A large language model-based security operations decision-support agent for enterprise cybersecurity: architecture, risk-aware coordination, and sensitivity to partial log token masking

Fu , Shanning, Han , Ya, Bekmuratov , Dilshod

Techscience.uz - техника фанлари долзарб масалалри · 2026-yil

Annotatsiya

This study evaluates an LLM-based security-operations decision-support architecture using a context-matched rule baseline, knowledge augmentation, and a policy-conditioned recommendation layer. On AIT-LDS, the LLM substantially improves detection over the tested deterministic baseline, while knowledge and recommendation conditioning reduce false positives. Robustness is examined through deterministic token masking and dependence-aware analysis.

Maqola ma’lumotlari
MualliflarFu , Shanning, Han , Ya, Bekmuratov , Dilshod
JurnalTechscience.uz - техника фанлари долзарб масалалри
NashriyotЖиззах политехника институти
ISSN3030-3702, 3030-3702
Nashr sanasi2026-10-12
Jild4
Son10
Betlar22-35
TilIngliz
Ilmiy sohaTexnika
DOI10.47390/ts-v4i10y2026n03
Indeksga qo‘shilgan2026-10-13

Kalit so‘zlar

large language model; security operations center; LLM decision support; log analysis; risk-aware coordination; token-masking sensitivity, katta til modeli; xavfsizlik operatsiyalari markazi; LLM asosida qaror qabul qilishni qo‘llab-quvvatlash; jurnal tahlili; xavfni hisobga oluvchi muvofiqlashtirish; tokenlarni niqoblashga sezgirlik.

Ilmiy soha

Iqtibos keltirish

APAFu , Shanning, Han , Ya, & Bekmuratov , Dilshod (2026). A LARGE LANGUAGE MODEL-BASED SECURITY OPERATIONS DECISION-SUPPORT AGENT FOR ENTERPRISE CYBERSECURITY: ARCHITECTURE, RISK-AWARE COORDINATION, AND SENSITIVITY TO PARTIAL LOG TOKEN MASKING. Techscience.uz - техника фанлари долзарб масалалри, 4(10), 22-35. https://doi.org/10.47390/ts-v4i10y2026n03
GOST (OAK)Fu , Shanning, Han , Ya, Bekmuratov , Dilshod A LARGE LANGUAGE MODEL-BASED SECURITY OPERATIONS DECISION-SUPPORT AGENT FOR ENTERPRISE CYBERSECURITY: ARCHITECTURE, RISK-AWARE COORDINATION, AND SENSITIVITY TO PARTIAL LOG TOKEN MASKING // Techscience.uz - техника фанлари долзарб масалалри. – 2026. – T. 4, № 10. – P. 22-35. – DOI: 10.47390/ts-v4i10y2026n03.
MLAFu , Shanning, Han , Ya, and Bekmuratov , Dilshod. “A LARGE LANGUAGE MODEL-BASED SECURITY OPERATIONS DECISION-SUPPORT AGENT FOR ENTERPRISE CYBERSECURITY: ARCHITECTURE, RISK-AWARE COORDINATION, AND SENSITIVITY TO PARTIAL LOG TOKEN MASKING.” Techscience.uz - техника фанлари долзарб масалалри, 4(10), 22-35, 2026. https://doi.org/10.47390/ts-v4i10y2026n03
ChicagoFu , Shanning, Han , Ya, and Bekmuratov , Dilshod. “A LARGE LANGUAGE MODEL-BASED SECURITY OPERATIONS DECISION-SUPPORT AGENT FOR ENTERPRISE CYBERSECURITY: ARCHITECTURE, RISK-AWARE COORDINATION, AND SENSITIVITY TO PARTIAL LOG TOKEN MASKING.” Techscience.uz - техника фанлари долзарб масалалри, 4(10), 22-35 (2026). https://doi.org/10.47390/ts-v4i10y2026n03
HarvardFu , Shanning, Han , Ya, and Bekmuratov , Dilshod (2026) ‘A LARGE LANGUAGE MODEL-BASED SECURITY OPERATIONS DECISION-SUPPORT AGENT FOR ENTERPRISE CYBERSECURITY: ARCHITECTURE, RISK-AWARE COORDINATION, AND SENSITIVITY TO PARTIAL LOG TOKEN MASKING’, Techscience.uz - техника фанлари долзарб масалалри, 4(10), 22-35. https://doi.org/10.47390/ts-v4i10y2026n03
BibTeX
@article{fushanning2026,
  title = {A LARGE LANGUAGE MODEL-BASED SECURITY OPERATIONS DECISION-SUPPORT AGENT FOR ENTERPRISE CYBERSECURITY: ARCHITECTURE, RISK-AWARE COORDINATION, AND SENSITIVITY TO PARTIAL LOG TOKEN MASKING},
  author = {Fu , Shanning and Han , Ya and Bekmuratov , Dilshod},
  journal = {Techscience.uz - техника фанлари долзарб масалалри},
  year = {2026},
  volume = {4},
  number = {10},
  pages = {22-35},
  doi = {10.47390/ts-v4i10y2026n03},
  url = {https://doi.org/10.47390/ts-v4i10y2026n03}
}

Boshqa maqola uchun iqtibos tayyorlash

Techscience.uz - техника фанлари долзарб масалалри jurnalidan boshqa maqolalar

Techscience.uz - техника фанлари долзарб масалалри — barcha maqolalar · 2026-yil arxivi

Texnika sohasidagi boshqa maqolalar

Texnika sohasidagi OAK jurnallari