Say Shibboleth: Fingerprinting the LLMs and Harnesses Behind Agentic Attacks
We study the fingerprinting of agentic cyberattacks. Our objective is to reliably infer information about the attacker's configuration, such as LLM version and harness, from telemetry. To achieve this, we introduce a technique we call shibboleth traps: modular honeypot services designed to elicit discriminative behaviors from agentic attackers. The traps make informative interactions a condition…
We haven't written up this one. arXiv cs.AI has the full story — the link below goes straight to it.
