LLMs for Cybersecurity

LLM: Large Language Model

Ask about this topic

Momentum

19 papers in the last four weeks, up 280% on the four weeks before. 0.2% of all new papers.

Jul 13Week of Sep 28
View on map

Latest papers 163

All topics
CardsList

  1. Constrained-Action AI Remediation for SIEM/XDR via a NeMo-Guardrails Proxy

    Oct 7, 2026Georgios Koutidis, Nikolaos Kekatos, Tom Nianios +1LLMs for CybersecurityTool Access Control for LLM Agents

    Clone Systems, Larnaca, Cyprus · University of Thessaly, Department of Intelligent Energy Systems, Larissa, Greece

  2. MARS: Malware Analysis with Rule-Based Scoring of LLM Claims

    Oct 7, 2026Hyeongjun ChoiMalware ClassificationLLMs for Cybersecurity

    78ResearchLab, 8, Yangpyeong-ro 25-gil, Yeongdeungpo-gu, Seoul, 07207, Republic of Korea

  3. Sigma-Hunter: A Domain-Specific Language Model for Threat Hunting and Detection Engineering

    Oct 6, 2026Kemal Davaslioglu, Sastry KompellaLLMs for Cybersecurity

    Nexcepta, Gaithersburg, MD, USA

  4. Does AI Help Cyber Attackers or Defenders? Evidence from Nonpublic Vulnerabilities and Subsequent Attacks

    Oct 5, 2026Tobias Heldt, Matt Turk, Christoph Landolt +1Automated Program RepairCybersecurity

    XOR · Protege · CISPA Helmholtz Center for Information Security

  5. Correct Verdicts, Flawed Reasoning: Structured Auditing of LLM-based Vulnerability Reasoning

    Oct 5, 2026Boyue Caroline Hu, Kaivalya Ahir, Ronghao Ni +1LLM AuditingSoftware Vulnerability Detection

    Carnegie Mellon University, Pittsburgh, Pennsilvanya, USA

  6. AutoDP-LLM: Automating Data Pre-processing for Intrusion Detection Systems using Large Language Models

    Oct 4, 2026Bao-Phong Nguyen, Gia-Khanh Pham, Thai-Duong Do +7Network Intrusion DetectionLLMs for Cybersecurity

    Business AI Lab, College of Technology, National Economics University, Hanoi, Vietnam

  7. KaliBench: A Fine-Grained Benchmark for Cybersecurity Tool Use on Kali Linux with Runtime-Free Verifiable Rewards

    Oct 1, 2026Pengfei Li, Naufal Suryanto, Sicheng Zhang +1LLMs for CybersecurityLLM Tool Use

    Khalifa University · University of Western Australia

  8. HydroJEV: A one-second, training-free screen for cyber-attack and fault attribution in water distribution networks

    Oct 1, 2026Tianwei Mu, Shengyan Jiang, Mingzhe Yuan +5CybersecurityLLMs for Cybersecurity

    School of Municipal Engineering and Environment, Shenyang Jianzhu University, Shenyang 110168, China · Guangzhou Institute of Industrial Intelligence, Guangzhou 510000, China · Shenyang Institute of Automation, Chinese Academy of Sciences, Shenyang 110169, China +2

  9. Jev-IDS: System One Models for Network Intrusion Detection

    Oct 1, 2026Paulo Severo, Silvio E. Quincozes, Amanda DiasNetwork Intrusion DetectionLLMs for Cybersecurity

    Graduate Program in Software Engineering, Federal University of Pampa (UNIPAMPA), Alegrete, Rio Grande do Sul, Brazil

  10. Towards Hierarchical Cyber Defense with Large Language Models: From Planning to Execution

    Sep 30, 2026Harshith Doppalapudi, Nathaniel D. Bastian, Ankit ShahAutonomous Cyber DefenseLanguage Model-Based Control

    Indiana University Bloomington, IN, USA · Johns Hopkins University Baltimore, MD, USA

  11. No One Architecture Fits All: A Cross-Environment Evaluation of Hierarchical Red Team Agents

    Sep 30, 2026Ayan Javeed Shaikh, Arunesh Sinha, Nathaniel D. Bastian +1LLM Red TeamingAI Agent Evaluation

    Indiana University Bloomington, IN, USA · Rutgers University Piscataway, NJ, USA · Johns Hopkins University Baltimore, MD, USA

