The AI-Cybersecurity Nexus: How Large Language Models are Reshaping Threat Intelligence and Digital Defense

Read full text
Authors: Recep Özbay, Merve Çelebi, Uraz Yavanoğlu
Cited by: 1
References: 122

Abstract

As cybersecurity threats become more sophisticated, the integration of Large Language Models (LLMs) into defensive and analytical systems is transforming the field. This paper presents a PRISMA-guided bibliometric and thematic review of 149 studies published between 2015 and 2025, including 117 peer-reviewed journal and conference articles, examining publication trends and dominant research themes in LLM-enabled cybersecurity, organized around five research questions: (i) secure incorporation of LLMs into cyber threat intelligence workflows; (ii) hybrid architectures for privacy-preserving and real-time threat detection; (iii) LLM-enabled secure code remediation; (iv) adversarial misuse and dual-use risks; and (v) multi-layer defense strategies addressing prompt injection, model inversion, and data poisoning. Drawing on over 100 primary studies, the analysis highlights key trends, methodological innovations, and recurring vulnerabilities. Notable developments include decentralized trust-enhanced frameworks, context-aware remediation systems, and simulation-based red teaming. However, gaps persist in adversarial robustness, standardization of evaluation, and ethical governance. By mapping research across technical, operational, and policy dimensions, this review provides a structured basis for advancing trustworthy, resilient, and secure LLMs deployments in high-stakes cybersecurity contexts.

Fields of Study & Subjects

Intelligence Security War Strategy Adversarial Robustness in Machine Learning Information and Cyber Security

Publication details

Journal / source
IEEE Access
Publisher
Institute of Electrical and Electronics Engineers (IEEE)
Volume
14
Pages
15558–15587
Publication date
1 January 2026
Language
EN