Paper

SAGE: An Adaptive IoT Honeypot with FSM-Driven Protocol Emulation and GraphRAG-Powered Response Generation

The article presents SAGE, an adaptive Internet of Things (IoT) honeypot that combines Finite-State Machine (FSM)-driven protocol emulation with GraphRAG-enhanced retrieval to model stateful IoT protocols and generate responses using a Large Language Model (LLM). The authors also describe a fact-checking engine and a feedback mechanism intended to refine responses and progressively expand state-response mappings based on observed adversarial interactions.

HoneypotAdversary engagementIoT

What we know

The article presents SAGE, an adaptive Internet of Things (IoT) honeypot that combines Finite-State Machine (FSM)-driven protocol emulation with GraphRAG-enhanced retrieval to model stateful IoT protocols and generate responses using a Large Language Model (LLM). The authors also describe a fact-checking engine and a feedback mechanism intended to refine responses and progressively expand state-response mappings based on observed adversarial interactions.

Evidence limits

Review limited to the Crossref-deposited abstract and bibliographic metadata; the full text was not consulted and the described results, software, or effectiveness were not independently validated.

Reviewed: author abstract. Full-text results were not analyzed.

Sources and provenance

  1. SAGE: An Adaptive IoT Honeypot with FSM-Driven Protocol Emulation and GraphRAG-Powered Response Generation
    abstract · 2026-10-11

Reviewed: 2026-10-13. This record may change when new evidence is found.

RIS · BibTeX