2025/08/17 by Ken Huang, Huang, Ken, Yasir Mehmood +9 · 1 citation
Computer Science · Social Sciences · #Access Control and Trust #Artificial Intelligence (cs.AI) #Cryptography and Data Security #Cryptography and Security (cs.CR) #Emerging Technologies (cs.ET) #FOS: Computer and information sciences #Mobile Agent-Based Network Management
paper · pdf · doi:10.48550/arxiv.2508.12259
openalex publication_date 2025/08/17 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28
This paper presents a Unified Security Architecture that fortifies the Agentic Web through a Zero-Trust IAM framework. This architecture is built on a foundation of rich, verifiable agent identities using Decentralized Identifiers (DIDs) and Verifiable Credentials (VCs), with discovery managed by a protocol-agnostic Agent Name Service (ANS). Security is operationalized through a multi-layered Trust Fabric which introduces significant innovations, including Trust-Adaptive Runtime Environments (TARE), Causal Chain Auditing, and Dynamic Identity with Behavioral Attestation. By explicitly linking the LPCI threat to these enhanced architectural countermeasures within a formal security model, we propose a comprehensive and forward-looking blueprint for a secure, resilient, and trustworthy agentic ecosystem. Our formal analysis demonstrates that the proposed architecture provides provable security guarantees against LPCI attacks with bounded probability of success.