67 citations · 78 across the 11 of their papers we have counts for
11 papers
Improving LLM-Based SSH Honeypots Through Prompting and Fine-Tuning
Muris Sladić, Veronica Valeros, Eman Alibalić +1
LLM-based SSH honeypots often use closed cloud LLMs because they give strong shell realism, but cloud models create deployment problems. These include no stable versioning, provide…
Slips: Behavioral Evidence Aggregation for Network Security
Sebastian Garcia, Veronica Valeros, Alya Gomaa +7
Network intrusion detection systems often analyze individual packets or flows, although malicious behavior may develop across many connections and over time. This may limit their a…
Ghost Without Shell: Measuring Non-Interactive SSH Attacks on Honeypots
Veronica Valeros, Muris Sladić, Sebastian Garcia
Cyber deception research has focused on improving honeypot deception capabilities to increase attacker engagement and extend their interactions to collect more and better intellige…
AdvancedShelLM: A Stateful Multi-Agent LLM Honeypot for SSH Deception
Muris Sladić, Eman Alibalić, Veronica Valeros +2
LLM-based SSH honeypots can generate believable interactions, but evaluations indicate they remain somewhat identifiable to determined attackers, indicating the need for a better s…
Decoys Cannot Go Everywhere: Mapping the Deception Surface in MITRE ATT&CK
Veronica Valeros, Carlos Catania, Viliam Lisý +1
Cyber deception research often assumes that a decoy can be placed wherever there is attacker behavior. This work tests that assumption across MITRE ATT&CK v18.1. We introduce a fou…
VelLMes: A high-interaction AI-based deception framework
Muris Sladić, Veronica Valeros, Carlos Catania +1
There are very few SotA deception systems based on Large Language Models. The existing ones are limited only to simulating one type of service, mainly SSH shells. These systems - b…
ARACNE: An LLM-Based Autonomous Shell Pentesting Agent
Tomas Nieponice, Veronica Valeros, Sebastian Garcia
We introduce ARACNE, a fully autonomous LLM-based pentesting agent tailored for SSH services that can execute commands on real Linux shell systems. Introduces a new agent architect…
Towards Better Understanding of Cybercrime: The Role of Fine-Tuned LLMs in Translation
Veronica Valeros, Anna Širokova, Carlos Catania +1
Understanding cybercrime communications is paramount for cybersecurity defence. This often involves translating communications into English for processing, interpreting, and genera…
LLM in the Shell: Generative Honeypots
Muris Sladić, Veronica Valeros, Carlos Catania +1
Honeypots are essential tools in cybersecurity for early detection, threat intelligence gathering, and analysis of attacker's behavior. However, most of them lack the required real…
Attacker Profiling Through Analysis of Attack Patterns in Geographically Distributed Honeypots
Veronica Valeros, Maria Rigaki, Sebastian Garcia
Honeypots are a well-known and widely used technology in the cybersecurity community, where it is assumed that placing honeypots in different geographical locations provides better…
Towards a better labeling process for network security datasets
Sebastian Garcia, Veronica Valeros
Most network security datasets do not have comprehensive label assignment criteria, hindering the evaluation of the datasets, the training of models, the results obtained, the comp…