SecQA: A Concise Question-Answering Dataset for Evaluating Large Language Models in Computer Security
Not on the map. Why?
Abstract (arXiv)
In this paper, we introduce SecQA, a novel dataset tailored for evaluating the performance of Large Language Models (LLMs) in the domain of computer security. Utilizing multiple-choice questions generated by GPT-4 based on the "Computer Systems Security: Planning for Success" textbook, SecQA aims to assess LLMs' understanding and application of security principles. We detail the structure and intent of SecQA, which includes two versions of increasing complexity, to provide a concise evaluation across various difficulty levels. Additionally, we present an extensive evaluation of prominent LLMs, including GPT-3.5-Turbo, GPT-4, Llama-2, Vicuna, Mistral, and Zephyr models, using both 0-shot and 5-shot learning settings. Our results, encapsulated in the SecQA v1 and v2 datasets, highlight the varying capabilities and limitations of these models in the computer security context. This study not only offers insights into the current state of LLMs in understanding security-related content but also establishes SecQA as a benchmark for future advancements in this critical research area.
Key facts. Cited by 37 papers in the map (data through 14 Oct 2026). Builds on 9 of its 16 references that are in the map. First posted on arXiv 26 Dec 2023.
Builds on
9 of 16 references.
References · 9
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2022Beyond the Imitation Game: Quantifying and extrapolating the capabilities of language modelscited by 1,998
- 2023Zephyr: Direct Distillation of LM Alignmentcited by 506
- 2021V2W-BERT: A Framework for Effective Hierarchical Multiclass Classification of Software Vulnerabilitiescited by 13
- 2021MalBERT: Using Transformers for Cybersecurity and Malicious Software Detectioncited by 12
- 2021CVSS-BERT: Explainable Natural Language Processing to Determine the Severity of a Computer Security Vulnerability from its Descriptioncited by 10
- 2023Anomaly Detection of Command Shell Sessions based on DistilBERT: Unsupervised and Supervised Approachescited by 2
Built on by
Citing papers per year: 2024: 11; 2025: 19; 2026: 7.
37 papers.
Sort:
By area:
- 2024CyberSecEval 2: A Wide-Ranging Cybersecurity Evaluation Suite for Large Language Modelscited by 89
- 2024When LLMs Meet Cybersecurity: A Systematic Literature Reviewcited by 71
- 2024CTIBench: A Benchmark for Evaluating LLMs in Cyber Threat Intelligencecited by 62
- 2024CyberMetric: A Benchmark Dataset based on Retrieval-Augmented Generation for Evaluating LLMs in Cybersecurity Knowledgecited by 55
- 2025Llama-3.1-FoundationAI-SecurityLLM-8B-Instruct Technical Reportcited by 23
- 2025Cyber-Zero: Training Cybersecurity Agents without Runtimecited by 22
- 2024SecBench: A Comprehensive Multi-Dimensional Benchmarking Dataset for LLMs in Cybersecuritycited by 21
- 2025A Framework for Evaluating Emerging Cyberattack Capabilities of AIcited by 16
- 2025ExCyTIn-Bench: Evaluating LLM agents on Cyber Threat Investigationcited by 15
- 2025Training Language Model Agents to Find Vulnerabilities with CTF-Dojocited by 15
- 2024SECURE: Benchmarking Large Language Models for Cybersecuritycited by 14
- 2025OCCULT: Evaluating Large Language Models for Offensive Cyber Operation Capabilitiescited by 12
25 more
- 2025Dynamic Risk Assessments for Offensive Cybersecurity Agentscited by 8
- 2025Benchmarking Misuse Mitigation Against Covert Adversariescited by 8
- 2024TriviaHG: A Dataset for Automatic Hint Generation from Factoid Questionscited by 7
- 2024Chinese SafetyQA: A Safety Short-form Factuality Benchmark for Large Language Modelscited by 7
- 2024Dynamic Intelligence Assessment: Benchmarking LLMs on the Road to AGI with a Focus on Model Confidencecited by 5
- 2024Multi-Agent Collaboration in Incident Response with Large Language Modelscited by 4
- 2025AttackSeqBench: Benchmarking the Capabilities of LLMs for Attack Sequences Understandingcited by 4
- 2025AthenaBench: A Dynamic Benchmark for Evaluating LLMs in Cyber Threat Intelligencecited by 4
- 2025CyberLLMInstruct: A Pseudo-malicious Dataset Revealing Safety-performance Trade-offs in Cyber Security LLM Fine-tuningcited by 3
- 2025AutoBnB-RAG: Enhancing Multi-Agent Incident Response with Retrieval-Augmented Generationcited by 3
- 2026Capture the Flags: Family-Based Evaluation of Agentic LLMs via Semantics-Preserving Transformationscited by 3
- 2026SIR-Bench: Evaluating Investigation Depth in Security Incident Response Agentscited by 3
- 2025MEQA: A Meta-Evaluation Framework for Question & Answer LLM Benchmarkscited by 2
- 2025Grounding Synthetic Data Evaluations of Language Models in Unsupervised Document Corporacited by 2
- 2025HackWorld: Evaluating Computer-Use Agents on Exploiting Web Application Vulnerabilitiescited by 2
- 2025EAGER: Edge-Aligned LLM Defense for Robust, Efficient, and Accurate Cybersecurity Question Answeringcited by 2
- 2025CryptoQA: A Large-scale Question-answering Dataset for AI-assisted Cryptographycited by 1
- 2026CyberCertBench: Evaluating LLMs in Cybersecurity Certification Knowledgecited by 1
- 2024LISAA: A Framework for Large Language Model Information Security Awareness Assessmentcited by 0
- 2025Identifying and Addressing User-level Security Concerns in Smart Homes Using "Smaller" LLMscited by 0
- 2025Assessing the Software Security Comprehension of Large Language Modelscited by 0
- 2026CyberMaskQA: A Privacy-Aware Benchmark for Evaluating Large Language Models in Cybersecurity Question Answeringcited by 0
- 2026Domyn-Small: A European 10B Reasoning Language Modelcited by 0
- 2026CyberFactory: Scaling Cyber Security Capabilities with Instances from the Wildcited by 0
- 2026LLM4Trust: Exploring the Capabilities of Large Language Models for Trust Evaluationcited by 0
- 2026LLM4Trust: Exploring the Capabilities of Large Language Models for Trust Evaluation27 Sep 2026
- 2026CyberFactory: Scaling Cyber Security Capabilities with Instances from the Wild24 Aug 2026
- 2026CyberMaskQA: A Privacy-Aware Benchmark for Evaluating Large Language Models in Cybersecurity Question Answering23 May 2026
- 2026Domyn-Small: A European 10B Reasoning Language Model13 May 2026
- 2026CyberCertBench: Evaluating LLMs in Cybersecurity Certification Knowledge22 Apr 2026
- 2026SIR-Bench: Evaluating Investigation Depth in Security Incident Response Agents13 Apr 2026
- 2026Capture the Flags: Family-Based Evaluation of Agentic LLMs via Semantics-Preserving Transformations5 Feb 2026
- 2025Assessing the Software Security Comprehension of Large Language Models24 Dec 2025
- 2025CryptoQA: A Large-scale Question-answering Dataset for AI-assisted Cryptography2 Dec 2025
- 2025EAGER: Edge-Aligned LLM Defense for Robust, Efficient, and Accurate Cybersecurity Question Answering24 Nov 2025
- 2025AthenaBench: A Dynamic Benchmark for Evaluating LLMs in Cyber Threat Intelligence3 Nov 2025
- 2025HackWorld: Evaluating Computer-Use Agents on Exploiting Web Application Vulnerabilities14 Oct 2025
25 more
- 2025Identifying and Addressing User-level Security Concerns in Smart Homes Using "Smaller" LLMs23 Sep 2025
- 2025Training Language Model Agents to Find Vulnerabilities with CTF-Dojo25 Aug 2025
- 2025AutoBnB-RAG: Enhancing Multi-Agent Incident Response with Retrieval-Augmented Generation18 Aug 2025
- 2025Llama-3.1-FoundationAI-SecurityLLM-8B-Instruct Technical Report1 Aug 2025
- 2025Cyber-Zero: Training Cybersecurity Agents without Runtime29 Jul 2025
- 2025ExCyTIn-Bench: Evaluating LLM agents on Cyber Threat Investigation14 Jul 2025
- 2025Benchmarking Misuse Mitigation Against Covert Adversaries6 Jun 2025
- 2025Dynamic Risk Assessments for Offensive Cybersecurity Agents23 May 2025
- 2025Grounding Synthetic Data Evaluations of Language Models in Unsupervised Document Corpora13 May 2025
- 2025MEQA: A Meta-Evaluation Framework for Question & Answer LLM Benchmarks18 Apr 2025
- 2025A Framework for Evaluating Emerging Cyberattack Capabilities of AI14 Mar 2025
- 2025CyberLLMInstruct: A Pseudo-malicious Dataset Revealing Safety-performance Trade-offs in Cyber Security LLM Fine-tuning12 Mar 2025
- 2025AttackSeqBench: Benchmarking the Capabilities of LLMs for Attack Sequences Understanding5 Mar 2025
- 2025OCCULT: Evaluating Large Language Models for Offensive Cyber Operation Capabilities18 Feb 2025
- 2024SecBench: A Comprehensive Multi-Dimensional Benchmarking Dataset for LLMs in Cybersecurity30 Dec 2024
- 2024Chinese SafetyQA: A Safety Short-form Factuality Benchmark for Large Language Models17 Dec 2024
- 2024Multi-Agent Collaboration in Incident Response with Large Language Models1 Dec 2024
- 2024LISAA: A Framework for Large Language Model Information Security Awareness Assessment20 Nov 2024
- 2024Dynamic Intelligence Assessment: Benchmarking LLMs on the Road to AGI with a Focus on Model Confidence20 Oct 2024
- 2024CTIBench: A Benchmark for Evaluating LLMs in Cyber Threat Intelligence11 Jun 2024
- 2024SECURE: Benchmarking Large Language Models for Cybersecurity30 May 2024
- 2024When LLMs Meet Cybersecurity: A Systematic Literature Review6 May 2024
- 2024CyberSecEval 2: A Wide-Ranging Cybersecurity Evaluation Suite for Large Language Models19 Apr 2024
- 2024TriviaHG: A Dataset for Automatic Hint Generation from Factoid Questions27 Mar 2024
- 2024CyberMetric: A Benchmark Dataset based on Retrieval-Augmented Generation for Evaluating LLMs in Cybersecurity Knowledge12 Feb 2024
- 2025Cyber-Zero: Training Cybersecurity Agents without Runtimecited by 22
- 2025ExCyTIn-Bench: Evaluating LLM agents on Cyber Threat Investigationcited by 15
- 2025Training Language Model Agents to Find Vulnerabilities with CTF-Dojocited by 15
- 2025Dynamic Risk Assessments for Offensive Cybersecurity Agentscited by 8
- 2024Multi-Agent Collaboration in Incident Response with Large Language Modelscited by 4
- 2026Capture the Flags: Family-Based Evaluation of Agentic LLMs via Semantics-Preserving Transformationscited by 3
- 2026SIR-Bench: Evaluating Investigation Depth in Security Incident Response Agentscited by 3
- 2025HackWorld: Evaluating Computer-Use Agents on Exploiting Web Application Vulnerabilitiescited by 2
