{"id":"https://openalex.org/W7165006634","doi":"https://doi.org/10.48550/arxiv.2606.17986","title":"ShellGames: Speculative LLM-Driven SSH Deception","display_name":"ShellGames: Speculative LLM-Driven SSH Deception","publication_year":2026,"publication_date":"2026-06-16","ids":{"openalex":"https://openalex.org/W7165006634","doi":"https://doi.org/10.48550/arxiv.2606.17986"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.17986","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.17986","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.17986","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5120063816","display_name":"Umberto Salviati","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Salviati, Umberto","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062718348","display_name":"Fabio De Gaspari","orcid":"https://orcid.org/0000-0001-9718-1044"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"De Gaspari, Fabio","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138771182","display_name":"Mauro Conti","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Conti, Mauro","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5046905749","display_name":"Luigi V. Mancini","orcid":"https://orcid.org/0000-0003-4859-2191"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mancini, Luigi Vincenzo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.12919999659061432,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.12919999659061432,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.1257999986410141,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.09629999846220016,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6601999998092651},{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.5095999836921692},{"id":"https://openalex.org/keywords/deception","display_name":"Deception","score":0.49790000915527344},{"id":"https://openalex.org/keywords/benchmarking","display_name":"Benchmarking","score":0.41830000281333923},{"id":"https://openalex.org/keywords/usability","display_name":"Usability","score":0.37450000643730164},{"id":"https://openalex.org/keywords/subversion","display_name":"Subversion","score":0.3725999891757965},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.36399999260902405}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7799000144004822},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6601999998092651},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.5095999836921692},{"id":"https://openalex.org/C2779267917","wikidata":"https://www.wikidata.org/wiki/Q170028","display_name":"Deception","level":2,"score":0.49790000915527344},{"id":"https://openalex.org/C86251818","wikidata":"https://www.wikidata.org/wiki/Q816754","display_name":"Benchmarking","level":2,"score":0.41830000281333923},{"id":"https://openalex.org/C170130773","wikidata":"https://www.wikidata.org/wiki/Q216378","display_name":"Usability","level":2,"score":0.37450000643730164},{"id":"https://openalex.org/C2777367489","wikidata":"https://www.wikidata.org/wiki/Q1060330","display_name":"Subversion","level":3,"score":0.3725999891757965},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.36399999260902405},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.36169999837875366},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.3398999869823456},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.33640000224113464},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.32989999651908875},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3224000036716461},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.319599986076355},{"id":"https://openalex.org/C2777549182","wikidata":"https://www.wikidata.org/wiki/Q15117556","display_name":"Abort","level":2,"score":0.310699999332428},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.30169999599456787},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.27239999175071716},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.26260000467300415},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.2506999969482422}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.17986","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.17986","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.17986","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.17986","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.7109044194221497,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Cyber":[0],"deception":[1,40],"and":[2,61,94,127,149,156,180,205],"Moving":[3],"Target":[4],"Defense":[5],"are":[6],"promising":[7,35],"strategies":[8],"that":[9,47,66,193],"aim":[10],"to":[11,63,82,97,103,112,123,198],"disrupt":[12],"adversaries":[13,24],"by":[14],"increasing":[15],"uncertainty.":[16],"However,":[17],"sustaining":[18],"long-lived,":[19],"credible":[20],"interactive":[21,121],"sessions":[22],"with":[23,189],"remains":[25],"an":[26,74],"open":[27],"challenge.":[28],"Large":[29],"Language":[30],"Models":[31],"(LLMs)":[32],"offer":[33],"a":[34,124,145,199],"path":[36],"toward":[37],"more":[38],"dynamic":[39],"systems,":[41],"but":[42],"suffer":[43],"from":[44],"key":[45],"limitations":[46],"fundamentally":[48],"limit":[49],"their":[50],"applicability,":[51],"including:":[52],"lack":[53],"of":[54,119,136],"persistent":[55],"state,":[56],"output":[57],"inconsistencies,":[58],"hallucinations,":[59],"latency,":[60],"susceptibility":[62],"behavioral":[64],"subversion":[65,129],"may":[67],"reveal":[68],"the":[69,132],"deception.":[70],"We":[71],"propose":[72],"ShellGames,":[73],"SSH":[75],"shell":[76,137,201],"simulator":[77],"based":[78],"on":[79,164,172,183,209],"LLM":[80],"designed":[81],"address":[83],"these":[84],"limitations.":[85],"ShellGames":[86,159,194],"combines":[87],"five":[88],"complementary":[89],"techniques:":[90],"(i)":[91],"Automatic":[92],"Chain-of-Thought":[93],"few-shot":[95],"learning":[96],"improve":[98],"correctness;":[99],"(ii)":[100],"memory":[101],"management":[102],"maintain":[104],"system":[105],"state":[106,154,176],"coherency;":[107],"(iii)":[108],"speculative":[109],"command":[110,162,211],"execution":[111],"reduce":[113],"response":[114],"latency;":[115],"(iv)":[116],"smart":[117],"routing":[118],"complex":[120],"commands":[122],"sandboxed":[125],"environment;":[126],"(v)":[128],"detection":[130],"leveraging":[131],"constrained":[133],"input-output":[134],"domain":[135],"environments.":[138],"To":[139],"enable":[140],"systematic":[141],"evaluation,":[142],"we":[143],"introduce":[144],"standardized":[146],"benchmarking":[147],"protocol":[148],"dataset":[150],"spanning":[151],"correctness,":[152],"consistency,":[153],"tracking,":[155],"robustness":[157,184],"tasks.":[158],"achieves":[160,195],"$0.898$":[161],"accuracy":[163,171,178,182],"correctness":[165],"($+5.3pp$":[166],"over":[167],"baselines),":[168],"$0.918$":[169],"sequence-level":[170],"consistency":[173],"($+36pp$),":[174],"$0.98$":[175],"tracking":[177],"($+18.3pp$),":[179],"$0.95$":[181],"($+37pp$).":[185],"A":[186],"user":[187],"study":[188],"$n=20$":[190],"participants":[191],"confirms":[192],"realism":[196],"comparable":[197],"real":[200],"under":[202],"free":[203],"exploration":[204],"outperforms":[206],"traditional":[207],"honeypots":[208],"perceived":[210],"coverage.":[212]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-06-18T00:00:00"}