения и защиты: замкнутая сцепка испытателя и защитного шлюза", "url_en": "https://indra.center/en/ib30/continuous-purple-teaming/", "url_ru": "https://indra.center/ru/ib30/continuous-purple-teaming/" }, { "id": "class:IB30-CMP-08", "type": "DefinedTerm", "code": "IB30-CMP-08", "slug": "ib30-vs-dast-sast-manual", "volume": "Volume III · Security 3.0 Doctrine", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-IB30-08", "witness_hash": "7e28b941d6053a19", "compiled_rule": "IMMUNE-IB30-7E28B941", "name_en": "Comparative Methodology: Deterministic Action Verification Compared With Dynamic and Static Scanners", "name_ru": "Сравнительная методология: детерминированный пентест против классических сканеров кода, сетевых сканеров и ручного аудита", "url_en": "https://indra.center/en/ib30/ib30-vs-dast-sast-manual/", "url_ru": "https://indra.center/ru/ib30/ib30-vs-dast-sast-manual/" }, { "id": "class:CMP-FST-01", "type": "DefinedTerm", "code": "CMP-FST-01", "slug": "fstec-117-239-kii-gis", "volume": "Volume IV · Regulatory Compliance", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-CMP-01", "witness_hash": "4180a92cb53e7104", "compiled_rule": "IMMUNE-CMP-4180A92C", "name_en": "Government Information Systems and Significant Infrastructure Testing under Orders 117 and 239", "name_ru": "Испытания государственных систем и значимых объектов по приказам № 117, № 239 и закону № 187-ФЗ", "url_en": "https://indra.center/en/compliance/fstec-117-239-kii-gis/", "url_ru": "https://indra.center/ru/compliance/fstec-117-239-kii-gis/" }, { "id": "class:CMP-CBR-02", "type": "DefinedTerm", "code": "CMP-CBR-02", "slug": "gost-57580-cbr-fintech", "volume": "Volume IV · Regulatory Compliance", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-CMP-02", "witness_hash": "72d9e105a84c3629", "compiled_rule": "IMMUNE-CMP-72D9E105", "name_en": "Financial Sector Penetration Testing under GOST R 57580 and Bank of Russia Regulations", "name_ru": "Пентестинг банков и финансовых организаций по ГОСТ Р 57580 и положениям Банка России (ОУД4)", "url_en": "https://indra.center/en/compliance/gost-57580-cbr-fintech/", "url_ru": "https://indra.center/ru/compliance/gost-57580-cbr-fintech/" }, { "id": "class:CMP-PDN-03", "type": "DefinedTerm", "code": "CMP-PDN-03", "slug": "fz-152-pdn-agent-leakage", "volume": "Volume IV · Regulatory Compliance", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-CMP-03", "witness_hash": "93b4c618e20f5d47", "compiled_rule": "IMMUNE-CMP-93B4C618", "name_en": "Personal Record Protection Audits under 152-FZ and Order 21 for Agentic Systems", "name_ru": "Аудит сохранности частных анкет по закону № 152-ФЗ и приказу № 21 при внедрении программных помощников", "url_en": "https://indra.center/en/compliance/fz-152-pdn-agent-leakage/", "url_ru": "https://indra.center/ru/compliance/fz-152-pdn-agent-leakage/" }, { "id": "class:CMP-OWP-04", "type": "DefinedTerm", "code": "CMP-OWP-04", "slug": "owasp-api-llm-agentic-matrix", "volume": "Volume IV · Regulatory Compliance", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-CMP-04", "witness_hash": "b541d803c19a47e2", "compiled_rule": "IMMUNE-CMP-B541D803", "name_en": "Unified Concordance Matrix: OWASP API Top 10, LLM Top 10, and Agentic Top 10", "name_ru": "Сводная матрица соответствия: OWASP API Top 10, OWASP LLM Top 10 и OWASP Agentic Top 10", "url_en": "https://indra.center/en/compliance/owasp-api-llm-agentic-matrix/", "url_ru": "https://indra.center/ru/compliance/owasp-api-llm-agentic-matrix/" }, { "id": "class:CMP-MTR-05", "type": "DefinedTerm", "code": "CMP-MTR-05", "slug": "mitre-atlas-attck-concordance", "volume": "Volume IV · Regulatory Compliance", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-CMP-05", "witness_hash": "d062f419a73b85c1", "compiled_rule": "IMMUNE-CMP-D062F419", "name_en": "Concordance of MITRE ATLAS and MITRE ATT&CK with Deterministic Wire Interception", "name_ru": "Конкорданс тактик MITRE ATLAS и MITRE ATT&CK с правилами перехвата на проводе", "url_en": "https://indra.center/en/compliance/mitre-atlas-attck-concordance/", "url_ru": "https://indra.center/ru/compliance/mitre-atlas-attck-concordance/" }, { "id": "class:CMP-NST-06", "type": "DefinedTerm", "code": "CMP-NST-06", "slug": "nist-ai-rmf-iso-42001", "volume": "Volume IV · Regulatory Compliance", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-CMP-06", "witness_hash": "e814a237f90c61b5", "compiled_rule": "IMMUNE-CMP-E814A237", "name_en": "International Risk Management and Certification under NIST AI RMF 1.0 and ISO/IEC 42001", "name_ru": "Международное управление рисками и сертификация по стандартам NIST AI RMF 1.0 и ISO/IEC 42001", "url_en": "https://indra.center/en/compliance/nist-ai-rmf-iso-42001/", "url_ru": "https://indra.center/ru/compliance/nist-ai-rmf-iso-42001/" }, { "id": "class:CMP-EUA-07", "type": "DefinedTerm", "code": "CMP-EUA-07", "slug": "eu-ai-act-article-15", "volume": "Volume IV · Regulatory Compliance", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-CMP-07", "witness_hash": "f193c508b62d49a7", "compiled_rule": "IMMUNE-CMP-F193C508", "name_en": "High-Risk System Cybersecurity and Adversarial Resilience under EU AI Act Article 15", "name_ru": "Киберустойчивость высокорисковых систем по статье 15 Регламента Европейского союза (EU AI Act)", "url_en": "https://indra.center/en/compliance/eu-ai-act-article-15/", "url_ru": "https://indra.center/ru/compliance/eu-ai-act-article-15/" }, { "id": "class:CMP-EVD-08", "type": "DefinedTerm", "code": "CMP-EVD-08", "slug": "red-team-reporting-evidence", "volume": "Volume IV · Regulatory Compliance", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-CMP-08", "witness_hash": "a609e382d41b70f6", "compiled_rule": "IMMUNE-CMP-A609E382", "name_en": "Cryptographic Penetration Testing Evidence for Regulators, Auditors, and Boards of Directors", "name_ru": "Криптографическая доказательная база пентеста для регулятора, аудитора и совета директоров", "url_en": "https://indra.center/en/compliance/red-team-reporting-evidence/", "url_ru": "https://indra.center/ru/compliance/red-team-reporting-evidence/" }, { "id": "page:/", "type": "WebPage", "url": "https://indra.center/", "lang": "en", "code": "INDRA-ROOT", "title": "INDRA: Formal Vulnerability Proof & Autonomous Rule Synthesis (Root Hub)" }, { "id": "page:/en/", "type": "WebPage", "url": "https://indra.center/en/", "lang": "en", "code": "INDRA-EN", "title": "INDRA Overview & Live 46-Class Wire-Filter Simulator (EN)" }, { "id": "page:/ru/", "type": "WebPage", "url": "https://indra.center/ru/", "lang": "ru", "code": "INDRA-RU", "title": "Комплекс INDRA: доказательство уязвимостей без вреда базе и синтез правил (RU)" }, { "id": "page:/en/benchmark/", "type": "WebPage", "url": "https://indra.center/en/benchmark/", "lang": "en", "code": "GATES-A-E", "title": "Gates A-E Acceptance Benchmark (12/12 PASS, N=28) — INDRA" }, { "id": "page:/ru/benchmark/", "type": "WebPage", "url": "https://indra.center/ru/benchmark/", "lang": "ru", "code": "GATES-A-E", "title": "Протокол заводских испытаний Ворот A-E (12 из 12 PASS, N=28) — INDRA" }, { "id": "page:/en/packages/", "type": "WebPage", "url": "https://indra.center/en/packages/", "lang": "en", "code": "PKG-SHA256", "title": "Apache-2.0 Open Companion Packages & Verified SHA-256 Registry (EN)" }, { "id": "page:/ru/packages/", "type": "WebPage", "url": "https://indra.center/ru/packages/", "lang": "ru", "code": "PKG-SHA256", "title": "Открытые пакеты Apache-2.0 и реестр контрольных сумм SHA-256 (RU)" }, { "id": "page:/en/vectors/sql-injection/", "type": "WebPage", "url": "https://indra.center/en/vectors/sql-injection/", "lang": "en", "code": "INJ-SQL", "title": "Deterministic Detection and Auto-Patching of Database Query Injection" }, { "id": "page:/ru/vectors/sql-injection/", "type": "WebPage", "url": "https://indra.center/ru/vectors/sql-injection/", "lang": "ru", "code": "INJ-SQL", "title": "Детерминированное выявление и автокомпиляция защиты от внедрения команд в табличное хранилище" }, { "id": "page:/en/vectors/command-injection/", "type": "WebPage", "url": "https://indra.center/en/vectors/command-injection/", "lang": "en", "code": "INJ-CMD", "title": "Formal Verification and Immune Patching for Operating System Command Injection" }, { "id": "page:/ru/vectors/command-injection/", "type": "WebPage", "url": "https://indra.center/ru/vectors/command-injection/", "lang": "ru", "code": "INJ-CMD", "title": "Безопасное доказательство и автоматическая блокировка внедрения команд операционной системы" }, { "id": "page:/en/vectors/path-traversal/", "type": "WebPage", "url": "https://indra.center/en/vectors/path-traversal/", "lang": "en", "code": "DIR-TRV", "title": "Proving and Blocking Filesystem Path Traversal Without Host Modification" }, { "id": "page:/ru/vectors/path-traversal/", "type": "WebPage", "url": "https://indra.center/ru/vectors/path-traversal/", "lang": "ru", "code": "DIR-TRV", "title": "Инструментальная проверка и блокировка выхода за пределы каталога файловой системы" }, { "id": "page:/en/vectors/idor-bola/", "type": "WebPage", "url": "https://indra.center/en/vectors/idor-bola/", "lang": "en", "code": "AUTH-BOLA", "title": "Cross-Tenant Object Authorization Verification and Contract Synthesis" }, { "id": "page:/ru/vectors/idor-bola/", "type": "WebPage", "url": "https://indra.center/ru/vectors/idor-bola/", "lang": "ru", "code": "AUTH-BOLA", "title": "Дифференциальная проверка прав доступа к клиентским записям и выпуск контракта" }, { "id": "page:/en/vectors/ssrf/", "type": "WebPage", "url": "https://indra.center/en/vectors/ssrf/", "lang": "en", "code": "SSRF-INT", "title": "Blocking Internal Metadata Forgery and Redirect Escapes" }, { "id": "page:/ru/vectors/ssrf/", "type": "WebPage", "url": "https://indra.center/ru/vectors/ssrf/", "lang": "ru", "code": "SSRF-INT", "title": "Пресечение подделки серверных запросов и обхода границ через перенаправления 302" }, { "id": "page:/en/vectors/secret-exposure/", "type": "WebPage", "url": "https://indra.center/en/vectors/secret-exposure/", "lang": "en", "code": "SEC-LEAK", "title": "Detecting and Redacting Exposed Credentials in Diagnostic Responses" }, { "id": "page:/ru/vectors/secret-exposure/", "type": "WebPage", "url": "https://indra.center/ru/vectors/secret-exposure/", "lang": "ru", "code": "SEC-LEAK", "title": "Выявление и блокировка утечки ключей и токенов в ответах сервиса" }, { "id": "page:/en/vectors/security-headers/", "type": "WebPage", "url": "https://indra.center/en/vectors/security-headers/", "lang": "en", "code": "HDR-SEC", "title": "Deterministic Verification of Mandatory Transport Security Headers" }, { "id": "page:/ru/vectors/security-headers/", "type": "WebPage", "url": "https://indra.center/ru/vectors/security-headers/", "lang": "ru", "code": "HDR-SEC", "title": "Инструментальный контроль обязательных защитных заголовков ответа" }, { "id": "page:/en/vectors/resource-exhaustion/", "type": "WebPage", "url": "https://indra.center/en/vectors/resource-exhaustion/", "lang": "en", "code": "DOS-RSRC", "title": "Isolated Laboratory Verification of Resource Exhaustion and Complexity Bounds" }, { "id": "page:/ru/vectors/resource-exhaustion/", "type": "WebPage", "url": "https://indra.center/ru/vectors/resource-exhaustion/", "lang": "ru", "code": "DOS-RSRC", "title": "Лабораторная проверка ограничений вычислительной ёмкости и выпуск квот" }, { "id": "page:/en/vectors/jwt-oauth-auth-bypass/", "type": "WebPage", "url": "https://indra.center/en/vectors/jwt-oauth-auth-bypass/", "lang": "en", "code": "API-JWT-01", "title": "Deterministic Verification of Token Forgery, Algorithm Confusion, and OAuth 2.0 Redirect Flaws" }, { "id": "page:/ru/vectors/jwt-oauth-auth-bypass/", "type": "WebPage", "url": "https://indra.center/ru/vectors/jwt-oauth-auth-bypass/", "lang": "ru", "code": "API-JWT-01", "title": "Инструментальная проверка подделки подписей токенов, подмены алгоритма и уязвимостей перенаправления" }, { "id": "page:/en/vectors/mass-assignment-bopla/", "type": "WebPage", "url": "https://indra.center/en/vectors/mass-assignment-bopla/", "lang": "en", "code": "API-BOP-02", "title": "Property-Level Schema Confinement for Preventing Mass Assignment and Excessive Property Exposure" }, { "id": "page:/ru/vectors/mass-assignment-bopla/", "type": "WebPage", "url": "https://indra.center/ru/vectors/mass-assignment-bopla/", "lang": "ru", "code": "API-BOP-02", "title": "Поэлементный контроль схем запросов и ответов для защиты от массового присваивания свойств" }, { "id": "page:/en/vectors/race-conditions-toctou/", "type": "WebPage", "url": "https://indra.center/en/vectors/race-conditions-toctou/", "lang": "en", "code": "API-RAC-03", "title": "Deterministic Single-Packet Concurrency Probing and Idempotency Lock Synthesis" }, { "id": "page:/ru/vectors/race-conditions-toctou/", "type": "WebPage", "url": "https://indra.center/ru/vectors/race-conditions-toctou/", "lang": "ru", "code": "API-RAC-03", "title": "Синхронное тестирование зазора параллельных транзакций и выпуск контракта идемпотентности" }, { "id": "page:/en/vectors/graphql-grpc-websocket/", "type": "WebPage", "url": "https://indra.center/en/vectors/graphql-grpc-websocket/", "lang": "en", "code": "API-GQL-04", "title": "Syntax-Tree Depth Bounding and Frame Authorization for GraphQL, gRPC, and WebSocket Interfaces" }, { "id": "page:/ru/vectors/graphql-grpc-websocket/", "type": "WebPage", "url": "https://indra.center/ru/vectors/graphql-grpc-websocket/", "lang": "ru", "code": "API-GQL-04", "title": "Контроль дерева графовых запросов, пакетных псевдонимов и прав доступа в потоковых каналах" }, { "id": "page:/en/vectors/deserialization-xxe-ssti/", "type": "WebPage", "url": "https://indra.center/en/vectors/deserialization-xxe-ssti/", "lang": "en", "code": "WEB-DES-05", "title": "Zero-Harm Verification and Pre-Parser Interception for Deserialization, External Entities, and Template Injection" }, { "id": "page:/ru/vectors/deserialization-xxe-ssti/", "type": "WebPage", "url": "https://indra.center/ru/vectors/deserialization-xxe-ssti/", "lang": "ru", "code": "WEB-DES-05", "title": "Безопасное доказательство и блокировка внешних сущностей XML, цепочек десериализации и шаблонных вставок" }, { "id": "page:/en/vectors/cloud-iam-kubernetes-escape/", "type": "WebPage", "url": "https://indra.center/en/vectors/cloud-iam-kubernetes-escape/", "lang": "en", "code": "CLD-K8S-06", "title": "Formal Graph Verification of Cloud Identity Trust Policies, Cluster Access Roles, and Pod Confinement" }, { "id": "page:/ru/vectors/cloud-iam-kubernetes-escape/", "type": "WebPage", "url": "https://indra.center/ru/vectors/cloud-iam-kubernetes-escape/", "lang": "ru", "code": "CLD-K8S-06", "title": "Математическая проверка графа облачных полномочий, ролей кластера и ограничений подов без изменения среды" }, { "id": "page:/en/vectors/cicd-pipeline-supply-chain/", "type": "WebPage", "url": "https://indra.center/en/vectors/cicd-pipeline-supply-chain/", "lang": "en", "code": "DEV-CIC-07", "title": "Static Workflow Graph Verification and Hash Pinning for CI/CD Build Pipelines" }, { "id": "page:/ru/vectors/cicd-pipeline-supply-chain/", "type": "WebPage", "url": "https://indra.center/ru/vectors/cicd-pipeline-supply-chain/", "lang": "ru", "code": "DEV-CIC-07", "title": "Верификация графа сборочных конвейеров, защита секретов и жёсткая фиксация зависимостей" }, { "id": "page:/en/vectors/active-directory-kerberos/", "type": "WebPage", "url": "https://indra.center/en/vectors/active-directory-kerberos/", "lang": "en", "code": "INF-ADK-08", "title": "Read-Only Directory Graph Verification for Kerberos Delegation, Authentication Relay, and Access-List Escalation" }, { "id": "page:/ru/vectors/active-directory-kerberos/", "type": "WebPage", "url": "https://indra.center/ru/vectors/active-directory-kerberos/", "lang": "ru", "code": "INF-ADK-08", "title": "Безопасный разбор графа доменных полномочий, делегирования Kerberos и ретрансляции без блокировки учётных записей" }, { "id": "page:/en/vectors/post-quantum-tls-cryptography/", "type": "WebPage", "url": "https://indra.center/en/vectors/post-quantum-tls-cryptography/", "lang": "en", "code": "CRY-PQC-09", "title": "Deterministic Verification of Transport Ciphers, Forward Secrecy, and Post-Quantum Key Encapsulation" }, { "id": "page:/ru/vectors/post-quantum-tls-cryptography/", "type": "WebPage", "url": "https://indra.center/ru/vectors/post-quantum-tls-cryptography/", "lang": "ru", "code": "CRY-PQC-09", "title": "Инструментальная проверка шифронаборов, прямой секретности и постквантовой защиты канала" }, { "id": "page:/en/vectors/external-perimeter-easm/", "type": "WebPage", "url": "https://indra.center/en/vectors/external-perimeter-easm/", "lang": "en", "code": "NET-EAS-10", "title": "Deterministic Perimeter Verification for Subdomain Takeovers, Dangling Domain Records, and Exposed Management Ports" }, { "id": "page:/ru/vectors/external-perimeter-easm/", "type": "WebPage", "url": "https://indra.center/ru/vectors/external-perimeter-easm/", "lang": "ru", "code": "NET-EAS-10", "title": "Инструментальный контроль внешнего периметра, брошенных доменных записей и открытых служебных портов" }, { "id": "page:/en/vectors/api-business-flow-abuse/", "type": "WebPage", "url": "https://indra.center/en/vectors/api-business-flow-abuse/", "lang": "en", "code": "API-BFA-11", "title": "Formal State-Machine Verification for Preventing Step-Skipping, Negative-Quantity Logic, and Flow Automation" }, { "id": "page:/ru/vectors/api-business-flow-abuse/", "type": "WebPage", "url": "https://indra.center/ru/vectors/api-business-flow-abuse/", "lang": "ru", "code": "API-BFA-11", "title": "Формальная проверка конечного автомата сделок для пресечения пропуска шагов и аномальных параметров" }, { "id": "page:/en/vectors/shadow-zombie-api-discovery/", "type": "WebPage", "url": "https://indra.center/en/vectors/shadow-zombie-api-discovery/", "lang": "en", "code": "API-SHD-12", "title": "Differential Route Inventory Verification and Positive OpenAPI Contract Enforcement" }, { "id": "page:/ru/vectors/shadow-zombie-api-discovery/", "type": "WebPage", "url": "https://indra.center/ru/vectors/shadow-zombie-api-discovery/", "lang": "ru", "code": "API-SHD-12", "title": "Инструментальная сверка живого дерева маршрутов со спецификацией и блокировка забытых версий" }, { "id": "page:/en/ai-pentest/indirect-prompt-injection/", "type": "WebPage", "url": "https://indra.center/en/ai-pentest/indirect-prompt-injection/", "lang": "en", "code": "AI-IPI-01", "title": "Deterministic Verification and Interception of Indirect Prompt Injection in Agent Tool Calls" }, { "id": "page:/ru/ai-pentest/indirect-prompt-injection/", "type": "WebPage", "url": "https://indra.center/ru/ai-pentest/indirect-prompt-injection/", "lang": "ru", "code": "AI-IPI-01", "title": "Инструментальное выявление и блокировка косвенного внедрения инструкций через внешние источники" }, { "id": "page:/en/ai-pentest/mcp-tool-poisoning/", "type": "WebPage", "url": "https://indra.center/en/ai-pentest/mcp-tool-poisoning/", "lang": "en", "code": "AI-MCP-02", "title": "Cryptographic Schema Pinning and Verification of Model Context Protocol Tool Poisoning" }, { "id": "page:/ru/ai-pentest/mcp-tool-poisoning/", "type": "WebPage", "url": "https://indra.center/ru/ai-pentest/mcp-tool-poisoning/", "lang": "ru", "code": "AI-MCP-02", "title": "Криптографическая фиксация схем и защита от отравления описаний инструментов MCP" }, { "id": "page:/en/ai-pentest/excessive-agency-confused-deputy/", "type": "WebPage", "url": "https://indra.center/en/ai-pentest/excessive-agency-confused-deputy/", "lang": "en", "code": "AI-AGN-03", "title": "Formal Scope Intersection for Preventing Excessive Agency and Confused Deputy Escalation" }, { "id": "page:/ru/ai-pentest/excessive-agency-confused-deputy/", "type": "WebPage", "url": "https://indra.center/ru/ai-pentest/excessive-agency-confused-deputy/", "lang": "ru", "code": "AI-AGN-03", "title": "Формальная сверка пересечения прав для пресечения повышения привилегий через помощника" }, { "id": "page:/en/ai-pentest/rag-vector-poisoning/", "type": "WebPage", "url": "https://indra.center/en/ai-pentest/rag-vector-poisoning/", "lang": "en", "code": "AI-RAG-04", "title": "Cryptographic Chunk Provenance and Tenant Isolation for Retrieval Knowledge Bases" }, { "id": "page:/ru/ai-pentest/rag-vector-poisoning/", "type": "WebPage", "url": "https://indra.center/ru/ai-pentest/rag-vector-poisoning/", "lang": "ru", "code": "AI-RAG-04", "title": "Криптографический контроль подлинности фрагментов и разграничение клиентов в базах знаний" }, { "id": "page:/en/ai-pentest/agent-sandbox-escape/", "type": "WebPage", "url": "https://indra.center/en/ai-pentest/agent-sandbox-escape/", "lang": "en", "code": "AI-SBX-05", "title": "Abstract Syntax Tree Pre-Screening and Syscall Confinement for Agent Code Interpreters" }, { "id": "page:/ru/ai-pentest/agent-sandbox-escape/", "type": "WebPage", "url": "https://indra.center/ru/ai-pentest/agent-sandbox-escape/", "lang": "ru", "code": "AI-SBX-05", "title": "Предварительный разбор синтаксического дерева и блокировка побега из песочницы интерпретатора" }, { "id": "page:/en/ai-pentest/multi-agent-collusion-loops/", "type": "WebPage", "url": "https://indra.center/en/ai-pentest/multi-agent-collusion-loops/", "lang": "en", "code": "AI-MAS-06", "title": "Acyclic Delegation Graphs and Taint Propagation Across Multi-Agent Orchestration" }, { "id": "page:/ru/ai-pentest/multi-agent-collusion-loops/", "type": "WebPage", "url": "https://indra.center/ru/ai-pentest/multi-agent-collusion-loops/", "lang": "ru", "code": "AI-MAS-06", "title": "Ациклический граф поручений и сквозное наследование меток доверия между помощниками" }, { "id": "page:/en/ai-pentest/system-prompt-secret-exfiltration/", "type": "WebPage", "url": "https://indra.center/en/ai-pentest/system-prompt-secret-exfiltration/", "lang": "en", "code": "AI-EXF-07", "title": "Zero-Exfiltration Verification and Outbound Redaction of System Prompts, Keys, and Personal Records" }, { "id": "page:/ru/ai-pentest/system-prompt-secret-exfiltration/", "type": "WebPage", "url": "https://indra.center/ru/ai-pentest/system-prompt-secret-exfiltration/", "lang": "ru", "code": "AI-EXF-07", "title": "Безопасное выявление и блокировка выгрузки системных инструкций, ключей и защищаемых сведений" }, { "id": "page:/en/ai-pentest/insecure-output-downstream-rce/", "type": "WebPage", "url": "https://indra.center/en/ai-pentest/insecure-output-downstream-rce/", "lang": "en", "code": "AI-OUT-08", "title": "Typed Output Contracts and Secondary Injection Prevention for Model-Generated Payloads" }, { "id": "page:/ru/ai-pentest/insecure-output-downstream-rce/", "type": "WebPage", "url": "https://indra.center/ru/ai-pentest/insecure-output-downstream-rce/", "lang": "ru", "code": "AI-OUT-08", "title": "Строгая типизация ответа модели и пресечение вторичного внедрения кода в базу и браузер" }, { "id": "page:/en/ai-pentest/ai-supply-chain-model-backdoors/", "type": "WebPage", "url": "https://indra.center/en/ai-pentest/ai-supply-chain-model-backdoors/", "lang": "en", "code": "AI-SUP-09", "title": "Cryptographic Artifact Verification and Pickle Deserialization Blocking in Model Supply Chains" }, { "id": "page:/ru/ai-pentest/ai-supply-chain-model-backdoors/", "type": "WebPage", "url": "https://indra.center/ru/ai-pentest/ai-supply-chain-model-backdoors/", "lang": "ru", "code": "AI-SUP-09", "title": "Статический контроль файлов весов и блокировка исполняемых вложений в цепочке поставок" }, { "id": "page:/en/ai-pentest/denial-of-wallet-token-exhaustion/", "type": "WebPage", "url": "https://indra.center/en/ai-pentest/denial-of-wallet-token-exhaustion/", "lang": "en", "code": "AI-DOW-10", "title": "Isolated Laboratory Verification of Token Amplification, Fan-Out Storms, and Compute Quotas" }, { "id": "page:/ru/ai-pentest/denial-of-wallet-token-exhaustion/", "type": "WebPage", "url": "https://indra.center/ru/ai-pentest/denial-of-wallet-token-exhaustion/", "lang": "ru", "code": "AI-DOW-10", "title": "Лабораторная проверка защиты