j+ U d Z ddlmZ ddlZddlZ ej d Zg dZg dZdgdgdgdgd gd
gd
gd gd d
gd d
gg d Z de
d< G d d Z dS )zOZero-Trust AI Agent Shield & Data Loss Prevention (DLP) Service for DSCons ERP. ) annotationsNzdscons.agent_security) z<(?i)ignore\s+(all\s+)?(previous|prior|above)\s+instructions?z?(?i)disregard\s+(all\s+)?(previous|prior|above)\s+instructions?z (?i)system\s*prompt\s*overridez+(?i)you\s+are\s+now\s+in\s+developer\s+modez3(?i)you\s+are\s+now\s+(DAN|unrestricted|jailbroken)zT(?i)reveal\s+(all\s+)?(your\s+)?(system\s+prompt|instructions?|api\s*keys?|secrets?)zI(?i)print\s+(all\s+)?(database\s+records?|users?|passwords?|credentials?)z<(?i)export\s+(all\s+)?(data|tables?|files?)\s+to\s+https?://z(?i)curl\s+-X\s+POSTz(?i)webhook\.(site|com)z(?i)requestb\.inz(?i)ngrok-free\.app))zsk-[a-zA-Z0-9_-]{20,}OPENAI_OR_ROUTER_API_KEY)zAIza[0-9A-Za-z-_]{35}GOOGLE_GEMINI_API_KEY)z=eyJ[a-zA-Z0-9_-]{10,}\.[a-zA-Z0-9_-]{10,}\.[a-zA-Z0-9_-]{10,}JWT_AUTH_TOKEN)z*(?i)password\s*[:=]\s*['\"][^'\"]{6,}['\"]PLAINTEXT_PASSWORD)z%(?i)postgresql://[a-zA-Z0-9_]+:[^@]+@DB_CONNECTION_STRING)z
\b\d{12}\b POTENTIAL_VIETNAM_CCCD_12_DIGITSs %PDF-s PKs PNG
s s RIFFs II* s MM *) pdfdocxxlsxzippngjpgjpegwebptifftiftxtzdict[str, list[bytes]]FILE_MAGIC_SIGNATURESc Z e Zd ZdZedd Zedd Zedd ZdS )AgentSecurityGuardzUProvides Zero-Trust isolation, Prompt Injection protection, and Data Loss Prevention. file_contentbytesdeclared_formatstrreturnboolc | }|t vrdS t | }|s) | d dS # t $ r Y dS w xY w|D ]}| | r dS dS )us Kiểm tra chữ ký nhị phân (Magic Bytes) thực tế của file để chống giả mạo đuôi mở rộng.Fzutf-8T)lowerstripr decodeUnicodeDecodeError
startswith)r r fmtexpected_signaturessigs IC:\Projects\DSCons\app\modules\agents\application\agent_security_guard.pyvalidate_magic_bytesz'AgentSecurityGuard.validate_magic_bytes: s ##%%++-- + + +5 3C 8"
##G,,,t%
uu
' C&&s++
tt
us A
A'&A'raw_texttuple[str, list[str]]c P g }| }t D ]O}t j || }|r6d| d}| | t d| P| dd }| dd }| dd }d| d }||fS )
u Rà soát và đóng gói dữ liệu thô vào khối cách ly an toàn trước khi gửi cho LLM.
Returns:
tuple: (sanitized_text_wrapped_in_xml, list_of_threat_flags)
u1 Phát hiện mẫu Prompt Injection nghi ngờ: ''zSECURITY ALERT: %sz z[FILTERED_TAG]zz u
z
)PROMPT_INJECTION_PATTERNSrefindallappendloggerwarningreplace)r)
threats_found
clean_textpatternmatches
threat_msgisolated_payloads r' sanitize_untrusted_inputz+AgentSecurityGuard.sanitize_untrusted_inputP s $&
1 A AGj(33G
A [QX [ [ [
$$Z000 3Z@@@ '' +-=
''
4DEE
'' 5EFF
,
,
,
, .. output_texttuple[bool, str, list[str]]c g }| }d}t D ]\ }}t j || }|D ]}d}| d }t | dk r|dd dz |dd z nd } | d
| d | t d || | |d
| d }|||fS )u Rà soát chuỗi đầu ra của AI Agent để phát hiện và ngăn chặn hành vi tuồn dữ liệu mật (DLP).
Returns:
tuple: (is_safe, sanitized_text, list_of_exfiltration_flags)
TFr N z****z********u Chặn rò rỉ z: u= DLP BLOCK: Phát hiện AI xuất chuỗi nhạy cảm %s: %sz[REDACTED_BY_DLP_]) DLP_EXFILTRATION_PATTERNSr. finditergrouplenr0 r1 criticalr3 )
r< exfiltration_flags sanitizedis_safer6 leak_typer7 m matched_val
masked_vals
r' inspect_output_dlpz%AgentSecurityGuard.inspect_output_dlpt s! )+ "; GYk'955G
ggajj ;''!++ Of,{233/???#
#))*VY*V*V**V*VWWWS & - - !AY!A!A!A
& #555r; N)r r r r r r )r) r r r* )r< r r r= )__name__
__module__ __qualname____doc__ staticmethodr( r: rO r; r' r r 7 sy __ \* !/ !/ !/ \!/F 6 6 6 \ 6 6 6r; r ) rS
__future__r loggingr. getLoggerr1 r- rC r __annotations__r rU r; r' rZ s U U U " " " " " " 2 3 3
:
O
O ? !
I
$
#
1 1 ]6 ]6 ]6 ]6 ]6 ]6 ]6 ]6 ]6 ]6r;