English(EN) From Chasing Ghosts to Missed Attacks: Perspectives and Perceptions of SOC Practitioners on LLM Integration, Risks, and Readiness

SOC从业者看好LLM潜力但指出集成挑战

作者 PulseAugur 编辑部 · [1 个来源] · 2026-10-15 04:00

一篇新的arXiv论文基于对25名SOC从业者的访谈，探讨了大型语言模型（LLM）集成到安全运营中心（SOC）中的情况。研究发现，虽然LLM在自动化报告生成等重复性任务方面很有用，但由于技术深度、上下文感知和组织知识的限制，它们尚未被认为适用于复杂的事件分析。尽管存在这些挑战，从业者由于竞争压力，渴望采用LLM，这凸显了以人为本的设计和集成要求对于确保安全有效的使用的必要性。 AI

影响 LLM在自动化安全任务方面显示出潜力，但实际集成到SOC工作流程中需要解决上下文感知和组织知识方面的局限性。

排序理由该集群基于一篇发表在arXiv上的学术论文。[lever_c_demoted from research: ic=1 ai=1.0]

在 arXiv cs.AI 阅读 →

AI 生成摘要 · Google Gemini · 来自 1 个来源。我们如何撰写摘要 →

本文如何被排名

Signal score: 14 / 100; Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket: Tool; 该集群基于一篇发表在arXiv上的学术论文。[lever_c_demoted from research: ic=1 ai=1.0]
Source corroboration: Single-source cluster; Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics: paper, product, safety; Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance: High; Clearly on-topic for AI-industry coverage.
Story freshness: Breaking (< 6h); Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.

完整方法见我们的编辑标准。

报道来源 [1]

arXiv cs.AI TIER_1 English(EN) · Jonas Thurner, Nadine Jost, Stefan Albert Horstmann, Fabian Ising, Lea Groeber, Alena Naiakshina, Sebastian Schinzel · 2026-10-15 04:00

从追逐幽灵到错失攻击：SOC从业者对LLM集成、风险和准备情况的看法与认知

arXiv:2608.00672v2 Announce Type: replace-cross Abstract: Security Operations Centers (SOCs) process large volumes of security events, requiring analysts to accurately detect and assess ongoing cyberattacks under time pressure. Recent advances in Large Language Models (LLMs) sugg…

本文如何被排名

报道来源 [1]

从追逐幽灵到错失攻击：SOC从业者对LLM集成、风险和准备情况的看法与认知

相关实体

相关话题