Article

Using LLMs as AI Agents to Identify False Positive Alerts in Security Operation Center

2024-11-28

Abstract excerpt

<title>Abstract</title> <p>This paper addresses the challenges and solutions related to identifying false positive (FP) alerts in Security Information and Event Management (SIEM) systems, which often overwhelm security operators. To tackle this issue, we propose a novel approach that employs a Large Language Model (LLM), specifically Llama, as an AI agent through a contextual-based approach to identify FPs in sec...

Topics

Open a Topic to create a Post that cites this publication.

Identifiers and source

Literature Corpus work: e85c709e-1811-5a7d-8503-2ba5e1281c75
DOI: 10.21203/rs.3.rs-5420741/v1

Open publication

Related research

Semantic proximity does not establish scientific evidence.

Click a neighbor to travelStep 1 · 12 closest

Using LLMs as AI Agents to Identify False Positive Alerts in Security Operation CenterDOI 10.21203/rs.3.rs-5420741/v1Read

Enhancing Threat Hunting with Splunk and Generative AI forAutomated Security OperationsSemantic proximity Read

A Hybrid Explainable AI Framework for Cyber Threat Detection and ResponseSemantic proximity Read

MCP-TAD: An MCP-Based Agent Framework with Tool Routing and Alarm Suppression for Time-Series Anomaly DetectionSemantic proximity Read

A Dynamic Explainable AI FrameworkforReal-Time Intrusion Detection andAutomatedAlert Prioritization in Security OperationCentersSemantic proximity Read

An Integrated Observability Intelligence Framework: Bridging Semantic Data Modeling, Caching, and LLM-Powered Multi-Agent Root Cause AnalysisSemantic proximity Read

Integrating Large Language Models with Cloud-Native Observability for Automated Root Cause Analysis and RemediationSemantic proximity Read

Towards Sociotechnical Intelligence in Cyber Intrusion Detection: A Systematic Review Integrating ML/DL Performance, Human Adoption, and RAG-Enhanced Explainable AISemantic proximity Read

Harnessing the Power of Artificial Intelligence to Enhance Next-Generation CybersecuritySemantic proximity Read

The Technical–Regulatory Correspondence Matrix: A Practical Development Framework for Building GDPR- and AI Act-Compliant High-Risk AI SystemsSemantic proximity Read

SentinelSphere: An AI-driven cybersecurity platform integrating real-time threat detection with security awareness educationSemantic proximity Read

Evaluating the Quality of Large Language Model-Generated Cybersecurity Advice in GRC SettingsSemantic proximity Read

Bridging the Gap: Advancing the Transparency and Trustworthiness of Network Intrusion Detection with Explainable AISemantic proximity Read