A2 Refereed review article in a scientific journal
Application of Large Language Models in Cybersecurity: A Systematic Literature Review
Authors: Hasanov, Ismayil; Virtanen, Seppo; Hakkala, Antti; Isoaho, Jouni
Publisher: IEEE
Publication year: 2024
Journal: IEEE Access
Volume: 12
First page : 176751
Last page: 176778
eISSN: 2169-3536
DOI: https://doi.org/10.1109/ACCESS.2024.3505983
Web address : https://ieeexplore.ieee.org/abstract/document/10767242
Self-archived copy’s web address: https://research.utu.fi/converis/portal/detail/Publication/477097705
The emergence of Large Language Models (LLMs) is currently creating a major paradigm shift in societies and businesses in the way digital technologies are used. While the disruptive effect is especially observable in the information and communication technology field, there is a clear lack of systematic studies focusing on the application and impact of LLMs in cybersecurity holistically. This article presents an exhaustive systematic literature review of 177 articles published in 2018-2024 on the application of LLMs and the use of Artificial Intelligence (AI) as a defensive measure in cybersecurity. This article contributes an analytical compendium of the recent research on the application of LLMs in offensive and defensive cybersecurity as well as in research on cyberethics, current legal frameworks, and research regarding the use of LLMs for cybersecurity governance. It also contributes a statistical summary of global research trends in the field. Of the reviewed literature, 68% was published in 2023. Nearly 30% of the articles originate from the USA and 11% from China, with other countries currently having significantly lower contributions to recent research. Most attention in recent research has been given to AI as a defensive measure, accounting for 27% of the reviewed literature. It was observed that LLMs have proven highly effective in phishing attack simulations and in managing cybersecurity administrative aspects, including defending against advanced exploits. Furthermore, LLMs show significant potential in the development of security software, further cementing their role as a powerful tool in cybersecurity innovation.
Downloadable publication This is an electronic reprint of the original article. |