From A2A Attacks to Envelope-Layer Defense: Red-Teaming Evaluation of LLM Agents and a Three-Layer Isomorphic Attack-Defense Model
The research proposes a new way to evaluate AI agent security by focusing on a new defense dimension: the 'envelope layer,' which is how malicious content enters an agent. It introduces the A2A-TIBA attack principle, showing how attackers can implant programs that bypass agent defenses. This leads to the ELA-ITL model, a three-layer framework for comprehensive attack and defense evaluation.