6 papers · 1 filter
Standing, Not Truth: Who May Say What About Whom in Agentic Selection
Yedidel Louck, Amit Dvir, Ariel Stulman
Software agents increasingly choose on a user's behalf among competing offerings described by the parties who benefit. A lawful participant, publishing under its own identity, comp…
Signing the Transaction but Not the Decision: Whisper Attacks and a Binding Defense for AP2
Yedidel Louck, Amit Dvir, Ariel Stulman
Software agents are beginning to shop and pay on a person's behalf. Agent payment protocols such as AP2 produce cryptographically valid signatures for completed purchases, yet do n…
Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense
Yedidel Louck
Agentic commerce platforms let AI agents autonomously discover services, move payments, and wield user credentials on their users' behalf, and they already handle real money. Their…
Securing LLM-Agent Long-Term Memory Against Poisoning: Non-Malleable, Origin-Bound Authority with Machine-Checked Guarantees
Yedidel Louck
LLM agents increasingly rely on persistent long-term memory, which creates a critical vulnerability that we study here: memory poisoning. An adversary can store untrusted content i…
Security Analysis of Agentic AI Communication Protocols: A Comparative Evaluation
Yedidel Louck, Ariel Stulman, Amit Dvir
Multi-agent systems (MAS) powered by artificial intelligence (AI) are increasingly foundational to complex, distributed workflows. Yet, the security of their underlying communicati…
Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems
Yedidel Louck, Ariel Stulman, Amit Dvir
Googles A2A protocol provides a secure communication framework for AI agents but demonstrates critical limitations when handling highly sensitive information such as payment creden…