  12. APTInvestBench: Evaluating Autonomous APT Investigation under Varying Telemetry

    Sep 30, 2026Yu Wang, Shuhao Li, Tao Yin +4Distribution Shift RobustnessAI Agent Benchmarks

    Zhongguancun Laboratory

  13. HESP: Separating What to Probe from When to Stop in Local LLM Alert-Triage Agents

    Sep 27, 2026Zhuowen Liu, Zhixuan WangLLMs for CybersecurityLLM Agent Reliability

    Cybersecurity Lab Japan Advanced Institute of Science and Technology (JAIST) Nomi, Ishikawa, Japan · College of Fine Arts Liaoning Normal University Dalian, Liaoning, China

  14. Where Cyber Agents Struggle: Bottleneck Analysis of Multi-Stage LLM Agents

    Sep 23, 2026Saeedeh Lohrasbi, Mohammad Mamun, Ahmed Yehia +2Agent Failure AnalysisLLM Agent Evaluation

    Cybersecurity, DTRC, National Research Council, Ottawa, Canada · University of Windsor, Windsor, Ontario, Canada

  15. Metrics Failure in LLM-Based Code Vulnerability Repair: An Empirical Study and a Change-Aware Screen

    Sep 22, 2026Om Nepal, Sushant Aryal, Oluseyi Olukola +1Automated Program RepairLLMs for Cybersecurity

    School of Computing Sciences and Computer Engineering, The University of Southern Mississippi, Hattiesburg, MS 39406, USA

  16. ALIBI: Adversarial Legitimacy Injection in Binary Input against LLM Malware Analyzers

    Sep 17, 2026Hyeongjun Choi, Wonyoung Jung, Haehoon Seo +1Adversarial Attacks on LLMsLLM Security

    78ResearchLab Seoul, South Korea

  17. MiST: Mid-Training LLMs for Cybersecurity

    Sep 16, 2026Oded Ovadia, Elad Ben Zaken, Elad Guttman +1Synthetic Data PretrainingDomain-Adaptive Pretraining

    Dream

  18. PentestChain: A Cost-Aware, MCP-Orchestrated Framework for Automated Penetration Testing with Free-Tier LLMs

    Sep 16, 2026Rushabh Vipulkumar Patel, Dipo Dunsin, Mohammed Almaiah +1Automated Penetration TestingLLMs for Cybersecurity

    Computer Security Laboratory, University of Wales Trinity Saint David, London, United Kingdom · King Abdullah IT School, The University of Jordan, Amman, Jordan · School of Computer Science and Mathematics, Keele University, Newcastle-under-Lyme, United Kingdom

  19. Vulnerability Localization Benchmark: Measuring Agentic Security Analysis at Repository Scale

    Sep 14, 2026Aman Priyanshu, Supriti Vijay, Kimia Majd +8Software Vulnerability DetectionAI Agent Security

    1Foundation AI–Cisco Systems Inc. · 3Carnegie Mellon University · †Work done while at Foundation AI +1

  20. Architecting the Secure AI-SOC: A Neurosymbolic Framework for Pipeline Integrity and Threat Mitigation

    Sep 12, 2026Anna Gazani, Spyridon Kounoupidis, Panagiotis Katsaros +3CybersecurityIndirect Prompt Injection

    Aristotle University of Thessaloniki, Greece · Clone Systems, Cyprus

  21. Evaluating Context Segmentation in Locally Deployable SLMs for Cybersecurity CTF Tasks

    Sep 11, 2026Sebastiano Nordio, Michele LottoCybersecuritySmall Language Models

    Independent · University of Genoa, Via All’Opera Pia, 16145 Genoa, Italy

  22. Evidence-Grounded Retrieval for Investigation Hunt Lead Generation from CTI Reports

    Sep 8, 2026Akash Prakash, Boubakr Nour, Makan Pourzandi +2Retrieval-Augmented GenerationCyber Threat Intelligence

    Concordia University, Canada · Ericsson Security Research, Canada

  23. Benchmark Scores Are Pipeline-Dependent: A Reliability Audit of Cybersecurity LLM Benchmarks

    Sep 8, 2026Aymene Berriche, Cathrine Shalby, Mohannad Alhanahnah +1LLM EvaluationLLM Auditing

