arXiv AI By Pellegrino Casoria, Andrea Araldo, Rosario Patan\`e, Simon Pietro Romano

From Hype to ROI: An Economic Model for LLM Adoption in Information Systems and Security Operations

Read the original on arXiv AI →

The Flow has not summarised this story yet — read it at arXiv AI.

arXiv AI
Oct 15

From Chasing Ghosts to Missed Attacks: Perspectives and Perceptions of SOC Practitioners on LLM Integration, Risks, and Readiness

The paper investigates how Security Operations Center (SOC) analysts perceive the integration of Large Language Models (LLMs) into their workflows. Through 25 interviews and interactive scenarios, the authors identify 15 LLM use cases across six functional categories, noting that while LLMs are useful for automating repetitive tasks, they are not yet suitable for high‑impact incident analysis due to limitations in technical depth, context awareness, and organization‑specific knowledge. Despite these concerns, practitioners show a strong willingness to adopt LLMs, driven by competitive pressure and a desire for operational efficiency.

By Jonas Thurner, Nadine Jost, Stefan Albert Horstmann, Fabian Ising, Lea Groeber, Alena Naiakshina, Sebastian Schinzel
arXiv AI
Jun 17

Like a Hammer, It Can Build, It Can Break: Large Language Model Uses, Perceptions, and Adoption in Cybersecurity Operations on Reddit

arXiv:2604. 09998v2 Announce Type: replace-cross Abstract: Large language models (LLMs) have recently emerged as promising tools for augmenting Security Operations Center (SOC) workflows, with vendors increasingly marketing autonomous AI solutions for SOCs.

By Souradip Nath, Chih-Yi Huang, Aditi Ganapathi, Kashyap Thimmaraju, Jaron Mink, Gail-Joon Ahn
arXiv AI
1d ago

Create Your Own Work Stack: Deploying Self-hosted AI and Tooling in a Tech Startup

The paper reports on Grayhat Developers’ experience deploying a hybrid AI stack that combines local open‑source models with commercial agents. After finding local models too slow for complex coding tasks, the team kept commercial agents for those tasks while using local models for lower‑complexity work, documentation sync, and tool coordination, reducing commercial AI usage by 27–36%. The initial self‑hosted deployment suffered from UX friction, but a centrally configured deployment improved adoption.

By Saad Ahmed Bazaz, Talha Amjad, Abdurrehman Subhani, Sohaib Ahmed Bazaz, Abdullah Aamir