от лавинного размножения вызовов и исчерпания квот модели" }, { "id": "page:/en/ib30/thought-to-action-boundary/", "type": "WebPage", "url": "https://indra.center/en/ib30/thought-to-action-boundary/", "lang": "en", "code": "IB30-TTA-01", "title": "Structural Separation Between Probabilistic Reasoning and Deterministic Action Execution" }, { "id": "page:/ru/ib30/thought-to-action-boundary/", "type": "WebPage", "url": "https://indra.center/ru/ib30/thought-to-action-boundary/", "lang": "ru", "code": "IB30-TTA-01", "title": "Структурная граница между вероятностным рассуждением модели и детерминированным исполнением вызова" }, { "id": "page:/en/ib30/z3-smt-formal-admissibility/", "type": "WebPage", "url": "https://indra.center/en/ib30/z3-smt-formal-admissibility/", "lang": "en", "code": "IB30-SMT-02", "title": "Deterministic Mathematical Verification of Action Contracts and Self-Correction via Unsat Core" }, { "id": "page:/ru/ib30/z3-smt-formal-admissibility/", "type": "WebPage", "url": "https://indra.center/ru/ib30/z3-smt-formal-admissibility/", "lang": "ru", "code": "IB30-SMT-02", "title": "Математическое доказательство допустимости вызовов решателем и возврат ядра невыполнимости" }, { "id": "page:/en/ib30/zero-harm-pentest-sandbox/", "type": "WebPage", "url": "https://indra.center/en/ib30/zero-harm-pentest-sandbox/", "lang": "en", "code": "IB30-ZHS-03", "title": "Proving Live-Target Vulnerabilities Without Sending Destructive Packets to the Network Socket" }, { "id": "page:/ru/ib30/zero-harm-pentest-sandbox/", "type": "WebPage", "url": "https://indra.center/ru/ib30/zero-harm-pentest-sandbox/", "lang": "ru", "code": "IB30-ZHS-03", "title": "Инструментальное доказательство уязвимостей без отправки разрушительных пакетов в сетевой сокет" }, { "id": "page:/en/ib30/formal-witness-zero-fp/", "type": "WebPage", "url": "https://indra.center/en/ib30/formal-witness-zero-fp/", "lang": "en", "code": "IB30-WIT-04", "title": "Eliminating Scanner Hallucinations Through Differential Decoy Verification and Witness Hashing" }, { "id": "page:/ru/ib30/formal-witness-zero-fp/", "type": "WebPage", "url": "https://indra.center/ru/ib30/formal-witness-zero-fp/", "lang": "ru", "code": "IB30-WIT-04", "title": "Исключение ложных срабатываний сканера через дифференциальную сверку с контрольной ручкой-обманкой" }, { "id": "page:/en/ib30/autonomous-immune-patching/", "type": "WebPage", "url": "https://indra.center/en/ib30/autonomous-immune-patching/", "lang": "en", "code": "IB30-IMM-05", "title": "Eliminating Manual Remediation Backlogs via Deterministic Gateway Rule Compilation" }, { "id": "page:/ru/ib30/autonomous-immune-patching/", "type": "WebPage", "url": "https://indra.center/ru/ib30/autonomous-immune-patching/", "lang": "ru", "code": "IB30-IMM-05", "title": "Устранение зазора между обнаружением и защитой за счёт автокомпиляции контрактов фильтрации" }, { "id": "page:/en/ib30/gost-stribog-crypto-ledger/", "type": "WebPage", "url": "https://indra.center/en/ib30/gost-stribog-crypto-ledger/", "lang": "en", "code": "IB30-LED-06", "title": "Tamper-Evident Audit Receipts and Dual-Mode Verification with Streebog-256 and SHA-256" }, { "id": "page:/ru/ib30/gost-stribog-crypto-ledger/", "type": "WebPage", "url": "https://indra.center/ru/ib30/gost-stribog-crypto-ledger/", "lang": "ru", "code": "IB30-LED-06", "title": "Неизменяемые квитанции действий, двухконтурная фиксация и проверка целостности без доверия к поставщику" }, { "id": "page:/en/ib30/continuous-purple-teaming/", "type": "WebPage", "url": "https://indra.center/en/ib30/continuous-purple-teaming/", "lang": "en", "code": "IB30-PRP-07", "title": "Homeostatic Security Coupling Between Zero-Damage Discovery and Deterministic Gateway Enforcement" }, { "id": "page:/ru/ib30/continuous-purple-teaming/", "type": "WebPage", "url": "https://indra.center/ru/ib30/continuous-purple-teaming/", "lang": "ru", "code": "IB30-PRP-07", "title": "Гомеостатическое сцепление безопасного поиска уязвимостей и детерминированного шлюза действий" }, { "id": "page:/en/ib30/ib30-vs-dast-sast-manual/", "type": "WebPage", "url": "https://indra.center/en/ib30/ib30-vs-dast-sast-manual/", "lang": "en", "code": "IB30-CMP-08", "title": "Five-Axis Empirical Comparison of Deterministic Action Verification Against Legacy Security Tools" }, { "id": "page:/ru/ib30/ib30-vs-dast-sast-manual/", "type": "WebPage", "url": "https://indra.center/ru/ib30/ib30-vs-dast-sast-manual/", "lang": "ru", "code": "IB30-CMP-08", "title": "Инструментальное сопоставление детерминированной проверки действий с классическими средствами анализа" }, { "id": "page:/en/compliance/fstec-117-239-kii-gis/", "type": "WebPage", "url": "https://indra.center/en/compliance/fstec-117-239-kii-gis/", "lang": "en", "code": "CMP-FST-01", "title": "Deterministic Vulnerability Testing for State Systems and Significant Objects under Orders 117 and 239" }, { "id": "page:/ru/compliance/fstec-117-239-kii-gis/", "type": "WebPage", "url": "https://indra.center/ru/compliance/fstec-117-239-kii-gis/", "lang": "ru", "code": "CMP-FST-01", "title": "Инструментальная проверка защищённости государственных систем и значимых объектов по приказам № 117 и № 239" }, { "id": "page:/en/compliance/gost-57580-cbr-fintech/", "type": "WebPage", "url": "https://indra.center/en/compliance/gost-57580-cbr-fintech/", "lang": "en", "code": "CMP-CBR-02", "title": "Verifying Banking Interfaces and Payment Gateways under GOST R 57580.1-2017 and Assurance Level OUD4" }, { "id": "page:/ru/compliance/gost-57580-cbr-fintech/", "type": "WebPage", "url": "https://indra.center/ru/compliance/gost-57580-cbr-fintech/", "lang": "ru", "code": "CMP-CBR-02", "title": "Проверка платёжных шлюзов и банковских интерфейсов по ГОСТ Р 57580.1-2017 и оценочному уровню доверия ОУД4" }, { "id": "page:/en/compliance/fz-152-pdn-agent-leakage/", "type": "WebPage", "url": "https://indra.center/en/compliance/fz-152-pdn-agent-leakage/", "lang": "en", "code": "CMP-PDN-03", "title": "Preventing Personal Record Exfiltration Across Application Interfaces and Language Model Tools under 152-FZ" }, { "id": "page:/ru/compliance/fz-152-pdn-agent-leakage/", "type": "WebPage", "url": "https://indra.center/ru/compliance/fz-152-pdn-agent-leakage/", "lang": "ru", "code": "CMP-PDN-03", "title": "Предотвращение утечки клиентских анкет и личных реквизитов через программные интерфейсы по закону № 152-ФЗ" }, { "id": "page:/en/compliance/owasp-api-llm-agentic-matrix/", "type": "WebPage", "url": "https://indra.center/en/compliance/owasp-api-llm-agentic-matrix/", "lang": "en", "code": "CMP-OWP-04", "title": "End-to-End Verification Across OWASP API Security, Language Model Applications, and Autonomous Agents" }, { "id": "page:/ru/compliance/owasp-api-llm-agentic-matrix/", "type": "WebPage", "url": "https://indra.center/ru/compliance/owasp-api-llm-agentic-matrix/", "lang": "ru", "code": "CMP-OWP-04", "title": "Сквозное сопоставление угроз программных интерфейсов, языковых моделей и автономных помощников (OWASP)" }, { "id": "page:/en/compliance/mitre-atlas-attck-concordance/", "type": "WebPage", "url": "https://indra.center/en/compliance/mitre-atlas-attck-concordance/", "lang": "en", "code": "CMP-MTR-05", "title": "Breaking Multi-Stage Adversary Kill Chains Across MITRE ATLAS and ATT&CK Techniques" }, { "id": "page:/ru/compliance/mitre-atlas-attck-concordance/", "type": "WebPage", "url": "https://indra.center/ru/compliance/mitre-atlas-attck-concordance/", "lang": "ru", "code": "CMP-MTR-05", "title": "Пресечение многошаговых цепочек атак по матрицам MITRE ATLAS и MITRE ATT&CK на границе вызова" }, { "id": "page:/en/compliance/nist-ai-rmf-iso-42001/", "type": "WebPage", "url": "https://indra.center/en/compliance/nist-ai-rmf-iso-42001/", "lang": "en", "code": "CMP-NST-06", "title": "Quantitative Verification for NIST AI RMF Functions and ISO/IEC 42001 Management Systems" }, { "id": "page:/ru/compliance/nist-ai-rmf-iso-42001/", "type": "WebPage", "url": "https://indra.center/ru/compliance/nist-ai-rmf-iso-42001/", "lang": "ru", "code": "CMP-NST-06", "title": "Приборное выполнение функций NIST AI RMF и требований стандарта ISO/IEC 42001:2023" }, { "id": "page:/en/compliance/eu-ai-act-article-15/", "type": "WebPage", "url": "https://indra.center/en/compliance/eu-ai-act-article-15/", "lang": "en", "code": "CMP-EUA-07", "title": "Proving Accuracy, Adversarial Resilience, and Cybersecurity under Regulation (EU) 2024/1689 Article 15" }, { "id": "page:/ru/compliance/eu-ai-act-article-15/", "type": "WebPage", "url": "https://indra.center/ru/compliance/eu-ai-act-article-15/", "lang": "ru", "code": "CMP-EUA-07", "title": "Инструментальное доказательство точности, отказоустойчивости и защиты от атак по статье 15 Регламента 2024/1689" }, { "id": "page:/en/compliance/red-team-reporting-evidence/", "type": "WebPage", "url": "https://indra.center/en/compliance/red-team-reporting-evidence/", "lang": "en", "code": "CMP-EVD-08", "title": "Replacing Unverifiable Static Narratives with Reproducible Cryptographic Passports and Standalone Replay" }, { "id": "page:/ru/compliance/red-team-reporting-evidence/", "type": "WebPage", "url": "https://indra.center/ru/compliance/red-team-reporting-evidence/", "lang": "ru", "code": "CMP-EVD-08", "title": "Переход от непроверяемых текстовых отчётов к криптографическому паспорту и автономному повтору" } ], "nodes": [ { "id": "org:iss", "type": "Organization", "name_en": "Autonomous Non-Profit Organization \"Research Institute of System Synthesis\"", "name_ru": "Автономная некоммерческая организация «Научно-исследовательский институт системного синтеза»", "ogrn": "1267700083617", "inn": "9731161602", "url": "https://indra.center/en/", "sameAs": [ "https://isslab.ru", "https://fishchuk.su" ] }, { "id": "person:alexander-fishchuk", "type": "Person", "name_en": "Alexander Fishchuk", "name_ru": "Александр Фищук", "role": "Principal Author of the Security 3.0 Doctrine & INDRA Verification Architecture", "affiliation": "org:iss", "url": "https://indra.center/en/#author-collegium" }, { "id": "software:indra-core", "type": "SoftwareApplication", "name": "INDRA Deterministic API, MCP & Agent Pentesting Platform", "passport_streebog256": "12893d4741eac397918241743e88a613d6b1b1c6309ee77ebe6bb21fbccc9be3", "stand_sample_n": 28, "confusion_matrix": { "TP": 14, "FP": 0, "TN": 14, "FN": 0 }, "url": "https://indra.center/api/v1/passport.json" }, { "id": "pkg:mcp_sentinel-1.1.2-py3-none-any.whl", "type": "SoftwareSourceCode", "name": "mcp_sentinel-1.1.2-py3-none-any.whl", "bytes": "31 573", "sha256": "681a4db59a1a44e89a2b1386ec4b4f2e1fc23c1025c295b9ebf00fd5d20901ea", "license": "Apache-2.0" }, { "id": "pkg:mcp_sentinel-1.1.2.tar.gz", "type": "SoftwareSourceCode", "name": "mcp_sentinel-1.1.2.tar.gz", "bytes": "36 254", "sha256": "abb88978db7b34a2f1f56e0eff42bcd1365b9cc0eb17e4a4380f7815e4f1b79e", "license": "Apache-2.0" }, { "id": "pkg:iss_ledger_117-1.1.1-py3-none-any.whl", "type": "SoftwareSourceCode", "name": "iss_ledger_117-1.1.1-py3-none-any.whl", "bytes": "30 396", "sha256": "8d4ffe60f41ebd377c476f369655aaef5e0ac91858a3d294be37fd1e3100bc87", "license": "Apache-2.0" }, { "id": "pkg:iss_ledger_117-1.1.1.tar.gz", "type": "SoftwareSourceCode", "name": "iss_ledger_117-1.1.1.tar.gz", "bytes": "33 714", "sha256": "6eccef523e24fa60fed29c78866ff12afbab092bd17d51642e00d34dfcea9fa5", "license": "Apache-2.0" }, { "id": "pkg:iss_agent_kit-0.1.1-py3-none-any.whl", "type": "SoftwareSourceCode", "name": "iss_agent_kit-0.1.1-py3-none-any.whl", "bytes": "9 226", "sha256": "7ed0ae9073f512a5cfd71b62904094ca36d0ae2fdb1b4bfff5900d3e368781c3", "license": "Apache-2.0" }, { "id": "pkg:iss_agent_kit-0.1.1.tar.gz", "type": "SoftwareSourceCode", "name": "iss_agent_kit-0.1.1.tar.gz", "bytes": "9 685", "sha256": "0314047404888c29a231fc8710874f15bc2bd75e2b89ba7c4c882da3c792116a", "license": "Apache-2.0" }, { "id": "pkg:iss_verifier.py", "type": "SoftwareSourceCode", "name": "iss_verifier.py", "bytes": "12 