RHINO: Guided Reasoning for Mapping Network Logs to Adversarial Tactics and Techniques with Large Language Models

arXiv:2510.14233 · cs.CR · Submitted 2025-10-16 · Read on arXiv

cs.CR

Submitted: 2025-10-16

Updated: 2026-10-27

Terminology

• Abstraction — 1× in this paper · explained in 1 episode
• Accuracy — 1× in this paper · explained in 1 episode
• Benchmark — 1× in this paper · explained in 2 episodes
• Contextual Awareness — 1× in this paper · explained in 2 episodes
• Hallucination — 1× in this paper · explained in 4 episodes
• Interpretability — 1× in this paper · explained in 15 episodes
• Semantic Gap — 1× in this paper · explained in 2 episodes
• Structured Reasoning — 1× in this paper · explained in 3 episodes

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Estimating the Social Cost of Corporate Data Breaches
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills