{"id":"https://openalex.org/W4415872256","doi":"https://doi.org/10.3390/info16110957","title":"LLMs for Cybersecurity in the Big Data Era: A Comprehensive Review of Applications, Challenges, and Future Directions","display_name":"LLMs for Cybersecurity in the Big Data Era: A Comprehensive Review of Applications, Challenges, and Future Directions","publication_year":2025,"publication_date":"2025-11-04","ids":{"openalex":"https://openalex.org/W4415872256","doi":"https://doi.org/10.3390/info16110957"},"language":"en","primary_location":{"id":"doi:10.3390/info16110957","is_oa":true,"landing_page_url":"https://doi.org/10.3390/info16110957","pdf_url":"https://www.mdpi.com/2078-2489/16/11/957/pdf","source":{"id":"https://openalex.org/S4210219776","display_name":"Information","issn_l":"2078-2489","issn":["2078-2489"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2078-2489/16/11/957/pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5010990835","display_name":"Aristeidis Karras","orcid":"https://orcid.org/0000-0002-4632-6511"},"institutions":[{"id":"https://openalex.org/I174878644","display_name":"University of Patras","ror":"https://ror.org/017wvtq80","country_code":"GR","type":"education","lineage":["https://openalex.org/I174878644"]}],"countries":["GR"],"is_corresponding":true,"raw_author_name":"Aristeidis Karras","raw_affiliation_strings":["Computer Engineering and Informatics Department, University of Patras, 26504 Patras, Greece"],"raw_orcid":"https://orcid.org/0000-0002-4632-6511","affiliations":[{"raw_affiliation_string":"Computer Engineering and Informatics Department, University of Patras, 26504 Patras, Greece","institution_ids":["https://openalex.org/I174878644"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019293826","display_name":"Leonidas Theodorakopoulos","orcid":"https://orcid.org/0000-0002-0891-6780"},"institutions":[{"id":"https://openalex.org/I174878644","display_name":"University of Patras","ror":"https://ror.org/017wvtq80","country_code":"GR","type":"education","lineage":["https://openalex.org/I174878644"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Leonidas Theodorakopoulos","raw_affiliation_strings":["Department of Management Science and Technology, University of Patras, 26334 Patras, Greece"],"raw_orcid":"https://orcid.org/0000-0002-0891-6780","affiliations":[{"raw_affiliation_string":"Department of Management Science and Technology, University of Patras, 26334 Patras, Greece","institution_ids":["https://openalex.org/I174878644"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012988436","display_name":"Christos Karras","orcid":"https://orcid.org/0000-0002-4253-7661"},"institutions":[{"id":"https://openalex.org/I174878644","display_name":"University of Patras","ror":"https://ror.org/017wvtq80","country_code":"GR","type":"education","lineage":["https://openalex.org/I174878644"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Christos Karras","raw_affiliation_strings":["Computer Engineering and Informatics Department, University of Patras, 26504 Patras, Greece"],"raw_orcid":"https://orcid.org/0000-0002-4253-7661","affiliations":[{"raw_affiliation_string":"Computer Engineering and Informatics Department, University of Patras, 26504 Patras, Greece","institution_ids":["https://openalex.org/I174878644"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5098909897","display_name":"Alexandra Theodoropoulou","orcid":"https://orcid.org/0009-0004-6314-7795"},"institutions":[{"id":"https://openalex.org/I174878644","display_name":"University of Patras","ror":"https://ror.org/017wvtq80","country_code":"GR","type":"education","lineage":["https://openalex.org/I174878644"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Alexandra Theodoropoulou","raw_affiliation_strings":["Department of Management Science and Technology, University of Patras, 26334 Patras, Greece"],"raw_orcid":"https://orcid.org/0009-0004-6314-7795","affiliations":[{"raw_affiliation_string":"Department of Management Science and Technology, University of Patras, 26334 Patras, Greece","institution_ids":["https://openalex.org/I174878644"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115516465","display_name":"Ioanna Kalliampakou","orcid":"https://orcid.org/0009-0003-2039-254X"},"institutions":[{"id":"https://openalex.org/I174878644","display_name":"University