Cover Image

LLMs in the SOC: An Empirical Study of Human-AI Collaboration in Security Operations Centres

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Singh, Ronal, Tariq, Shahroz, Jalalvand, Fatemeh, Chhetri, Mohan Baruwal, Nepal, Surya, Paris, Cecile, Lochner, Martin
Format:	Preprint
Published:	2025
Subjects:	Cryptography and Security
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

Bridging Expertise Gaps: The Role of LLMs in Human-AI Collaboration for Cybersecurity
by: Tariq, Shahroz, et al.
Published: (2025)

ContextBuddy: AI-Enhanced Contextual Insights for Security Alert Investigation (Applied to Intrusion Detection)
by: Singh, Ronal, et al.
Published: (2025)

Adaptive alert prioritisation in security operations centres via learning to defer with human feedback
by: Jalalvand, Fatemeh, et al.
Published: (2025)

From Frontier to Shadow AI: A Simmering Threat to Assurance and Security in Critical Infrastructure
by: Chhetri, Mohan Baruwal, et al.
Published: (2026)

A2C: A Modular Multi-stage Collaborative Decision Framework for Human-AI Teams
by: Tariq, Shahroz, et al.
Published: (2024)

Towards Effective Identification of Attack Techniques in Cyber Threat Intelligence Reports using Large Language Models
by: Nguyen, Hoang Cuong, et al.
Published: (2025)

Security in the Era of Perceptive Networks: A Comprehensive Taxonomic Framework for Integrated Sensing and Communication Security
by: Thapa, Chandra, et al.
Published: (2026)

Future G Network's New Reality: Opportunities and Security Challenges
by: Thapa, Chandra, et al.
Published: (2025)

Human Society-Inspired Approaches to Agentic AI Security: The 4C Framework
by: Abuadbba, Alsharif, et al.
Published: (2026)

OpenSOC-AI: Democratizing Security Operations with Parameter Efficient LLM Log Analysis
by: Garware, Chaitanya Vilas, et al.
Published: (2026)

AgentSOC: A Multi-Layer Agentic AI Framework for Security Operations Automation
by: Roy, Joyjit, et al.
Published: (2026)

Collaborative Intelligence: Topic Modelling of Large Language Model use in Live Cybersecurity Operations
by: Lochner, Martin, et al.
Published: (2025)

LITE-SOC: Lightweight Security Operations Center Simulator for Cybersecurity Education
by: Higgins, Martin, et al.
Published: (2026)

From IOCs to Regex: Automating CTI Operationalization for SOC with LLMs
by: Tseng, Pei-Yu, et al.
Published: (2026)

A Unified Framework for Human AI Collaboration in Security Operations Centers with Trusted Autonomy
by: Mohsin, Ahmad, et al.
Published: (2025)

Leakage-Resilient and Carbon-Neutral Aggregation Featuring the Federated AI-enabled Critical Infrastructure
by: Deng, Zehang, et al.
Published: (2024)

Adversarial Attacks Against Automated Fact-Checking: A Survey
by: Liu, Fanzhen, et al.
Published: (2025)

SoK: The Security-Safety Continuum of Multimodal Foundation Models through Information Flow and Global Game-Theoretic Analysis of Asymmetric Threats
by: Sun, Ruoxi, et al.
Published: (2024)

Comprehensive Evaluation of Cloaking Backdoor Attacks on Object Detector in Real-World
by: Ma, Hua, et al.
Published: (2025)

OblivCDN: A Practical Privacy-preserving CDN with Oblivious Content Access
by: Vo, Viet, et al.
Published: (2025)

An Empirical Evaluation of LLMs for Solving Offensive Security Challenges
by: Shao, Minghao, et al.
Published: (2024)

Does Teaming-Up LLMs Improve Secure Code Generation? A Comprehensive Evaluation with Multi-LLMSecCodeEval
by: Sabir, Bushra, et al.
Published: (2026)

Can SOC Operators Explain their Decisions while Triaging Alarms? A Real-World Study
by: Moosmann, Jessica, et al.
Published: (2026)

SoK: Practical Aspects of Releasing Differentially Private Graphs
by: D'Silva, Nicholas, et al.
Published: (2026)

Deep Learning-Based Out-of-distribution Source Code Data Identification: How Far Have We Gone?
by: Nguyen, Van, et al.
Published: (2024)

An Innovative Information Theory-based Approach to Tackle and Enhance The Transparency in Phishing Detection
by: Nguyen, Van, et al.
Published: (2024)

HySecTwin: A Knowledge-Driven Digital Twin Framework Augmented with Hybrid Reasoning for Cyber-Physical Systems
by: Holmes, David, et al.
Published: (2026)

Towards Small Language Models for Security Query Generation in SOC Workflows
by: Muzammil, Saleha, et al.
Published: (2025)

Keep the Lights On, Keep the Lengths in Check: Plug-In Adversarial Detection for Time-Series LLMs in Energy Forecasting
by: Ma, Hua, et al.
Published: (2025)

Toward Autonomous SOC Operations: End-to-End LLM Framework for Threat Detection, Query Generation, and Resolution in Security Operations
by: Saju, Md Hasan, et al.
Published: (2026)

A Graph-Based Approach to Alert Contextualisation in Security Operations Centres
by: Eckhoff, Magnus Wiik, et al.
Published: (2025)

Leveraging Trustworthy AI for Automotive Security in Multi-Domain Operations: Towards a Responsive Human-AI Multi-Domain Task Force for Cyber Social Security
by: Barletta, Vita Santa, et al.
Published: (2025)

Post-Quantum Cryptography and Quantum-Safe Security: A Comprehensive Survey
by: Chhetri, Gaurab, et al.
Published: (2025)

Toward Securing AI Agents Like Operating Systems
by: Pirch, Lukas, et al.
Published: (2026)

Security Risks of AI Agents Hiring Humans: An Empirical Marketplace Study
by: Mehta, Pulak
Published: (2026)

Understanding Human-AI Collaboration in Cybersecurity Competitions
by: Tang, Tingxuan, et al.
Published: (2026)

SoK: Can Trajectory Generation Combine Privacy and Utility?
by: Buchholz, Erik, et al.
Published: (2024)

Using LLMs to Automate Threat Intelligence Analysis Workflows in Security Operation Centers
by: Tseng, PeiYu, et al.
Published: (2024)

AgentCrypt: Advancing Privacy and (Secure) Computation in AI Agent Collaboration
by: Karthikeyan, Harish, et al.
Published: (2025)

A Quantum-Secure and Blockchain-Integrated E-Voting Framework with Identity Validation
by: Poudel, Ashwin, et al.
Published: (2025)