{"schemaVersion":"nuwa-current-record-1","version":"2026-10-29.1","publication":"published","work":{"id":"agentcyberrange","title":"AgentCyberRange: Evaluate Agent Cyberattack Capabilities in Enterprise-like Cyber Ranges","aliases":["AgentCyberRange"],"authors":[],"primaryFunction":"evaluation","secondaryFunctions":[],"kind":"benchmark","sourceId":"agentcyberrange","attributionSourceId":"agentcyberrange","originalUrl":"https://agentcyberrange.io/","publicationDate":null,"updatedOn":"2026-10-25","areas":["cybersecurity"],"scopeNote":{"en":"Primary dimension follows the source’s measured construct. Metric-level interpretations may differ.","zh":"主维度依据来源实际测量的构念；具体指标可能属于其他维度。"},"protocolIds":["agentcyberrange"],"contributions":[{"organizationId":"fudan","role":"research","sourceId":"agentcyberrange-research-introduction","locator":"Research introduction: Fudan–Whitzard team"},{"organizationId":"whitzard","role":"research","sourceId":"agentcyberrange-research-introduction","locator":"Research introduction: Fudan–Whitzard team"}],"summary":{"en":"Autonomous cyber tasks in enterprise-like ranges.","zh":"企业式靶场中的自主网络任务。"},"note":{"question":{"en":"Task success across web exploitation and post-exploitation settings; configurations must be checked per submission.","zh":"Web 利用与后渗透任务表现；每项提交分别核查配置。"},"method":{"en":"AI agent completing cyber-range tasks","zh":"AI 智能体完成靶场任务"},"finding":{"en":"Autonomous cyber tasks in enterprise-like ranges.","zh":"企业式靶场中的自主网络任务。"},"supports":null,"limits":{"en":"Changing task sets and submitted agent configurations prevent unrestricted comparison.","zh":"任务集与提交配置变化，不支持无条件比较。"},"connections":null},"resources":[],"noteStatus":{"question":"limited","method":"limited","finding":"limited","supports":"limited","limits":"limited","connections":"limited"},"noteAvailability":{"en":"Existing source-specific draft sections are retained with limited review status. A complete methods, findings and limitations check remains pending; generic sections were omitted.","zh":"已有的来源相关草稿章节予以保留，审核状态为有限核查。完整的方法、发现与限制核查仍待完成；通用套话章节已省略。"},"noteSourceLocator":"Retained existing source-specific note sections; this pass audits duplicate/boilerplate structure and source availability, not complete section-level verification.","tags":[]},"reading":{"id":"agentcyberrange","title":"AgentCyberRange: Evaluate Agent Cyberattack Capabilities in Enterprise-like Cyber Ranges","en":{"takeaway":"AgentCyberRange’s team introduction describes state-dependent attack progression across an enterprise-like range. The primary site shell does not disclose a complete experimental method in the cached response.","question":"Can an agent discover an attack surface from sparse entry information and continue making decisions as access and information accumulate?","design":"The team introduction starts agents from entry IP information and describes progression through linked environments. Earlier access and discovered clues change later options. Web and post-access tracks are presented separately. The trajectory figure retains unsuccessful exploration as well as successful progress, illustrating a process rather than just a final endpoint.","scoring":"The existing dated catalogue preserves the official site’s Level-0 Pass@3 labels. The fetched introduction does not independently establish the pass@3 estimator, per-cell trial denominators, complete budgets or all submission settings. Those fields remain unknown in this new profile.","findings":["The introduction explicitly distinguishes vulnerability reproduction from autonomous range progression: the starting information and task structures differ (适用范围).","The trajectory example shows reuse of acquired state and includes failed branches. It is one source-described trajectory, not evidence that every tested system follows that path (图 2).","The introduction’s environment scale is a different snapshot from the older leaderboard capture. These versions must not be merged into a single task denominator (环境规模)."],"interpretation":"The material supports a scope-level account of the intended construct and one trajectory example. It does not yet support a fully audited methods dossier or a matched comparison across submissions.","limits":"The cached project page is a JavaScript shell. The accessible research introduction omits complete scoring, budget, model-release identity and independent-run counts. A trajectory figure cannot establish a population rate. The introduction’s application