ON THE APPLICABILITY OF LARGE LANGUAGE MODELS TO SOFTWARE VULNERABILITY MANAGEMENT: A REVIEW OF RELEVANT WORKS
Abstract and keywords
Abstract (English):
This paper examines the general application of large-scale language models to address strategic issues in information and cybersecurity, specifically software vulnerability management. A review of the top-10 relevant scientific articles in the Russian segment examines solutions (hypothetical and implemented) based on language models and designed for management tasks regardless of the specific subject area. A comparative analysis of the review results is provided based on the year of publication, the application area, the specific tasks being solved and their implementation status, the selected models, integration with the system, and the specifics of the application. Specific conclusions are drawn, highlighting the growing relevance and broad coverage of subject areas, the diversity of the tasks being solved, the implementation complexity and popularity of OpenAI's GPT, and the need to integrate models into the overall system architecture (or at least into its information warehouse). The possibility of improving the performance of models using appropriate add-ons is noted. The final general conclusion is that large-scale language models hold promise for solving software vulnerability management problems.

Keywords:
information & cubersecurity, software, vulnerability, management, artificial intelligence, large language models, LLM
Text
Text (PDF): Read Download
References

1. Adilzhanova S.A., Қurasbek A.N., Kenzhebaeva M.O. Primenenie LLM v kiberbezopasnosti: obzor prilozhenij i uyazvimostej LLM // Vestnik Akademii grazhdanskoj aviatsii. 2025. № 3 (38). S. 118–136. DOI:https://doi.org/10.53364/24138614_2025_38_3_10.

2. Ivanov V.O. Mekhanizmy vozniknoveniya i podavleniya faktologicheskikh iskazhenij v avtoregressionnykh yazykovykh modelyakh // Nejrokompʹyutery: razrabotka, primenenie. 2025. T. 27. № 3. S. 40–48. DOI:https://doi.org/10.18127/j19998554-202503-06.

3. Leonov N.V. Metodologiya i elementy tekhnologii modelirovaniya strategicheskikh zadach upravleniya uyazvimostyami v PO. Chastʹ 1. Kontseptualʹnye osnovy i ontologicheskaya modelʹ // Zashchita informatsii. Insajd. 2025. № 3 (123). S. 17–21.

4. Leonov N.V. Metodologiya i elementy tekhnologii modelirovaniya strategicheskikh zadach upravleniya uyazvimostyami v PO. Chastʹ 2. Imitatsionnoe modelirovanie i otsenka sostoyaniya // Zashchita informatsii. Insajd. 2025. № 4 (124). S. 56–61.

5. Bondarenko E.V., Shumakov M.V., Ilʹinykh E.V. Issledovanie vozmozhnostej modeli LLM: novye gorizonty generatsii teksta // Ekonomicheskoe razvitie Rossii. 2024. T. 31. № 3. S. 83–85. DOI:https://doi.org/10.6060/ivecofin.2025653.738.

6. Ambartsumyan S.A., Mochalin D.E. Kontseptualʹnaya modelʹ sistemy upravleniya tsifrovymi dvojnikami proekta stroitelʹstva iz krupnogabaritnykh zhelezobetonnykh modulej na osnove bolʹshikh yazykovykh modelej // Stroitelʹnoe proizvodstvo. 2024. № 4. S. 17–22. DOI:https://doi.org/10.54950/26585340_2024_4_17.

7. Bulaev Ya.A., Burtsev D.S. Rolʹ bolʹshikh yazykovykh modelej v optimizatsii biznes-protsessov i upravlenii znaniyami v korporativnykh strukturakh // Zhurnal monetarnoj ekonomiki i menedzhmenta. 2025. № 7. S. 72–80. DOI:https://doi.org/10.26118/2782-4586.2025.36.39.009.

8. Mitsich A.D. Analiz primeneniya tsifrovykh tekhnologij v upravlenii finansami organizatsij // Vestnik evrazijskoj nauki. 2025. T. 17. № S2.

