{"schemaVersion":"nuwa-current-record-1","version":"2026-10-29.1","publication":"published","work":{"id":"llm-honeypot","title":"LLM Honeypot: an early warning system for autonomous hacking","aliases":[],"authors":[],"primaryFunction":"evaluation","secondaryFunctions":[],"kind":"method","sourceId":"llm-honeypot-publication","attributionSourceId":"llm-honeypot-publication","originalUrl":"https://palisaderesearch.org/research/llm-honeypot","publicationDate":"2024-10-17","updatedOn":"2026-10-25","areas":["cybersecurity"],"scopeNote":{"en":"Relevance is assigned to the research question and stated conditions of the work. A topic tag is not a risk rating.","zh":"风险关联依据研究问题及明确条件建立，主题标签不代表风险评级。"},"protocolIds":[],"contributions":[{"organizationId":"palisade","role":"publisher","sourceId":"llm-honeypot-publication","locator":"Official publication masthead and article byline"}],"summary":{"en":"Uses a deployed honeypot to investigate signals that may distinguish autonomous AI hacking attempts from other traffic.","zh":"利用部署的蜜罐，研究可能区分 AI 自主攻击尝试与其他流量的信号。"},"note":{"question":null,"method":null,"finding":null,"supports":null,"limits":null,"connections":null},"resources":[],"noteStatus":{"question":"limited","method":"limited","finding":"limited","supports":"limited","limits":"limited","connections":"limited"},"noteAvailability":{"en":"A substantive NUWA research note is not yet available. The repeated draft sections were removed pending review of the original methods, findings and limitations; use the original publication for the research account.","zh":"实质性的 NUWA 研究笔记尚未完成。重复草稿章节已移除，待核查原始方法、发现与限制；研究内容请以原始出版物为准。"},"noteSourceLocator":"No complete section-level method/results/limitations review completed for this note; cached original page and any chart audit retained as discovery evidence.","tags":["risk-monitoring"]},"reading":{"id":"llm-honeypot","title":"LLM Honeypot: an early warning system for autonomous hacking","en":{"question":"Can external telemetry identify potential autonomous AI hacking activity?","design":"The paper augments a honeypot with behavioral challenge and timing analysis, distinguishing traditional bots, humans and possible LLM agents.","findings":["The paper reports 8,130,731 attempts and eight potential AI agents over about three months.","“Potential” denotes uncertain attribution; it is not eight confirmed autonomous attacks or eight unique models."],"interpretation":"NUWA interpretation: detection telemetry is an early-warning signal with attribution uncertainty.","limits":"Behavioral/timing signatures can create false positives and miss agents; the cached project page’s interaction total belongs to a different capture.","decisionRelevance":"Model recommendation: cite the paper’s trial window and attribution confidence; do not merge its denominator with live/dashboard totals.","takeaway":"NUWA interpretation: detection telemetry is an early-warning signal with attribution uncertainty.","connections":[],"scoring":null,"conditions":null,"statistics":"The paper reports 8,130,731 attempts and eight potential AI agents over about three months.","usage":"Model recommendation: cite the paper’s trial window and attribution confidence; do not merge its denominator with live/dashboard totals."},"zh":{"question":"外部遥测能否识别潜在自主AI攻击活动？","design":"论文用行为挑战和时间分析增强蜜罐，区分传统机器人、人类及可能的模型智能体。","findings":["论文约三个月试验含8,130,731次尝试、八个潜在AI智能体。","潜在表示归因不确定，不是八次确认自主攻击或八个独立模型。"],"interpretation":"NUWA 解读：检测遥测是带归因不确定的早期信号。","limits":"行为时间特征可能误报漏报，项目缓存页交互总量属于不同捕获。","decisionRelevance":"模型建议：引用论文窗口及归因信心，不与仪表盘总量合并。","takeaway":"NUWA 解读：检测遥测是带归因不确定的早期信号。","connections":[],"scoring":null,"conditions":null,"statistics":"论文约三个月试验含8,130,731次尝试、八个潜在AI智能体。","usage":"模型建议：引用论文窗口及归因信心，不与仪表盘总量合并。"},"assertionPolicy":{"question":"source-research-question","design":"source-finding","findings":"source-finding","interpretation":"nuwa-interpretation","limits":"source-limit-or-explicit-editorial-scope-limit","connections":"source-supported-relationship-only","decisionRelevance":"model-recommendation-not-source-conclusion"},"sourceRefs":[{"sourceId":"llm-honeypot-publication","url":"https://arxiv.org/html/2410.13919","locator":"Abstract","version":"Selected original resource https://arxiv.org/html/2410.13919; sha256:4d3184e2d4bbab875258be3be1b70c421fc6e31572a348644eb94358669ab3bc; archived source capture; exact capture time not independently established","artifactSha256":"4d3184e2d4bbab875258be3be1b70c421fc6e31572a348644eb94358669ab3bc"},{"sourceId":"llm-honeypot-publication","url":"https://arxiv.org/html/2410.13919","locator":"§3.2 Detection Methodology","version":"Selected original resource https://arxiv.org/html/2410.13919; sha256:4d3184e2d4bbab875258be3be1b70c421fc6e31572a348644eb94358669ab3bc; archived source capture; exact capture time not independently established","artifactSha256":"4d3184e2d4bbab875258be3be1b70c421fc6e31572a348644eb94358669ab3bc"},{"sourceId":"llm-honeypot-publication","url":"https://arxiv.org/html/2410.13919","locator":"§3.1 Internal Evaluations","version":"Selected original resource https://arxiv.org/html/2410.13919; sha256:4d3184e2d4bbab875258be3be1b70c421fc6e31572a348644eb94358669ab3bc; archived source capture; exact capture time not independently established","artifactSha256":"4d3184e2d4bbab875258be3be1b70c421fc6e31572a348644eb94358669ab3bc"},{"sourceId":"llm-honeypot-publication","url":"https://arxiv.org/html/2410.13919","locator":"§5 Limitations","version":"Selected original resource https://arxiv.org/html/2410.13919; sha256:4d3184e2d4bbab875258be3be1b70c421fc6e31572a348644eb94358669ab3bc; archived source capture; exact capture time not independently established","artifactSha256":"4d3184e2d4bbab875258be3be1b70c421fc6e31572a348644eb94358669ab3bc"}],"publication":{"state":"published","publishedOn":"2026-10-29","authorizationReference":"user-authorized-global-index-publication-2026-10-29","reviewedCandidateId":"local-6efe31bc4a0c0f37"},"review":{"state":"published-note","sourceScope":"full-text","availableScope":null,"readingCoverage":"selected-source-sections; not a complete section-by-section paper audit","completePaperAudit":false,"independentEvidenceReview":"pending-human-review","bilingualEditorialReview":"pending-human-review","authorship":"model-assisted-research-note","preparedFingerprint":"9311faf4da074cd211d753aa656e08bea3549b8186342eb9f1e2c4aa1cfa50bd"}},"sources":[{"id":"llm-honeypot-publication","title":"LLM Honeypot: an early warning system for autonomous hacking","url":"https://palisaderesearch.org/research/llm-honeypot","version":"Source capture 2026-10-25","publicationDate":"2024-10-17","datePrecision":"day","type":"research-publication","verifiedOn":"2026-10-25","documentId":"https://palisaderesearch.org/research/llm-honeypot"}]}