paper-with-me

홈 › Papers

Automating Privilege Escalation with Deep Reinforcement Learning

2021-10-04 · Kalle Kujanpää, Willie Victor, Alexander Ilin

AI-based defensive solutions are necessary to defend networks and information assets against intelligent automated attacks. Gathering enough realistic data for training machine learning-based defenses is a significant practical challenge. An intelligent red teaming agent capable of performing realistic attacks can alleviate this problem. However, there is little scientific evidence demonstrating the feasibility of fully automated attacks using machine learning. In this work, we exemplify the potential threat of malicious actors using deep reinforcement learning to train automated agents. We present an agent that uses a state-of-the-art reinforcement learning algorithm to perform local privilege escalation. Our results show that the autonomous agent can escalate privileges in a Windows 7 environment using a wide variety of different techniques depending on the environment configuration it encounters. Hence, our agent is usable for generating realistic attack sensor data for training and evaluating intrusion detection systems.

📄 PDF Abstract BibTeX arXiv:2110.01362

Code (0)

등록된 구현이 없습니다.

Tasks

BIG-bench Machine LearningDeep Reinforcement LearningIntrusion DetectionRed Teamingreinforcement-learningReinforcement LearningReinforcement Learning (RL)

Similar Papers 제목 키워드 기반

Towards Reliable Local Security Agents: Verifiable Post-Training for Linux Privilege Escalation

2026-03-18 · Philipp Normann, Andreas Happe, Jürgen Cito, Daniel Arp arxiv

LLM agents are becoming increasingly important in the security domain, but leading systems are often closed-source, cloud-based, hard to reproduce or use with sensitive code. This creates a need for small, local models t…

Reinforcement Learning

Prompt Flow Integrity to Prevent Privilege Escalation in LLM Agents

2025-03-17 · Juhee Kim, Woohyuk Choi, Byoungyoung Lee

Large Language Models (LLMs) are combined with tools to create powerful LLM agents that provide a wide range of services. Unlike traditional software, LLM agent's behavior is determined at runtime by natural language pro…

LLMs as Hackers: Autonomous Linux Privilege Escalation Attacks

2023-10-17 · Andreas Happe, Aaron Kaplan, Juergen Cito

Penetration testing, an essential component of software security testing, allows organizations to identify and remediate vulnerabilities in their systems, thus bolstering their defense mechanisms against cyberattacks. On…

In-Context Learning

Detecting Privilege Escalation in Polyglot Microservices via Agentic Program Analysis

2026-05-15 · Penghui Li, Hong Yau Chong, Yinzhi Cao, Junfeng Yang arxiv

Microservices are widely adopted in modern cloud systems due to their scalability and fault tolerance. However, microservice architectures introduce significant complexity in privilege and permission control, creating ri…

Code Search

AI-Augmented Ethical Hacking: A Practical Examination of Manual Exploitation and Privilege Escalation in Linux Environments

2024-11-26 · Haitham S. Al-Sinani, Chris J. Mitchell

This study explores the application of generative AI (GenAI) within manual exploitation and privilege escalation tasks in Linux-based penetration testing environments, two areas critical to comprehensive cybersecurity as…

Decision Making