{"id":"https://openalex.org/W4396821716","doi":"https://doi.org/10.48550/arxiv.2405.04760","title":"Large Language Models for Cyber Security: A Systematic Literature Review","display_name":"Large Language Models for Cyber Security: A Systematic Literature Review","publication_year":2024,"publication_date":"2024-05-08","ids":{"openalex":"https://openalex.org/W4396821716","doi":"https://doi.org/10.48550/arxiv.2405.04760"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2405.04760","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2405.04760","pdf_url":"https://arxiv.org/pdf/2405.04760","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"type":"review","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2405.04760","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5104298503","display_name":"HanXiang Xu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xu, Hanxiang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113204614","display_name":"ShenAo Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Shenao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114159554","display_name":"NingKe Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Ningke","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108439106","display_name":"K. C. Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Kailong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042306082","display_name":"Yanjie Zhao","orcid":"https://orcid.org/0000-0001-9307-8138"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhao, Yanjie","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100437976","display_name":"Kai Chen","orcid":"https://orcid.org/0000-0002-5624-2987"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Kai","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100591715","display_name":"Ting Yu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yu, Ting","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101767146","display_name":"Liu Yang","orcid":"https://orcid.org/0000-0002-7230-6485"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Yang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5111193705","display_name":"HaoYu Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Haoyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.9946,"has_fulltext":true,"cited_by_count":27,"citation_normalized_percentile":{"value":0.94514388,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.8720999956130981,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.8720999956130981,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12488","display_name":"Mental Health via Writing","score":0.7694000005722046,"subfield":{"id":"https://openalex.org/subfields/3207","display_name":"Social Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.7547000050544739,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/systematic-review","display_name":"Systematic review","score":0.47508373856544495},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4545849561691284},{"id":"https://openalex.org/keywords/epistemology","display_name":"Epistemology","score":0.33598244190216064},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.2611032724380493},{"id":"https://openalex.org/keywords/philosophy","display_name":"Philosophy","score":0.13822486996650696},{"id":"https://openalex.org/keywords/medline","display_name":"MEDLINE","score":0.06314167380332947}],"concepts":[{"id":"https://openalex.org/C189708586","wikidata":"https://www.wikidata.org/wiki/Q1504425","display_name":"Systematic review","level":3,"score":0.47508373856544495},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4545849561691284},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.33598244190216064},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.2611032724380493},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.13822486996650696},{"id":"https://openalex.org/C2779473830","wikidata":"https://www.wikidata.org/wiki/Q1540899","display_name":"MEDLINE","level":2,"score":0.06314167380332947},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2405.04760","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2405.04760","pdf_url":"https://arxiv.org/pdf/2405.04760","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2405.04760","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2405.04760","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2405.04760","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2405.04760","pdf_url":"https://arxiv.org/pdf/2405.04760","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4396821716.pdf","grobid_xml":"https://content.openalex.org/works/W4396821716.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052","https://openalex.org/W2382290278","https://openalex.org/W4395014643"],"abstract_inverted_index":{"The":[0],"rapid":[1],"advancement":[2],"of":[3,20,30,63,69,99,133,150,191],"Large":[4],"Language":[5],"Models":[6],"(LLMs)":[7],"has":[8],"opened":[9],"up":[10],"new":[11],"opportunities":[12],"for":[13,41,169],"leveraging":[14],"artificial":[15],"intelligence":[16],"in":[17,71],"a":[18,60,96,197],"variety":[19],"application":[21,68,148],"domains,":[22],"including":[23,136],"cybersecurity.":[24],"As":[25],"the":[26,64,67,110,189],"volume":[27],"and":[28,51,80,88,141,158,180],"sophistication":[29],"cyber":[31],"threats":[32],"continue":[33],"to":[34,53,94,105,129,172,203],"grow,":[35],"there":[36],"is":[37,188],"an":[38,130],"increasing":[39],"need":[40],"intelligent":[42],"systems":[43],"that":[44,124],"can":[45],"automatically":[46],"detect":[47],"vulnerabilities,":[48],"analyze":[49,147],"malware,":[50],"respond":[52],"attacks.":[54],"In":[55],"this":[56],"survey,":[57],"we":[58,92,116,122,146,164],"conduct":[59],"comprehensive":[61],"review":[62],"literature":[65],"on":[66],"LLMs":[70,101,125,171],"cybersecurity~(LLM4Security).":[72],"By":[73],"comprehensively":[74],"collecting":[75],"over":[76],"40K":[77],"relevant":[78],"papers":[79,84],"systematically":[81],"analyzing":[82],"185":[83],"from":[85,200],"top":[86],"security":[87,161,207],"software":[89],"engineering":[90],"venues,":[91],"aim":[93],"provide":[95],"holistic":[97],"view":[98],"how":[100],"are":[102,126],"being":[103,127],"used":[104],"solve":[106],"diverse":[107],"problems":[108],"across":[109,160],"cybersecurity":[111,134],"domain.":[112],"Through":[113],"our":[114],"analysis,":[115,140],"identify":[117,165],"several":[118],"key":[119],"findings.":[120],"First,":[121],"observe":[123],"applied":[128],"expanding":[131],"range":[132],"tasks,":[135],"vulnerability":[137],"detection,":[138],"malware":[139],"network":[142],"intrusion":[143],"detection.":[144],"Second,":[145],"trends":[149],"different":[151],"LLM":[152],"architectures":[153],"(such":[154],"as":[155,175],"encoder-only,":[156],"encoder-decoder,":[157],"decoder-only)":[159],"domains.":[162],"Third,":[163],"increasingly":[166],"sophisticated":[167],"techniques":[168],"adapting":[170],"cybersecurity,":[173],"such":[174],"advanced":[176],"fine-tuning,":[177],"prompt":[178],"engineering,":[179],"external":[181],"augmentation":[182],"strategies.":[183],"A":[184],"significant":[185],"emerging":[186],"trend":[187],"use":[190],"LLM-based":[192],"autonomous":[193],"agents,":[194],"which":[195],"represent":[196],"paradigm":[198],"shift":[199],"single-task":[201],"execution":[202],"orchestrating":[204],"complex,":[205],"multi-step":[206],"workflows.":[208]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":16},{"year":2024,"cited_by_count":6}],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2025-10-10T00:00:00"}