Weaponizing Language Models for Cybersecurity Offensive Operations: Automating Vulnerability Assessment Report Validation; A Review Paper

Fuente: arXiv
Guardado en:
Detalles Bibliográficos
Autores principales: Almuhaidib, Abdulrahman S, Zain, Azlan Mohd, Zakaria, Zalmiyah, Kamsani, Izyan Izzati, Almuhaidib, Abdulaziz S
Formato: Preprint
Publicado: 2025
Materias:
Acceso en línea:
Etiquetas: Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
_version_ 1866912931105472512
author Almuhaidib, Abdulrahman S
Zain, Azlan Mohd
Zakaria, Zalmiyah
Kamsani, Izyan Izzati
Almuhaidib, Abdulaziz S
author_facet Almuhaidib, Abdulrahman S
Zain, Azlan Mohd
Zakaria, Zalmiyah
Kamsani, Izyan Izzati
Almuhaidib, Abdulaziz S
contents This, with the ever-increasing sophistication of cyberwar, calls for novel solutions. In this regard, Large Language Models (LLMs) have emerged as a highly promising tool for defensive and offensive cybersecurity-related strategies. While existing literature has focused much on the defensive use of LLMs, when it comes to their offensive utilization, very little has been reported-namely, concerning Vulnerability Assessment (VA) report validation. Consequentially, this paper tries to fill that gap by investigating the capabilities of LLMs in automating and improving the validation process of the report of the VA. From the critical review of the related literature, this paper hereby proposes a new approach to using the LLMs in the automation of the analysis and within the validation process of the report of the VA that could potentially reduce the number of false positives and generally enhance efficiency. These results are promising for LLM automatization for improving validation on reports coming from VA in order to improve accuracy while reducing human effort and security postures. The contribution of this paper provides further evidence about the offensive and defensive LLM capabilities and therefor helps in devising more appropriate cybersecurity strategies and tools accordingly.
format Preprint
id arxiv_https___arxiv_org_abs_2505_04265
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Weaponizing Language Models for Cybersecurity Offensive Operations: Automating Vulnerability Assessment Report Validation; A Review Paper
Almuhaidib, Abdulrahman S
Zain, Azlan Mohd
Zakaria, Zalmiyah
Kamsani, Izyan Izzati
Almuhaidib, Abdulaziz S
Cryptography and Security
Artificial Intelligence
This, with the ever-increasing sophistication of cyberwar, calls for novel solutions. In this regard, Large Language Models (LLMs) have emerged as a highly promising tool for defensive and offensive cybersecurity-related strategies. While existing literature has focused much on the defensive use of LLMs, when it comes to their offensive utilization, very little has been reported-namely, concerning Vulnerability Assessment (VA) report validation. Consequentially, this paper tries to fill that gap by investigating the capabilities of LLMs in automating and improving the validation process of the report of the VA. From the critical review of the related literature, this paper hereby proposes a new approach to using the LLMs in the automation of the analysis and within the validation process of the report of the VA that could potentially reduce the number of false positives and generally enhance efficiency. These results are promising for LLM automatization for improving validation on reports coming from VA in order to improve accuracy while reducing human effort and security postures. The contribution of this paper provides further evidence about the offensive and defensive LLM capabilities and therefor helps in devising more appropriate cybersecurity strategies and tools accordingly.
title Weaponizing Language Models for Cybersecurity Offensive Operations: Automating Vulnerability Assessment Report Validation; A Review Paper
topic Cryptography and Security
Artificial Intelligence
url https://arxiv.org/abs/2505.04265