Evaluating the Usability of LLMs in Threat Intelligence Enrichment
Not on the map. Why?
Abstract (arXiv)
Large Language Models (LLMs) have the potential to significantly enhance threat intelligence by automating the collection, preprocessing, and analysis of threat data. However, the usability of these tools is critical to ensure their effective adoption by security professionals. Despite the advanced capabilities of LLMs, concerns about their reliability, accuracy, and potential for generating inaccurate information persist. This study conducts a comprehensive usability evaluation of five LLMs ChatGPT, Gemini, Cohere, Copilot, and Meta AI focusing on their user interface design, error handling, learning curve, performance, and integration with existing tools in threat intelligence enrichment. Utilizing a heuristic walkthrough and a user study methodology, we identify key usability issues and offer actionable recommendations for improvement. Our findings aim to bridge the gap between LLM functionality and user experience, thereby promoting more efficient and accurate threat intelligence practices by ensuring these tools are user-friendly and reliable.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Builds on 10 of its 38 references that are in the map. First posted on arXiv 23 Sep 2024.
Builds on
10 of 38 references.
References · 10
- 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,854
- 2019SuperGLUE: A Stickier Benchmark for General-Purpose Language Understanding Systemscited by 1,718
- 2024CTIBench: A Benchmark for Evaluating LLMs in Cyber Threat Intelligencecited by 61
- 2024A Comprehensive Overview of Large Language Models (LLMs) for Cyber Defences: Opportunities and Directionscited by 33
- 2023Multimodality of AI for Education: Towards Artificial General Intelligencecited by 21
- 2022Block Hunter: Federated Learning for Cyber Threat Hunting in Blockchain-based IIoT Networkscited by 15
- 2024Evaluation of LLM Chatbots for OSINT-based Cyber Threat Awarenesscited by 14
- 2024Actionable Cyber Threat Intelligence using Knowledge Graphs and Large Language Modelscited by 14
- 2022Security Considerations for Virtual Reality Systemscited by 5
- 2022The Dichotomy of Cloud and IoT: Cloud-Assisted IoT From a Security Perspectivecited by 5
Built on by
Citing papers per year: 2025: 1; 2026: 1.
2 papers.