REFINE: A Resilient Evolution Framework for Intelligent Enterprise Alert Triage in Security Operations Centers
REFINE is introduced, an LLM-agent framework for enterprise alert triage that enforces recall = 1.0 as a hard constraint during evolution to maximize auto-closure of false positives, and identifies judgment blind spots by combining alert distributions with model error boundaries.
Hui-Min Chen, Quan Long, Yan-Hao Wang
· 0 citations