{"id":"https://openalex.org/W7164931478","doi":"https://doi.org/10.48550/arxiv.2606.16420","title":"Transferable Self-Evolving Playbooks for Agentic Security Auditing","display_name":"Transferable Self-Evolving Playbooks for Agentic Security Auditing","publication_year":2026,"publication_date":"2026-06-15","ids":{"openalex":"https://openalex.org/W7164931478","doi":"https://doi.org/10.48550/arxiv.2606.16420"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.16420","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.16420","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.16420","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5138708669","display_name":"Ziyue Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Ziyue","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129909954","display_name":"C W Ng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ng, Cheuk Wang Maurice","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043761995","display_name":"C Shijia Yu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yu, Chenchen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135940723","display_name":"Strick Sheng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sheng, Strick","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047509636","display_name":"Kaihua Qin","orcid":"https://orcid.org/0000-0003-2190-3623"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Qin, Kaihua","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5138725601","display_name":"Liyi Zhou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhou, Liyi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.20160000026226044,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.20160000026226044,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.12630000710487366,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.11159999668598175,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.6604999899864197},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5038999915122986},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.47620001435279846},{"id":"https://openalex.org/keywords/adaptation","display_name":"Adaptation (eye)","score":0.3822999894618988},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.3571000099182129},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.32899999618530273}],"concepts":[{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.6604999899864197},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6098999977111816},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5038999915122986},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.47620001435279846},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.3871000111103058},{"id":"https://openalex.org/C139807058","wikidata":"https://www.wikidata.org/wiki/Q352374","display_name":"Adaptation (eye)","level":2,"score":0.3822999894618988},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.3571000099182129},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3504999876022339},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.32899999618530273},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.326200008392334},{"id":"https://openalex.org/C14185376","wikidata":"https://www.wikidata.org/wiki/Q30232","display_name":"Agile software development","level":2,"score":0.2831000089645386},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.26899999380111694},{"id":"https://openalex.org/C170856484","wikidata":"https://www.wikidata.org/wiki/Q6452684","display_name":"Internal audit","level":3,"score":0.25920000672340393},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.2533999979496002}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.16420","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.16420","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.16420","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.16420","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5924867987632751}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"An":[0],"LLM":[1,18,46,179],"agent":[2,23,121],"for":[3,19,30,110,196],"vulnerability":[4,50,162],"discovery":[5],"and":[6,34,36,47,65,78,127,137,203,251],"validation":[7],"is":[8,74,152],"more":[9,255],"than":[10,257],"a":[11,103,138,177,226],"model.":[12],"It":[13],"combines":[14],"three":[15],"components:":[16],"an":[17,22,37,87,119,130],"code":[20],"analysis,":[21],"harness":[24,48],"such":[25],"as":[26],"Codex":[27,210],"or":[28,158,164,180],"OpenCode":[29],"navigation,":[31],"tool":[32],"use,":[33],"execution,":[35],"audit":[38,92,120],"playbook,":[39],"domain-specific":[40,165],"procedural":[41],"knowledge":[42,63],"that":[43],"guides":[44],"the":[45,91,116,124,143,204,232,236],"toward":[49],"discovery.":[51],"Prior":[52],"work":[53],"relies":[54],"on":[55,146,185,212],"human-supplied":[56],"playbooks,":[57],"including":[58],"prompt":[59],"engineering,":[60],"manual":[61],"workflows,":[62,160],"bases,":[64],"heuristics.":[66],"This":[67],"raises":[68,193],"two":[69],"research":[70],"questions:":[71],"Acquisition":[72],"-":[73,85],"human":[75],"curation":[76],"necessary,":[77],"can":[79,86,224],"playbook":[80,89,104,126,144,150,169,191,207,234],"creation":[81],"be":[82],"automated?":[83],"Transfer":[84],"evolved":[88,168,205],"transfer":[90],"procedure":[93],"to":[94,142,174,201,244,249],"weaker":[95],"agents,":[96],"improving":[97],"their":[98],"capability?":[99],"We":[100,182],"present":[101],"EvoHunt,":[102],"evolution":[105,117,192,223],"environment":[106],"over":[107],"open-source":[108,186,222],"repositories":[109],"security":[111,187],"auditing.":[112],"Three":[113],"agents":[114],"drive":[115],"loop:":[118],"rolls":[122],"out":[123],"current":[125],"produces":[128],"findings;":[129],"evaluator":[131],"scores":[132],"outcomes":[133],"against":[134],"ground":[135],"truth;":[136],"reviser":[139],"commits":[140],"updates":[141],"based":[145],"failure":[147],"analysis.":[148],"The":[149,167],"format":[151],"unconstrained:":[153],"starting":[154],"empty,":[155],"EvoHunt":[156,184],"adds":[157],"removes":[159],"heuristics,":[161],"knowledge,":[163],"content.":[166],"requires":[170],"only":[171],"minor":[172],"adaptation":[173],"run":[175],"under":[176],"different":[178],"harness.":[181],"evaluate":[183],"advisories.":[188],"For":[189,230],"acquisition,":[190],"end-to-end":[194],"exploits":[195],"Codex/GPT5.4-xhigh":[197],"6x,":[198],"from":[199,242,247],"1.1%":[200,248],"6.2%,":[202],"OpenCode/GLM5.1":[206],"surpasses":[208],"OpenAI":[209],"Security":[211],"every":[213],"metric,":[214],"with":[215],"11.3%":[216],"vs.":[217],"9.2%":[218],"target-match":[219],"rate,":[220],"showing":[221],"outperform":[225],"dedicated":[227],"commercial":[228],"product.":[229],"transfer,":[231],"GLM-evolved":[233],"gives":[235],"strongest":[237],"student":[238],"lift:":[239],"Qwen3.6-27B":[240],"improves":[241],"2.4%":[243],"6.5%,":[245],"Qwen3.6-35B-A3B":[246],"4.6%,":[250],"A3B":[252],"obtains":[253],"2.4x":[254],"matches":[256],"GPT":[258],"transfer.":[259]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-17T00:00:00"}