风险评测 · 评测基准
Cybench: A Framework for Evaluating Cybersecurity Capabilities and Risks of Language Models
NUWA 研究解读 · 独立复核待完成
NUWA Research Note
研究问题研究设计与假设来源发现NUWA 解读局限与相反证据研究联系研究与决策意义机构与角色原始资源模型辅助整理 · 选读原始全文或官方文章中的相关章节;尚未完成逐章节审计。
研究速读
Cybench 区分无指导完成 CTF 与逐步提示后的完成,中间子任务表现又是第三种终点,不能相互替代。
研究问题
语言模型智能体能够完成怎样的多步安全任务?提供中间目标后,哪些步骤仍困难?
研究设计与假设
CTF 任务在容器环境中提供说明、本地或远程材料及验收器,覆盖多类问题和首次解出时间。无指导模式只给总目标;子任务模式逐步提供中间问题,每步有有限尝试预算。基线智能体以行动、执行、更新记忆的循环工作,只保留较短近期历史。
来源发现
不同模型在不同终点领先,来源本身不支持跨三种指标的唯一排序(§5.1)。
公开 MOTP 示例把任务拆成识别相关文件、理解条件和完成挑战;中间答案可展示进展,却不保证独立完成(§§2.2–2.3,表 1)。
脚手架和扩展记忆改变实验条件;附录 I.1 明确提醒,外部较强评测使用了不同迭代上限与脚手架。
NUWA 解读
指导模式同时测量执行既定步骤与自主发现。首次解出时间只是难度代理,不能直接当作 METR 式个人人类用时基线。
局限与相反证据
竞赛题刻意设计为可解,通常较短且代码量小,不代表大型系统中的意外漏洞。不同竞赛计时存在差别;有限记忆、迭代和重复限制了基线。后续子集与 Harness 需要独立版本。
研究联系
论文将 CTF 与网络能力评估联系起来。CyberGym 改为带修复对照的真实项目复现,AgentCyberRange 则改变为有状态的靶场推进,三者未建立共同分母。
研究与决策意义
模型建议:先确定终点,再比较系统,并显示指导方式和尝试规则,不把 CTF 完成率换算为现实攻陷概率。
精确来源位置
- Cybench: A Framework for Evaluating Cybersecurity Capabilities and Risks of Language Models · §2.1 Task SpecificationarXiv:2408.08926v4
- Cybench: A Framework for Evaluating Cybersecurity Capabilities and Risks of Language Models · §2.2 Task Example: MOTP; §2.3 Subtasks; Table 1arXiv:2408.08926v4
- Cybench: A Framework for Evaluating Cybersecurity Capabilities and Risks of Language Models · §2.4 MetricsarXiv:2408.08926v4
- Cybench: A Framework for Evaluating Cybersecurity Capabilities and Risks of Language Models · §3.3 Task Selection; Appendix F First Solve TimearXiv:2408.08926v4
- Cybench: A Framework for Evaluating Cybersecurity Capabilities and Risks of Language Models · §4 LM-based Agent; §5.1 Model Capabilities; Tables 2–3arXiv:2408.08926v4
- Cybench: A Framework for Evaluating Cybersecurity Capabilities and Risks of Language Models · Appendix I.1 Limited agent scaffolding; I.2 Limitation of data sourcesarXiv:2408.08926v4
来源核查、数据提取、编辑批准与实验复现分别记录。 方法说明 →
机构与角色
作者 (27)
Andy K. Zhang · Neil Perry · Riya Dulepet · Joey Ji · Celeste Menders · Justin W. Lin · Eliot Jones · Gashon Hussein · Samantha Liu · Donovan Jasper · Pura Peetathawatchai · Ari Glenn · Vikram Sivashankar · Daniel Zamoshchin · Leo Glikbarg · Derek Askaryar · Mike Yang · Teddy Zhang · Rishi Alluri · Nathan Tran · Rinnara Sangpisit · Polycarpos Yiorkadjis · Kenny Osele · Gautham Raghupathi · Dan Boneh · Daniel E. Ho · Percy Liang
评测协议
引用与复用
引用研究发现时请引用原始出版物;引用 NUWA 的整理与解释时,单独引用本站记录及对应快照。
原始出版物 · BibTeX
@misc{cybench,
title = {Cybench: A Framework for Evaluating Cybersecurity Capabilities and Risks of Language Models},
url = {https://arxiv.org/abs/2408.08926v4},
author = {Andy K. Zhang and Neil Perry and Riya Dulepet and Joey Ji and Celeste Menders and Justin W. Lin and Eliot Jones and Gashon Hussein and Samantha Liu and Donovan Jasper and Pura Peetathawatchai and Ari Glenn and Vikram Sivashankar and Daniel Zamoshchin and Leo Glikbarg and Derek Askaryar and Mike Yang and Teddy Zhang and Rishi Alluri and Nathan Tran and Rinnara Sangpisit and Polycarpos Yiorkadjis and Kenny Osele and Gautham Raghupathi and Dan Boneh and Daniel E. Ho and Percy Liang},
year = {2024},
date = {2024-08-15},
version = {arXiv:2408.08926v4},
note = {arXiv:2408.08926v4}
}
NUWA 记录 · BibTeX
@misc{cybench-nuwa,
title = {Cybench: A Framework for Evaluating Cybersecurity Capabilities and Risks of Language Models — NUWA research record},
url = {https://whitzard.tech/nuwa/whitzard-index/work/cybench/},
version = {2026-10-29.1},
organization = {NUWA Frontier AI Safety Lab},
howpublished = {Retained note edition: https://whitzard.tech/nuwa/whitzard-index/data/record-editions/2026-10-29.1--cybench.json},
note = {NUWA research note. Source-reading scope and independent review status are stated on the record. Snapshot 2026-10-29.1. Retained note edition: https://whitzard.tech/nuwa/whitzard-index/data/record-editions/2026-10-29.1--cybench.json.}
}
证据快照 2026-10-29.1 · 索引更新 · RSS
参考文献
- [1] Cybench: official task implementation ; README: Example Unguided Mode Run / Example Subtask Mode Run
- [2] Andy K. Zhang, Neil Perry 等. Cybench: A Framework for Evaluating Cybersecurity Capabilities and Risks of Language Models. 2025-04-12. v4 [arXiv]; Task protocol; unguided and subtask-guided evaluation; Author affiliations on the original paper title page; §2.1 Task Specification