一个代理人掌控一切：一个恶意代理人如何劫持A2A系统.pdf

1、#SECTORCA BlackHatEventsOne Agent to Rule Them One Agent to Rule Them AllAll#SECTORCA BlackHatEvents#SECTORCA BlackHatEvents#SECTORCA BlackHatEvents$WhoAreWeStav CohenSenior AI Security Researcher ZenityPhD student TechnionInvestigates the Security of GenAI Agents4thBlackhat talk.Adar PelegAI Securi

2、ty Researcher ATLAS-AIInvestigates vulnerabilities and safety in Multi-Agent Systems.First Blackhat talk!Yay!Contributors:Avi Mendelson Amit LeVi Rom Himelstein Dvir Alsheich Shaked Adi#SECTORCA BlackHatEventsAgendaMotivation&Background.GenAI Agents,Multiagent systems Threat Model.The A2A vulnerabil

3、ity,Vendor disclosure.AgentWare examples.Takeaways Q&A#SECTORCA BlackHatEventsGenAI-powered ApplicationsServicesUIApplication WorkflowDataApplicationLLMRAGUserAgentsFunction CallingPromptwarePerimeter#SECTORCA BlackHatEventsPromptwarePromptware is a piece of input(text,picture and audio sample)provi

4、ded to a GenAI-powered application.#SECTORCA BlackHatEventsPromptware#SECTORCA BlackHatEventsPromptware#SECTORCA BlackHatEventsPromptwareDefcon 33BlackHat USA 2025Sector 2025CodeBlue 2025 In Nov.#SECTORCA BlackHatEventsPromptware#SECTORCA BlackHatEventsGen AI Agents#SECTORCA BlackHatEventsGen AI Age

5、ntsUnderstand a goalPlan the stepsUse tools or call APIsCoordinate with other agents#SECTORCA BlackHatEventsAI Agents in the News#SECTORCA BlackHatEventsGen AI AgentsLow Code Buy AgentsOnlineCode#SECTORCA BlackHatEventsGen AI AgentsScan JuniorsCodeSearch forconflictsAnalyze andvisualizeSend viaEmail

6、 tomanager#SECTORCA BlackHatEventsGen AI Agents#SECTORCA BlackHatEventsOrchestrator,P&E,Multi Agent#SECTORCA BlackHatEventsOrchestrator,P&E,Multi Agent#SECTORCA BlackHatEventsThreat ModelBenign UserHost#SECTORCA BlackHatEventsThreat ModelMulti-Agent SystemBenign UserAttackerHost#SECTORCA BlackHatEve