# Whispering Agents: An Event-driven Covert Communication Protocol For the Internet of Agents

arXiv: https://arxiv.org/abs/2508.02188 · HTML: https://mlsanity.com/paper/2508.02188/

## Key facts

- Cited by 3 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 4 Aug 2025.

## Built on by (most cited first, 3 of 3)

- [AgentMark: Utility-Preserving Behavioral Watermarking for Agents](https://mlsanity.com/paper/2601.03294/) (2026)
- [SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems](https://mlsanity.com/paper/2609.00595/) (2026)
- [ACF: A Collaborative Framework for Agent Covert Communication under Cognitive Asymmetry](https://mlsanity.com/paper/2604.08276/) (2026)

## Abstract (arXiv)

The emergence of the Internet of Agents (IoA) introduces critical challenges for communication privacy in sensitive, high-stakes domains. While standard Agent-to-Agent (A2A) protocols secure message content, they are not designed to protect the act of communication itself, leaving agents vulnerable to surveillance and traffic analysis. We find that the rich, event-driven nature of agent dialogues provides a powerful, yet untapped, medium for covert communication. To harness this potential, we introduce and formalize the Covert Event Channel, the first unified model for agent covert communication driven by three interconnected dimensions, which consist of the Storage, Timing,and Behavioral channels. Based on this model, we design and engineer PiCCAP, a novel protocol that operationalizes this event-driven paradigm. Our comprehensive evaluation demonstrates that PiCCAP achieves high capacity and robustness while remaining imperceptible to powerful LLM-based wardens, establishing its practical viability. By systematically engineering this channel, our work provides the foundational understanding essential for developing the next generation of monitoring systems and defensive protocols for a secure and trustworthy IoA.