CyberdeceptionAtlas · Question → testES

Library / Paper

Paper

Improving LLM-Based SSH Honeypots Through Prompting and Fine-Tuning

This paper studies how to improve shell emulation accuracy of local open-weight LLM-based SSH honeypots through prompt design and supervised fine-tuning, comparing eight models against their base versions. Using 34 automated unit tests, the authors report that prompt design has a large effect and that fine-tuning effectiveness depends on dataset coverage, with an expanded dataset built from honeypot logs producing stronger local models according to their own measurements.

HoneypotNetworkEndpoint

What we know

This paper studies how to improve shell emulation accuracy of local open-weight LLM-based SSH honeypots through prompt design and supervised fine-tuning, comparing eight models against their base versions. Using 34 automated unit tests, the authors report that prompt design has a large effect and that fine-tuning effectiveness depends on dataset coverage, with an expanded dataset built from honeypot logs producing stronger local models according to their own measurements.

Evidence limits

This entry is based solely on the title and abstract of the source, without a full-text review, so the effectiveness and generalizability of the improvements reported by the authors cannot be independently confirmed.

Reviewed: author abstract. Full-text results were not analyzed.

Sources and provenance

  1. Improving LLM-Based SSH Honeypots Through Prompting and Fine-Tuning
    abstract · 2026-10-04

Reviewed: 2026-10-04. This record may change when new evidence is found.

RIS · BibTeX