AG07:2026 — Insecure Inter-Agent Communication

Slide 24 · Quiz — Questions 1 & 2

Test your understanding of insecure inter-agent communication.

1. An attacker who has captured a valid "approve deployment" message from last month replays it today. The deployment agent accepts it. Which property of the communication was missing?

Confidentiality — the message should have been encrypted so it couldn't be captured Authenticity — the agent couldn't verify the message came from the real orchestrator Freshness — the agent had no mechanism to verify the message was newly generated and not a replay Integrity — the message content was changed between capture and replay

2. A deployment agent receives a message over an authenticated mTLS connection from a verified orchestrator identity. The message content, however, was altered by a compromised logging sidecar that had write access to the Redis queue between the orchestrator and the deployment agent. Which mitigation would have caught this — and which would not?

MIT01 (agent identity authentication) would catch it; MIT03 (TLS) would not MIT03 (TLS) would catch it; MIT02 (message signing) would not MIT02 (message signing) would catch it; MIT01 (agent identity authentication) would not MIT05 (replay protection) would catch it; MIT02 (message signing) would not

← Back Questions 3–5 →