Integration of Generative Large Language Models (LLM-GAI) for Augmenting Machine Reasoning in Critical Cyber Threat Intelligence (CTI)

Conventional Network Security Intelligence (NSI) faces an epistemological constraint in contextualizing the exponential volume of data. This paper proposes and conceptually validates a Cognitive Security Augmentation (CSA) framework that integrates Generative AI (GAI) based on Large Language Models (LLM), such as the model underpinning ChatGPT, to enhance Machine Reasoning and incident narrative synthesis. The core hypothesis is that GAI can bridge the gap between data-to-information (structured SIEM output) and information-to-intelligence (contextual reasoning and attack attribution). We model the GAI integration to automate the correlation of polymorphic anomalies with high-level MITRE ATT&CK techniques and generate personalized response playbooks, thereby significantly reducing the Mean Time To Understand (MTTU) for incidents. This research highlights a paradigm shift from passive anomaly detection towards proactive hypothesis generation within the CTI domain. Keywords: Generative AI (GAI), Large Language Model (LLM), Machine Reasoning, Cyber Threat Intelligence (CTI), Security Epistemology, MITRE ATT&CK

Publication Details

Journal
Zenodo (CERN European Organization for Nuclear Research)
Published
2025-10-28
DOI
https://doi.org/10.5281/zenodo.17466883
Primary Topic
Plant Taxonomy and Phylogenetics
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Integration of Generative Large Language Models (LLM-GAI) for Augmenting Machine Reasoning in Critical Cyber Threat Intelligence (CTI)

Zenodo (CERN European Organization for Nuclear Research)
Plant Taxonomy and Phylogenetics
article

Integration of Generative Large Language Models (LLM-GAI) for Augmenting Machine Reasoning in Critical Cyber Threat Intelligence (CTI)

article en

Abstract

Conventional Network Security Intelligence (NSI) faces an epistemological constraint in contextualizing the exponential volume of data. This paper proposes and conceptually validates a Cognitive Security Augmentation (CSA) framework that integrates Generative AI (GAI) based on Large Language Models (LLM), such as the model underpinning ChatGPT, to enhance Machine Reasoning and incident narrative synthesis. The core hypothesis is that GAI can bridge the gap between data-to-information (structured SIEM output) and information-to-intelligence (contextual reasoning and attack attribution). We model the GAI integration to automate the correlation of polymorphic anomalies with high-level MITRE ATT&CK techniques and generate personalized response playbooks, thereby significantly reducing the Mean Time To Understand (MTTU) for incidents. This research highlights a paradigm shift from passive anomaly detection towards proactive hypothesis generation within the CTI domain. Keywords: Generative AI (GAI), Large Language Model (LLM), Machine Reasoning, Cyber Threat Intelligence (CTI), Security Epistemology, MITRE ATT&CK

Zenodo (CERN European Organization for Nuclear Research)
Openalex Percentile: Top 34%
Plant Taxonomy and Phylogenetics
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.