requests do not prove deployments or partnerships.","connections":["The introduction directly contrasts CyberGym’s code-plus-vulnerability inputs with AgentCyberRange’s entry-point information and attack-chain structure. This supports complementary coverage, not numerical equivalence."],"decisionRelevance":"Model recommendation: obtain the archived benchmark specification and submission configuration before interpreting model gaps; use the introduction for task scope and process reading only.","statistics":null},"zh":{"takeaway":"AgentCyberRange 团队介绍描述企业式靶场中有状态依赖的攻击推进；缓存项目首页只是页面外壳，没有披露完整实验方法。","question":"智能体能否从有限入口信息自主发现攻击面，并在权限和线索积累后持续决策？","design":"团队介绍从入口 IP 信息出发，说明早期访问权限与线索如何改变后续可选操作。Web 与后渗透轨道分别呈现。轨迹图同时保留未成功探索和成功推进，展示任务过程，而非只有最终结果。","scoring":"现有带日期目录保留官网 Level-0 Pass@3 标签，但此次取得的介绍不能独立确定估计方法、每单元试验分母、完整预算和提交配置，新档案对这些字段保持未知。","findings":["介绍明确区分漏洞复现与自主靶场推进，两者起始信息与任务结构不同（适用范围）。","轨迹示例展示状态复用与失败分支，只是一条来源描述的轨迹，不能证明每个系统都能完成同样路径（图 2）。","介绍的环境规模与较早排行榜抓取属于不同快照，不能合并成一个任务分母（环境规模）。"],"interpretation":"材料支持研究构念和一个过程示例的范围说明，尚不足以形成完整审核的方法档案，也不支持无条件比较提交。","limits":"缓存项目页为 JavaScript 外壳；介绍未完整披露评分、预算、模型发布身份及独立运行数。轨迹图不能确立总体发生率，申请使用也不能证明部署或伙伴关系。","connections":["介绍直接对比 CyberGym 的代码与漏洞输入、AgentCyberRange 的入口信息和攻击链结构，支持覆盖互补，不支持数值等价。"],"decisionRelevance":"模型建议：先取得归档基准说明及提交配置，再解释模型差异；当前介绍仅用于任务范围和过程阅读。","statistics":null},"figureRefs":[],"assertionPolicy":{"design":"source-finding","findings":"source-finding","interpretation":"nuwa-interpretation","connections":"nuwa-interpretation-with-source-refs","decisionRelevance":"model-recommendation-not-source-conclusion"},"sourceRefs":[{"sourceId":"agentcyberrange-research-introduction","url":"https://whitzard.tech/nuwa/blog/agentcyberrange/","locator":"研究问题","version":"Research introduction captured 2026-10-27T09:55:41.654036+00:00; sha256:82b125ff6ee2fc02acde66bd7e5debed251334d1db9d88f7831aaae13e267a7f","artifactSha256":"82b125ff6ee2fc02acde66bd7e5debed251334d1db9d88f7831aaae13e267a7f"},{"sourceId":"agentcyberrange-research-introduction","url":"https://whitzard.tech/nuwa/blog/agentcyberrange/","locator":"长程攻击轨迹：状态与线索复用；失败路径与任务过程；图 2","version":"Research introduction captured 2026-10-27T09:55:41.654036+00:00; sha256:82b125ff6ee2fc02acde66bd7e5debed251334d1db9d88f7831aaae13e267a7f","artifactSha256":"82b125ff6ee2fc02acde66bd7e5debed251334d1db9d88f7831aaae13e267a7f"},{"sourceId":"agentcyberrange-research-introduction","url":"https://whitzard.tech/nuwa/blog/agentcyberrange/","locator":"任务设置与环境：攻击链与状态依赖；环境规模","version":"Research introduction captured 2026-10-27T09:55:41.654036+00:00; sha256:82b125ff6ee2fc02acde66bd7e5debed251334d1db9d88f7831aaae13e267a7f","artifactSha256":"82b125ff6ee2fc02acde66bd7e5debed251334d1db9d88f7831aaae13e267a7f"},{"sourceId":"agentcyberrange-research-introduction","url":"https://whitzard.tech/nuwa/blog/agentcyberrange/","locator":"适用范围","version":"Research introduction captured 2026-10-27T09:55:41.654036+00:00; sha256:82b125ff6ee2fc02acde66bd7e5debed251334d1db9d88f7831aaae13e267a7f","artifactSha256":"82b125ff6ee2fc02acde66bd7e5debed251334d1db9d88f7831aaae13e267a7f"},{"sourceId":"agentcyberrange-research-introduction","url":"https://whitzard.tech/nuwa/blog/agentcyberrange/","locator":"项目与更新","version":"Research introduction captured 2026-10-27T09:55:41.654036+00:00; sha256:82b125ff6ee2fc02acde66bd7e5debed251334d1db9d88f7831aaae13e267a7f","artifactSha256":"82b125ff6ee2fc02acde66bd7e5debed251334d1db9d88f7831aaae13e267a7f"}],"publication":{"state":"published","publishedOn":"2026-10-29","authorizationReference":"user-authorized-global-index-publication-2026-10-29","reviewedCandidateId":"local-6efe31bc4a0c0f37"},"review":{"state":"published-note","sourceScope":"full-text","availableScope":"full-text-research-introduction; primary-site-shell-only","readingCoverage":"full-research-introduction-only; original-protocol-methods-unavailable","completePaperAudit":false,"independentEvidenceReview":"pending-human-review","bilingualEditorialReview":"pending-human-review","authorship":"model-assisted-research-note","preparedFingerprint":"4e52e6dee69a76a2ca089808f1959332cabcb9404c760ffffd6dabe34fcbfad2"}},"sources":[{"id":"agentcyberrange","title":"AgentCyberRange: Evaluate Agent Cyberattack Capabilities in Enterprise-like Cyber Ranges","url":"https://agentcyberrange.io/","version":"Website bundle routes-B-0Mubrq.js / 2026-10-24 capture","publicationDate":null,"datePrecision":"day","type":"benchmark","verifiedOn":"2026-10-24","documentId":"https://agentcyberrange.io"}]}