{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T04:16:34Z","timestamp":1783397794262,"version":"3.54.6"},"publisher-location":"Cham","reference-count":23,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032297228","type":"print"},{"value":"9783032297235","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-29723-5_8","type":"book-chapter","created":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T03:40:22Z","timestamp":1783395622000},"page":"137-155","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Using Large Language Models to Support Human Decision-Making in SOC Infrastructure Management"],"prefix":"10.1007","author":[{"given":"Stelios","family":"Agapiou","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Stelios","family":"Stylianou","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1273-8910","authenticated-orcid":false,"given":"Adamantini","family":"Peratikou","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4040-4942","authenticated-orcid":false,"given":"Eliana","family":"Stavrou","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3189-9421","authenticated-orcid":false,"given":"Stavros","family":"Stavrou","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,7,7]]},"reference":[{"key":"8_CR1","doi-asserted-by":"publisher","first-page":"227756","DOI":"10.1109\/ACCESS.2020.3045514","volume":"8","author":"M Vielberth","year":"2020","unstructured":"Vielberth, M., B\u00f6hm, F., Fichtinger, I., Pernul, G.: Security operations center: a systematic study and open challenges. IEEE Access 8, 227756\u2013227779 (2020). https:\/\/doi.org\/10.1109\/ACCESS.2020.3045514","journal-title":"IEEE Access"},{"key":"8_CR2","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103529","volume":"129","author":"O Forsberg","year":"2023","unstructured":"Forsberg, O., Frantti, T.: Technical performance metrics of a security operations center (SOC): systematic literature review and agenda for future research. Comput. Secur. 129, 103529 (2023). https:\/\/doi.org\/10.1016\/j.cose.2023.103529","journal-title":"Comput. Secur."},{"key":"8_CR3","first-page":"1037","volume-title":"Proceedings IEEE International Conference on Cyber Security and Resilience (CSR 2025)","author":"A Peratikou","year":"2025","unstructured":"Peratikou, A., Charalambous, E., Smyrli, P., Stavrou, S.: ATHENA: a federated architecture for cross-border cybersecurity operations and situational awareness. In: Proceedings IEEE International Conference on Cyber Security and Resilience (CSR 2025), pp. 1037\u20131042. IEEE (2025)"},{"key":"8_CR4","first-page":"1037","volume-title":"Proceedings IEEE International Conference on Cyber Security and Resilience (CSR)","author":"A Peratikou","year":"2025","unstructured":"Peratikou, A., Charalambous, E., Stavrou, E., Smyrli, P., Hadjichristophi, G., Stavrou, S.: CY-TRUST: a sectorial SOC framework for enhanced national and cross-border cybersecurity resilience. In: Proceedings IEEE International Conference on Cyber Security and Resilience (CSR), pp. 1037\u20131042. IEEE (2025)"},{"issue":"2","key":"8_CR5","doi-asserted-by":"publisher","first-page":"41","DOI":"10.1145\/3483424","volume":"55","author":"P Notaro","year":"2021","unstructured":"Notaro, P., Cardoso, J., Gerndt, M., Di Carlo, G.: A survey of AIOps methods for failure management in the cloud. ACM Comput. Surv. 55(2), 41 (2021). https:\/\/doi.org\/10.1145\/3483424","journal-title":"ACM Comput. Surv."},{"key":"8_CR6","doi-asserted-by":"publisher","first-page":"30716","DOI":"10.1109\/ACCESS.2022.3158939","volume":"10","author":"Y Lan","year":"2022","unstructured":"Lan, Y., Du, M., Jiang, J., Zhou, S., Zhang, P.: Automated log analysis: a systematic literature review. IEEE Access 10, 30716\u201330735 (2022). https:\/\/doi.org\/10.1109\/ACCESS.2022.3158939","journal-title":"IEEE Access"},{"issue":"9","key":"8_CR7","doi-asserted-by":"publisher","first-page":"216","DOI":"10.3390\/ai6090216","volume":"6","author":"R Jaffal","year":"2025","unstructured":"Jaffal, R., et al.: Large language models in cybersecurity: a survey of applications, vulnerabilities, and defense techniques. AI 6(9), 216 (2025). https:\/\/doi.org\/10.3390\/ai6090216","journal-title":"AI"},{"key":"8_CR8","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3290605.3300233","volume-title":"Proceedings of the 2019 Chi Conference on Human Factors in Computing Systems","author":"S Amershi","year":"2019","unstructured":"Amershi, S., Weld, D., Vorvoreanu, M., et al.: Guidelines for human\u2013AI interaction. In: Proceedings of the 2019 Chi Conference on Human Factors in Computing Systems, pp. 1\u201313. ACM (2019). https:\/\/doi.org\/10.1145\/3290605.3300233"},{"issue":"1","key":"8_CR9","doi-asserted-by":"publisher","first-page":"153","DOI":"10.1093\/jopart\/muac007","volume":"33","author":"M Busuioc","year":"2023","unstructured":"Busuioc, M., Lodge, M.: Artificial intelligence and the \u201cmachinery of government\u201d: automation bias and accountability. J. Public Adm. Res. Theory 33(1), 153\u2013168 (2023). https:\/\/doi.org\/10.1093\/jopart\/muac007","journal-title":"J. Public Adm. Res. Theory"},{"key":"8_CR10","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.101963","volume":"97","author":"A Chowdhury","year":"2020","unstructured":"Chowdhury, A., Alahmadi, A., Taskin, N., Kumar, V.: Time pressure in human cybersecurity behavior: a theoretical framework and countermeasures. Comput. Secur. 97, 101963 (2020). https:\/\/doi.org\/10.1016\/j.cose.2020.101963","journal-title":"Comput. Secur."},{"key":"8_CR11","doi-asserted-by":"publisher","first-page":"114","DOI":"10.1016\/j.cose.2018.02.011","volume":"74","author":"C Zhong","year":"2018","unstructured":"Zhong, C., et al.: Studying analysts\u2019 data triage operations in a security operations center. Comput. Secur. 74, 114\u2013131 (2018). https:\/\/doi.org\/10.1016\/j.cose.2018.02.011","journal-title":"Comput. Secur."},{"key":"8_CR12","doi-asserted-by":"publisher","DOI":"10.1145\/3663529.3663826","volume-title":"Companion Proceedings of the 32nd ACM International Conference on the Foundations of Software Engineering","author":"E Yu","year":"2024","unstructured":"Yu, E., et al.: MonitorAssistant: simplifying cloud service monitoring via large language models. In: Companion Proceedings of the 32nd ACM International Conference on the Foundations of Software Engineering. ACM (2024). https:\/\/doi.org\/10.1145\/3663529.3663826"},{"key":"8_CR13","doi-asserted-by":"publisher","DOI":"10.1145\/3639476.3639773","volume-title":"Proceedings ACM International Conference on the Foundations of Software Engineering (FSE 2024), NIER Track","author":"Y Wang","year":"2024","unstructured":"Wang, Y., Sirres, R., Chen, T.H.: LogExpert: log-based recommended resolutions generation using large language models. In: Proceedings ACM International Conference on the Foundations of Software Engineering (FSE 2024), NIER Track. ACM (2024). https:\/\/doi.org\/10.1145\/3639476.3639773"},{"key":"8_CR14","volume-title":"Proceedings International Conference on Information Security and Cryptology, LNCS","author":"S Koumourou","year":"2025","unstructured":"Koumourou, S., Peratikou, A., Stavrou, E., Theodoulou, S., Stavrou, S.: Reducing SOC analysts\u2019 alert fatigue via real-time cyber threat intelligence correlation and deduplication. In: Proceedings International Conference on Information Security and Cryptology, LNCS. Springer, Cham (2025)"},{"issue":"3","key":"8_CR15","doi-asserted-by":"publisher","first-page":"55","DOI":"10.3390\/jcp5030055","volume":"5","author":"G Palma","year":"2025","unstructured":"Palma, G., Cecchi, G., Caronna, M., Rizzo, A.: Leveraging large language models for scalable and explainable cybersecurity log analysis. J. Cybersecurity Priv. 5(3), 55 (2025). https:\/\/doi.org\/10.3390\/jcp5030055","journal-title":"J. Cybersecurity Priv."},{"key":"8_CR16","doi-asserted-by":"publisher","first-page":"3005","DOI":"10.1007\/s10462-022-10246-w","volume":"55","author":"E Mosqueira-Rey","year":"2022","unstructured":"Mosqueira-Rey, E., Alonso-R\u00edos, D., Hern\u00e1ndez-Gonz\u00e1lez, J., Fern\u00e1ndez-Leal, A., L\u00f3pez-Nores, M.: Human-in-the-loop machine learning: a state of the art. Artif. Intell. Rev. 55, 3005\u20133054 (2022). https:\/\/doi.org\/10.1007\/s10462-022-10246-w","journal-title":"Artif. Intell. Rev."