CyberdeceptionAtlas · Question → testES

Library / Paper

Paper

LLM-Based Penetration Testing in the Presence of Honeypots

This work studies how large language model (LLM)-based penetration testing agents can allocate their execution budget when encountering honeypots. The authors formalize the attacker's problem as a budgeted decision process in which the agent must decide whether to continue exploitation or skip a target upon honeypot suspicion, proposing a detector-guided policy evaluated in a controlled mixed-host testbed.

HoneypotAdversary engagementNetworkEndpoint

What we know

This work studies how large language model (LLM)-based penetration testing agents can allocate their execution budget when encountering honeypots. The authors formalize the attacker's problem as a budgeted decision process in which the agent must decide whether to continue exploitation or skip a target upon honeypot suspicion, proposing a detector-guided policy evaluated in a controlled mixed-host testbed.

Evidence limits

This entry is based solely on the publicly available title and abstract; the full paper has not been reviewed and the authors' reported findings have not been independently verified.

Reviewed: author abstract. Full-text results were not analyzed.

Sources and provenance

  1. LLM-Based Penetration Testing in the Presence of Honeypots
    abstract · 2026-10-04

Reviewed: 2026-10-04. This record may change when new evidence is found.

RIS · BibTeX