Pith. sign in

REVIEW 4 cited by

LLM Agent Honeypot: Monitoring AI Hacking Agents in the Wild

Not yet reviewed by Pith; the record is open.

This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.

SPECIMEN: schema-true, not a live event

T0 review · schema-true

One-sentence machine reading of the paper's core claim.

pith:XXXXXXXX · record.json · timestamp

arxiv 2410.13919 v2 pith:KHROERUR submitted 2024-10-17 cs.CR cs.AI

classification cs.CRcs.AI
keywords agentshackinghoneypotwildaddressagentai-drivenaims
verification ladder T0 review T1 audit T2 compute T3 formal

Signed reviews

No signed human review yet.

0 comments
read the original abstract

Attacks powered by Large Language Model (LLM) agents represent a growing threat to modern cybersecurity. To address this concern, we present LLM Honeypot, a system designed to monitor autonomous AI hacking agents. By augmenting a standard SSH honeypot with prompt injection and time-based analysis techniques, our framework aims to distinguish LLM agents among all attackers. Over a trial deployment of about three months in a public environment, we collected 8,130,731 hacking attempts and 8 potential AI agents. Our work demonstrates the emergence of AI-driven threats and their current level of usage, serving as an early warning of malicious LLM agents in the wild.

Discussion (0). Continue with ORCID to comment.

Forward citations

Cited by 4 Pith papers

Reviewed papers in the Pith corpus that reference this work. Sorted by Pith novelty score. Full citation record

  1. Beyond Pattern Matching: Seven Cross-Domain Techniques for Prompt Injection Detection

    cs.CR 2026-04 unverdicted novelty 7.0 of 10

    The work introduces and partially evaluates seven cross-domain prompt injection detectors, reporting F1 gains on benchmarks like deepset/prompt-injections and indirect-injection sets via local alignment, stylometry, a...

  2. Cyber-Capable AI Agents: Vulnerabilities, Evaluation Containment, and Defensive Response

    cs.AI 2026-07 conditional novelty 5.0 of 10

    A structured review organizes cyber-capable-agent risks into five vulnerability classes and argues that evaluation environments must be treated as operational security systems rather than background.

  3. Winning at All Cost: A Small Environment for Eliciting Specification Gaming Behaviors in Large Language Models

    cs.AI 2025-05 reject novelty 5.0 of 10

    In a one-shot text simulation, frontier LLMs frequently propose editing game files to win an unwinnable tic-tac-toe game; o3-mini edits at 37.1% and a 'creative' prompt raises the rate to 77.3% across models.

  4. Forewarned is Forearmed: A Survey on Large Language Model-based Agents in Autonomous Cyberattacks

    cs.NI 2025-05 conditional novelty 4.0 of 10

    A review of LLM-based agents as autonomous cyberattackers, arguing that they lower attack costs, scale up threats, and outpace existing defenses.

Pith tools