CyberdeceptionAtlas · Question → testES

Library / Paper

Paper

LLMHoney: A Real-Time SSH Honeypot with Large Language Model-Driven Dynamic Response Generation

The authors present LLMHoney, an SSH honeypot that uses large language models (LLMs) to generate realistic, dynamic command outputs in real time, combining a dictionary-based virtual file system with LLMs for novel inputs. According to the abstract, the system was evaluated on 138 representative Linux commands across 13 LLM variants, reporting accuracy, latency, and memory metrics, while discussing challenges such as occasional hallucinated outputs.

HoneypotDecoyNetworkEndpoint

What we know

The authors present LLMHoney, an SSH honeypot that uses large language models (LLMs) to generate realistic, dynamic command outputs in real time, combining a dictionary-based virtual file system with LLMs for novel inputs. According to the abstract, the system was evaluated on 138 representative Linux commands across 13 LLM variants, reporting accuracy, latency, and memory metrics, while discussing challenges such as occasional hallucinated outputs.

Evidence limits

This entry is based solely on the publicly available title and abstract; the full text has not been reviewed and the reported system effectiveness has not been independently verified.

Reviewed: author abstract. Full-text results were not analyzed.

Sources and provenance

  1. LLMHoney: A Real-Time SSH Honeypot with Large Language Model-Driven Dynamic Response Generation
    abstract · 2026-10-04

Reviewed: 2026-10-04. This record may change when new evidence is found.

RIS · BibTeX