STRIATUM-CTF：基于 MCP 协议驱动的自主 CTF 解题智能体框架

View PDF HTML (experimental)

Abstract:Autonomous cyber operations increasingly depend on agents that can chain reconnaissance, exploitation, and analysis across many tools while maintaining state over long task horizons. Large Language Models (LLMs) are promising orchestrators for this workflow, but naive agents that pipe model output directly into a shell are brittle: they emit malformed commands, hallucinate non-existent command-line options or packages, and lose track of earlier findings as the context window fills. We present STRIATUM-CTF, a modular agentic framework for Capture-the-Flag (CTF) solving that mediates between LLM reasoning and tool execution using the Model Context Protocol (MCP). Offensive-security tools are exposed as strictly typed, schema-validated functions; the protocol layer rejects out-of-schema tool calls before execution and returns structured observations that the agent uses to self-correct. We evaluate the system in two ways. In a controlled study of 180 runs across 15 CTF challenges under four levels of attached procedural documentation, the system succeeds on 77.8-86.7% of attempts; notably, a schema-only configuration with no procedural documentation already reaches 77.8%, and no condition differs significantly from another. In a single live, multi-team CTF at Florida State University, the system placed first against a field of more than 30 registered teams -- a single, non-replicated event decided by a 10-point margin over the runner-up, and therefore a demonstration of feasibility rather than of superiority over human experts. Because all four ablation conditions share the same tool layer, our controlled study isolates documentation volume rather than the protocol layer itself; we accordingly present schema-mediated grounding as a design principle with qualitative support rather than as a measured effect.

Comments:	7 pages, 2 figures, 3 tables. Accepted to the 2026 IEEE Cyber Awareness and Research Symposium (CARS 2026), Best Paper Award 1st Place. Code and data: this https URL
Subjects:	Cryptography and Security (cs.CR); Artificial Intelligence (cs.AI); Multiagent Systems (cs.MA)
ACM classes:	I.2.1
Cite as:	arXiv:2603.22577 [cs.CR]
	(or arXiv:2603.22577v2 [cs.CR] for this version)
	https://doi.org/10.48550/arXiv.2603.22577 arXiv-issued DOI via DataCite

Submission history

From: James Hugglestone IIi [view email]
[v1] Mon, 23 Mar 2026 21:17:26 UTC (255 KB)
[v2] Thu, 29 Oct 2026 18:13:48 UTC (151 KB)