MoRSE: Bridging the Gap in Cybersecurity Expertise with Retrieval Augmented Generation
On the map: Retrieval-augmented generation → Privacy and security of RAG
Abstract (arXiv)
In this paper, we introduce MoRSE (Mixture of RAGs Security Experts), the first specialised AI chatbot for cybersecurity. MoRSE aims to provide comprehensive and complete knowledge about cybersecurity. MoRSE uses two RAG (Retrieval Augmented Generation) systems designed to retrieve and organize information from multidimensional cybersecurity contexts. MoRSE differs from traditional RAGs by using parallel retrievers that work together to retrieve semantically related information in different formats and structures. Unlike traditional Large Language Models (LLMs) that rely on Parametric Knowledge Bases, MoRSE retrieves relevant documents from Non-Parametric Knowledge Bases in response to user queries. Subsequently, MoRSE uses this information to generate accurate answers. In addition, MoRSE benefits from real-time updates to its knowledge bases, enabling continuous knowledge enrichment without retraining. We have evaluated the effectiveness of MoRSE against other state-of-the-art LLMs, evaluating the system on 600 cybersecurity specific questions. The experimental evaluation has shown that the improvement in terms of relevance and correctness of the answer is more than 10% compared to known solutions such as GPT-4 and Mixtral 7x8.
Key facts. Cited by 8 papers in the map (data through 7 Oct 2026). Placed in Privacy and security of RAG, one of 15 directions in Retrieval-augmented generation. Builds on 45 of its 97 references that are in the map. First posted on arXiv 22 Jul 2024.
Builds on
45 of 97 references.
References · 45
- 2017Attention Is All You Needcited by 59,932
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
- 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,160
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,393
- 2020Dense Passage Retrieval for Open-Domain Question Answeringcited by 3,779
- 2023Lost in the Middle: How Language Models Use Long Contextscited by 3,383
- 2023Mistral 7Bcited by 3,065
- 2021Pre-train, Prompt, and Predict: A Systematic Survey of Prompting Methods in Natural Language Processingcited by 2,222
- 2020REALM: Retrieval-Augmented Language Model Pre-Trainingcited by 2,126
- 2022Survey of Hallucination in Natural Language Generationcited by 2,056
33 more
- 2024Mixtral of Expertscited by 1,785
- 2023Is Your Code Generated by ChatGPT Really Correct? Rigorous Evaluation of Large Language Models for Code Generationcited by 1,332
- 2021Improving language models by retrieving from trillions of tokenscited by 1,278
- 2019Energy and Policy Considerations for Deep Learning in NLPcited by 1,242
- 2020Leveraging Passage Retrieval with Generative Models for Open Domain Question Answeringcited by 1,203
- 2022When Not to Trust Language Models: Investigating Effectiveness of Parametric and Non-Parametric Memoriescited by 1,103
- 2023In-Context Retrieval-Augmented Language Modelscited by 694
- 2021Retrieval Augmentation Reduces Hallucination in Conversationcited by 691
- 2022MTEB: Massive Text Embedding Benchmarkcited by 623
- 2022Precise Zero-Shot Dense Retrieval without Relevance Labelscited by 508
- 2022Large Language Models Struggle to Learn Long-Tail Knowledgecited by 452
- 2023Ragas: Automated Evaluation of Retrieval Augmented Generationcited by 408
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 380
- 2024MultiHop-RAG: Benchmarking Retrieval-Augmented Generation for Multi-Hop Queriescited by 253
- 2022RealTime QA: What's the Answer Right Now?cited by 239
- 2023ChatGPT: Jack of all trades, master of nonecited by 204
- 2020Answering Complex Open-Domain Questions with Multi-Hop Dense Retrievalcited by 160
- 2024To Believe or Not to Believe Your LLMcited by 120
- 2024RAGCache: Efficient Knowledge Caching for Retrieval-Augmented Generationcited by 97
- 2018Understanding the Origins of Bias in Word Embeddingscited by 90
- 2020Evolution of Semantic Similarity -- A Surveycited by 83
- 2023Getting pwn'd by AI: Penetration Testing with Large Language Modelscited by 82
- 2023Llama2Vec: Unsupervised Adaptation of Large Language Models for Dense Retrievalcited by 77
- 2023A Multi-Task Embedder For Retrieval Augmented LLMscited by 63
- 2022SecureBERT: A Domain-Specific Language Model for Cybersecuritycited by 60
- 2021AttacKG: Constructing Technique Knowledge Graph from Cyber Threat Intelligence Reportscited by 31
- 2024LOCALINTEL: Generating Organizational Threat Intelligence from Global and Local Cyber Knowledgecited by 22
- 2021EXTRACTOR: Extracting Attack Behavior from Threat Reportscited by 19
- 2024SemScore: Automated Evaluation of Instruction-Tuned LLMs based on Semantic Textual Similaritycited by 18
- 2017Improving Lexical Choice in Neural Machine Translationcited by 17
- 2023ChatIDS: Advancing Explainable Cybersecurity Using Generative AIcited by 12
- 2023KNN-LM Does Not Improve Open-ended Text Generationcited by 10
- 2023Web Content Filtering through knowledge distillation of Large Language Modelscited by 7
Built on by
Citing papers per year: 2025: 3; 2026: 5.