456", "sha256": "1ff894574407307d33ec99115652bcaec4e53d06189178696d0db1c767a8608f", "license": "Apache-2.0" }, { "id": "class:INJ-SQL", "type": "DefinedTerm", "code": "INJ-SQL", "slug": "sql-injection", "volume": "Volume II · Baseline Stand", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-SQL-01", "witness_hash": "85de2412c34d4965", "compiled_rule": "IMMUNE-SQL-85DE2412", "name_en": "Database Query Injection", "name_ru": "Внедрение кода в запросы реляционного хранилища", "url_en": "https://indra.center/en/vectors/sql-injection/", "url_ru": "https://indra.center/ru/vectors/sql-injection/" }, { "id": "class:INJ-CMD", "type": "DefinedTerm", "code": "INJ-CMD", "slug": "command-injection", "volume": "Volume II · Baseline Stand", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-CMD-01", "witness_hash": "e22a45273df881ef", "compiled_rule": "IMMUNE-CMD-E22A4527", "name_en": "Operating System Command Injection", "name_ru": "Внедрение команд операционной системы", "url_en": "https://indra.center/en/vectors/command-injection/", "url_ru": "https://indra.center/ru/vectors/command-injection/" }, { "id": "class:DIR-TRV", "type": "DefinedTerm", "code": "DIR-TRV", "slug": "path-traversal", "volume": "Volume II · Baseline Stand", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-FS-01", "witness_hash": "a17dfc4aef33a97d", "compiled_rule": "IMMUNE-FS-A17DFC4A", "name_en": "Filesystem Path Traversal", "name_ru": "Обход каталога файловой системы", "url_en": "https://indra.center/en/vectors/path-traversal/", "url_ru": "https://indra.center/ru/vectors/path-traversal/" }, { "id": "class:AUTH-BOLA", "type": "DefinedTerm", "code": "AUTH-BOLA", "slug": "idor-bola", "volume": "Volume II · Baseline Stand", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-AUTH-01", "witness_hash": "e3ff9c8cdc04a3d1", "compiled_rule": "IMMUNE-BOLA-E3FF9C8C", "name_en": "Broken Object Level Authorization", "name_ru": "Неправомерный доступ к клиентским записям", "url_en": "https://indra.center/en/vectors/idor-bola/", "url_ru": "https://indra.center/ru/vectors/idor-bola/" }, { "id": "class:SSRF-INT", "type": "DefinedTerm", "code": "SSRF-INT", "slug": "ssrf", "volume": "Volume II · Baseline Stand", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-SSRF-01", "witness_hash": "275905904349f049", "compiled_rule": "IMMUNE-SSRF-27590590", "name_en": "Server-Side Request Forgery and Redirect Bypass", "name_ru": "Подделка серверных запросов и обход через перенаправления", "url_en": "https://indra.center/en/vectors/ssrf/", "url_ru": "https://indra.center/ru/vectors/ssrf/" }, { "id": "class:SEC-LEAK", "type": "DefinedTerm", "code": "SEC-LEAK", "slug": "secret-exposure", "volume": "Volume II · Baseline Stand", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-SEC-01", "witness_hash": "2c95eab46a673898", "compiled_rule": "IMMUNE-SEC-2C95EAB4", "name_en": "Authentication Token and Secret Exposure", "name_ru": "Утечка аутентификационных токенов и секретов", "url_en": "https://indra.center/en/vectors/secret-exposure/", "url_ru": "https://indra.center/ru/vectors/secret-exposure/" }, { "id": "class:HDR-SEC", "type": "DefinedTerm", "code": "HDR-SEC", "slug": "security-headers", "volume": "Volume II · Baseline Stand", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-HDR-01", "witness_hash": "82f5eb1f4842ff2b", "compiled_rule": "IMMUNE-HDR-82F5EB1F", "name_en": "Missing Transport and Framing Security Headers", "name_ru": "Отсутствие защитных заголовков ответа", "url_en": "https://indra.center/en/vectors/security-headers/", "url_ru": "https://indra.center/ru/vectors/security-headers/" }, { "id": "class:DOS-RSRC", "type": "DefinedTerm", "code": "DOS-RSRC", "slug": "resource-exhaustion", "volume": "Volume II · Baseline Stand", "mode": "LAB_ONLY", "sandbox_rule": "SEC-ZD-DOS-01", "witness_hash": "cf88675b91a40e12", "compiled_rule": "IMMUNE-DOS-CF88675B", "name_en": "Computational Resource Exhaustion (Isolated Lab Mode)", "name_ru": "Истощение вычислительных ресурсов (лабораторный режим)", "url_en": "https://indra.center/en/vectors/resource-exhaustion/", "url_ru": "https://indra.center/ru/vectors/resource-exhaustion/" }, { "id": "class:API-JWT-01", "type": "DefinedTerm", "code": "API-JWT-01", "slug": "jwt-oauth-auth-bypass", "volume": "Volume II · Extended Infra & API", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-V2-01", "witness_hash": "7a14f903e2c81b52", "compiled_rule": "IMMUNE-JWT-7A14F903", "name_en": "Authentication Bypass and Token Forgery in OAuth 2.0 and Signed Session Tokens", "name_ru": "Обход проверки подлинности, подмена алгоритма и подделка подписанных маркеров доступа в протоколах единого входа", "url_en": "https://indra.center/en/vectors/jwt-oauth-auth-bypass/", "url_ru": "https://indra.center/ru/vectors/jwt-oauth-auth-bypass/" }, { "id": "class:API-BOP-02", "type": "DefinedTerm", "code": "API-BOP-02", "slug": "mass-assignment-bopla", "volume": "Volume II · Extended Infra & API", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-V2-02", "witness_hash": "d830a519c47e2064", "compiled_rule": "IMMUNE-BOP-D830A519", "name_en": "Broken Object Property Level Authorization and Mass Assignment", "name_ru": "Нарушение разграничения доступа на уровне отдельных свойств объекта, массовое присваивание и выдача скрытых полей", "url_en": "https://indra.center/en/vectors/mass-assignment-bopla/", "url_ru": "https://indra.center/ru/vectors/mass-assignment-bopla/" }, { "id": "class:API-RAC-03", "type": "DefinedTerm", "code": "API-RAC-03", "slug": "race-conditions-toctou", "volume": "Volume II · Extended Infra & API", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-V2-03", "witness_hash": "4c91e720b38d51a6", "compiled_rule": "IMMUNE-RAC-4C91E720", "name_en": "Check-to-Use Concurrency Race Conditions and Double-Spend Logic Flaws", "name_ru": "Состояния гонки между проверкой условия и изменением ресурса (TOCTOU) и ошибки двойного списания со счёта", "url_en": "https://indra.center/en/vectors/race-conditions-toctou/", "url_ru": "https://indra.center/ru/vectors/race-conditions-toctou/" }, { "id": "class:API-GQL-04", "type": "DefinedTerm", "code": "API-GQL-04", "slug": "graphql-grpc-websocket", "volume": "Volume II · Extended Infra & API", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-V2-04", "witness_hash": "b208d461a95c3e78", "compiled_rule": "IMMUNE-GQL-B208D461", "name_en": "GraphQL Introspection, Alias Batching, gRPC Reflection, and WebSocket Tunnel Pentesting", "name_ru": "Пентестинг открытой интроспекции и пакетных запросов GraphQL, рефлексии gRPC и постоянных туннелей WebSocket", "url_en": "https://indra.center/en/vectors/graphql-grpc-websocket/", "url_ru": "https://indra.center/ru/vectors/graphql-grpc-websocket/" }, { "id": "class:WEB-DES-05", "type": "DefinedTerm", "code": "WEB-DES-05", "slug": "deserialization-xxe-ssti", "volume": "Volume II · Extended Infra & API", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-V2-05", "witness_hash": "9e53c184f6027d91", "compiled_rule": "IMMUNE-DES-9E53C184", "name_en": "Insecure Deserialization, XML External Entities (XXE), and Server-Side Template Injection (SSTI)", "name_ru": "Небезопасная десериализация бинарных объектов, внешние сущности XML (XXE) и внедрение выражений в серверные шаблоны (SSTI)", "url_en": "https://indra.center/en/vectors/deserialization-xxe-ssti/", "url_ru": "https://indra.center/ru/vectors/deserialization-xxe-ssti/" }, { "id": "class:CLD-K8S-06", "type": "DefinedTerm", "code": "CLD-K8S-06", "slug": "cloud-iam-kubernetes-escape", "volume": "Volume II · Extended Infra & API", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-V2-06", "witness_hash": "1d76b309e48a5c23", "compiled_rule": "IMMUNE-K8S-1D76B309", "name_en": "Cloud Identity Privilege Escalation, Metadata Extraction, and Kubernetes Cluster Escape", "name_ru": "Пентестинг облачных ролей доступа, службы метаданных узлов, прав кластера Kubernetes и побега из контейнеров", "url_en": "https://indra.center/en/vectors/cloud-iam-kubernetes-escape/", "url_ru": "https://indra.center/ru/vectors/cloud-iam-kubernetes-escape/" }, { "id": "class:DEV-CIC-07", "type": "DefinedTerm", "code": "DEV-CIC-07", "slug": "cicd-pipeline-supply-chain", "volume": "Volume II · Extended Infra & API", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-V2-07", "witness_hash": "6f42a815c3094b87", "compiled_rule": "IMMUNE-CIC-6F42A815", "name_en": "CI/CD Pipeline Poisoning, Dependency Confusion, and Build Secret Exfiltration", "name_ru": "Компрометация сборочных конвейеров CI/CD, внедрение команд в сценарии, подмена зависимостей и кража секретов выкладки", "url_en": "https://indra.center/en/vectors/cicd-pipeline-supply-chain/", "url_ru": "https://indra.center/ru/vectors/cicd-pipeline-supply-chain/" }, { "id": "class:INF-ADK-08", "type": "DefinedTerm", "code": "INF-ADK-08", "slug": "active-directory-kerberos", "volume": "Volume II · Extended Infra & API", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-V2-08", "witness_hash": "3b89d042f7168e35", "compiled_rule": "IMMUNE-ADK-3B89D042", "name_en": "Active Directory, Kerberos Delegation, and Internal Lateral Movement Pentesting", "name_ru": "Внутренний пентестинг службы каталогов Active Directory, билетов Kerberos, ретрансляции и путей бокового перемещения", "url_en": "https://indra.center/en/vectors/active-directory-kerberos/", "url_ru": "https://indra.center/ru/vectors/active-directory-kerberos/" }, { "id": "class:CRY-PQC-09", "type": "DefinedTerm", "code": "CRY-PQC-09", "slug": "post-quantum-tls-cryptography", "volume": "Volume II · Extended Infra & API", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-V2-09", "witness_hash": "8c15e637a9204d49", "compiled_rule": "IMMUNE-PQC-8C15E637", "name_en": "Cryptographic Protocol Downgrade, Cipher Audit, and Post-Quantum Readiness (ML-KEM-768 and Streebog-256)", "name_ru": "Аудит криптографии, стойкость к понижению версии защищённого транспорта и постквантовая готовность (ML-KEM-768 и ГОСТ)", "url_en": "https://indra.center/en/vectors/post-quantum-tls-cryptography/", "url_ru": "https://indra.center/ru/vectors/post-quantum-tls-cryptography/" }, { "id": "class:NET-EAS-10", "type": "DefinedTerm", "code": "NET-EAS-10", "slug": "external-perimeter-easm", "volume": "Volume II · Extended Infra & API", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-V2-10", "witness_hash": "5a70c928d1436f62", "compiled_rule": "IMMUNE-EAS-5A70C928", "name_en": "External Attack Surface Management (EASM), Subdomain Takeover, and Perimeter Exposure", "name_ru": "Пентестинг внешнего сетевого периметра, перехват брошенных поддоменов и контроль внешней поверхности атаки (EASM)", "url_en": "https://indra.center/en/vectors/external-perimeter-easm/", "url_ru": "https://indra.center/ru/vectors/external-perimeter-easm/" }, { "id": "class:API-BFA-11", "type": "DefinedTerm", "code": "API-BFA-11", "slug": "api-business-flow-abuse", "volume": "Volume II · Extended Infra & API", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-V2-11", "witness_hash": "e412b750c8391a08", "compiled_rule": "IMMUNE-BFA-E412B750", "name_en": "Unrestricted Access to Sensitive Business Flows and State-Machine Bypass", "name_ru": "Нарушение логики защищаемых бизнес-потоков, пропуск обязательных шагов конечного автомата и автоматизированный выкуп", "url_en": "https://indra.center/en/vectors/api-business-flow-abuse/", "url_ru": "https://indra.center/ru/vectors/api-business-flow-abuse/" }, { "id": "class:API-SHD-12", "type": "DefinedTerm", "code": "API-SHD-12", "slug": "shadow-zombie-api-discovery", "volume": "Volume II · Extended Infra & API", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-V2-12", "witness_hash": "29c6f183e5047b19", "compiled_rule": "IMMUNE-SHD-29C6F183", "name_en": "Shadow, Zombie, and Undocumented Interface Version Discovery and Inventory Drift", "name_ru": "Выявление теневых, устаревших и недокументированных версий программных интерфейсов и строгий контроль реестра маршрутов", "url_en": "https://indra.center/en/vectors/shadow-zombie-api-discovery/", "url_ru": "https://indra.center/ru/vectors/shadow-zombie-api-discovery/" }, { "id": "class:AI-IPI-01", "type": "DefinedTerm", "code": "AI-IPI-01", "slug": "indirect-prompt-injection", "volume": "Volume