From “Identity Blind Spots” to “Certified Agents”: Key Challenges and Industry Responses in Agent Identity Security

Talk overview

As autonomous agents become digital workers, conventional identity management designed for people is no longer sufficient. This talk frames six connected risks: unknown or untrusted identities, misinterpreted intent, excessive permissions, uncontrolled delegation chains, disordered behavior, and broken accountability. Through practical scenarios including shadow agents, prompt-driven task hijacking, MCP tool poisoning, privilege escalation, and failures in auditability, it outlines why agents must be governed as autonomous digital actors and how industry can build verifiable identity, authorization, delegation, behavior control, and accountability mechanisms.