Skip to content
InfoResearchPreprintLLM-specific

A Gingerbread House for LLM Agents: Source-Planned Honeypots That Lure Autonomous Attackers into an Isolated Shadow

Published
Record updated
View JSON

Summary

An LLM defender plans a static honeypot from an application's source code, and a router sends confirmed attackers, including those with working exploits, to an isolated shadow copy. On 40 critical CVE-Bench tasks, the static plan reduced real-target compromise from 26/40 to 5/40 for Claude Opus 4.8 and from 20/40 to 0/40 (31 valid runs) for the ARTEX attack framework. In about half of deception-arm runs, ARTEX's exploit still succeeded on the shadow copy, and ARTEX treated a planted fake secret as genuine on 30 of 120 deception-arm tasks.