I · AI-Agent, MCP & LLM", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-AI-01", "witness_hash": "91a4c08fe3127b40", "compiled_rule": "IMMUNE-AI-91A4C08F", "name_en": "Indirect Prompt Injection and Context Poisoning", "name_ru": "Косвенное внедрение инструкций и отравление контекста", "url_en": "https://indra.center/en/ai-pentest/indirect-prompt-injection/", "url_ru": "https://indra.center/ru/ai-pentest/indirect-prompt-injection/" }, { "id": "class:AI-MCP-02", "type": "DefinedTerm", "code": "AI-MCP-02", "slug": "mcp-tool-poisoning", "volume": "Volume I · AI-Agent, MCP & LLM", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-AI-02", "witness_hash": "4b82d19ac7053e11", "compiled_rule": "IMMUNE-AI-4B82D19A", "name_en": "Model Context Protocol Tool Poisoning and Schema Rug-Pulls", "name_ru": "Отравление схем инструментов протокола контекста модели и подмена после одобрения", "url_en": "https://indra.center/en/ai-pentest/mcp-tool-poisoning/", "url_ru": "https://indra.center/ru/ai-pentest/mcp-tool-poisoning/" }, { "id": "class:AI-AGN-03", "type": "DefinedTerm", "code": "AI-AGN-03", "slug": "excessive-agency-confused-deputy", "volume": "Volume I · AI-Agent, MCP & LLM", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-AI-03", "witness_hash": "7c31e5028a941d63", "compiled_rule": "IMMUNE-AI-7C31E502", "name_en": "Excessive Agency and Confused Deputy Privilege Escalation", "name_ru": "Избыточные полномочия помощника и повышение привилегий через обманутого посредника", "url_en": "https://indra.center/en/ai-pentest/excessive-agency-confused-deputy/", "url_ru": "https://indra.center/ru/ai-pentest/excessive-agency-confused-deputy/" }, { "id": "class:AI-RAG-04", "type": "DefinedTerm", "code": "AI-RAG-04", "slug": "rag-vector-poisoning", "volume": "Volume I · AI-Agent, MCP & LLM", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-AI-04", "witness_hash": "3e60b81df4290c54", "compiled_rule": "IMMUNE-AI-3E60B81D", "name_en": "Retrieval-Augmented Generation Vector Poisoning and Cross-Tenant Leakage", "name_ru": "Отравление баз знаний поискового дополнения и утечка фрагментов между клиентами", "url_en": "https://indra.center/en/ai-pentest/rag-vector-poisoning/", "url_ru": "https://indra.center/ru/ai-pentest/rag-vector-poisoning/" }, { "id": "class:AI-SBX-05", "type": "DefinedTerm", "code": "AI-SBX-05", "slug": "agent-sandbox-escape", "volume": "Volume I · AI-Agent, MCP & LLM", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-AI-05", "witness_hash": "d095f23c18e74a90", "compiled_rule": "IMMUNE-AI-D095F23C", "name_en": "Agent Code Interpreter and Container Sandbox Escape", "name_ru": "Побег из песочницы интерпретатора кода и контейнера программного помощника", "url_en": "https://indra.center/en/ai-pentest/agent-sandbox-escape/", "url_ru": "https://indra.center/ru/ai-pentest/agent-sandbox-escape/" }, { "id": "class:AI-MAS-06", "type": "DefinedTerm", "code": "AI-MAS-06", "slug": "multi-agent-collusion-loops", "volume": "Volume I · AI-Agent, MCP & LLM", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-AI-06", "witness_hash": "6a19c47eb0382f15", "compiled_rule": "IMMUNE-AI-6A19C47E", "name_en": "Multi-Agent Goal Hijacking, Taint Laundering, and Recursive Collusion Loops", "name_ru": "Каскадный перехват цели в многоагентных цепочках и рекурсивные циклы поручений", "url_en": "https://indra.center/en/ai-pentest/multi-agent-collusion-loops/", "url_ru": "https://indra.center/ru/ai-pentest/multi-agent-collusion-loops/" }, { "id": "class:AI-EXF-07", "type": "DefinedTerm", "code": "AI-EXF-07", "slug": "system-prompt-secret-exfiltration", "volume": "Volume I · AI-Agent, MCP & LLM", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-AI-07", "witness_hash": "b540e82c91d63a07", "compiled_rule": "IMMUNE-AI-B540E82C", "name_en": "System Prompt, Credential, and Personal Record Exfiltration via Tool Calls", "name_ru": "Утечка системных инструкций, ключей доступа и клиентских карточек через вызовы и разметку", "url_en": "https://indra.center/en/ai-pentest/system-prompt-secret-exfiltration/", "url_ru": "https://indra.center/ru/ai-pentest/system-prompt-secret-exfiltration/" }, { "id": "class:AI-OUT-08", "type": "DefinedTerm", "code": "AI-OUT-08", "slug": "insecure-output-downstream-rce", "volume": "Volume I · AI-Agent, MCP & LLM", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-AI-08", "witness_hash": "1f48a90ec5127d3b", "compiled_rule": "IMMUNE-AI-1F48A90E", "name_en": "Improper Output Handling and Secondary Downstream Injection", "name_ru": "Небезопасная обработка вывода модели и вторичное внедрение кода в целевые службы", "url_en": "https://indra.center/en/ai-pentest/insecure-output-downstream-rce/", "url_ru": "https://indra.center/ru/ai-pentest/insecure-output-downstream-rce/" }, { "id": "class:AI-SUP-09", "type": "DefinedTerm", "code": "AI-SUP-09", "slug": "ai-supply-chain-model-backdoors", "volume": "Volume I · AI-Agent, MCP & LLM", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-AI-09", "witness_hash": "c803d74a59e12b86", "compiled_rule": "IMMUNE-AI-C803D74A", "name_en": "Supply Chain Compromise, Unsafe Model Serialization, and Adapter Backdoors", "name_ru": "Компрометация цепочки поставок моделей, вредоносная десериализация весов и закладки в плагинах", "url_en": "https://indra.center/en/ai-pentest/ai-supply-chain-model-backdoors/", "url_ru": "https://indra.center/ru/ai-pentest/ai-supply-chain-model-backdoors/" }, { "id": "class:AI-DOW-10", "type": "DefinedTerm", "code": "AI-DOW-10", "slug": "denial-of-wallet-token-exhaustion", "volume": "Volume I · AI-Agent, MCP & LLM", "mode": "LAB_ONLY", "sandbox_rule": "SEC-ZD-AI-10", "witness_hash": "5e92a10b84c31f72", "compiled_rule": "IMMUNE-AI-5E92A10B", "name_en": "Unbounded Consumption, Denial-of-Wallet, and Token Amplification (Isolated Lab Mode)", "name_ru": "Исчерпание вычислительного бюджета и лавинное размножение токенов (лабораторный режим)", "url_en": "https://indra.center/en/ai-pentest/denial-of-wallet-token-exhaustion/", "url_ru": "https://indra.center/ru/ai-pentest/denial-of-wallet-token-exhaustion/" }, { "id": "class:IB30-TTA-01", "type": "DefinedTerm", "code": "IB30-TTA-01", "slug": "thought-to-action-boundary", "volume": "Volume III · Security 3.0 Doctrine", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-IB30-01", "witness_hash": "a410f82e39c16b74", "compiled_rule": "IMMUNE-IB30-A410F82E", "name_en": "The Thought-to-Action Boundary: Why Text Guardrails Fail Autonomous Agents", "name_ru": "Водораздел «Мысль — Действие»: почему текстовые экраны не удерживают автономных помощников с правом записи", "url_en": "https://indra.center/en/ib30/thought-to-action-boundary/", "url_ru": "https://indra.center/ru/ib30/thought-to-action-boundary/" }, { "id": "class:IB30-SMT-02", "type": "DefinedTerm", "code": "IB30-SMT-02", "slug": "z3-smt-formal-admissibility", "volume": "Volume III · Security 3.0 Doctrine", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-IB30-02", "witness_hash": "c925b314d08e7a61", "compiled_rule": "IMMUNE-IB30-C925B314", "name_en": "Formal Action Admissibility via Satisfiability Modulo Theories and Unsat Core Injection", "name_ru": "Формальная проверка допустимости действий в теории разрешимости и возврат ядра невыполнимости", "url_en": "https://indra.center/en/ib30/z3-smt-formal-admissibility/", "url_ru": "https://indra.center/ru/ib30/z3-smt-formal-admissibility/" }, { "id": "class:IB30-ZHS-03", "type": "DefinedTerm", "code": "IB30-ZHS-03", "slug": "zero-harm-pentest-sandbox", "volume": "Volume III · Security 3.0 Doctrine", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-IB30-03", "witness_hash": "e703d948a15c2f83", "compiled_rule": "IMMUNE-IB30-E703D948", "name_en": "Zero-Harm Pentesting Mechanism: In-Path Wire Filtering and Scope Confinement", "name_ru": "Устройство песочницы нулевого ущерба: программный перехват на проводе и удержание границ полигона", "url_en": "https://indra.center/en/ib30/zero-harm-pentest-sandbox/", "url_ru": "https://indra.center/ru/ib30/zero-harm-pentest-sandbox/" }, { "id": "class:IB30-WIT-04", "type": "DefinedTerm", "code": "IB30-WIT-04", "slug": "formal-witness-zero-fp", "volume": "Volume III · Security 3.0 Doctrine", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-IB30-04", "witness_hash": "3f81c620b49a5d17", "compiled_rule": "IMMUNE-IB30-3F81C620", "name_en": "Formal Vulnerability Witness Theorem and Zero False Positives via Paired Decoys", "name_ru": "Теорема формального свидетеля уязвимости и доказательство нулевого уровня ложных тревог на парных обманках", "url_en": "https://indra.center/en/ib30/formal-witness-zero-fp/", "url_ru": "https://indra.center/ru/ib30/formal-witness-zero-fp/" }, { "id": "class:IB30-IMM-05", "type": "DefinedTerm", "code": "IB30-IMM-05", "slug": "autonomous-immune-patching", "volume": "Volume III · Security 3.0 Doctrine", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-IB30-05", "witness_hash": "8b47e109f32d6c45", "compiled_rule": "IMMUNE-IB30-8B47E109", "name_en": "Autonomous Immune Patching: Deterministic Contract Compilation for Gateway Enforcement", "name_ru": "Автономный иммунный выпуск: автоматическая компиляция защитных контрактов для пограничного шлюза", "url_en": "https://indra.center/en/ib30/autonomous-immune-patching/", "url_ru": "https://indra.center/ru/ib30/autonomous-immune-patching/" }, { "id": "class:IB30-LED-06", "type": "DefinedTerm", "code": "IB30-LED-06", "slug": "gost-stribog-crypto-ledger", "volume": "Volume III · Security 3.0 Doctrine", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-IB30-06", "witness_hash": "5d19a736e8402b92", "compiled_rule": "IMMUNE-IB30-5D19A736", "name_en": "Cryptographic Evidence Chain with Streebog-256 Hashing and Offline Verification", "name_ru": "Криптографическая цепь квитанций по ГОСТ Р 34.11-2012 (Стрибог-256) и независимая автономная сверка", "url_en": "https://indra.center/en/ib30/gost-stribog-crypto-ledger/", "url_ru": "https://indra.center/ru/ib30/gost-stribog-crypto-ledger/" }, { "id": "class:IB30-PRP-07", "type": "DefinedTerm", "code": "IB30-PRP-07", "slug": "continuous-purple-teaming", "volume": "Volume III · Security 3.0 Doctrine", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-IB30-07", "witness_hash": "1a64f058c7394e28", "compiled_rule": "IMMUNE-IB30-1A64F058", "name_en": "Continuous Autonomous Purple Teaming and Closed-Loop Gateway Coupling", "name_ru": "Непрерывный автономный цикл нападения и защиты: замкнутая сцепка испытателя и защитного шлюза", "url_en": "https://indra.center/en/ib30/continuous-purple-teaming/", "url_ru": "https://indra.center/ru/ib30/continuous-purple-teaming/" }, { "id": "class:IB30-CMP-08", "type": "DefinedTerm", "code": "IB30-CMP-08", "slug": "ib30-vs-dast-sast-manual", "volume": "Volume III · Security 3.0 Doctrine", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-IB30-08", "witness_hash": "7e28b941d6053a19", "compiled_rule": "IMMUNE-IB30-7E28B941", "name_en": "Comparative Methodology: Deterministic Action Verification Compared With Dynamic and Static Scanners", "name_ru": "Сравнительная методология: детерминированный пентест против классических сканеров кода, сетевых сканеров и ручного аудита", "url_en": "https://indra.center/en/ib30/ib30-vs-dast-sast-manual/", "url_ru": "https://indra.center/ru/ib30/ib30-vs-dast-sast-manual/" }, { "id": "class:CMP-FST-01", "type": "DefinedTerm", "code": "CMP-FST-01", "slug": "fstec-117-239-kii-gis", "volume": "Volume IV · Regulatory Compliance", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-CMP-01", "witness_hash": "4180a92cb53e7104", "compiled_rule": "IMMUNE-CMP-4180A92C", "name_en": "Government Information Systems and Significant Infrastructure Testing under Orders 117 and 239", "name_ru": "Испытания государственных систем и значимых объектов по приказам № 117, № 239 и закону № 