    Qatar Computing Research Institute, HBKU

  24. Feyospace-v1: How the Cyber Mercury Seven Trained Frontier Cyber Models

    Sep 8, 2026Zongjie Li, Alan Z. W, John Nicolas J +4Training Data CurationCybersecurity

    Vera Praxis Lab

  25. Same Request, Different Boundary: Evaluating Cybersecurity Assistance across Conversational Contexts

    Sep 1, 2026Rui Yang, Yang Hong, Yichao Xu +3LLM Safety BenchmarksLLM Refusal Behavior

    Johns Hopkins University

  26. CyberFactory: Scaling Cyber Security Capabilities with Instances from the Wild

    Aug 24, 2026Jian Yang, Haau-Sing Li, Shawn Guo +10CybersecuritySoftware Security

    Beihang University · ELLIS · IQuest Research +1

  27. LLM-Assisted Dynamic Threat Analysis for Attacker-Reachable Software Weaknesses in Autonomous Vehicles

    Aug 13, 2026Md Wasiul Haque, Sagar Dasgupta, Mizanur Rahman +1Automated Software TestingSoftware Vulnerability Detection

    Department of Civil, Construction & Environmental Engineering, The University of Alabama 2009 Smart Communities and Innovation Building (SCIB), 28 Kirkbride Lane, Tuscaloosa, AL 35487-0288 · Department of Computer Science, The University of Alabama 3017 Cyber Hall, 248 Kirkbride Lane, Tuscaloosa, AL 35487-0288

  28. The Next Challenge for Agentic Cybersecurity: A Realistic, Contamination-Free Reverse Engineering Benchmark

    Aug 11, 2026Jeremy Spence, Nicholas Assaderaghi, Feng Xiao +9Software Reverse EngineeringAI Agent Security Benchmarks

    Columbia University · UC Berkeley · Vals AI +2

  29. RangeFactory: Scalable Construction of Multi-Hop Cyber Ranges

    Aug 10, 2026Hanlin Jiang, Puyi Wang, Jiandong Jin +10CybersecurityAutomated Penetration Testing

    Key Laboratory of High Confidence Software Technologies, Peking University, Ministry of Education · Huawei Technologies Co., Ltd. · Southeast University

  30. Retrieval-Constrained Policy Optimization for Attack Technique Extraction from Cyber Threat Intelligence

    Aug 7, 2026Jiayun Zhang, Junshen Xu, Zejun Xie +1Cyber Threat IntelligenceCybersecurity

    Amazon Web Services New York, New York, USA · Amazon Web Services Boston, Massachusetts, USA · Rutgers University Piscataway, New Jersey, USA

  31. Post-Hoc Trajectory-Risk Certification for Modular LLM-Based Security Agents

    Aug 4, 2026Zhenpeng LiIoT Intrusion DetectionCybersecurity

    Guangzhou Health Science College, No. 248 Guangyuan Middle Road, Guangzhou, Guangdong 510405, China

  32. DiagChain: A Diagnostic Benchmark for Evaluating LLM Agents on Evidence-Grounded Attack Chain Reconstruction

    Aug 4, 2026Xuyang Liu, Yibin Han, Zhenwei Zhang +8Retrieval-Augmented GenerationLLM Agent Evaluation

    KLISS, BNRist, School of Software, Tsinghua University, Beijing, China · CRRC Corporation Limited, Beijing, China

  33. Antares: Foundation Models for Agentic Vulnerability Localization

    Aug 3, 2026Supriti Vijay, Aman Priyanshu, Didier Chapoteau +8Software Vulnerability DetectionSmall Language Models

    1Foundation AI–Cisco Systems Inc. · 2Yale University

  34. EntailLLM: Verifying LLM-Generated Vulnerability Discovery Paths with Domain Knowledge via Logic Programming

    Aug 3, 2026Kaustuv Mukherji, Jaikrishna Manojkumar Patil, Colton Payne +4Logic ProgrammingSoftware Vulnerability Detection

    Syracuse University · HRL Laboratories

  35. MITRE-SAGE: A Multi-Agent Cybersecurity Question-Answering Model

    Aug 3, 2026Ali Habibzadeh, Farid Feyzi, Reza Ebrahimi AtaniRetrieval-Augmented GenerationMulti-Agent LLM Systems

    Department of Computer Engineering University of Guilan Rasht, Iran

  36. From Chasing Ghosts to Missed Attacks: Perspectives and Perceptions of SOC Practitioners on LLM Integration, Risks, and Readiness