of Patras","ror":"https://ror.org/017wvtq80","country_code":"GR","type":"education","lineage":["https://openalex.org/I174878644"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Ioanna Kalliampakou","raw_affiliation_strings":["Department of Management Science and Technology, University of Patras, 26334 Patras, Greece"],"raw_orcid":"https://orcid.org/0009-0003-2039-254X","affiliations":[{"raw_affiliation_string":"Department of Management Science and Technology, University of Patras, 26334 Patras, Greece","institution_ids":["https://openalex.org/I174878644"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5025682153","display_name":"Gerasimos Kalogeratos","orcid":"https://orcid.org/0009-0001-2636-3497"},"institutions":[{"id":"https://openalex.org/I174878644","display_name":"University of Patras","ror":"https://ror.org/017wvtq80","country_code":"GR","type":"education","lineage":["https://openalex.org/I174878644"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Gerasimos Kalogeratos","raw_affiliation_strings":["Department of Management Science and Technology, University of Patras, 26334 Patras, Greece"],"raw_orcid":"https://orcid.org/0009-0001-2636-3497","affiliations":[{"raw_affiliation_string":"Department of Management Science and Technology, University of Patras, 26334 Patras, Greece","institution_ids":["https://openalex.org/I174878644"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5010990835"],"corresponding_institution_ids":["https://openalex.org/I174878644"],"apc_list":{"value":1400,"currency":"CHF","value_usd":1515},"apc_paid":{"value":1400,"currency":"CHF","value_usd":1515},"fwci":24.495,"has_fulltext":true,"cited_by_count":11,"citation_normalized_percentile":{"value":0.99427023,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":100},"biblio":{"volume":"16","issue":"11","first_page":"957","last_page":"957"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.09309999644756317,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.09309999644756317,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.0722000002861023,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.05810000002384186,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/big-data","display_name":"Big data","score":0.8208000063896179},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6789000034332275},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.4900999963283539},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.475600004196167},{"id":"https://openalex.org/keywords/risk-assessment","display_name":"Risk assessment","score":0.32339999079704285},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.30480000376701355},{"id":"https://openalex.org/keywords/foundation","display_name":"Foundation (evidence)","score":0.30160000920295715}],"concepts":[{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.8208000063896179},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6789000034332275},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.6740000247955322},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6018999814987183},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.4900999963283539},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.47780001163482666},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.475600004196167},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.32339999079704285},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.32089999318122864},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.30480000376701355},{"id":"https://openalex.org/C2780966255","wikidata":"https://www.wikidata.org/wiki/Q5474306","display_name":"Foundation (evidence)","level":2,"score":0.30160000920295715},{"id":"https://openalex.org/C3018725008","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber threats","level":2,"score":0.2809000015258789},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.27559998631477356},{"id":"https://openalex.org/C189708586","wikidata":"https://www.wikidata.org/wiki/Q1504425","display_name":"Systematic review","level":3,"score":0.2750000059604645},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.26989999413490295},{"id":"https://openalex.org/C133462117","wikidata":"https://www.wikidata.org/wiki/Q4929239","display_name":"Data