187-ФЗ", "url_en": "https://indra.center/en/compliance/fstec-117-239-kii-gis/", "url_ru": "https://indra.center/ru/compliance/fstec-117-239-kii-gis/" }, { "id": "class:CMP-CBR-02", "type": "DefinedTerm", "code": "CMP-CBR-02", "slug": "gost-57580-cbr-fintech", "volume": "Volume IV · Regulatory Compliance", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-CMP-02", "witness_hash": "72d9e105a84c3629", "compiled_rule": "IMMUNE-CMP-72D9E105", "name_en": "Financial Sector Penetration Testing under GOST R 57580 and Bank of Russia Regulations", "name_ru": "Пентестинг банков и финансовых организаций по ГОСТ Р 57580 и положениям Банка России (ОУД4)", "url_en": "https://indra.center/en/compliance/gost-57580-cbr-fintech/", "url_ru": "https://indra.center/ru/compliance/gost-57580-cbr-fintech/" }, { "id": "class:CMP-PDN-03", "type": "DefinedTerm", "code": "CMP-PDN-03", "slug": "fz-152-pdn-agent-leakage", "volume": "Volume IV · Regulatory Compliance", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-CMP-03", "witness_hash": "93b4c618e20f5d47", "compiled_rule": "IMMUNE-CMP-93B4C618", "name_en": "Personal Record Protection Audits under 152-FZ and Order 21 for Agentic Systems", "name_ru": "Аудит сохранности частных анкет по закону № 152-ФЗ и приказу № 21 при внедрении программных помощников", "url_en": "https://indra.center/en/compliance/fz-152-pdn-agent-leakage/", "url_ru": "https://indra.center/ru/compliance/fz-152-pdn-agent-leakage/" }, { "id": "class:CMP-OWP-04", "type": "DefinedTerm", "code": "CMP-OWP-04", "slug": "owasp-api-llm-agentic-matrix", "volume": "Volume IV · Regulatory Compliance", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-CMP-04", "witness_hash": "b541d803c19a47e2", "compiled_rule": "IMMUNE-CMP-B541D803", "name_en": "Unified Concordance Matrix: OWASP API Top 10, LLM Top 10, and Agentic Top 10", "name_ru": "Сводная матрица соответствия: OWASP API Top 10, OWASP LLM Top 10 и OWASP Agentic Top 10", "url_en": "https://indra.center/en/compliance/owasp-api-llm-agentic-matrix/", "url_ru": "https://indra.center/ru/compliance/owasp-api-llm-agentic-matrix/" }, { "id": "class:CMP-MTR-05", "type": "DefinedTerm", "code": "CMP-MTR-05", "slug": "mitre-atlas-attck-concordance", "volume": "Volume IV · Regulatory Compliance", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-CMP-05", "witness_hash": "d062f419a73b85c1", "compiled_rule": "IMMUNE-CMP-D062F419", "name_en": "Concordance of MITRE ATLAS and MITRE ATT&CK with Deterministic Wire Interception", "name_ru": "Конкорданс тактик MITRE ATLAS и MITRE ATT&CK с правилами перехвата на проводе", "url_en": "https://indra.center/en/compliance/mitre-atlas-attck-concordance/", "url_ru": "https://indra.center/ru/compliance/mitre-atlas-attck-concordance/" }, { "id": "class:CMP-NST-06", "type": "DefinedTerm", "code": "CMP-NST-06", "slug": "nist-ai-rmf-iso-42001", "volume": "Volume IV · Regulatory Compliance", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-CMP-06", "witness_hash": "e814a237f90c61b5", "compiled_rule": "IMMUNE-CMP-E814A237", "name_en": "International Risk Management and Certification under NIST AI RMF 1.0 and ISO/IEC 42001", "name_ru": "Международное управление рисками и сертификация по стандартам NIST AI RMF 1.0 и ISO/IEC 42001", "url_en": "https://indra.center/en/compliance/nist-ai-rmf-iso-42001/", "url_ru": "https://indra.center/ru/compliance/nist-ai-rmf-iso-42001/" }, { "id": "class:CMP-EUA-07", "type": "DefinedTerm", "code": "CMP-EUA-07", "slug": "eu-ai-act-article-15", "volume": "Volume IV · Regulatory Compliance", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-CMP-07", "witness_hash": "f193c508b62d49a7", "compiled_rule": "IMMUNE-CMP-F193C508", "name_en": "High-Risk System Cybersecurity and Adversarial Resilience under EU AI Act Article 15", "name_ru": "Киберустойчивость высокорисковых систем по статье 15 Регламента Европейского союза (EU AI Act)", "url_en": "https://indra.center/en/compliance/eu-ai-act-article-15/", "url_ru": "https://indra.center/ru/compliance/eu-ai-act-article-15/" }, { "id": "class:CMP-EVD-08", "type": "DefinedTerm", "code": "CMP-EVD-08", "slug": "red-team-reporting-evidence", "volume": "Volume IV · Regulatory Compliance", "mode": "AUTO_SCAN", "sandbox_rule": "SEC-ZD-CMP-08", "witness_hash": "a609e382d41b70f6", "compiled_rule": "IMMUNE-CMP-A609E382", "name_en": "Cryptographic Penetration Testing Evidence for Regulators, Auditors, and Boards of Directors", "name_ru": "Криптографическая доказательная база пентеста для регулятора, аудитора и совета директоров", "url_en": "https://indra.center/en/compliance/red-team-reporting-evidence/", "url_ru": "https://indra.center/ru/compliance/red-team-reporting-evidence/" }, { "id": "page:/", "type": "WebPage", "url": "https://indra.center/", "lang": "en", "code": "INDRA-ROOT", "title": "INDRA: Formal Vulnerability Proof & Autonomous Rule Synthesis (Root Hub)" }, { "id": "page:/en/", "type": "WebPage", "url": "https://indra.center/en/", "lang": "en", "code": "INDRA-EN", "title": "INDRA Overview & Live 46-Class Wire-Filter Simulator (EN)" }, { "id": "page:/ru/", "type": "WebPage", "url": "https://indra.center/ru/", "lang": "ru", "code": "INDRA-RU", "title": "Комплекс INDRA: доказательство уязвимостей без вреда базе и синтез правил (RU)" }, { "id": "page:/en/benchmark/", "type": "WebPage", "url": "https://indra.center/en/benchmark/", "lang": "en", "code": "GATES-A-E", "title": "Gates A-E Acceptance Benchmark (12/12 PASS, N=28) — INDRA" }, { "id": "page:/ru/benchmark/", "type": "WebPage", "url": "https://indra.center/ru/benchmark/", "lang": "ru", "code": "GATES-A-E", "title": "Протокол заводских испытаний Ворот A-E (12 из 12 PASS, N=28) — INDRA" }, { "id": "page:/en/packages/", "type": "WebPage", "url": "https://indra.center/en/packages/", "lang": "en", "code": "PKG-SHA256", "title": "Apache-2.0 Open Companion Packages & Verified SHA-256 Registry (EN)" }, { "id": "page:/ru/packages/", "type": "WebPage", "url": "https://indra.center/ru/packages/", "lang": "ru", "code": "PKG-SHA256", "title": "Открытые пакеты Apache-2.0 и реестр контрольных сумм SHA-256 (RU)" }, { "id": "page:/en/vectors/sql-injection/", "type": "WebPage", "url": "https://indra.center/en/vectors/sql-injection/", "lang": "en", "code": "INJ-SQL", "title": "Deterministic Detection and Auto-Patching of Database Query Injection" }, { "id": "page:/ru/vectors/sql-injection/", "type": "WebPage", "url": "https://indra.center/ru/vectors/sql-injection/", "lang": "ru", "code": "INJ-SQL", "title": "Детерминированное выявление и автокомпиляция защиты от внедрения команд в табличное хранилище" }, { "id": "page:/en/vectors/command-injection/", "type": "WebPage", "url": "https://indra.center/en/vectors/command-injection/", "lang": "en", "code": "INJ-CMD", "title": "Formal Verification and Immune Patching for Operating System Command Injection" }, { "id": "page:/ru/vectors/command-injection/", "type": "WebPage", "url": "https://indra.center/ru/vectors/command-injection/", "lang": "ru", "code": "INJ-CMD", "title": "Безопасное доказательство и автоматическая блокировка внедрения команд операционной системы" }, { "id": "page:/en/vectors/path-traversal/", "type": "WebPage", "url": "https://indra.center/en/vectors/path-traversal/", "lang": "en", "code": "DIR-TRV", "title": "Proving and Blocking Filesystem Path Traversal Without Host Modification" }, { "id": "page:/ru/vectors/path-traversal/", "type": "WebPage", "url": "https://indra.center/ru/vectors/path-traversal/", "lang": "ru", "code": "DIR-TRV", "title": "Инструментальная проверка и блокировка выхода за пределы каталога файловой системы" }, { "id": "page:/en/vectors/idor-bola/", "type": "WebPage", "url": "https://indra.center/en/vectors/idor-bola/", "lang": "en", "code": "AUTH-BOLA", "title": "Cross-Tenant Object Authorization Verification and Contract Synthesis" }, { "id": "page:/ru/vectors/idor-bola/", "type": "WebPage", "url": "https://indra.center/ru/vectors/idor-bola/", "lang": "ru", "code": "AUTH-BOLA", "title": "Дифференциальная проверка прав доступа к клиентским записям и выпуск контракта" }, { "id": "page:/en/vectors/ssrf/", "type": "WebPage", "url": "https://indra.center/en/vectors/ssrf/", "lang": "en", "code": "SSRF-INT", "title": "Blocking Internal Metadata Forgery and Redirect Escapes" }, { "id": "page:/ru/vectors/ssrf/", "type": "WebPage", "url": "https://indra.center/ru/vectors/ssrf/", "lang": "ru", "code": "SSRF-INT", "title": "Пресечение подделки серверных запросов и обхода границ через перенаправления 302" }, { "id": "page:/en/vectors/secret-exposure/", "type": "WebPage", "url": "https://indra.center/en/vectors/secret-exposure/", "lang": "en", "code": "SEC-LEAK", "title": "Detecting and Redacting Exposed Credentials in Diagnostic Responses" }, { "id": "page:/ru/vectors/secret-exposure/", "type": "WebPage", "url": "https://indra.center/ru/vectors/secret-exposure/", "lang": "ru", "code": "SEC-LEAK", "title": "Выявление и блокировка утечки ключей и токенов в ответах сервиса" }, { "id": "page:/en/vectors/security-headers/", "type": "WebPage", "url": "https://indra.center/en/vectors/security-headers/", "lang": "en", "code": "HDR-SEC", "title": "Deterministic Verification of Mandatory Transport Security Headers" }, { "id": "page:/ru/vectors/security-headers/", "type": "WebPage", "url": "https://indra.center/ru/vectors/security-headers/", "lang": "ru", "code": "HDR-SEC", "title": "Инструментальный контроль обязательных защитных заголовков ответа" }, { "id": "page:/en/vectors/resource-exhaustion/", "type": "WebPage", "url": "https://indra.center/en/vectors/resource-exhaustion/", "lang": "en", "code": "DOS-RSRC", "title": "Isolated Laboratory Verification of Resource Exhaustion and Complexity Bounds" }, { "id": "page:/ru/vectors/resource-exhaustion/", "type": "WebPage", "url": "https://indra.center/ru/vectors/resource-exhaustion/", "lang": "ru", "code": "DOS-RSRC", "title": "Лабораторная проверка ограничений вычислительной ёмкости и выпуск квот" }, { "id": "page:/en/vectors/jwt-oauth-auth-bypass/", "type": "WebPage", "url": "https://indra.center/en/vectors/jwt-oauth-auth-bypass/", "lang": "en", "code": "API-JWT-01", "title": "Deterministic Verification of Token Forgery, Algorithm Confusion, and OAuth 2.0 Redirect Flaws" }, { "id": "page:/ru/vectors/jwt-oauth-auth-bypass/", "type": "WebPage", "url": "https://indra.center/ru/vectors/jwt-oauth-auth-bypass/", "lang": "ru", "code": "API-JWT-01", "title": "Инструментальная проверка подделки подписей токенов, подмены алгоритма и уязвимостей перенаправления" }, { "id": "page:/en/vectors/mass-assignment-bopla/", "type": "WebPage", "url": "https://indra.center/en/vectors/mass-assignment-bopla/", "lang": "en", "code": "API-BOP-02", "title": "Property-Level Schema Confinement for Preventing Mass Assignment and Excessive Property Exposure" }, { "id": "page:/ru/vectors/mass-assignment-bopla/", "type": "WebPage", "url": "https://indra.center/ru/vectors/mass-assignment-bopla/", "lang": "ru", "code": "API-BOP-02", "title": "Поэлементный контроль схем запросов и ответов для защиты от массового присваивания свойств" }, { "id": "page:/en/vectors/race-conditions-toctou/", "type": "WebPage", "url": "https://indra.center/en/vectors/race-conditions-toctou/", "lang": "en", "code": "API-RAC-03", "title": "Deterministic Single-Packet Concurrency Probing and Idempotency Lock Synthesis" }, { "id": "page:/ru/vectors/race-conditions-toctou/", "type": "WebPage", "url": "https://indra.center/ru/vectors/race-conditions-toctou/", "lang": "ru", "code": "API-RAC-03", "title": "Синхронное тестирование зазора параллельных транзакций и выпуск контракта идемпотентности" }, { "id": "page:/en/vectors/graphql-grpc-websocket/", "type": "WebPage", "url": "https://indra.center/en/vectors/graphql-grpc-websocket/", "lang": "en", "code": "API-GQL-04", "title": "Syntax-Tree Depth Bounding and Frame Authorization for GraphQL, gRPC, and WebSocket Interfaces" }, { "id": "page:/ru/vectors/graphql-grpc-websocket/", "type": "WebPage", "url": "https://indra.center/ru/vectors/graphql-grpc-websocket/", "lang": "ru", "code": "API-GQL-04", "title": "Контроль дерева графовых запросов, пакетных псевдонимов и прав