i-EXAM: Instructable and Explainable Attack Connectivity Graph Modeler

• URL: http://arxiv.org/abs/2607.05888v1
• Date: Tue, 07 Jul 2026 06:32:56 GMT
• Title: i-EXAM: Instructable and Explainable Attack Connectivity Graph Modeler
• Abstract summary: i-EXAM is a planning-powered tool that helps system administrators to create security profiles of complex networks.<n>It performs what-if analyses to identify network hardening strategies.
• Score: 18.365112862271634
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: i-EXAM is a planning-powered tool that helps system administrators to create security profiles of complex networks and perform what-if analyses to identify network hardening strategies. It leverages planning compilation that provides soundness and completeness guarantees to identify attack paths, evaluate security metrics, generate diverse hardening strategies, and explain these strategies in natural language using Large Language Models.

Related papers

• Experience-Guided Adaptation of Inference-Time Reasoning Strategies [49.954515048847874]
  Experience-Guided Reasoner (EGuR) generates tailored strategies at inference time based on accumulated experience.<n>EGuR achieves up to 14% accuracy improvements over the strongest baselines while reducing computational costs by up to 111x.
  arXiv  Detail & Related papers  (2025-11-14T17:45:28Z)
• Structuring Security: A Survey of Cybersecurity Ontologies, Semantic Log Processing, and LLMs Application [1.4453491813936405]
  Survey investigates how semantic log processing, and Large Language Models (LLMs) enhance cybersecurity.<n>LLMs enrich this process by providing contextual understanding and extracting insights from unstructured content.
  arXiv  Detail & Related papers  (2025-10-18T18:21:33Z)
• Reinforced Strategy Optimization for Conversational Recommender Systems via Network-of-Experts [63.412646471177645]
  We propose a novel Reinforced Strategy Optimization (RSO) method for Conversational Recommender Systems (CRSs)<n>RSO decomposes the process of generating strategy-driven response decisions into the macro-level strategy planning and micro-level strategy adaptation.<n>Experiments show that RSO significantly improves interaction performance compared to state-of-the-art baselines.
  arXiv  Detail & Related papers  (2025-09-30T11:12:01Z)
• Plan before Solving: Problem-Aware Strategy Routing for Mathematical Reasoning with LLMs [49.995906301946]
  Existing methods usually leverage a fixed strategy to guide Large Language Models (LLMs) to perform mathematical reasoning.<n>Our analysis reveals that the single strategy cannot adapt to problem-specific requirements and thus overlooks the trade-off between effectiveness and efficiency.<n>We propose Planning and Routing through Instance-Specific Modeling (PRISM), a novel framework that decouples mathematical reasoning into two stages: strategy planning and targeted execution.
  arXiv  Detail & Related papers  (2025-09-29T07:22:41Z)
• Architecting Resilient LLM Agents: A Guide to Secure Plan-then-Execute Implementations [0.8078139482203387]
  This paper provides a guide to the Plan-then-Execute'' (P-t-E) pattern, an agentic design that separates strategic planning from tactical execution.<n>A central focus is placed on the security implications of this design, particularly its inherent resilience to indirect prompt injection attacks.<n>To make these principles actionable, this guide provides detailed implementation blueprints and working code references for three leading agentic frameworks.
  arXiv  Detail & Related papers  (2025-09-10T14:41:07Z)
• A Survey on Model Extraction Attacks and Defenses for Large Language Models [55.60375624503877]
  Model extraction attacks pose significant security threats to deployed language models.<n>This survey provides a comprehensive taxonomy of extraction attacks and defenses, categorizing attacks into functionality extraction, training data extraction, and prompt-targeted attacks.<n>We examine defense mechanisms organized into model protection, data privacy protection, and prompt-targeted strategies, evaluating their effectiveness across different deployment scenarios.
  arXiv  Detail & Related papers  (2025-06-26T22:02:01Z)
• SPEAR: Security Posture Evaluation using AI Planner-Reasoning on Attack-Connectivity Hypergraphs [15.590901699441645]
  SPEAR is a formal framework with tool support for security posture evaluation and analysis.<n>It uses the causal formalism of AI planning to model vulnerabilities and configurations in a networked system.<n>It identifies a set of diverse security hardening strategies that can be presented in a manner understandable to the domain expert.
  arXiv  Detail & Related papers  (2025-06-02T00:38:47Z)
• Exploring Answer Set Programming for Provenance Graph-Based Cyber Threat Detection: A Novel Approach [4.302577059401172]
  Provenance graphs are useful tools for representing system-level activities in cybersecurity.<n>This paper presents a novel approach using ASP to model and analyze provenance graphs.
  arXiv  Detail & Related papers  (2025-01-24T14:57:27Z)
• Learning diverse attacks on large language models for robust red-teaming and safety tuning [126.32539952157083]
  Red-teaming, or identifying prompts that elicit harmful responses, is a critical step in ensuring the safe deployment of large language models.<n>We show that even with explicit regularization to favor novelty and diversity, existing approaches suffer from mode collapse or fail to generate effective attacks.<n>We propose to use GFlowNet fine-tuning, followed by a secondary smoothing phase, to train the attacker model to generate diverse and effective attack prompts.
  arXiv  Detail & Related papers  (2024-05-28T19:16:17Z)
• AttacKG+:Boosting Attack Knowledge Graph Construction with Large Language Models [17.89951919370619]
  Large Language Models (LLMs) have achieved enormous success in a broad range of tasks. Our framework consists of four consecutive modules: rewriter, identifier, and summarizer. We represent a cyber attack as a temporally unfolding event, each temporal step of which encapsulates three layers of representation.
  arXiv  Detail & Related papers  (2024-05-08T01:41:25Z)
• LAS-AT: Adversarial Training with Learnable Attack Strategy [82.88724890186094]
  "Learnable attack strategy", dubbed LAS-AT, learns to automatically produce attack strategies to improve the model robustness. Our framework is composed of a target network that uses AEs for training to improve robustness and a strategy network that produces attack strategies to control the AE generation.
  arXiv  Detail & Related papers  (2022-03-13T10:21:26Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.