A2 Refereed review article in a scientific journal

Application of Large Language Models in Cybersecurity: A Systematic Literature Review




AuthorsHasanov, Ismayil; Virtanen, Seppo; Hakkala, Antti; Isoaho, Jouni

PublisherIEEE

Publication year2024

JournalIEEE Access

Volume12

First page 176751

Last page176778

eISSN2169-3536

DOIhttps://doi.org/10.1109/ACCESS.2024.3505983

Web address https://ieeexplore.ieee.org/abstract/document/10767242

Self-archived copy’s web addresshttps://research.utu.fi/converis/portal/detail/Publication/477097705


Abstract

The emergence of Large Language Models (LLMs) is currently creating a major paradigm shift in societies and businesses in the way digital technologies are used. While the disruptive effect is especially observable in the information and communication technology field, there is a clear lack of systematic studies focusing on the application and impact of LLMs in cybersecurity holistically. This article presents an exhaustive systematic literature review of 177 articles published in 2018-2024 on the application of LLMs and the use of Artificial Intelligence (AI) as a defensive measure in cybersecurity. This article contributes an analytical compendium of the recent research on the application of LLMs in offensive and defensive cybersecurity as well as in research on cyberethics, current legal frameworks, and research regarding the use of LLMs for cybersecurity governance. It also contributes a statistical summary of global research trends in the field. Of the reviewed literature, 68% was published in 2023. Nearly 30% of the articles originate from the USA and 11% from China, with other countries currently having significantly lower contributions to recent research. Most attention in recent research has been given to AI as a defensive measure, accounting for 27% of the reviewed literature. It was observed that LLMs have proven highly effective in phishing attack simulations and in managing cybersecurity administrative aspects, including defending against advanced exploits. Furthermore, LLMs show significant potential in the development of security software, further cementing their role as a powerful tool in cybersecurity innovation.


Downloadable publication

This is an electronic reprint of the original article.
This reprint may differ from the original in pagination and typographic detail. Please cite the original version.





Last updated on 2025-27-01 at 19:13