9. Dobrenko N.V., Dobrenko D.A., Ulizʹko M.V. Intellektualʹnaya podderzhka prinyatiya upravlencheskikh reshenij v MES-sistemakh s ispolʹzovaniem bolʹshikh yazykovykh modelej // Ekonomika. Pravo. Innovatsii. 2024. № 3. S. 47–59. DOI:https://doi.org/10.17586/2713-1874-2024-3-47-59.

10. Kalinovskaya I.N. Sovremennye metody sbora i obrabotki informatsii o rynke truda i napravleniya ikh ispolʹzovaniya v praktike upravleniya chelovecheskimi resursami // Vestnik Vitebskogo gosudarstvennogo tekhnologicheskogo universiteta. 2024. № 2 (48). S. 82–101. DOI:https://doi.org/10.24412/2079-7958-2024-2-82-101.

11. Ait A., Izquierdo J.L.C., Cabot J. HFCommunity: A Tool to Analyze the Hugging Face Hub Community // The proceedings of IEEE International Conference on Software Analysis, Evolution and Reengineering (Taipa, Macao, 21–24 March 2023). 2023. P. 728–732. DOI:https://doi.org/10.1109/SANER56733.2023.00080.

12. Berezovskij B.Yu. Metody i tekhnologii povysheniya effektivnosti raboty organizatsii na osnove iskusstvennogo intellekta // Vestnik nauki. 2025. T. 3. № 6 (87). S. 1687–1693.

13. Strizhov S.A., Belyaeva I.Yu., Abramovich S.Yu. Innovatsionnye podkhody k realizatsii ESG-strategij: rolʹ bolʹshikh yazykovykh modelej v investitsionnoj i korporativnoj praktike // Innovatsii i investitsii. 2025. № 10. S. 23–25.

14. Teja K.R., Liu C.-M. ESG Investing: A Statistically Valid Approach to Data-Driven Decision Making and the Impact of ESG Factors on Stock Returns and Risk // IEEE Access. 2024. Vol. 12. P. 69434–69444. DOI:https://doi.org/10.1109/ACCESS.2024.3401873.

15. Andronchik G.V. Optimizatsiya biznes-protsessov s pomoshchʹyu LLM // Universum: tekhnicheskie nauki. 2025. № 5-1 (134). S. 15–20.

16. Vedeneev V.A., Ershov E.V., Kovyrshin R.G. Modelʹ upravleniya znaniyami metallurgicheskogo predpriyatiya na osnove embedingovykh modelej // Vestnik Cherepovetskogo gosudarstvennogo universiteta. 2025. № 3 (126). S. 7–16. DOI:https://doi.org/10.23859/1994-0637-2025-3-126-1.

17. Antipova S.A., Tlyashev O.M. Perspektivy primeneniya mulʹtimodalʹnykh modelej iskusstvennogo intellekta v sistemakh podderzhki i prinyatiya reshenij voennogo naznacheniya // Voennaya myslʹ. 2024. № 6. S. 117–128.

18. Kovalyov A.K., Panov A.I. Primenenie predobuchennykh bolʹshikh yazykovykh modelej v zadachakh voploshchennogo iskusstvennogo intellekta // Doklady Rossijskoj akademii nauk. Matematika, informatika, protsessy upravleniya. 2022. T. 508. № 1. S. 94–99. DOI:https://doi.org/10.31857/S268695432207013X.

19. Butgereit L. A Comparison of Three AI Tutoring Bots Communicating in isiZulu Using OpenAI\'s GPT-3.5-turbo, GPT-4-turbo, and GPT-4o // The proceedings of IST-Africa Conference (Nairobi, Kenya, 28–30 May 2025). 2025. P. 1–8. DOI:https://doi.org/10.23919/IST-Africa67297.2025.11060061.

20. Matveev A.V., Ivanov A.Yu. Ispolʹzovanie bolʹshikh yazykovykh modelej v oblasti bezopasnosti v chrezvychajnykh situatsiyakh: obzor issledovanij i analiz vozmozhnostej // Nauchno-analiticheskij zhurnal «Vestnik Sankt-Peterburgskogo universiteta Gosudarstvennoj protivopozharnoj sluzhby MChS Rossii». 2025. № 3. S. 136–146. DOI:https://doi.org/10.61260/2218-130X-2025-3-136-146.

Login or Create
* Forgot password?