Building A Secure Agentic AI Application Leveraging A2A Protocol

T. Finin, R. Fritzson, D. McKay, and R. McEntire, “KQML as an agent communication language,” in Proceedings of the Third International Conference on Information and Knowledge Management . ACM, 1994, pp. 456–463. [Online]. Available: https://dl.acm.org/doi/10.1145/191246.191322

1994

Earlier work this paper cites.

M. Bellare and P. Rogaway, “Optimal asymmetric encryption,” Journal of Cryptology , vol. 9, no. 2, pp. 137–159, 1995

1995

Earlier work this paper cites.

Y. Labrou and T. Finin, “History, state of the art and challenges for agent communication languages,” Informatik/Informatique , 2000. [Online]. Available: https://ebiquity.umbc.edu/paper/html/id/231/History-State-of-the-Art-and-Challenges-for-Agent-Communication-Languages

2000

Earlier work this paper cites.

B. Chaib-draa and F. Dignum, “Trends in agent communication language,” Computational Intelligence , vol. 18, no. 2, pp. 89–101, 2002. [Online]. Available: https://onlinelibrary.wiley.com/doi/abs/10.1111/1467-8640.00184

2002

Earlier work this paper cites.

OASIS, “Web services security: SOAP message security 1.0 (WS-Security 2004),” 2004

2004

Earlier work this paper cites.

B. Gaudou, A. Herzig, D. Longin, and M. Nickles, “A new semantics for the FIPA agent communication language based on social attitudes,” in ECAI 2006: 17th European Conference on Artificial Intelligence . IOS Press, 2006, pp. 245–249. [Online]. Available: https://www.irit.fr/publis/LILAC/Conf_internationales/2006_Gaudou_et_al_ECAI.pdf

2006

Earlier work this paper cites.

D. Hardt, “The OAuth 2.0 authorization framework,” IETF, RFC 6749, October 2012. [Online]. Available: https://tools.ietf.org/html/rfc6749

2012

Earlier work this paper cites.

M. B. Jones, J. Bradley, and N. Sakimura, “JSON web token (JWT),” IETF, RFC 7519, May 2015. [Online]. Available: https://tools.ietf.org/html/rfc7519

2015

Cited alongside, same era.

A. Dorri, S. S. Kanhere, and R. Jurdak, “Multi-agent systems: A survey,” IEEE Access , vol. 6, pp. 28 573–28 593, 2018. [Online]. Available: https://ieeexplore.ieee.org/document/8352646/

2018

Cited alongside, same era.

N. Ward and Y. He, “Adopting BeyondCorp for multi-agent AI in enterprise networks,” 2019

2019

Cited alongside, same era.

S. Rose, O. Borchert, S. Mitchell, and S. Connelly, “Zero trust architecture,” National Institute of Standards and Technology, NIST Special Publication 800-207, August 2020. [Online]. Available: https://doi.org/10.6028/NIST.SP.800-207

2020

Cited alongside, same era.

E. G. Junior, S. Clinton, C. Hughes, V. S. Narajala, and T. Holmes, “LLM and GenAI data security best practices,” Feb. 2025. [Online]. Available: https://www.researchgate.net/publication/391204648_LLM_and_GenAI_Data_Security_Best_Practices

2025

Closest in time.

K. Huang, “Agentic AI threat modeling framework: MAESTRO,” https://cloudsecurityalliance.org/blog/2025/02/06/agentic-ai-threat-modeling-framework-maestro , Cloud Security Alliance, feb 2025

2025

Closest in time.

K. Huang and I. Habler, “Threat modeling Google’s A2A protocol,” https://kenhuangus.substack.com/p/threat-modeling-googles-a2a-protocol , 2025

2025

Closest in time.

K. Huang, A. Sheriff, J. Sotiropoulos, R. F. Del, and V. Lu, “Multi-agentic system threat modelling guide OWASP GenAI security project,” Apr. 2025. [Online]. Available: https://www.researchgate.net/publication/391204915_Multi-Agentic_system_Threat_Modelling_Guide_OWASP_GenAI_Security_Project

2025

Closest in time.