collection","level":2,"score":0.260699987411499},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.2599000036716461},{"id":"https://openalex.org/C539667460","wikidata":"https://www.wikidata.org/wiki/Q2414942","display_name":"Management science","level":1,"score":0.25679999589920044},{"id":"https://openalex.org/C72634772","wikidata":"https://www.wikidata.org/wiki/Q386824","display_name":"Data integration","level":2,"score":0.25380000472068787},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.25360000133514404}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3390/info16110957","is_oa":true,"landing_page_url":"https://doi.org/10.3390/info16110957","pdf_url":"https://www.mdpi.com/2078-2489/16/11/957/pdf","source":{"id":"https://openalex.org/S4210219776","display_name":"Information","issn_l":"2078-2489","issn":["2078-2489"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:a6c6ef820e6d4f778b7dd64d2b1916e5","is_oa":true,"landing_page_url":"https://doaj.org/article/a6c6ef820e6d4f778b7dd64d2b1916e5","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Information, Vol 16, Iss 11, p 957 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/info16110957","is_oa":true,"landing_page_url":"https://doi.org/10.3390/info16110957","pdf_url":"https://www.mdpi.com/2078-2489/16/11/957/pdf","source":{"id":"https://openalex.org/S4210219776","display_name":"Information","issn_l":"2078-2489","issn":["2078-2489"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4415872256.pdf","grobid_xml":"https://content.openalex.org/works/W4415872256.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"This":[0],"paper":[1],"presents":[2],"a":[3,30,116,146],"systematic":[4],"review":[5,38,144],"of":[6,12,33,97,107,156,169],"research":[7,114,125],"(2020\u20132025)":[8],"on":[9,21,29],"the":[10],"role":[11],"Large":[13],"Language":[14],"Models":[15],"(LLMs)":[16],"in":[17,111],"cybersecurity,":[18],"with":[19,74,87],"emphasis":[20],"their":[22],"integration":[23],"into":[24,115],"Big":[25,76],"Data":[26,77],"infrastructures.":[27],"Based":[28],"curated":[31],"corpus":[32],"235":[34],"peer-reviewed":[35],"studies,":[36],"this":[37,108,143],"synthesizes":[39],"evidence":[40],"across":[41],"multiple":[42],"domains":[43],"to":[44],"evaluate":[45],"how":[46],"models":[47],"such":[48],"as":[49],"GPT-4,":[50],"BERT,":[51],"and":[52,62,82,102,122,136,153],"domain-specific":[53,134],"variants":[54],"support":[55],"threat":[56,64],"detection,":[57],"incident":[58],"response,":[59],"vulnerability":[60],"assessment,":[61],"cyber":[63],"intelligence.":[65],"The":[66,105],"findings":[67],"confirm":[68],"that":[69],"LLMs,":[70],"particularly":[71],"when":[72],"coupled":[73],"scalable":[75],"pipelines,":[78],"improve":[79],"detection":[80],"accuracy":[81],"reduce":[83],"response":[84],"latency":[85],"compared":[86],"traditional":[88],"approaches.":[89],"However,":[90],"challenges":[91],"persist,":[92],"including":[93],"adversarial":[94],"susceptibility,":[95],"risks":[96],"data":[98],"leakage,":[99],"computational":[100],"overhead,":[101],"limited":[103],"transparency.":[104],"contribution":[106],"study":[109],"lies":[110],"consolidating":[112],"fragmented":[113],"unified":[117],"taxonomy,":[118],"identifying":[119],"sector-specific":[120],"gaps,":[121],"outlining":[123],"future":[124],"priorities:":[126],"enhancing":[127],"robustness,":[128],"mitigating":[129],"bias,":[130],"advancing":[131],"explainability,":[132],"developing":[133],"models,":[135],"optimizing":[137],"distributed":[138],"integration.":[139],"In":[140],"doing":[141],"so,":[142],"provides":[145],"structured":[147],"foundation":[148],"for":[149],"both":[150],"academic":[151],"inquiry":[152],"practical":[154],"adoption":[155],"LLM-enabled":[157],"cyberdefense":[158],"strategies.":[159],"Last":[160],"search:":[161],"30":[162],"April":[163],"2025;":[164],"methods":[165],"followed:":[166],"PRISMA-2020;":[167],"risk":[168],"bias":[170],"was":[171],"assessed;":[172],"random-effects":[173],"syntheses":[174],"were":[175],"conducted.":[176]},"counts_by_year":[{"year":2026,"cited_by_count":10},{"year":2025,"cited_by_count":1}],"updated_date":"2026-06-27T08:28:00.272161","created_date":"2025-11-04T00:00:00"}