{"id":"https://openalex.org/W4406945373","doi":"https://doi.org/10.48550/arxiv.2501.16466","title":"Incalmo: An Autonomous LLM-assisted System for Red Teaming Multi-Host Networks","display_name":"Incalmo: An Autonomous LLM-assisted System for Red Teaming Multi-Host Networks","publication_year":2025,"publication_date":"2025-01-27","ids":{"openalex":"https://openalex.org/W4406945373","doi":"https://doi.org/10.48550/arxiv.2501.16466"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2501.16466","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2501.16466","pdf_url":"https://arxiv.org/pdf/2501.16466","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2501.16466","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5022992902","display_name":"Brian Singer","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Singer, Brian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055066834","display_name":"Keane Lucas","orcid":"https://orcid.org/0000-0002-4705-3412"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lucas, Keane","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5116074061","display_name":"Lakshmi Adiga","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Adiga, Lakshmi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055016786","display_name":"Meghna Jain","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jain, Meghna","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002939847","display_name":"Lujo Bauer","orcid":"https://orcid.org/0000-0002-8209-6792"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bauer, Lujo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5079175103","display_name":"Vyas Sekar","orcid":"https://orcid.org/0000-0001-5452-8976"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sekar, Vyas","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9941999912261963,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9941999912261963,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9521999955177307,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9466000199317932,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5524383187294006},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5160262584686279},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.3306039571762085}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5524383187294006},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5160262584686279},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3306039571762085}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2501.16466","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2501.16466","pdf_url":"https://arxiv.org/pdf/2501.16466","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2501.16466","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2501.16466","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2501.16466","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2501.16466","pdf_url":"https://arxiv.org/pdf/2501.16466","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Security":[0],"operators":[1],"use":[2],"red":[3,30,57,108,127,136],"teams":[4,31],"to":[5,81,100,134,157,181],"simulate":[6],"real":[7],"attackers":[8],"and":[9,34,38,104,118,160,227],"proactively":[10],"find":[11,61,185],"defense":[12],"gaps.":[13],"In":[14,204],"realistic":[15,176],"enterprise":[16],"settings,":[17],"this":[18,112],"involves":[19],"executing":[20],"multi-host":[21,56,129,171],"network":[22],"attacks":[23,223],"spanning":[24],"many":[25],"\"stepping":[26],"stone\"":[27],"hosts.":[28],"Unfortunately,":[29],"are":[32,79,146],"expensive":[33],"entail":[35],"significant":[36],"expertise":[37],"effort.":[39],"Given":[40],"the":[41,90,98,102,116],"promise":[42],"of":[43,93,120,141,200,214],"LLMs":[44,52,72,133],"in":[45,88,139,197,210,230],"CTF":[46],"challenges,":[47],"we":[48,96,114,166],"first":[49],"analyze":[50],"if":[51],"can":[53],"autonomously":[54,126],"execute":[55],"team":[58,137],"exercises.":[59],"We":[60,184,217],"that":[62,145,186,219],"state-of-the-art":[63,94,206],"LLM-assisted":[64,107,123,207],"offense":[65],"systems":[66,208],"(e.g.,":[67,73],"PentestGPT,":[68],"CyberSecEval3)":[69],"with":[70,174],"leading":[71],"Sonnet":[74],"4,":[75],"Gemini":[76],"2.5":[77],"Pro)":[78],"unable":[80],"do":[82],"so.":[83],"Building":[84],"on":[85,111],"our":[86,164],"observations":[87],"understanding":[89],"failure":[91],"modes":[92],"systems,":[95],"argue":[97],"need":[99],"improve":[101],"abstractions":[103],"interfaces":[105],"for":[106,125],"teaming.":[109],"Based":[110],"insight,":[113],"present":[115],"design":[117],"implementation":[119],"Incalmo,":[121],"an":[122],"system":[124],"teaming":[128],"networks.":[130],"Incalmo":[131,152,187,220],"uses":[132,154],"plan":[135],"exercises":[138],"terms":[140],"high-level":[142],"declarative":[143],"tasks":[144],"executed":[147],"by":[148],"domain-specific":[149],"task":[150],"agents.":[151],"also":[153],"auxiliary":[155],"services":[156],"manage":[158],"context":[159],"acquired":[161],"assets.":[162],"For":[163],"evaluation,":[165],"develop":[167],"MHBench,":[168],"a":[169],"novel":[170],"attack":[172],"benchmark":[173],"40":[175,201,215],"emulated":[177],"networks":[178],"(from":[179],"22":[180],"50":[182],"hosts).":[183],"successfully":[188],"acquires":[189],"critical":[190],"assets":[191],"(i.e.,":[192],"key":[193],"hosts":[194],"or":[195],"data)":[196],"37":[198],"out":[199,213],"MHBench":[202],"environments.":[203,216],"contrast,":[205],"succeed":[209],"only":[211],"3":[212],"show":[218],"is":[221],"efficient-successful":[222],"took":[224],"12-54":[225],"minutes":[226],"cost":[228],"<$15":[229],"LLM":[231],"credits.":[232]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-01-30T00:00:00"}