InferD: A Honeypot Framework for AI Inference Infrastructure

According to the abstract, Hicham Hammouchi and Gabriele Lenzini present InferD, a honeypot that imitates exposed AI services such as model-serving stacks, inference APIs and agent gateways using static responses, never running submitted input. They say such services are indexed by scanners within hours of deployment.

Why it matters

The same thing, for different readers.

What it means for you

Hicham Hammouchi and Gabriele Lenzini describe a decoy system to watch how attackers go after AI services left open on the internet.

For researchers

The authors design a low-interaction honeypot with four deception planes and a provenance plane linking planted credentials, to measure a threat surface they say is little measured.

How the finding was reached

In our words, from the source. Weigh the finding by how it was made.

What was done
A framework design: static response pools emulating transport, service protocol, vulnerability surface and agentic session of AI infrastructure, with a provenance plane tracking planted credentials.
What it found
The excerpt describes the design only; any deployment measurements were cut off and are not summarised here.
What it does not show
No results visible in the excerpt.
Status
A preprint: not yet peer reviewed

The record

Questions
How is AI used in attacks, defence and war?
People
Hicham Hammouchi (Wrote it) · Gabriele Lenzini (Wrote it)
What we read
We have read only the description the publisher gives. No quotations until someone reads the source itself.
Found by
The Radar, run of October 30, 2026, via arxiv-ai-safety-query (tier 1: the source’s own channel or an official record)
Cite this
arXiv, “InferD: A Honeypot Framework for AI Inference Infrastructure”, October 29, 2026. Entry in the Ctrl AI Base, https://ctrlai.com/base/arxiv-2026-10-29-inferd-honeypot-ai-infrastructure
Our notesLight lane: written from the triage excerpt only (truncated); nothing fetched, no quotations.