James Kettle on inventing new attack techniques with LLMs
About this episode
James Kettle discusses the use of LLMs to develop new attack techniques in cybersecurity.
In this podcast episode, James Wilson chats with PortSwigger’s Director of Research James Kettle about using an LLM to develop genuinely new attack techniques. Kettle has built what he calls the HTTP Terminator, an autonomous research system that generates and tests tens of thousands of potentially new HTTP desync techniques. The Terminator, which makes use of Kettle’s own research methodology, has already come up with new desync methods that James hadn’t thought of before. Kettle and Wilson discuss how to develop and evaluate machine-generated ideas without drowning in false positives, and why the most powerful part of the process is the discovery cascade, where one unexpected result becomes the seed for another. The upshot is AI can conduct genuinely novel security research, but don’t expect to one-shot your way to an army of robot hackers.
People in this episode
Host: James Wilson
Guest: James Kettle
Topics covered
- LLMs
- security research
- attack techniques
- HTTP desync
- AI in cybersecurity
Keywords
- LLM
- HTTP Terminator
- attack techniques
- security research
- AI
- desync methods
- machine-generated ideas
Mentioned in this episode
Organizations: PortSwigger
More episodes of Risky Business Features
- Who gets to hack the hackers?
- How Brian Krebs doxxed TeamPCP
- How private LLM inference actually works
- Benchmarks, borders and the true cost of AI regulation
Explore listener stats, chart rankings, contacts and more on the Risky Business Features podcast page.