8 papers.
- 2025AutoBnB-RAG: Enhancing Multi-Agent Incident Response with Retrieval-Augmented Generationcited by 3
- 2025CyberMentor: AI Powered Learning Tool Platform to Address Diverse Student Needs in Cybersecurity Educationcited by 1
- 2025TITAN: Graph-Executable Reasoning for Cyber Threat Intelligencecited by 0
- 2026PriMod4AI: Lifecycle-Aware Privacy Threat Modeling for AI Systems using LLMcited by 0
- 2026CyberCane: Neuro-Symbolic RAG for Privacy-Preserving Phishing Detection with Formal Ontology Reasoningcited by 0
- 2026From Detection to Response: A Deep Learning and Retrieval-Augmented Generation Framework for Network Intrusion Mitigationcited by 0
- 2026MITRE-SAGE: A Multi-Agent Cybersecurity Question-Answering Modelcited by 0
- 2026NeuroGraph: An AI Graph-Driven Neuro-Symbolic Framework for Explainable Threat Reasoning in Advanced Manufacturingcited by 0
- 2026NeuroGraph: An AI Graph-Driven Neuro-Symbolic Framework for Explainable Threat Reasoning in Advanced Manufacturing1 Sep 2026
- 2026MITRE-SAGE: A Multi-Agent Cybersecurity Question-Answering Model3 Aug 2026
- 2026From Detection to Response: A Deep Learning and Retrieval-Augmented Generation Framework for Network Intrusion Mitigation18 May 2026
- 2026CyberCane: Neuro-Symbolic RAG for Privacy-Preserving Phishing Detection with Formal Ontology Reasoning26 Apr 2026
- 2026PriMod4AI: Lifecycle-Aware Privacy Threat Modeling for AI Systems using LLM4 Feb 2026
- 2025TITAN: Graph-Executable Reasoning for Cyber Threat Intelligence16 Oct 2025
- 2025AutoBnB-RAG: Enhancing Multi-Agent Incident Response with Retrieval-Augmented Generation18 Aug 2025
- 2025CyberMentor: AI Powered Learning Tool Platform to Address Diverse Student Needs in Cybersecurity Education16 Jan 2025
Similar, not cited
Close in wording, no citation either way
- 2025CyberBOT: Towards Reliable Cybersecurity Education via Ontology-Grounded Retrieval Augmented Generation
- 2024IntellBot: Retrieval Augmented LLM Chatbot for Cyber Threat Knowledge Delivery
- 2026Beyond RAG for Cyber Threat Intelligence: A Systematic Evaluation of Graph-Based and Agentic Retrieval
- 2025Large Language Models for Explainable Threat Intelligence
- 2025Adapting Large Language Models to Emerging Cybersecurity using Retrieval Augmented Generation
- 2024A RAG-Based Question-Answering Solution for Cyber-Attack Investigation and Attribution
- 2024Ontology-Aware RAG for Improved Question-Answering in Cybersecurity Education
- 2024CyberMetric: A Benchmark Dataset based on Retrieval-Augmented Generation for Evaluating LLMs in Cybersecurity Knowledge