    Aug 1, 2026Jonas Thurner, Nadine Jost, Stefan Albert Horstmann +4CybersecurityLLMs for Cybersecurity

    FH Münster, Germany · Ruhr University Bochum, Germany · University of Cologne, Germany +2

  37. Distilling Knowledge from Large Language Models into Lightweight Reinforcement Learning Agents for Autonomous Cyber Operations

    Jul 30, 2026Konur Tholl, François Rivest, Mariam El Mezouar +2Autonomous Cyber DefenseLLM-Guided RL

    Department of Electrical and Computer Engineering, Royal Military College of Canada, Kingston, Canada · Department of Mathematics and Computer Science, Royal Military College of Canada, Kingston, Canada · Defence Research and Development Canada, Ottawa, Canada +1

  38. Cybersecurity Detection Classification with Reasoning-enabled Language Models

    Jul 30, 2026Amol Khanna, Manu Nandan, Cristian Viorel Popa +10CoT ReasoningLanguage Model Calibration

    CrowdStrike

  39. PCAP-LM: An LLM-Native Text Representation for TLS Bulk Traffic Analysis

    Jul 30, 2026Xavier Marjou, Lucas Tamic, Ilan Jaffeux-ChenioutEncrypted Network Traffic AnalysisCybersecurity

    Orange

  40. ThreatForest: Multi-Agent Attack Tree Generation with Pluggable TTP Framework Mapping

    Jul 29, 2026Cristian Leo, Anton Dykyi, Danny Cortegaca +2LLMs for Cybersecurity

    Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA, 98109, United States · Amazon Web Services EMEA SARL, UK Branch, 1 Principal Place, Worship Street, London, EC2A 2FA, United Kingdom

  41. HoF-Bench: Rediscovering Real AI-Discovered CVEs Without Frontier Models

    Jul 29, 2026Petr Simecek, Elnaz Babayeva, Jiri Balhar +23Software Vulnerability DetectionLLMs for Cybersecurity

    AISLE, San Francisco, CA, USA and Prague, Czech Republic · Central European Institute of Technology, Masaryk University, Brno, Czech Republic

  42. KQFuzz: Knowledge-Guided Fuzzing for Quantum Libraries via Large Language Models

    Jul 28, 2026Fuyuan Xia, Qixin Zhang, Chenhao Ying +5Automated Software TestingLLMs for Cybersecurity

    1Shanghai Jiao Tong University · 2Nanyang Technological University · 3Hong Kong University of Science and Technology +1

  43. The Disruptive Impact of Large Language Models on Capture the Flag Competitions and the Path Toward Fair Play

    Jul 28, 2026Michael Macaulay, Harmony Bouabid, Guo Gen Ang +1CybersecurityLLMs for Cybersecurity

    WMG, University of Warwick, Coventry, United Kingdom

  44. DeepFaith: Evidence-Grounded LLMs for Faithful Incident Reporting in Multi-Stage APT Defense

    Jul 27, 2026Trung V. Phan, Tri Gia Nguyen, Thomas BauschertCybersecurityLLMs for Cybersecurity

    Chair of Communication Networks, Technische Universität Chemnitz, 09126 Chemnitz, Germany · Department of Information Assurance, FPT University, Da Nang 50509, Vietnam

  45. Every Model Cheats: Prompt-Level Mitigation of Cheating on Offensive Cyber Tasks

    Jul 23, 2026Michael Kouremetis, Ads Dawson, Raja Sekhar Rao Dheekonda +1LLM AuditingDeception in Language Models

    dreadnode, Principal AI Research Engineer · dreadnode, StaffAI Security Researcher · dreadnode, Distinguished Engineer +1

  46. From Evaluation to Optimisation: Hierarchy-Aware Training Signals for CWE Prediction in Python

    Jul 23, 2026Muntasir Adnan, Manile Srun, Carlos C. N. KuhnSoftware Vulnerability DetectionLLMs for Cybersecurity

    Open Source Institute, Faculty of Science and Technology, University of Canberra, Canberra, Australia.

  47. Beyond Heavy Log Curation: Perplexity-Based APT Detection via Unsupervised, Context-Augmented Language Models

    Jul 23, 2026Shoya Otsu, Kei Suzuki, Toshiaki Koike-Akino +2Online Anomaly DetectionLLMs for Cybersecurity

    Mitsubishi Electric Corporation, Japan. · Mitsubishi Electric Research Laboratories, Cambridge, MA, USA.