- 2026CyberFactory: Scaling Cyber Security Capabilities with Instances from the Wildcited by 0
- 2026CyberFactory: Scaling Cyber Security Capabilities with Instances from the Wild24 Aug 2026
- 2026SIR-Bench: Evaluating Investigation Depth in Security Incident Response Agents13 Apr 2026
- 2026Capture the Flags: Family-Based Evaluation of Agentic LLMs via Semantics-Preserving Transformations5 Feb 2026
- 2025HackWorld: Evaluating Computer-Use Agents on Exploiting Web Application Vulnerabilities14 Oct 2025
- 2025Training Language Model Agents to Find Vulnerabilities with CTF-Dojo25 Aug 2025
- 2025Cyber-Zero: Training Cybersecurity Agents without Runtime29 Jul 2025
- 2025ExCyTIn-Bench: Evaluating LLM agents on Cyber Threat Investigation14 Jul 2025
- 2025Dynamic Risk Assessments for Offensive Cybersecurity Agents23 May 2025
- 2024Multi-Agent Collaboration in Incident Response with Large Language Models1 Dec 2024
- 2026Domyn-Small: A European 10B Reasoning Language Modelcited by 0
- 2026Domyn-Small: A European 10B Reasoning Language Model13 May 2026
- 2024When LLMs Meet Cybersecurity: A Systematic Literature Reviewcited by 71
- 2024CTIBench: A Benchmark for Evaluating LLMs in Cyber Threat Intelligencecited by 62
- 2025Llama-3.1-FoundationAI-SecurityLLM-8B-Instruct Technical Reportcited by 23
- 2024SecBench: A Comprehensive Multi-Dimensional Benchmarking Dataset for LLMs in Cybersecuritycited by 21
- 2025A Framework for Evaluating Emerging Cyberattack Capabilities of AIcited by 16
- 2024SECURE: Benchmarking Large Language Models for Cybersecuritycited by 14
- 2025OCCULT: Evaluating Large Language Models for Offensive Cyber Operation Capabilitiescited by 12
- 2025Benchmarking Misuse Mitigation Against Covert Adversariescited by 8
- 2024TriviaHG: A Dataset for Automatic Hint Generation from Factoid Questionscited by 7
- 2024Chinese SafetyQA: A Safety Short-form Factuality Benchmark for Large Language Modelscited by 7
- 2024Dynamic Intelligence Assessment: Benchmarking LLMs on the Road to AGI with a Focus on Model Confidencecited by 5
- 2025AttackSeqBench: Benchmarking the Capabilities of LLMs for Attack Sequences Understandingcited by 4
12 most cited of 22 All 22 (JSON)
- 2026LLM4Trust: Exploring the Capabilities of Large Language Models for Trust Evaluation27 Sep 2026
- 2026CyberMaskQA: A Privacy-Aware Benchmark for Evaluating Large Language Models in Cybersecurity Question Answering23 May 2026
- 2026CyberCertBench: Evaluating LLMs in Cybersecurity Certification Knowledge22 Apr 2026
- 2025Assessing the Software Security Comprehension of Large Language Models24 Dec 2025
- 2025CryptoQA: A Large-scale Question-answering Dataset for AI-assisted Cryptography2 Dec 2025
- 2025AthenaBench: A Dynamic Benchmark for Evaluating LLMs in Cyber Threat Intelligence3 Nov 2025
- 2025Identifying and Addressing User-level Security Concerns in Smart Homes Using "Smaller" LLMs23 Sep 2025
- 2025Llama-3.1-FoundationAI-SecurityLLM-8B-Instruct Technical Report1 Aug 2025
- 2025Benchmarking Misuse Mitigation Against Covert Adversaries6 Jun 2025
- 2025MEQA: A Meta-Evaluation Framework for Question & Answer LLM Benchmarks18 Apr 2025
- 2025A Framework for Evaluating Emerging Cyberattack Capabilities of AI14 Mar 2025
- 2025CyberLLMInstruct: A Pseudo-malicious Dataset Revealing Safety-performance Trade-offs in Cyber Security LLM Fine-tuning12 Mar 2025
12 newest of 22 All 22 (JSON)