Generative AI in cybersecurity

Author Identifier (ORCID)

Leslie Sikos’s ORCID record ORCID Logo

Abstract

This book explores the most common generative AI (GenAI) tools and techniques used by malicious actors for hacking and cyber-deception, along with the security risks of large language models (LLMs). It also covers how LLM deployment and use can be secured, and how generative AI can be utilized in SOC automation. The rapid advancements and growing variety of publicly available generative AI tools enables cybersecurity use cases for threat modeling, security awareness support, web application scanning, actionable insights, and alert fatigue prevention. However, they also came with a steep rise in the number of offensive/rogue/malicious generative AI applications. With large language models, social engineering tactics can reach new heights in the efficiency of phishing campaigns and cyber-deception via synthetic media generation (misleading deepfake images and videos, faceswapping, morphs, and voice clones). The result is a new era of cybersecurity that necessitates innovative approaches to detect and mitigate sophisticated cyberattacks, and to prevent hyper-realistic cyber-deception. This work provides a starting point for researchers and students diving into malicious chatbot use, system administrators trying to harden the security of GenAI deployments, and organizations prone to sensitive data leak through shadow AI. It also benefits SOC analysts considering generative AI for partially automating incident detection and response, and GenAI vendors working on security guardrails against malicious prompting.

Keywords

Generative AI, cybersecurity, large language models, cyber deception, phishing, security operations center

Document Type

Book

Date of Publication

11-16-2025

E-ISSN

978-3-032-05250-6

Publication Title

Generative AI in Cybersecurity

Publisher

Springer Cham

School

School of Science

RAS ID

84547

Copyright

subscription content

Recommended Citation

Sikos, L. (2025). Generative AI in cybersecurity. Springer Cham. https://doi.org/10.1007/978-3-032-05250-6

Share

 
COinS
 

Link to publisher version (DOI)

10.1007/978-3-032-05250-6