  48. Evaluating Large Language Models for Symbolic Security Protocol Analysis

    Jul 22, 2026Paolo Modesti, Syed Ahmed, Ioannis Sfyrakis +1LLM EvaluationCybersecurity

    Teesside University, Middlesbrough, United Kingdom

  49. Find Before You Fine-Tune: A Diagnostic Study of Small LLMs for Cybersecurity QA

    Jul 21, 2026Shaswata Mitra, Subash Neupane, Trisha Chakraborty +4LLM EvaluationLLM Fine-Tuning

    The University of Alabama · Meharry Medical College · Mississippi State University +1

  50. Semi-Automated Detection of Gaps in LLM Security Knowledge

    Jul 20, 2026Shufan Chai, Liangliang Sun, Jessica StaddonLLM AuditingLLMs for Cybersecurity

    Northeastern University Oakland, CA, USA

  51. Evaluating Open-Weight LLMs for Generating Structured Threat Information for Autonomous Vehicle Vulnerabilities

    Jul 17, 2026Md Erfan, Ahmed Ryan, Md Kamal Hossain Chowdhury +1CybersecurityLLMs for Cybersecurity

    Department of Computer Science, The University of Alabama, Tuscaloosa, USA · Alabama Water Institute, The University of Alabama, Tuscaloosa, USA

  52. Traffic-Aware Randomized Smoothing for LLM-Based Network Intrusion Detection

    Jul 15, 2026Zhenpeng LiRandomized SmoothingNetwork Intrusion Detection

  53. AutoTrace: From Patches to Triggers via Agentic Interprocedural Exploration

    Jul 13, 2026Arastoo Zibaeirad, Marco Vieira, Thomas ZimmermannSoftware Vulnerability DetectionStatic Code Analysis

    University of North Carolina at Charlotte · Charlotte, NC, USA · University of California, Irvine +1

  54. Operational Evidence Gaps for LLMs in Fraud Detection and Trust-and-Safety Workflows

    Jul 12, 2026Keyur GabaniLLM EvaluationFinancial Fraud Detection

  55. SMETA-ZSL:Semantic Meta-Alignment for Zero-Shot Threat Classification

    Jul 10, 2026Ivan Alejandro Montoya Sanchez, Anantaa Kotal, Aritran PiplaiZero-Shot LearningCyber Threat Intelligence

    The University of Texas at El Paso

  56. Secret Scanner Agent: Extracting Secrets and Access Context from Unstructured Documents

    Jul 10, 2026Zixiao Chen, Mariko Wakabayashi, Charlotte SiskaDocument Information ExtractionLLMs for Cybersecurity

    Microsoft, Redmond, WA, USA

  57. From Legacy Documentation to OSCAL: An MCP-Based Agent Pipeline for Threat-Informed Continuous Compliance in Critical Infrastructure

    Jul 9, 2026Lea Roxanne Muth, Marian MargrafCybersecurityLLMs for Cybersecurity

    Department of Mathematics and Computer Science Freie Universität Berlin Berlin, Germany

  58. Large Language Models (LLMs) and Generative AI in Cybersecurity and Privacy: A Survey of Dual-Use Risks, AI-Generated Malware, Explainability, and Defensive Strategies

    Jul 8, 2026Kiarash Ahi, Saeed ValizadehLLM SecurityLLMs for Cybersecurity

    Virelya Intelligence Research Labs, San Francisco Bay Area, California · Google, Mountain View, California

  59. Beyond Refusal: A Same-Lineage Study of Aligned and Abliterated LLMs for Vulnerability Analysis

    Jul 7, 2026Mingchen Li, Meikang Qiu, Zifan Peng +4Software Vulnerability DetectionLLMs for Cybersecurity

    University of North Texas, USA · Augusta University, USA · Newcastle University, United Kingdom

  60. TACTIC-KG: Toward Small Agent Teams for Cyber Threat Intelligence Knowledge Graph Construction

    Jul 6, 2026Mouhamed Amine Bouchiha, Gregory BlancKG ConstructionMulti-Agent LLM Systems

    SAMOVAR, Télécom SudParis, Institut Polytechnique de Paris