From Hype to ROI: An Economic Model for LLM Adoption in Information Systems and Security Operations
Read the original on arXiv AI →The Flow has not summarised this story yet — read it at arXiv AI.
The Flow has not summarised this story yet — read it at arXiv AI.
The paper investigates how Security Operations Center (SOC) analysts perceive the integration of Large Language Models (LLMs) into their workflows. Through 25 interviews and interactive scenarios, the authors identify 15 LLM use cases across six functional categories, noting that while LLMs are useful for automating repetitive tasks, they are not yet suitable for high‑impact incident analysis due to limitations in technical depth, context awareness, and organization‑specific knowledge. Despite these concerns, practitioners show a strong willingness to adopt LLMs, driven by competitive pressure and a desire for operational efficiency.
arXiv:2604. 09998v2 Announce Type: replace-cross Abstract: Large language models (LLMs) have recently emerged as promising tools for augmenting Security Operations Center (SOC) workflows, with vendors increasingly marketing autonomous AI solutions for SOCs.
arXiv:2608.21423v1 Announce Type: cross Abstract: Agentic security uses large-language-model (LLM) agents to plan, dispatch, and interpret security tools. As these systems move from demonstrations to...
The paper reports on Grayhat Developers’ experience deploying a hybrid AI stack that combines local open‑source models with commercial agents. After finding local models too slow for complex coding tasks, the team kept commercial agents for those tasks while using local models for lower‑complexity work, documentation sync, and tool coordination, reducing commercial AI usage by 27–36%. The initial self‑hosted deployment suffered from UX friction, but a centrally configured deployment improved adoption.
arXiv:2608.28021v2 Announce Type: replace-cross Abstract: Large language models increasingly author Infrastructure-as-Code (IaC), where one insecure default is provisioned straight into production. P...
Pre-deployment safety evaluations aim to inform the downstream risks of releasing a new AI model. Yet most evaluations provide limited evidence about how often undesired model behavior will occur in deployment: they generally have insufficient coverage, are unrepresentative, and are generally recognizable as tests.