{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,21]],"date-time":"2026-08-21T05:26:08Z","timestamp":1787289968469,"version":"build-2736575974"},"reference-count":38,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1109\/compsac69091.2026.00095","type":"proceedings-article","created":{"date-parts":[[2026,8,20]],"date-time":"2026-08-20T19:05:46Z","timestamp":1787252746000},"page":"1-10","source":"Crossref","is-referenced-by-count":0,"title":["PentestLLM: A Cyber Kill Chain-driven Multi-Agent Large Language Model Framework Enabling Automatic Penetration Testing"],"prefix":"10.1109","author":[{"given":"Fei","family":"Du","sequence":"first","affiliation":[{"name":"University of Liverpool","place":["Liverpool, UK"],"department":["Department of Computer Science"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hiroyuki","family":"Sato","sequence":"additional","affiliation":[{"name":"National Institute of Informatics","place":["Tokyo, Japan"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhenzhen","family":"Jiang","sequence":"additional","affiliation":[{"name":"School of Advanced Technology, Xi'an Jiaotong-Liverpool University","place":["Suzhou, Jiangsu, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lekun","family":"Liu","sequence":"additional","affiliation":[{"name":"School of Advanced Technology, Xi'an Jiaotong-Liverpool University","place":["Suzhou, Jiangsu, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yang","family":"Hong","sequence":"additional","affiliation":[{"name":"School of Advanced Technology, Xi'an Jiaotong-Liverpool University","place":["Suzhou, Jiangsu, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yan","family":"Bai","sequence":"additional","affiliation":[{"name":"School of Engineering and Technology, University of Washington","place":["Tacoma, WA, USA"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wenjun","family":"Fan","sequence":"additional","affiliation":[{"name":"School of Engineering and Technology, University of Washington","place":["Tacoma, WA, USA"]}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2005.23"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1365\/s43439-023-00100-2"},{"key":"ref3","article-title":"Penetration tests a turning point in security practices? organizational challenges and implications in a software development \\{Team\\}","volume-title":"Twelfth Symposium on Usable Privacy and Security (SOUPS 2016)","author":"Turpe","year":"2016"},{"issue":"4","key":"ref4","first-page":"865","article-title":"Cyber kill chain-based taxonomy of advanced persistent threat actors: Analogy of tactics, techniques, and procedures","volume":"15","author":"Bahrami","year":"2019","journal-title":"Journal of information processing systems"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/ISSE54508.2022.10005490"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1080\/17517575.2022.2130014"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.34190\/eccws.23.1.2493"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2019.2942930"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3655693.3655701"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-024-00848-6"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2007.159"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1016\/c2023-0-50116-8"},{"key":"ref13","article-title":"chatgpt","year":"2022","journal-title":"openai"},{"key":"ref14","article-title":"How does gpt obtain its ability? tracing emergent abilities of language models to their sources","author":"Fu","year":"2022","journal-title":"Yao Fu\u2019s Notion"},{"key":"ref15","first-page":"1877","article-title":"Language models are few-shot learners","volume":"33","author":"Brown","year":"2020","journal-title":"Advances in neural information processing systems"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ICNGN63705.2024.10871716"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833571"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179420"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3623175"},{"key":"ref20","doi-asserted-by":"crossref","DOI":"10.14722\/ndss.2024.24401","article-title":"Degpt: Optimizing decompiler output with 1lm","volume-title":"Proceedings 2024 Network and Distributed System Security Symposium (2024)","volume":"267622140","author":"Hu","year":"2024"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2024.24556"},{"key":"ref22","article-title":"An empirical evaluation of 11ms for solving offensive security challenges","author":"Shao","year":"2024","journal-title":"arXiv preprint"},{"key":"ref23","article-title":"Llm agents can autonomously hack websites","author":"Fang","year":"2024","journal-title":"arXiv preprint"},{"key":"ref24","article-title":"Llm agents can autonomously exploit one-day vulnerabilities","author":"Fang","year":"2024","journal-title":"arXiv preprint"},{"key":"ref25","article-title":"Teams of llm agents can exploit zero-day vulnerabilities","author":"Fang","year":"2024","journal-title":"arXiv preprint"},{"key":"ref26","first-page":"847","article-title":"PentestGPT: Evaluating and harnessing large language models for automated penetration testing","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Deng","year":"2024"},{"key":"ref27","article-title":"Autonomous penetration testing using reinforcement learning","author":"Schwartz","year":"2019","journal-title":"arXiv preprint"},{"key":"ref28","article-title":"Breachseek: A multi-agent automated penetration tester","author":"Alshehri","year":"2024","journal-title":"arXiv preprint"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/CSR61664.2024.10679480"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/CARS67163.2025.11337515"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2025.104305"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3708821.3733882"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-025-10758-3"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom63139.2024.00213"},{"key":"ref35","article-title":"Penhealnet: An agent-based 11m framework for automated pentesting and optimal remediation","author":"Huang","year":"2024","journal-title":"Available at SSRN 4941478"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3637528.3671837"},{"key":"ref37","article-title":"Llmsmartaudit: Advanced smart contract vulnerability detection","author":"Wei","year":"2024","journal-title":"arXiv preprint"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.52202\/079017-1832"}],"event":{"name":"2026 IEEE 50th Annual Computers, Software, and Applications Conference (COMPSAC)","location":"Madrid, Spain","start":{"date-parts":[[2026,7,7]]},"end":{"date-parts":[[2026,7,10]]}},"container-title":["2026 IEEE 50th Annual Computers, Software, and Applications Conference (COMPSAC)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11645011\/11645104\/11645571.pdf?arnumber=11645571","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,21]],"date-time":"2026-08-21T05:06:35Z","timestamp":1787288795000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11645571\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":38,"URL":"https:\/\/doi.org\/10.1109\/compsac69091.2026.00095","relation":{},"subject":[],"published":{"date-parts":[[2026,7]]}}}