24 citations · 30 across the 10 of their papers we have counts for
6 papers · 1 filter
LLMs in the SOC: An Empirical Study of Human-AI Collaboration in Security Operations Centres
Ronal Singh, Shahroz Tariq, Fatemeh Jalalvand +4
The integration of Large Language Models (LLMs) into Security Operations Centres (SOCs) presents a transformative, yet still evolving, opportunity to reduce analyst workload throug…
From Detection to Correction: Backdoor-Resilient Face Recognition via Vision-Language Trigger Detection and Noise-Based Neutralization
Farah Wahida, M. A. P. Chamikara, Yashothara Shanmugarasa +3
Biometric systems, such as face recognition systems powered by deep neural networks (DNNs), rely on large and highly sensitive datasets. Backdoor attacks can subvert these systems…
Adaptive alert prioritisation in security operations centres via learning to defer with human feedback
Fatemeh Jalalvand, Mohan Baruwal Chhetri, Surya Nepal +1
Alert prioritisation (AP) is crucial for security operations centres (SOCs) to manage the overwhelming volume of alerts and ensure timely detection and response to genuine threats,…
ContextBuddy: AI-Enhanced Contextual Insights for Security Alert Investigation (Applied to Intrusion Detection)
Ronal Singh, Mohan Baruwal Chhetri, Surya Nepal +1
Modern Security Operations Centres (SOCs) integrate diverse tools, such as SIEM, IDS, and XDR systems, offering rich contextual data, including alert enrichments, flow features, an…
Bridging Expertise Gaps: The Role of LLMs in Human-AI Collaboration for Cybersecurity
Shahroz Tariq, Ronal Singh, Mohan Baruwal Chhetri +2
This study investigates whether large language models (LLMs) can function as intelligent collaborators to bridge expertise gaps in cybersecurity decision-making. We examine two rep…
Towards Effective Identification of Attack Techniques in Cyber Threat Intelligence Reports using Large Language Models
Hoang Cuong Nguyen, Shahroz Tariq, Mohan Baruwal Chhetri +1
This work evaluates the performance of Cyber Threat Intelligence (CTI) extraction methods in identifying attack techniques from threat reports available on the web using the MITRE…