Contexte

The provided sources analyze the security architecture and threat landscape of agentic multi-agent systems (MAS), emphasizing that autonomous AI requires a departure from traditional cybersecurity practices. Amazon Web Services (AWS) outlines a structured implementation strategy using a four-scope risk framework and five foundational design principles to manage escalating levels of agent autonomy. Their approach prioritizes identity context, auditability, and human oversight to mitigate risks like “confused deputy” problems and unauthorized tool access. Complementing this, research from Crew Scaler provides a rigorous taxonomy of 193 distinct threats unique to MAS, such as memory poisoning and non-deterministic planning divergence. The study evaluates sixteen global security frameworks, identifying the OWASP Agentic Security Initiative and CDAO Toolkit as current leaders in coverage. Together, these documents advocate for a defense-in-depth architecture that evolves alongside the behavioral and emergent risks of collaborative AI swarms.

Sources