Utilizing Fine-Tuning of Large Language Models for Generating Synthetic Payloads: Enhancing Web Application Cybersecurity through Innovative Penetration Testing Techniques
Source abstract
Abstract
With the increasing use of web applications, challenges in the field of cybersecurity are becoming more complex. This paper explores the application of fine-tuned large language models (LLMs) for the automatic generation of s... | Find, read and cite all the research you need on Tech Science Press
Source: openalex_inverted_index · Quality: baseline
Research context
OpenAlex topics: Software System Performance and Reliability · Web Application Security Vulnerabilities · Software Testing and Debugging Techniques
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
References (32)
Show source-provided references
1. Distributed attack deployment capability for modern automated penetration testing10.3390/computers11030033 ↗
2. A survey on web application penetration testing10.3390/electronics12051229 ↗
3. Kaur · Artificial intelligence and Society 5.0 · 2023 Dec · 196
4. An automated approach to web offensive security10.1016/j.comcom.2022.08.018 ↗
5. Benchmarking large language models for log analysis, security, and interpretation10.1007/s10922-024-09831-x ↗
6. Fine-tuning ChatGPT for automatic scoring
7. Getting pwn’d by AI: penetration testing with large language models
8. Automated versus manual approach of web application penetration testing
9. Fine-tuning aligned language models compromises safety, even when users do not intend to!
10. Web vulnerability through cross site scripting (XSS) detection with OWASP security shepherd
11. SQL injection attack: quick view
12. Command injection
13. Vulnerability assessment for applications security through penetration simulation and testing
14. A survey on large language model (LLM) security and privacy: the good, the bad, and the ugly
15. Deng G, Liu Y, Mayoral-Vilches V, Liu P, Li Y, Xu Y, et al. PentestGPT: an LLM-empowered automatic penetration testing tool. arXiv:2308.06782. 2024 Aug.
16. Fine-tuning and prompt engineering for large language models-based code review automation
17. Evolving trends in web application vulnerabilities: a comparative study of OWASP Top 10 2017 and OWASP Top 10 2021
18. Evolution and prospects of foundation models: from large language models to large multimodal models
19. Efficiency-driven custom chatbot development: unleashing langchain, RAG, and performance-optimized LLM fusion
20. Evaluating large language models for software testing
21. Repeatability of fine-tuning large language models illustrated using QLoRA10.1109/ACCESS.2024.3470850 ↗
22. GAIL-PT: an Intelligent penetration testing framework with generative adversarial imitation learning10.1016/j.cose.2022.103055 ↗
23. Decoding ChatGPT: a taxonomy of existing research, current challenges, and possible future directions10.1016/j.jksuci.2023.101675 ↗
24. The future of GPT: a taxonomy of existing ChatGPT research, current challenges, and possible future directions10.2139/ssrn.4413921 ↗
25. Guo Q, Cao J, Xie X, Liu S, Li X, Chen B, et al. Exploring the potential of ChatGPT in automated code refinement: an empirical study. 2023. doi:10.48550/arXiv.2309.08221.10.1145/3597503.3623306 ↗
26. Dataset
27. Fine-tuning cyber security defenses: evaluating supervised machine learning classifiers for windows malware detection
28. Watson D. Damn vulnerable web application (DVWA) [Online]. [cited 2024 Nov 19]. Available from: https://github.com/digininja/DVWA.
29. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation)
30. Organisation for Economic Co-operation. OECD principles on artificial intelligence; 2019 May [Cited 2025 Jan 02]. Available from: https://legalinstruments.oecd.org/en/instruments/OECD-LEGAL-0449.
31. Ethically aligned design: a vision for prioritizing human well-being with autonomous and intelligent systems, first edition
32. NIST. Framework for improving critical infrastructure cybersecurity, Version 1.1 [Online]. U.S. Department of Commerce; 2018. [Cited 2025 Jan 02]. Available from: https://www.nist.gov/cyberframework.