{"id":"https://openalex.org/W4415932290","doi":"https://doi.org/10.3390/jcp5040095","title":"AI-Augmented SOC: A Survey of LLMs and Agents for Security Automation","display_name":"AI-Augmented SOC: A Survey of LLMs and Agents for Security Automation","publication_year":2025,"publication_date":"2025-11-05","ids":{"openalex":"https://openalex.org/W4415932290","doi":"https://doi.org/10.3390/jcp5040095"},"language":"en","primary_location":{"id":"doi:10.3390/jcp5040095","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5040095","pdf_url":"https://www.mdpi.com/2624-800X/5/4/95/pdf?version=1762339113","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2624-800X/5/4/95/pdf?version=1762339113","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5080922124","display_name":"S. Srinivas","orcid":"https://orcid.org/0009-0008-1600-9153"},"institutions":[{"id":"https://openalex.org/I43369023","display_name":"California State University, San Bernardino","ror":"https://ror.org/02n651896","country_code":"US","type":"education","lineage":["https://openalex.org/I43369023"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Siddhant Srinivas","raw_affiliation_strings":["School of Computer Science & Engineering, California State University, San Bernardino, 5500 University Parkway, San Bernardino, CA 92407, USA"],"raw_orcid":"https://orcid.org/0009-0008-1600-9153","affiliations":[{"raw_affiliation_string":"School of Computer Science & Engineering, California State University, San Bernardino, 5500 University Parkway, San Bernardino, CA 92407, USA","institution_ids":["https://openalex.org/I43369023"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Brandon Kirk","orcid":null},"institutions":[{"id":"https://openalex.org/I43369023","display_name":"California State University, San Bernardino","ror":"https://ror.org/02n651896","country_code":"US","type":"education","lineage":["https://openalex.org/I43369023"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Brandon Kirk","raw_affiliation_strings":["School of Computer Science & Engineering, California State University, San Bernardino, 5500 University Parkway, San Bernardino, CA 92407, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science & Engineering, California State University, San Bernardino, 5500 University Parkway, San Bernardino, CA 92407, USA","institution_ids":["https://openalex.org/I43369023"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120269668","display_name":"Julissa Zendejas","orcid":null},"institutions":[{"id":"https://openalex.org/I43369023","display_name":"California State University, San Bernardino","ror":"https://ror.org/02n651896","country_code":"US","type":"education","lineage":["https://openalex.org/I43369023"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Julissa Zendejas","raw_affiliation_strings":["School of Computer Science & Engineering, California State University, San Bernardino, 5500 University Parkway, San Bernardino, CA 92407, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science & Engineering, California State University, San Bernardino, 5500 University Parkway, San Bernardino, CA 92407, USA","institution_ids":["https://openalex.org/I43369023"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120269669","display_name":"Michael Espino","orcid":null},"institutions":[{"id":"https://openalex.org/I43369023","display_name":"California State University, San Bernardino","ror":"https://ror.org/02n651896","country_code":"US","type":"education","lineage":["https://openalex.org/I43369023"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michael Espino","raw_affiliation_strings":["School of Computer Science & Engineering, California State University, San Bernardino, 5500 University Parkway, San Bernardino, CA 92407, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science & Engineering, California State University, San Bernardino, 5500 University Parkway, San Bernardino, CA 92407, USA","institution_ids":["https://openalex.org/I43369023"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120269670","display_name":"Matthew Boskovich","orcid":null},"institutions":[{"id":"https://openalex.org/I43369023","display_name":"California State University, San Bernardino","ror":"https://ror.org/02n651896","country_code":"US","type":"education","lineage":["https://openalex.org/I43369023"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Matthew Boskovich","raw_affiliation_strings":["School of Computer Science & Engineering, California State University, San Bernardino, 5500 University Parkway, San Bernardino, CA 92407, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science & Engineering, California State University, San Bernardino, 5500 University Parkway, San Bernardino, CA 92407, USA","institution_ids":["https://openalex.org/I43369023"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109739352","display_name":"Abdul Bari","orcid":null},"institutions":[{"id":"https://openalex.org/I43369023","display_name":"California State University, San Bernardino","ror":"https://ror.org/02n651896","country_code":"US","type":"education","lineage":["https://openalex.org/I43369023"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Abdul Bari","raw_affiliation_strings":["School of Computer Science & Engineering, California State University, San