When to Trust the Map: Confidence-Aware LLM Routing for Automotive CVE-to-ATM Mapping

Heeyun Heo, Sangmin Park, Huy Kang Kim +1

Public CVE descriptions report the technical conditions and impact of vulnerabilities, whereas the Auto-ISAC Automotive Threat Matrix (ATM) expresses an adversary's tactics and tec…