{"id":"https://openalex.org/W7139078043","doi":"https://doi.org/10.48550/arxiv.2603.17673","title":"Towards Reliable Local Security Agents: Verifiable Post-Training for Linux Privilege Escalation","display_name":"Towards Reliable Local Security Agents: Verifiable Post-Training for Linux Privilege Escalation","publication_year":2026,"publication_date":"2026-03-18","ids":{"openalex":"https://openalex.org/W7139078043","doi":"https://doi.org/10.48550/arxiv.2603.17673"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.17673","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.17673","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.17673","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5120790067","display_name":"Philipp Normann","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Normann, Philipp","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002108091","display_name":"Andreas Happe","orcid":"https://orcid.org/0009-0000-2484-0109"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Happe, Andreas","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129769347","display_name":"J\u00fcrgen Cito","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cito, J\u00fcrgen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5029169901","display_name":"Daniel J. Arp","orcid":"https://orcid.org/0000-0003-3628-794X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Arp, Daniel","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.1800999939441681,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.1800999939441681,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.1606999933719635,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.15299999713897705,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/reinforcement-learning","display_name":"Reinforcement learning","score":0.7247999906539917},{"id":"https://openalex.org/keywords/verifiable-secret-sharing","display_name":"Verifiable secret sharing","score":0.6798999905586243},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.522599995136261},{"id":"https://openalex.org/keywords/privilege","display_name":"Privilege (computing)","score":0.49380001425743103},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.48539999127388},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.45320001244544983},{"id":"https://openalex.org/keywords/resource","display_name":"Resource (disambiguation)","score":0.4438999891281128},{"id":"https://openalex.org/keywords/baseline","display_name":"Baseline (sea)","score":0.4318999946117401}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7422999739646912},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.7247999906539917},{"id":"https://openalex.org/C85847156","wikidata":"https://www.wikidata.org/wiki/Q59015987","display_name":"Verifiable secret sharing","level":3,"score":0.6798999905586243},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.522599995136261},{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.49380001425743103},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.48539999127388},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.45320001244544983},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.44620001316070557},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.4438999891281128},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.4318999946117401},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4146000146865845},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.3587000072002411},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.3544999957084656},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.3490999937057495},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.34860000014305115},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.34130001068115234},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.33000001311302185},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.30149999260902405},{"id":"https://openalex.org/C34585555","wikidata":"https://www.wikidata.org/wiki/Q1368723","display_name":"Learning curve","level":2,"score":0.2985000014305115},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2890999913215637},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.2727999985218048},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.26190000772476196},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.26100000739097595},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.25110000371932983}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.17673","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.17673","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.17673","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.17673","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"LLM":[0],"agents":[1],"are":[2,13],"becoming":[3],"increasingly":[4],"important":[5],"in":[6,121],"the":[7,90,96,151,185,188,219],"security":[8,36,72,214],"domain,":[9],"but":[10,216],"leading":[11],"systems":[12],"often":[14],"closed-source,":[15],"cloud-based,":[16],"hard":[17],"to":[18,87,173,212,228],"reproduce":[19],"or":[20],"use":[21],"with":[22,136],"sensitive":[23],"code.":[24],"This":[25],"creates":[26],"a":[27,59,65,71,84,117,140,156],"need":[28],"for":[29,45,224],"small,":[30],"local":[31,67,93,207],"models":[32,208],"that":[33,63,111,205],"can":[34,209],"perform":[35],"tasks":[37],"under":[38,155],"strict":[39],"resource":[40],"constraints,":[41],"though":[42],"effective":[43],"methods":[44],"developing":[46],"them":[47],"remain":[48],"unexplored.":[49],"In":[50],"this":[51,55,75,182,226],"paper,":[52],"we":[53,77,115],"address":[54],"gap":[56],"by":[57,133,196],"proposing":[58],"two-stage":[60],"post-training":[61],"recipe":[62,227],"turns":[64],"small":[66,118,206],"language":[68],"model":[69,120],"into":[70],"agent.":[73],"To":[74],"end,":[76],"focus":[78],"on":[79,126],"Linux":[80,145],"privilege":[81],"escalation":[82,194],"as":[83,95],"representative":[85],"setting":[86],"systematically":[88],"study":[89],"training":[91,167],"of":[92,143,159],"models,":[94],"task":[97],"is":[98],"both":[99],"automatically":[100],"verifiable":[101,137],"and":[102,163],"requires":[103],"multi-step":[104],"interactive":[105],"reasoning.":[106],"Using":[107],"an":[108],"experimental":[109],"setup":[110],"mitigates":[112],"data":[113],"leakage,":[114],"post-train":[116],"4B":[119],"two":[122],"stages:":[123],"supervised":[124,148],"fine-tuning":[125,149],"traces":[127],"from":[128],"procedural":[129],"privilege-escalation":[130,146],"environments,":[131],"followed":[132],"reinforcement":[134,165],"learning":[135,166],"rewards.":[138],"On":[139],"held-out":[141],"benchmark":[142],"12":[144],"scenarios,":[147],"doubles":[150],"baseline":[152],"success":[153],"rate":[154],"tight":[157],"budget":[158],"20":[160],"interaction":[161],"rounds,":[162],"subsequent":[164],"improves":[168],"our":[169],"model,":[170],"PrivEsc-LLM":[171],"4B,":[172],"93.3%":[174],"success,":[175],"behind":[176],"only":[177,203],"Claude":[178],"Opus":[179],"4.7":[180],"at":[181],"budget.":[183],"At":[184],"same":[186],"time,":[187],"expected":[189],"inference":[190],"cost":[191],"per":[192],"successful":[193],"decreases":[195],"more":[197],"than":[198],"80x.":[199],"Our":[200],"findings":[201],"not":[202],"show":[204],"be":[210],"adapted":[211],"complex":[213],"tasks,":[215],"also":[217],"document":[218],"challenges":[220],"involved,":[221],"offering":[222],"guidance":[223],"transferring":[225],"other":[229],"settings.":[230]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-03-20T00:00:00"}