UNIVERSITY OF OSLO · NORWAY
Assessing the Reliability of PenTestGPT: A Comparative Case Study Between LLMs in AI-Driven Web Application Testing
PhD · Taught in en
At a glance
60 mo
Duration
—
IELTS
—
Tuition / yr
en
Language
PhD
Level
- 60Study Credits
- Comparative studyAI vs. Human Penetration Testing
- Focus on Web Applications & APIsSpecialisation Area
- Evaluation of LLM reliabilityResearch Objective
This PhD project focuses on evaluating the reliability and effectiveness of PenTestGPT, an AI tool for web application penetration testing. The research will compare its performance against traditional human penetration testers and other AI models. The goal is to understand the capabilities and limitations of Large Language Models (LLMs) in identifying web application vulnerabilities, suggesting fixes, and detecting threats. The study will involve a case study where both human testers and AI systems, including PenTestGPT, test a set of web applications. Key metrics will include the rate of vulnerability detection, accuracy of findings (minimizing false positives and negatives), and the quality of recommended solutions. The research will also identify challenges LLMs face, such as handling complex attacks or situations requiring human intuition. The methodology includes setting up vulnerable environments (e.g., specific web applications or capture-the-flag platforms) for testing. PenTestGPT will be used with various AI models for tasks like reconnaissance, scanning, and reporting. Human penetration testers will simultaneously assess the same environments using standard tools like Burp Suite and OWASP ZAP.
Curriculum
This is a PhD research project. The curriculum will be determined by the research undertaken, focusing on web application penetration testing and AI model comparison. The project is worth 60 ECTS credits.
- Year 1-3
Careers
This PhD project aims to advance the field of AI-driven cybersecurity, preparing graduates for leading roles in research and development within the cybersecurity industry. Graduates will be equipped to tackle complex challenges in web application security.
- AI Security Researcher
- Penetration Testing Specialist
- Cybersecurity Analyst
- AI Ethics and Security Consultant
Frequently asked questions
- What are the entry requirements for this PhD program?
- A relevant Master's degree is required for admission to this PhD program. Specific admission requirements can vary, so it is recommended to consult the official admission pages for detailed information.
- Are there any tuition fees for this program?
- Students from outside the EU/EEA and Switzerland are generally required to pay tuition fees unless they qualify for an exemption. The University of Oslo does not offer scholarships to cover these tuition fees.
- What is the estimated cost of living for a student at the University of Oslo?
- The estimated cost of living is NOK 166,859 per academic year for 2025/2026.
- What are the career prospects after completing this PhD?
- Graduates can pursue roles such as AI Security Researcher, Penetration Testing Specialist, Cybersecurity Analyst, or AI Ethics and Security Consultant, preparing them for leading roles in cybersecurity research and development.
- How do I apply for this PhD program?
- The application process for PhD projects typically involves contacting a potential supervisor and submitting a research proposal. International applicants should consult the University of Oslo's admission guidelines for specific procedures and deadlines.
- What is the duration of this PhD program?
- This is a PhD research project, and the curriculum is determined by the research undertaken. The project is worth 60 ECTS credits and generally spans 3 years.
Entry requirements
Master's DegreeA relevant Master's degree is required for admission to the PhD program.
Specific admission requirements may vary. Please refer to the official admission pages for detailed information.
Fees
Tuition (international)Not specified for this program, but generally applies to non-EU/EEA students at UiO.
Tuition (home)Not specified for this program, but generally applies to EU/EEA students at UiO.
LivingNOK 166,859 per academic year (estimated for 2025/2026).
Students from outside the EU/EEA and Switzerland are required to pay tuition fees unless they qualify for an exemption. The University of Oslo does not offer scholarships to cover tuition fees.
How to apply
1. Identify a Research Area and SupervisorResearch potential PhD projects and identify supervisors whose research interests align with yours. The project listed is for 2025 intake.
2. Prepare Application DocumentsGather necessary documents, which usually include academic transcripts, a CV, a motivation letter, a research proposal, and references.
3. Submit ApplicationApplications are typically submitted through the university's online portal. Pay close attention to deadlines.
4. Application Review and InterviewThe university and supervisor will review your application. Shortlisted candidates may be invited for an interview.
5. Admission and OfferSuccessful applicants will receive an official offer of admission.
Scholarships
No University Scholarships for TuitionN/A
Accreditation
N/A
Frequently asked questions
What are the entry requirements for this PhD program?
+
A relevant Master's degree is required for admission to this PhD program. Specific admission requirements can vary, so it is recommended to consult the official admission pages for detailed information.
Are there any tuition fees for this program?
+
Students from outside the EU/EEA and Switzerland are generally required to pay tuition fees unless they qualify for an exemption. The University of Oslo does not offer scholarships to cover these tuition fees.
What is the estimated cost of living for a student at the University of Oslo?
+
The estimated cost of living is NOK 166,859 per academic year for 2025/2026.
What are the career prospects after completing this PhD?
+
Graduates can pursue roles such as AI Security Researcher, Penetration Testing Specialist, Cybersecurity Analyst, or AI Ethics and Security Consultant, preparing them for leading roles in cybersecurity research and development.
How do I apply for this PhD program?
+
The application process for PhD projects typically involves contacting a potential supervisor and submitting a research proposal. International applicants should consult the University of Oslo's admission guidelines for specific procedures and deadlines.
What is the duration of this PhD program?
+
This is a PhD research project, and the curriculum is determined by the research undertaken. The project is worth 60 ECTS credits and generally spans 3 years.