Structuring Security: A Survey of Cybersecurity Ontologies, Semantic Log Processing, and LLMs Application
Fuente:
arXiv
Gespeichert in:
| Hauptverfasser: | , , , , |
|---|---|
| Format: | Preprint |
| Veröffentlicht: |
2025
|
| Schlagworte: | |
| Online-Zugang: | |
| Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
| _version_ | 1866909856268550144 |
|---|---|
| author | Lourenço, Bruno Adão, Pedro Ferreira, João F. Marques, Mario Monteiro Vaz, Cátia |
| author_facet | Lourenço, Bruno Adão, Pedro Ferreira, João F. Marques, Mario Monteiro Vaz, Cátia |
| contents | This survey investigates how ontologies, semantic log processing, and Large Language Models (LLMs) enhance cybersecurity. Ontologies structure domain knowledge, enabling interoperability, data integration, and advanced threat analysis. Security logs, though critical, are often unstructured and complex. To address this, automated construction of Knowledge Graphs (KGs) from raw logs is emerging as a key strategy for organizing and reasoning over security data. LLMs enrich this process by providing contextual understanding and extracting insights from unstructured content. This work aligns with European Union (EU) efforts such as NIS 2 and the Cybersecurity Taxonomy, highlighting challenges and opportunities in intelligent ontology-driven cyber defense. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2510_16610 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | Structuring Security: A Survey of Cybersecurity Ontologies, Semantic Log Processing, and LLMs Application Lourenço, Bruno Adão, Pedro Ferreira, João F. Marques, Mario Monteiro Vaz, Cátia Cryptography and Security This survey investigates how ontologies, semantic log processing, and Large Language Models (LLMs) enhance cybersecurity. Ontologies structure domain knowledge, enabling interoperability, data integration, and advanced threat analysis. Security logs, though critical, are often unstructured and complex. To address this, automated construction of Knowledge Graphs (KGs) from raw logs is emerging as a key strategy for organizing and reasoning over security data. LLMs enrich this process by providing contextual understanding and extracting insights from unstructured content. This work aligns with European Union (EU) efforts such as NIS 2 and the Cybersecurity Taxonomy, highlighting challenges and opportunities in intelligent ontology-driven cyber defense. |
| title | Structuring Security: A Survey of Cybersecurity Ontologies, Semantic Log Processing, and LLMs Application |
| topic | Cryptography and Security |
| url | https://arxiv.org/abs/2510.16610 |