SOC practitioners see LLM potential but cite integration challenges

A new arXiv paper explores the integration of Large Language Models (LLMs) into Security Operations Centers (SOCs), based on interviews with 25 SOC practitioners. The study found that while LLMs are useful for automating repetitive tasks like report generation, they are not yet considered feasible for complex incident analysis due to limitations in technical depth, context awareness, and organizational knowledge. Despite these challenges, practitioners are eager to adopt LLMs due to competitive pressures, highlighting the need for human-centered design and integration requirements to ensure safe and effective use. AI

IMPACT LLMs show promise for automating security tasks, but practical integration into SOC workflows requires addressing limitations in context awareness and organizational knowledge.

RANK_REASON The cluster is based on an academic paper published on arXiv. [lever_c_demoted from research: ic=1 ai=1.0]

Read on arXiv cs.AI →

• arXiv
• Jonas Thurner
• Large Language Models
• LLMs
• Security Operations Centers

• paper
• product
• safety

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →