Adversarial Threats to AI-Augmented Security Operations: A Systematic Survey

The integration of large language models into enterprise security operations centers has created a new and largely unexamined attack surface. This survey systematically maps adversarial threats targeting AI-augmented security systems, including retrieval-augmented generation poisoning, prompt injection, multi-agent hijacking, and concept drift under adversarial conditions. We propose a unified taxonomy of attack classes, evaluate existing defense mechanisms, and identify critical open problems. To address the chief gap identified the absence of a standardized evaluation framework for LLM-integrated SOC environments we introduce RedSOC, an open-source adversarial evaluation framework, and report empirical results from a 15-scenario benchmark spanning three attack classes. RedSOC achieves 100% detection across all evaluated scenarios while revealing significant variation in attack success rates: indirect prompt injection achieves 100% attack success against undefended RAG pipelines, corpus poisoning achieves 80%, and direct prompt injection achieves 60%, yielding an overall attack success rate of 80%.