CyberdeceptionAtlas · Question → testES

Library / Paper

Paper

ShellGames: Speculative LLM-Driven SSH Deception

This paper presents ShellGames, an SSH shell simulator based on large language models (LLMs) designed to sustain credible interactive deception sessions with adversaries. According to the authors, the system combines techniques such as chain-of-thought reasoning, memory management, speculative command execution, sandbox routing, and subversion detection to address common LLM limitations. The authors report improvements in accuracy, consistency, and state tracking over baselines, along with a user study indicating perceived realism comparable to a real shell.

HoneypotMoving target defenseNetworkEndpoint

What we know

This paper presents ShellGames, an SSH shell simulator based on large language models (LLMs) designed to sustain credible interactive deception sessions with adversaries. According to the authors, the system combines techniques such as chain-of-thought reasoning, memory management, speculative command execution, sandbox routing, and subversion detection to address common LLM limitations. The authors report improvements in accuracy, consistency, and state tracking over baselines, along with a user study indicating perceived realism comparable to a real shell.

Evidence limits

This entry is based solely on the available title and abstract; the full text has not been reviewed and the reported effectiveness has not been independently validated.

Reviewed: author abstract. Full-text results were not analyzed.

Sources and provenance

  1. ShellGames: Speculative LLM-Driven SSH Deception
    abstract · 2026-10-04

Reviewed: 2026-10-04. This record may change when new evidence is found.

RIS · BibTeX