},{"key":"8_CR17","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijhcs.2020.102551","volume":"146","author":"D Shin","year":"2021","unstructured":"Shin, D.: The effects of explainability and causability on perception, trust, and acceptance: implications for explainable AI. International Journal of Human\u2013Computer Studies. 146, 102551 (2021). https:\/\/doi.org\/10.1016\/j.ijhcs.2020.102551","journal-title":"International Journal of Human\u2013Computer Studies"},{"key":"8_CR18","doi-asserted-by":"publisher","unstructured":"Bu\u00e7inca, Z., Malaya, M.B., Gajos, K.Z.: To trust or to think: cognitive forcing functions can reduce overreliance on AI in AI-assisted decision making. Proc. ACM Hum.-Comput. Interact. 5(CSCW1), 188 (2021). https:\/\/doi.org\/10.1145\/3449287","DOI":"10.1145\/3449287"},{"key":"8_CR19","doi-asserted-by":"publisher","unstructured":"Romeo, A., Conti, G.: Trust in AI-based decision support systems: a systematic review of automation bias and algorithm aversion. AI Soc. (2025). https:\/\/doi.org\/10.1007\/s00146-025-02422-7","DOI":"10.1007\/s00146-025-02422-7"},{"key":"8_CR20","doi-asserted-by":"publisher","DOI":"10.1109\/CASCON62161.2024.10838171","volume-title":"2024 34th International Conference on Collaborative Advances in Software and COmputiNg (CASCON)","author":"K Sarda","year":"2024","unstructured":"Sarda, K., et al.: Augmenting automatic root cause identification with incident alerts using LLMs. In: 2024 34th International Conference on Collaborative Advances in Software and COmputiNg (CASCON). IEEE (2024). https:\/\/doi.org\/10.1109\/CASCON62161.2024.10838171"},{"key":"8_CR21","doi-asserted-by":"publisher","first-page":"25","DOI":"10.1007\/s10664-021-10063-9","volume":"27","author":"B Li","year":"2022","unstructured":"Li, B., et al.: Enjoy your observability: an industrial survey of microservice tracing and analysis. Empir. Softw. Eng. 27, 25 (2022). https:\/\/doi.org\/10.1007\/s10664-021-10063-9","journal-title":"Empir. Softw. Eng."},{"key":"8_CR22","doi-asserted-by":"publisher","first-page":"168","DOI":"10.1109\/ISSRE62328.2024.00026","volume-title":"Proceedings IEEE International Symposium on Software Reliability Engineering (ISSRE 2024)","author":"W Zhang","year":"2024","unstructured":"Zhang, W., et al.: Leveraging RAG-enhanced large language models for semi-supervised log anomaly detection. In: Proceedings IEEE International Symposium on Software Reliability Engineering (ISSRE 2024), pp. 168\u2013179 (2024). https:\/\/doi.org\/10.1109\/ISSRE62328.2024.00026"},{"key":"8_CR23","doi-asserted-by":"publisher","DOI":"10.1109\/ICWS62655.2024.00129","volume-title":"Proceedings IEEE International Conference on Web Services (ICWS 2024)","author":"L Zhang","year":"2024","unstructured":"Zhang, L., Jia, J., Wang, Z.: LogRAG: semi-supervised log-based anomaly detection via retrieval-augmented generation. In: Proceedings IEEE International Conference on Web Services (ICWS 2024). IEEE (2024). https:\/\/doi.org\/10.1109\/ICWS62655.2024.00129"}],"container-title":["Lecture Notes in Computer Science","HCI for Cybersecurity, Privacy and Trust"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-29723-5_8","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T03:40:23Z","timestamp":1783395623000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-29723-5_8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9783032297228","9783032297235"],"references-count":23,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-29723-5_8","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"7 July 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"HCII","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Human-Computer Interaction","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Montreal, QC","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Canada","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2026","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26 July 2026","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"31 July 2026","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"28","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"hcii2026","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/2026.hci.international\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}