доступа в потоковых каналах" }, { "id": "page:/en/vectors/deserialization-xxe-ssti/", "type": "WebPage", "url": "https://indra.center/en/vectors/deserialization-xxe-ssti/", "lang": "en", "code": "WEB-DES-05", "title": "Zero-Harm Verification and Pre-Parser Interception for Deserialization, External Entities, and Template Injection" }, { "id": "page:/ru/vectors/deserialization-xxe-ssti/", "type": "WebPage", "url": "https://indra.center/ru/vectors/deserialization-xxe-ssti/", "lang": "ru", "code": "WEB-DES-05", "title": "Безопасное доказательство и блокировка внешних сущностей XML, цепочек десериализации и шаблонных вставок" }, { "id": "page:/en/vectors/cloud-iam-kubernetes-escape/", "type": "WebPage", "url": "https://indra.center/en/vectors/cloud-iam-kubernetes-escape/", "lang": "en", "code": "CLD-K8S-06", "title": "Formal Graph Verification of Cloud Identity Trust Policies, Cluster Access Roles, and Pod Confinement" }, { "id": "page:/ru/vectors/cloud-iam-kubernetes-escape/", "type": "WebPage", "url": "https://indra.center/ru/vectors/cloud-iam-kubernetes-escape/", "lang": "ru", "code": "CLD-K8S-06", "title": "Математическая проверка графа облачных полномочий, ролей кластера и ограничений подов без изменения среды" }, { "id": "page:/en/vectors/cicd-pipeline-supply-chain/", "type": "WebPage", "url": "https://indra.center/en/vectors/cicd-pipeline-supply-chain/", "lang": "en", "code": "DEV-CIC-07", "title": "Static Workflow Graph Verification and Hash Pinning for CI/CD Build Pipelines" }, { "id": "page:/ru/vectors/cicd-pipeline-supply-chain/", "type": "WebPage", "url": "https://indra.center/ru/vectors/cicd-pipeline-supply-chain/", "lang": "ru", "code": "DEV-CIC-07", "title": "Верификация графа сборочных конвейеров, защита секретов и жёсткая фиксация зависимостей" }, { "id": "page:/en/vectors/active-directory-kerberos/", "type": "WebPage", "url": "https://indra.center/en/vectors/active-directory-kerberos/", "lang": "en", "code": "INF-ADK-08", "title": "Read-Only Directory Graph Verification for Kerberos Delegation, Authentication Relay, and Access-List Escalation" }, { "id": "page:/ru/vectors/active-directory-kerberos/", "type": "WebPage", "url": "https://indra.center/ru/vectors/active-directory-kerberos/", "lang": "ru", "code": "INF-ADK-08", "title": "Безопасный разбор графа доменных полномочий, делегирования Kerberos и ретрансляции без блокировки учётных записей" }, { "id": "page:/en/vectors/post-quantum-tls-cryptography/", "type": "WebPage", "url": "https://indra.center/en/vectors/post-quantum-tls-cryptography/", "lang": "en", "code": "CRY-PQC-09", "title": "Deterministic Verification of Transport Ciphers, Forward Secrecy, and Post-Quantum Key Encapsulation" }, { "id": "page:/ru/vectors/post-quantum-tls-cryptography/", "type": "WebPage", "url": "https://indra.center/ru/vectors/post-quantum-tls-cryptography/", "lang": "ru", "code": "CRY-PQC-09", "title": "Инструментальная проверка шифронаборов, прямой секретности и постквантовой защиты канала" }, { "id": "page:/en/vectors/external-perimeter-easm/", "type": "WebPage", "url": "https://indra.center/en/vectors/external-perimeter-easm/", "lang": "en", "code": "NET-EAS-10", "title": "Deterministic Perimeter Verification for Subdomain Takeovers, Dangling Domain Records, and Exposed Management Ports" }, { "id": "page:/ru/vectors/external-perimeter-easm/", "type": "WebPage", "url": "https://indra.center/ru/vectors/external-perimeter-easm/", "lang": "ru", "code": "NET-EAS-10", "title": "Инструментальный контроль внешнего периметра, брошенных доменных записей и открытых служебных портов" }, { "id": "page:/en/vectors/api-business-flow-abuse/", "type": "WebPage", "url": "https://indra.center/en/vectors/api-business-flow-abuse/", "lang": "en", "code": "API-BFA-11", "title": "Formal State-Machine Verification for Preventing Step-Skipping, Negative-Quantity Logic, and Flow Automation" }, { "id": "page:/ru/vectors/api-business-flow-abuse/", "type": "WebPage", "url": "https://indra.center/ru/vectors/api-business-flow-abuse/", "lang": "ru", "code": "API-BFA-11", "title": "Формальная проверка конечного автомата сделок для пресечения пропуска шагов и аномальных параметров" }, { "id": "page:/en/vectors/shadow-zombie-api-discovery/", "type": "WebPage", "url": "https://indra.center/en/vectors/shadow-zombie-api-discovery/", "lang": "en", "code": "API-SHD-12", "title": "Differential Route Inventory Verification and Positive OpenAPI Contract Enforcement" }, { "id": "page:/ru/vectors/shadow-zombie-api-discovery/", "type": "WebPage", "url": "https://indra.center/ru/vectors/shadow-zombie-api-discovery/", "lang": "ru", "code": "API-SHD-12", "title": "Инструментальная сверка живого дерева маршрутов со спецификацией и блокировка забытых версий" }, { "id": "page:/en/ai-pentest/indirect-prompt-injection/", "type": "WebPage", "url": "https://indra.center/en/ai-pentest/indirect-prompt-injection/", "lang": "en", "code": "AI-IPI-01", "title": "Deterministic Verification and Interception of Indirect Prompt Injection in Agent Tool Calls" }, { "id": "page:/ru/ai-pentest/indirect-prompt-injection/", "type": "WebPage", "url": "https://indra.center/ru/ai-pentest/indirect-prompt-injection/", "lang": "ru", "code": "AI-IPI-01", "title": "Инструментальное выявление и блокировка косвенного внедрения инструкций через внешние источники" }, { "id": "page:/en/ai-pentest/mcp-tool-poisoning/", "type": "WebPage", "url": "https://indra.center/en/ai-pentest/mcp-tool-poisoning/", "lang": "en", "code": "AI-MCP-02", "title": "Cryptographic Schema Pinning and Verification of Model Context Protocol Tool Poisoning" }, { "id": "page:/ru/ai-pentest/mcp-tool-poisoning/", "type": "WebPage", "url": "https://indra.center/ru/ai-pentest/mcp-tool-poisoning/", "lang": "ru", "code": "AI-MCP-02", "title": "Криптографическая фиксация схем и защита от отравления описаний инструментов MCP" }, { "id": "page:/en/ai-pentest/excessive-agency-confused-deputy/", "type": "WebPage", "url": "https://indra.center/en/ai-pentest/excessive-agency-confused-deputy/", "lang": "en", "code": "AI-AGN-03", "title": "Formal Scope Intersection for Preventing Excessive Agency and Confused Deputy Escalation" }, { "id": "page:/ru/ai-pentest/excessive-agency-confused-deputy/", "type": "WebPage", "url": "https://indra.center/ru/ai-pentest/excessive-agency-confused-deputy/", "lang": "ru", "code": "AI-AGN-03", "title": "Формальная сверка пересечения прав для пресечения повышения привилегий через помощника" }, { "id": "page:/en/ai-pentest/rag-vector-poisoning/", "type": "WebPage", "url": "https://indra.center/en/ai-pentest/rag-vector-poisoning/", "lang": "en", "code": "AI-RAG-04", "title": "Cryptographic Chunk Provenance and Tenant Isolation for Retrieval Knowledge Bases" }, { "id": "page:/ru/ai-pentest/rag-vector-poisoning/", "type": "WebPage", "url": "https://indra.center/ru/ai-pentest/rag-vector-poisoning/", "lang": "ru", "code": "AI-RAG-04", "title": "Криптографический контроль подлинности фрагментов и разграничение клиентов в базах знаний" }, { "id": "page:/en/ai-pentest/agent-sandbox-escape/", "type": "WebPage", "url": "https://indra.center/en/ai-pentest/agent-sandbox-escape/", "lang": "en", "code": "AI-SBX-05", "title": "Abstract Syntax Tree Pre-Screening and Syscall Confinement for Agent Code Interpreters" }, { "id": "page:/ru/ai-pentest/agent-sandbox-escape/", "type": "WebPage", "url": "https://indra.center/ru/ai-pentest/agent-sandbox-escape/", "lang": "ru", "code": "AI-SBX-05", "title": "Предварительный разбор синтаксического дерева и блокировка побега из песочницы интерпретатора" }, { "id": "page:/en/ai-pentest/multi-agent-collusion-loops/", "type": "WebPage", "url": "https://indra.center/en/ai-pentest/multi-agent-collusion-loops/", "lang": "en", "code": "AI-MAS-06", "title": "Acyclic Delegation Graphs and Taint Propagation Across Multi-Agent Orchestration" }, { "id": "page:/ru/ai-pentest/multi-agent-collusion-loops/", "type": "WebPage", "url": "https://indra.center/ru/ai-pentest/multi-agent-collusion-loops/", "lang": "ru", "code": "AI-MAS-06", "title": "Ациклический граф поручений и сквозное наследование меток доверия между помощниками" }, { "id": "page:/en/ai-pentest/system-prompt-secret-exfiltration/", "type": "WebPage", "url": "https://indra.center/en/ai-pentest/system-prompt-secret-exfiltration/", "lang": "en", "code": "AI-EXF-07", "title": "Zero-Exfiltration Verification and Outbound Redaction of System Prompts, Keys, and Personal Records" }, { "id": "page:/ru/ai-pentest/system-prompt-secret-exfiltration/", "type": "WebPage", "url": "https://indra.center/ru/ai-pentest/system-prompt-secret-exfiltration/", "lang": "ru", "code": "AI-EXF-07", "title": "Безопасное выявление и блокировка выгрузки системных инструкций, ключей и защищаемых сведений" }, { "id": "page:/en/ai-pentest/insecure-output-downstream-rce/", "type": "WebPage", "url": "https://indra.center/en/ai-pentest/insecure-output-downstream-rce/", "lang": "en", "code": "AI-OUT-08", "title": "Typed Output Contracts and Secondary Injection Prevention for Model-Generated Payloads" }, { "id": "page:/ru/ai-pentest/insecure-output-downstream-rce/", "type": "WebPage", "url": "https://indra.center/ru/ai-pentest/insecure-output-downstream-rce/", "lang": "ru", "code": "AI-OUT-08", "title": "Строгая типизация ответа модели и пресечение вторичного внедрения кода в базу и браузер" }, { "id": "page:/en/ai-pentest/ai-supply-chain-model-backdoors/", "type": "WebPage", "url": "https://indra.center/en/ai-pentest/ai-supply-chain-model-backdoors/", "lang": "en", "code": "AI-SUP-09", "title": "Cryptographic Artifact Verification and Pickle Deserialization Blocking in Model Supply Chains" }, { "id": "page:/ru/ai-pentest/ai-supply-chain-model-backdoors/", "type": "WebPage", "url": "https://indra.center/ru/ai-pentest/ai-supply-chain-model-backdoors/", "lang": "ru", "code": "AI-SUP-09", "title": "Статический контроль файлов весов и блокировка исполняемых вложений в цепочке поставок" }, { "id": "page:/en/ai-pentest/denial-of-wallet-token-exhaustion/", "type": "WebPage", "url": "https://indra.center/en/ai-pentest/denial-of-wallet-token-exhaustion/", "lang": "en", "code": "AI-DOW-10", "title": "Isolated Laboratory Verification of Token Amplification, Fan-Out Storms, and Compute Quotas" }, { "id": "page:/ru/ai-pentest/denial-of-wallet-token-exhaustion/", "type": "WebPage", "url": "https://indra.center/ru/ai-pentest/denial-of-wallet-token-exhaustion/", "lang": "ru", "code": "AI-DOW-10", "title": "Лабораторная проверка защиты от лавинного размножения вызовов и исчерпания квот модели" }, { "id": "page:/en/ib30/thought-to-action-boundary/", "type": "WebPage", "url": "https://indra.center/en/ib30/thought-to-action-boundary/", "lang": "en", "code": "IB30-TTA-01", "title": "Structural Separation Between Probabilistic Reasoning and Deterministic Action Execution" }, { "id": "page:/ru/ib30/thought-to-action-boundary/", "type": "WebPage", "url": "https://indra.center/ru/ib30/thought-to-action-boundary/", "lang": "ru", "code": "IB30-TTA-01", "title": "Структурная граница между вероятностным рассуждением модели и детерминированным исполнением вызова" }, { "id": "page:/en/ib30/z3-smt-formal-admissibility/", "type": "WebPage", "url": "https://indra.center/en/ib30/z3-smt-formal-admissibility/", "lang": "en", "code": "IB30-SMT-02", "title": "Deterministic Mathematical Verification of Action Contracts and Self-Correction via Unsat Core" }, { "id": "page:/ru/ib30/z3-smt-formal-admissibility/", "type": "WebPage", "url": "https://indra.center/ru/ib30/z3-smt-formal-admissibility/", "lang": "ru", "code": "IB30-SMT-02", "title": "Математическое доказательство допустимости вызовов решателем и возврат ядра невыполнимости" }, { "id": "page:/en/ib30/zero-harm-pentest-sandbox/", "type": "WebPage", "url": "https://indra.center/en/ib30/zero-harm-pentest-sandbox/", "lang": "en", "code": "IB30-ZHS-03", "title": "Proving Live-Target Vulnerabilities Without Sending Destructive Packets to the Network