Securing Computer Use Agents with NOVA: Balancing Security and Performance via Predictable UI Workflows
This work addresses the security challenges of Computer Use Agents (CUAs) by proposing NOVA, a system that enables architectural isolation through single-shot planning. NOVA resolves the conflict between continuous UI observation and security isolation by making UI workflows structurally predictable, allowing a trusted planner to generate a complete branching plan. The system integrates a perception model to handle dynamic UI states, achieving a balance between security and utility, though further measures are needed against Branch Steering attacks.