11 matches found
OpenAnt
OpenAnt OpenAnt from Knostic is the first open source LLM-based vulnerability discovery product now called a harness that helps defenders proactively find verified security flaws while minimizing both false positives and false negatives. Stage 1 detects. Stage 2 attacks. What survives is real. Do...
stride-gpt
STRIDE GPT는 대규모 언어 모델LLM을 활용하여 STRIDE 방법론에 기반해 주어진 애플리케이션에 대한 위협 모델과 공격 트리를 생성하는 AI 기반 위협 모델링 도구입니다. 사용자는 애플리케이션 유형, 인증 방법, 애플리케이션이 인터넷에 노출되는지 또는 민감한 데이터를 처리하는지와 같은 애플리케이션 세부 정보를 제공합니다. 그러면 모델이 제공된 정보를 바탕으로 출력을 생성합니다. 목차 프로젝트 지원 기능 엔터프라이즈 배포 Open Security Summit 발표 변경 이력 설치 저장소 구조 사용법 대화형 REPL 치트...
zairo
Measuring zairo zairo's unit tests check that it builds the right prompts and handles answers correctly. They can't tell you whether a model, given those prompts, finds a vulnerability a change introduced, or flags one that isn't there. That's what this directory is for: a set of labelled changes...
resym
ReSym Artifact This repository provides artifacts for the paper "ReSym: Harnessing LLMs to Recover Variable and Data Structure Symbols from Stripped Binaries" CCS 2024. 🏆 ACM SIGSAC Distinguished Paper Award Winner Note : We are actively maintaining/updating our artifacts. Please make sure you ar...
ethibench
From Controlled to the Wild: Evaluation of Pentesting Agents in the Real-World AI pentesting agents are increasingly credible as offensive security systems, but current benchmarks still provide limited guidance on which systems will perform best on real-world targets. Most existing evaluations...
MetaPermit: Scalable and Auditable Access Control for AI Agents Via LLM-Inferred Meta-Attributes
The rise of autonomous AI agents equipped with tools has introduced significant security risks, ranging from unintended tool misuse to adversarial manipulation through Indirect Prompt Injection IPI attacks. In practice, deployed agent systems such as OpenAI Codex and Claude Code protect tool...
attackgen v0.16.0
AttackGen AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK and ATLAS frameworks. The tool generates tailored incident response scenarios based on user-selected threat actor groups, AI attack case...
attackgen v0.14.0
AttackGen AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK and ATLAS frameworks. The tool generates tailored incident response scenarios based on user-selected threat actor groups, AI attack case...
Unveiling the Resilience of LLM-Enhanced Search Engines against Black-Hat SEO Manipulation
The emergence of Large Language Model-enhanced Search Engines LLMSEs has revolutionized information retrieval by integrating web-scale search capabilities with AI-powered summarization. While these systems demonstrate improved efficiency over traditional search engines, their security implication...
LLM-Based Threat Detection and Prevention Framework for IoT Ecosystems
The increasing complexity and scale of the Internet of Things IoT have made security a critical concern. This paper presents a novel Large Language Model LLM-based framework for comprehensive threat detection and prevention in IoT environments. The system integrates lightweight LLMs fine-tuned on...