Bernardino, 5500 University Parkway, San Bernardino, CA 92407, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science & Engineering, California State University, San Bernardino, 5500 University Parkway, San Bernardino, CA 92407, USA","institution_ids":["https://openalex.org/I43369023"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Khalil Dajani","orcid":null},"institutions":[{"id":"https://openalex.org/I43369023","display_name":"California State University, San Bernardino","ror":"https://ror.org/02n651896","country_code":"US","type":"education","lineage":["https://openalex.org/I43369023"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Khalil Dajani","raw_affiliation_strings":["School of Computer Science & Engineering, California State University, San Bernardino, 5500 University Parkway, San Bernardino, CA 92407, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science & Engineering, California State University, San Bernardino, 5500 University Parkway, San Bernardino, CA 92407, USA","institution_ids":["https://openalex.org/I43369023"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5070375370","display_name":"Nabeel Alzahrani","orcid":"https://orcid.org/0009-0008-5671-7277"},"institutions":[{"id":"https://openalex.org/I43369023","display_name":"California State University, San Bernardino","ror":"https://ror.org/02n651896","country_code":"US","type":"education","lineage":["https://openalex.org/I43369023"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nabeel Alzahrani","raw_affiliation_strings":["School of Computer Science & Engineering, California State University, San Bernardino, 5500 University Parkway, San Bernardino, CA 92407, USA"],"raw_orcid":"https://orcid.org/0009-0008-5671-7277","affiliations":[{"raw_affiliation_string":"School of Computer Science & Engineering, California State University, San Bernardino, 5500 University Parkway, San Bernardino, CA 92407, USA","institution_ids":["https://openalex.org/I43369023"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5080922124"],"corresponding_institution_ids":["https://openalex.org/I43369023"],"apc_list":{"value":1000,"currency":"CHF","value_usd":1114},"apc_paid":{"value":1000,"currency":"CHF","value_usd":1114},"fwci":13.877,"has_fulltext":true,"cited_by_count":24,"citation_normalized_percentile":{"value":0.99047888,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":100},"biblio":{"volume":"5","issue":"4","first_page":"95","last_page":"95"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.18019999563694,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.18019999563694,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.14229999482631683,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.12389999628067017,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/sophistication","display_name":"Sophistication","score":0.6614999771118164},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.4894999861717224},{"id":"https://openalex.org/keywords/automation","display_name":"Automation","score":0.44179999828338623},{"id":"https://openalex.org/keywords/asset","display_name":"Asset (computer security)","score":0.4072999954223633},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.3919999897480011},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.37119999527931213}],"concepts":[{"id":"https://openalex.org/C168725872","wikidata":"https://www.wikidata.org/wiki/Q991663","display_name":"Sophistication","level":2,"score":0.6614999771118164},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5906999707221985},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.4894999861717224},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.46619999408721924},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.44179999828338623},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.43209999799728394},{"id":"https://openalex.org/C76178495","wikidata":"https://www.wikidata.org/wiki/Q4808784","display_name":"Asset (computer security)","level":2,"score":0.4072999954223633},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.3919999897480011},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.37119999527931213},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.3246000111103058},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.3208000063896179},{"id":"https://openalex.org/C145804949","wikidata":"https://www.wikidata.org/wiki/Q478123","display_name":"Situation awareness","level":2,"score":0.3160000145435333},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.2840999960899353},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.27489998936653137},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2703999876976013},{"id":"https://openalex.org/C19527686","wikidata":"https://www.wikidata.org/wiki/Q1665453","display_name":"System integration","level":2,"score":0.25839999318122864},{"id":"https://openalex.org/C72634772","wikidata":"https://www.wikidata.org/wiki/Q386824","display_name":"Data integration","level":2,"score":0.2531000077724457}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3390/jcp5040095","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5040095","pdf_url":"https://www.mdpi.com/2624-800X/5/4/95/pdf?version=1762339113","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:9a159ddef7264a67beb7ec0978cc006d","is_oa":true,"landing_page_url":"https://doaj.org/article/9a159ddef7264a67beb7ec0978cc006d","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal of Cybersecurity and Privacy, Vol 5, Iss 4, p 95 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/jcp5040095","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5040095","pdf_url":"https://www.mdpi.com/2624-800X/5/4/95/pdf?version=1762339113","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4415932290.pdf","grobid_xml":"https://content.openalex.org/works/W4415932290.grobid-xml"},"referenced_works_count":58,"referenced_works":["https://openalex.org/W3118615836","https://openalex.org/W4307964230","https://openalex.org/W4385452929","https://openalex.org/W4388625574","https://openalex.org/W4389158500","https://openalex.org/W4391093223","https://openalex.org/W4392768649","https://openalex.org/W4394745212","https://openalex.org/W4394946189","https://openalex.org/W4399625707","https://openalex.org/W4399631359","https://openalex.org/W4400233803","https://openalex.org/W4400484653","https://openalex.org/W4400484718","https://openalex.org/W4400583111","https://openalex.org/W4401361149","https://openalex.org/W4401537488","https://openalex.org/W4401863940","https://openalex.org/W4402158164","https://openalex.org/W4402535449","https://openalex.org/W4402543952","https://openalex.org/W4402954232","https://openalex.org/W4404555905","https://openalex.org/W4405755985","https://openalex.org/W4405980221","https://openalex.org/W4406460492","https://openalex.org/W4406755163","https://openalex.org/W4406858760","https://openalex.org/W4406875947","https://openalex.org/W4406949705","https://openalex.org/W4406949722","https://openalex.org/W4407008821","https://openalex.org/W4407215324","https://openalex.org/W4407938051","https://openalex.org/W4407938238","https://openalex.org/W4408146585","https://openalex.org/W4408566170","https://openalex.org/W4408859326","https://openalex.org/W4409047355","https://openalex.org/W4409473841","https://openalex.org/W4409581406","https://openalex.org/W4410049425","https://openalex.org/W4410636386","https://openalex.org/W4410636403","https://openalex.org/W4410636995","https://openalex.org/W4411015398","https://openalex.org/W4411053140","https://openalex.org/W4411207733","https://openalex.org/W4411436162","https://openalex.org/W4411464992","https://openalex.org/W4411549717","https://openalex.org/W4411552468","https://openalex.org/W4412082194","https://openalex.org/W4412704015","https://openalex.org/W4413361361","https://openalex.org/W4413679888","https://openalex.org/W4414575275","https://openalex.org/W4415797703"],"related_works":[],"abstract_inverted_index":{"The":[0],"increasing":[1],"volume,":[2],"velocity,":[3],"and":[4,21,38,57,63,88,101,115,128,142,169,176],"sophistication":[5],"of":[6,99,145,157],"cyber":[7],"threats":[8],"have":[9,67],"placed":[10],"immense":[11],"pressure":[12],"on":[13],"modern":[14],"Security":[15],"Operations":[16],"Centers":[17],"(SOCs).":[18],"Traditional":[19],"rule-based":[20],"manual":[22],"processes":[23],"are":[24],"proving":[25],"insufficient,":[26],"leading":[27],"to":[28,51],"alert":[29,78],"fatigue,":[30],"delayed":[31],"responses,":[32],"high":[33],"false-positive":[34],"rates,":[35],"analyst":[36,129],"dependency,":[37],"escalating":[39],"operational":[40,118],"costs.":[41],"Recent":[42],"advancements":[43],"in":[44,71,96,180],"Artificial":[45],"Intelligence":[46],"(AI)":[47],"offer":[48],"new":[49],"opportunities":[50],"transform":[52],"SOC":[53,106,160,181],"workflows":[54],"through":[55],"automation":[56],"augmentation.":[58],"Large":[59],"Language":[60],"Models":[61],"(LLMs)":[62],"autonomous":[64],"AI":[65,102,178],"agents":[66,103],"shown":[68],"strong":[69],"potential":[70],"enhancing":[72],"capabilities":[73,116],"such":[74],"as":[75],"log":[76],"summarization,":[77],"triage,":[79],"threat":[80],"intelligence,":[81],"incident":[82],"response,":[83],"report":[84],"generation,":[85],"asset":[86],"discovery,":[87],"vulnerability":[89],"management.":[90],"This":[91,162],"paper":[92],"reviews":[93],"recent":[94],"developments":[95],"the":[97,143,155],"application":[98],"LLMs":[100],"across":[104],"these":[105,121],"functions,":[107],"introducing":[108],"a":[109],"taxonomy":[110],"that":[111],"organizes":[112],"their":[113],"roles":[114],"within":[117],"pipelines.":[119],"While":[120],"technologies":[122],"improve":[123],"detection":[124],"accuracy,":[125],"response":[126],"time,":[127],"support,":[130],"challenges":[131],"persist,":[132],"including":[133],"model":[134,153],"interpretability,":[135],"adversarial":[136],"robustness,":[137],"integration":[138,158,179],"with":[139,159],"legacy":[140],"systems,":[141],"risk":[144],"hallucinations":[146],"or":[147],"data":[148],"leakage.":[149],"A":[150],"detailed":[151],"capability-maturity":[152],"outlines":[154,170],"levels":[156],"tasks.":[161],"survey":[163],"synthesizes":[164],"trends,":[165],"identifies":[166],"persistent":[167],"limitations,":[168],"future":[171],"directions":[172],"for":[173],"trustworthy,":[174],"explainable,":[175],"safe":[177],"environments.":[182]},"counts_by_year":[{"year":2026,"cited_by_count":23},{"year":2025,"cited_by_count":1}],"updated_date":"2026-08-18T07:49:30.821534","created_date":"2025-11-05T00:00:00"}