Socket" }, { "id": "page:/ru/ib30/zero-harm-pentest-sandbox/", "type": "WebPage", "url": "https://indra.center/ru/ib30/zero-harm-pentest-sandbox/", "lang": "ru", "code": "IB30-ZHS-03", "title": "Инструментальное доказательство уязвимостей без отправки разрушительных пакетов в сетевой сокет" }, { "id": "page:/en/ib30/formal-witness-zero-fp/", "type": "WebPage", "url": "https://indra.center/en/ib30/formal-witness-zero-fp/", "lang": "en", "code": "IB30-WIT-04", "title": "Eliminating Scanner Hallucinations Through Differential Decoy Verification and Witness Hashing" }, { "id": "page:/ru/ib30/formal-witness-zero-fp/", "type": "WebPage", "url": "https://indra.center/ru/ib30/formal-witness-zero-fp/", "lang": "ru", "code": "IB30-WIT-04", "title": "Исключение ложных срабатываний сканера через дифференциальную сверку с контрольной ручкой-обманкой" }, { "id": "page:/en/ib30/autonomous-immune-patching/", "type": "WebPage", "url": "https://indra.center/en/ib30/autonomous-immune-patching/", "lang": "en", "code": "IB30-IMM-05", "title": "Eliminating Manual Remediation Backlogs via Deterministic Gateway Rule Compilation" }, { "id": "page:/ru/ib30/autonomous-immune-patching/", "type": "WebPage", "url": "https://indra.center/ru/ib30/autonomous-immune-patching/", "lang": "ru", "code": "IB30-IMM-05", "title": "Устранение зазора между обнаружением и защитой за счёт автокомпиляции контрактов фильтрации" }, { "id": "page:/en/ib30/gost-stribog-crypto-ledger/", "type": "WebPage", "url": "https://indra.center/en/ib30/gost-stribog-crypto-ledger/", "lang": "en", "code": "IB30-LED-06", "title": "Tamper-Evident Audit Receipts and Dual-Mode Verification with Streebog-256 and SHA-256" }, { "id": "page:/ru/ib30/gost-stribog-crypto-ledger/", "type": "WebPage", "url": "https://indra.center/ru/ib30/gost-stribog-crypto-ledger/", "lang": "ru", "code": "IB30-LED-06", "title": "Неизменяемые квитанции действий, двухконтурная фиксация и проверка целостности без доверия к поставщику" }, { "id": "page:/en/ib30/continuous-purple-teaming/", "type": "WebPage", "url": "https://indra.center/en/ib30/continuous-purple-teaming/", "lang": "en", "code": "IB30-PRP-07", "title": "Homeostatic Security Coupling Between Zero-Damage Discovery and Deterministic Gateway Enforcement" }, { "id": "page:/ru/ib30/continuous-purple-teaming/", "type": "WebPage", "url": "https://indra.center/ru/ib30/continuous-purple-teaming/", "lang": "ru", "code": "IB30-PRP-07", "title": "Гомеостатическое сцепление безопасного поиска уязвимостей и детерминированного шлюза действий" }, { "id": "page:/en/ib30/ib30-vs-dast-sast-manual/", "type": "WebPage", "url": "https://indra.center/en/ib30/ib30-vs-dast-sast-manual/", "lang": "en", "code": "IB30-CMP-08", "title": "Five-Axis Empirical Comparison of Deterministic Action Verification Against Legacy Security Tools" }, { "id": "page:/ru/ib30/ib30-vs-dast-sast-manual/", "type": "WebPage", "url": "https://indra.center/ru/ib30/ib30-vs-dast-sast-manual/", "lang": "ru", "code": "IB30-CMP-08", "title": "Инструментальное сопоставление детерминированной проверки действий с классическими средствами анализа" }, { "id": "page:/en/compliance/fstec-117-239-kii-gis/", "type": "WebPage", "url": "https://indra.center/en/compliance/fstec-117-239-kii-gis/", "lang": "en", "code": "CMP-FST-01", "title": "Deterministic Vulnerability Testing for State Systems and Significant Objects under Orders 117 and 239" }, { "id": "page:/ru/compliance/fstec-117-239-kii-gis/", "type": "WebPage", "url": "https://indra.center/ru/compliance/fstec-117-239-kii-gis/", "lang": "ru", "code": "CMP-FST-01", "title": "Инструментальная проверка защищённости государственных систем и значимых объектов по приказам № 117 и № 239" }, { "id": "page:/en/compliance/gost-57580-cbr-fintech/", "type": "WebPage", "url": "https://indra.center/en/compliance/gost-57580-cbr-fintech/", "lang": "en", "code": "CMP-CBR-02", "title": "Verifying Banking Interfaces and Payment Gateways under GOST R 57580.1-2017 and Assurance Level OUD4" }, { "id": "page:/ru/compliance/gost-57580-cbr-fintech/", "type": "WebPage", "url": "https://indra.center/ru/compliance/gost-57580-cbr-fintech/", "lang": "ru", "code": "CMP-CBR-02", "title": "Проверка платёжных шлюзов и банковских интерфейсов по ГОСТ Р 57580.1-2017 и оценочному уровню доверия ОУД4" }, { "id": "page:/en/compliance/fz-152-pdn-agent-leakage/", "type": "WebPage", "url": "https://indra.center/en/compliance/fz-152-pdn-agent-leakage/", "lang": "en", "code": "CMP-PDN-03", "title": "Preventing Personal Record Exfiltration Across Application Interfaces and Language Model Tools under 152-FZ" }, { "id": "page:/ru/compliance/fz-152-pdn-agent-leakage/", "type": "WebPage", "url": "https://indra.center/ru/compliance/fz-152-pdn-agent-leakage/", "lang": "ru", "code": "CMP-PDN-03", "title": "Предотвращение утечки клиентских анкет и личных реквизитов через программные интерфейсы по закону № 152-ФЗ" }, { "id": "page:/en/compliance/owasp-api-llm-agentic-matrix/", "type": "WebPage", "url": "https://indra.center/en/compliance/owasp-api-llm-agentic-matrix/", "lang": "en", "code": "CMP-OWP-04", "title": "End-to-End Verification Across OWASP API Security, Language Model Applications, and Autonomous Agents" }, { "id": "page:/ru/compliance/owasp-api-llm-agentic-matrix/", "type": "WebPage", "url": "https://indra.center/ru/compliance/owasp-api-llm-agentic-matrix/", "lang": "ru", "code": "CMP-OWP-04", "title": "Сквозное сопоставление угроз программных интерфейсов, языковых моделей и автономных помощников (OWASP)" }, { "id": "page:/en/compliance/mitre-atlas-attck-concordance/", "type": "WebPage", "url": "https://indra.center/en/compliance/mitre-atlas-attck-concordance/", "lang": "en", "code": "CMP-MTR-05", "title": "Breaking Multi-Stage Adversary Kill Chains Across MITRE ATLAS and ATT&CK Techniques" }, { "id": "page:/ru/compliance/mitre-atlas-attck-concordance/", "type": "WebPage", "url": "https://indra.center/ru/compliance/mitre-atlas-attck-concordance/", "lang": "ru", "code": "CMP-MTR-05", "title": "Пресечение многошаговых цепочек атак по матрицам MITRE ATLAS и MITRE ATT&CK на границе вызова" }, { "id": "page:/en/compliance/nist-ai-rmf-iso-42001/", "type": "WebPage", "url": "https://indra.center/en/compliance/nist-ai-rmf-iso-42001/", "lang": "en", "code": "CMP-NST-06", "title": "Quantitative Verification for NIST AI RMF Functions and ISO/IEC 42001 Management Systems" }, { "id": "page:/ru/compliance/nist-ai-rmf-iso-42001/", "type": "WebPage", "url": "https://indra.center/ru/compliance/nist-ai-rmf-iso-42001/", "lang": "ru", "code": "CMP-NST-06", "title": "Приборное выполнение функций NIST AI RMF и требований стандарта ISO/IEC 42001:2023" }, { "id": "page:/en/compliance/eu-ai-act-article-15/", "type": "WebPage", "url": "https://indra.center/en/compliance/eu-ai-act-article-15/", "lang": "en", "code": "CMP-EUA-07", "title": "Proving Accuracy, Adversarial Resilience, and Cybersecurity under Regulation (EU) 2024/1689 Article 15" }, { "id": "page:/ru/compliance/eu-ai-act-article-15/", "type": "WebPage", "url": "https://indra.center/ru/compliance/eu-ai-act-article-15/", "lang": "ru", "code": "CMP-EUA-07", "title": "Инструментальное доказательство точности, отказоустойчивости и защиты от атак по статье 15 Регламента 2024/1689" }, { "id": "page:/en/compliance/red-team-reporting-evidence/", "type": "WebPage", "url": "https://indra.center/en/compliance/red-team-reporting-evidence/", "lang": "en", "code": "CMP-EVD-08", "title": "Replacing Unverifiable Static Narratives with Reproducible Cryptographic Passports and Standalone Replay" }, { "id": "page:/ru/compliance/red-team-reporting-evidence/", "type": "WebPage", "url": "https://indra.center/ru/compliance/red-team-reporting-evidence/", "lang": "ru", "code": "CMP-EVD-08", "title": "Переход от непроверяемых текстовых отчётов к криптографическому паспорту и автономному повтору" } ], "edges": [ { "source": "person:alexander-fishchuk", "target": "org:iss", "relation": "FOUNDED_AND_DIRECTS" }, { "source": "org:iss", "target": "software:indra-core", "relation": "DEVELOPS_AND_VERIFIES" }, { "source": "software:indra-core", "target": "pkg:mcp_sentinel-1.1.2-py3-none-any.whl", "relation": "DISTRIBUTES_COMPANION_ARTIFACT" }, { "source": "software:indra-core", "target": "pkg:mcp_sentinel-1.1.2.tar.gz", "relation": "DISTRIBUTES_COMPANION_ARTIFACT" }, { "source": "software:indra-core", "target": "pkg:iss_ledger_117-1.1.1-py3-none-any.whl", "relation": "DISTRIBUTES_COMPANION_ARTIFACT" }, { "source": "software:indra-core", "target": "pkg:iss_ledger_117-1.1.1.tar.gz", "relation": "DISTRIBUTES_COMPANION_ARTIFACT" }, { "source": "software:indra-core", "target": "pkg:iss_agent_kit-0.1.1-py3-none-any.whl", "relation": "DISTRIBUTES_COMPANION_ARTIFACT" }, { "source": "software:indra-core", "target": "pkg:iss_agent_kit-0.1.1.tar.gz", "relation": "DISTRIBUTES_COMPANION_ARTIFACT" }, { "source": "software:indra-core", "target": "pkg:iss_verifier.py", "relation": "DISTRIBUTES_COMPANION_ARTIFACT" }, { "source": "software:indra-core", "target": "class:INJ-SQL", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:INJ-CMD", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:DIR-TRV", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:AUTH-BOLA", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:SSRF-INT", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:SEC-LEAK", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:HDR-SEC", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:DOS-RSRC", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:API-JWT-01", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:API-BOP-02", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:API-RAC-03", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:API-GQL-04", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:WEB-DES-05", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:CLD-K8S-06", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:DEV-CIC-07", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:INF-ADK-08", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:CRY-PQC-09", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:NET-EAS-10", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:API-BFA-11", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:API-SHD-12", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:AI-IPI-01", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:AI-MCP-02", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:AI-AGN-03", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:AI-RAG-04", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:AI-SBX-05", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:AI-MAS-06", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:AI-EXF-07", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:AI-OUT-08", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:AI-SUP-09", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:AI-DOW-10", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:IB30-TTA-01", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:IB30-SMT-02", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:IB30-ZHS-03", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:IB30-WIT-04", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:IB30-IMM-05", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:IB30-LED-06", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:IB30-PRP-07", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:IB30-CMP-08", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:CMP-FST-01", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:CMP-CBR-02", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:CMP-PDN-03", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:CMP-OWP-04", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:CMP-MTR-05", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:CMP-NST-06", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:CMP-EUA-07", "relation": "VERIFIES_AND_COMPILES_RULE" }, { "source": "software:indra-core", "target": "class:CMP-EVD-08", "relation": "VERIFIES_AND_COMPILES_RULE" } ] }