AI-Augmented Ethical Hacking: A Practical Examination of Manual Exploitation and Privilege Escalation in Linux Environments

Swanson, M., Bartol, N., Sabato, J., Hash, J., Graffo, L.: Technical guide to information security testing and assessment (NIST SP 800-115). Special Publication 800-115, National Institute of Standards and Technology (2008), https://csrc.nist.gov/publications/detail/sp/800-115/final

2008

Earlier work this paper cites.

Vaswani, A., Shazeer, N., Parmar, N., Uszkoreit, J., Jones, L., Gomez, A.N., Kaiser, L., Polosukhin, I.: Attention is all you need. In: Guyon, I., von Luxburg, U., Bengio, S., Wallach, H.M., Fergus, R., Vishwanathan, S.V.N., Garnett, R. (eds.) Advances in Neural Information Processing Systems 30: Annual Conference on Neural Information Processing Systems 2017, December 4–9, 2017, Long Beach, CA, USA. pp. 5998–6008 (2017), https://proceedings.neurips.cc/paper/2017/hash/3f5ee243547dee91fbd053c1c4a845aa-Abstract.html

2017

Earlier work this paper cites.

Handa, A., Sharma, A., Shukla, S.K.: Machine learning in cybersecurity: A review. WIREs Data Mining and Knowledge Discovery 9

2019

Earlier work this paper cites.

Brown, T.B., et al.: Language models are few-shot learners. In: Larochelle, H., Ranzato, M., Hadsell, R., Balcan, M., Lin, H. (eds.) Advances in Neural Information Processing Systems 33: Annual Conference on Neural Information Processing Systems 2020, NeurIPS 2020, December 6–12, 2020, virtual (2020), https://proceedings.neurips.cc/paper/2020/hash/1457c0d6bfcb4967418bfb8ac142f64a-Abstract.html

2020

Earlier work this paper cites.

Bertino, E., Kantarcioglu, M., Akcora, C.G., Samtani, S., Mittal, S., Gupta, M.: AI for security and security for AI. In: Joshi, A., Carminati, B., Verma, R.M. (eds.) CODASPY ’21: Eleventh ACM Conference on Data and Application Security and Privacy, Virtual Event, USA, April 26–28, 2021. pp. 333–334. ACM (2021). https://doi.org/10.1145/3422337.3450357, https://doi.org/10.1145/3422337.3450357

2021

Earlier work this paper cites.

Ahmed, T., Ghosh, S., Bansal, C., Zimmermann, T., Zhang, X., Rajmohan, S.: Recommending root-cause and mitigation steps for cloud incidents using large language models. In: Proceedings of 2023 IEEE/ACM 45th International Conference on Software Engineering (ICSE). pp. 1737–1749. IEEE (2023), https://ieeexplore.ieee.org/abstract/document/10172904/

2023

Earlier work this paper cites.

Deng, G., Liu, Y., Mayoral-Vilches, V., Liu, P., Li, Y., Xu, Y., Zhang, T., Liu, Y., Pinzger, M., Rass, S.: PentestGPT: An LLM-empowered automatic penetration testing tool (2023), https://arxiv.org/abs/2308.06782

Original

2023

Cited alongside, same era.

Gupta, M., Akiri, C., Aryal, K., Parker, E., Praharaj, L.: From ChatGPT to ThreatGPT: Impact of generative AI in cybersecurity and privacy. IEEE Access 11

2023

Cited alongside, same era.

Harrison, J., Toreini, E., Mehrnezhad, M.: A practical deep learning-based acoustic side channel attack on keyboards. In: IEEE European Symposium on Security and Privacy, EuroS&P 2023 — Workshops, Delft, Netherlands, July 3-7, 2023. pp. 270–280. IEEE (2023). https://doi.org/10.1109/EUROSPW59978.2023.00034, https://doi.org/10.1109/EuroSPW59978.2023.00034

2023

Cited alongside, same era.

Pearce, H., Tan, B., Ahmad, B., Karri, R., Dolan-Gavitt, B.: Examining zero-shot vulnerability repair with large language models. In: Proceedings of 2023 IEEE Symposium on Security and Privacy (SP). pp. 2339–2356. IEEE (2023), https://ieeexplore.ieee.org/abstract/document/10179324

Al-Sinani, H., Mitchell, C.: Unleashing AI in ethical hacking: A preliminary experimental study. Technical report, Royal Holloway, University of London (2024), https://pure.royalholloway.ac.uk/files/58692091/TechReport_UnleashingAIinEthicalHacking.pdf

2024

Closest in time.

Al-Sinani, H.S., Mitchell, C.J., Sahli, N., Al-Siyabi, M.: Unleashing AI in ethical hacking. In: Proceedings of the STM 2024, the 20th International Workshop on Security and Trust Management (co-located with ESORICS 2024), Bydgoszcz, Poland. p. to appear. LNCS, Springer (2024), https://www.chrismitchell.net/Papers/uaieh.pdf

2024

Closest in time.

Fujii, S., Yamagishi, R.: Feasibility study for supporting static malware analysis using LLM. In: Proceedings of the SecAI 2024, the Workshop on Security and Artificial Intelligence (co-located with ESORICS 2024), Bydgoszcz, Poland. p. to appear. LNCS series, Springer (2024), https://drive.google.com/file/d/14EW8RJnE4QUBG0mIoMVM0chzJcp1nQon/view

2024

Closest in time.