Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach

R. Bace and P. Mell, “Intrusion Detection Systems,” National Institute of Standards and Technology, Tech. Rep. Special Publication 800-31, 2001

2001

Earlier work this paper cites.

V. Chandola, A. Banerjee, and V. Kumar, “Anomaly detection: A survey,” ACM Computing Surveys (CSUR) , vol. 41, no. 3, pp. 1–58, 2009

2009

Earlier work this paper cites.

D. Turner and T. Polk, Eds., Digital Signatures , 6th ed. Wiley, 2011, vol. 1

2011

Earlier work this paper cites.

IETF, “RFC 6749: The OAuth 2.0 Authorization Framework,” Internet Engineering Task Force, 2012

2012

Earlier work this paper cites.

Y. Zeng, T. Zang, Y. Zhang, X. Chen, and Y. Wang, “A Comprehensive Measurement Study of Domain-Squatting Abuse,” in IEEE International Conference on Communications (ICC) , 2019, pp. 1–6

2019

Earlier work this paper cites.

N. Mahadeva and K. Tuma, “Just-In-Time Access: Reducing the Blast Radius of Compromised Credentials,” USENIX ;login: , vol. 46, no. 4, pp. 6–11, 2021

2021

Earlier work this paper cites.

W3C Credentials Community Group, “Verifiable Credentials Data Model v1.1,” W3C Recommendation, 2022. [Online]. Available: https://www.w3.org/TR/vc-data-model/

2022

Cited alongside, same era.

Anthropic, “Model Context Protocol: A Standard Interface for AI Context Access,” Anthropic, Tech. Rep., 2024. [Online]. Available: https://docs.anthropic.com/en/docs/agents-and-tools/mcp

2024

Cited alongside, same era.

S. Han, Q. Zhang, Y. Yao, W. Jin, Z. Xu, and C. He, “LLM Multi-Agent Systems: Challenges and Open Problems,” arXiv preprint arXiv:2402.03578 , 2024. [Online]. Available: https://arxiv.org/pdf/2402.03578

Original

2024

Cited alongside, same era.

Google Research, “Agent2Agent: An Open Interoperability Protocol for AI Agents,” Google, Tech. Rep., 2025. [Online]. Available: https://developers.googleblog.com/en/a2a-a-new-era-of-agent-interoperability/

2025

Cited alongside, same era.

GitHub, “Google/A2A: An open protocol enabling communication between opaque agentic applications,” GitHub Repository, 2025. [Online]. Available: https://github.com/google/A2A

2025

Closest in time.

V. S. Narajala and I. Habler, “Enterprise-Grade Security for the Model Context Protocol (MCP): Frameworks and Mitigation Strategies,” arXiv preprint arXiv:2504.08623 , 2025. [Online]. Available: https://arxiv.org/abs/2504.08623

Original

2025

Closest in time.

P. He, Y. Lin, S. Dong, H. Xu, Y. Xing, and H. Liu, “Red-Teaming LLM Multi-Agent Systems via Communication Attacks,” arXiv preprint arXiv:2502.14847 , 2025. [Online]. Available: https://arxiv.org/abs/2502.14847

Original

2025

Closest in time.

H. Triedman, R. Jha, and V. Shmatikov, “Multi-Agent Systems Execute Arbitrary Malicious Code,” arXiv preprint arXiv:2503.12188 , 2025. [Online]. Available: https://arxiv.org/pdf/2503.12188v1

Original

2025

Closest in time.