An Approach for a Supporting Multi-LLM System for Automated Certification Based on the German IT-Grundschutz

• URL: http://arxiv.org/abs/2606.25608v1
• Date: Wed, 24 Jun 2026 09:16:13 GMT
• Title: An Approach for a Supporting Multi-LLM System for Automated Certification Based on the German IT-Grundschutz
• Abstract summary: This paper presents a novel approach to perform semi-automated BSI IT-Grundschutz certification using a MultiLarge Language Model system (MLS)<n>Facing the challenges of the Network and Information Security Directive 2 (NIS2) directive, a shortage of specialists, and high implementation costs, our MLS architecture aims to increase efficiency, reduce costs, and support certifiers.
• Score: 0.0
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: This paper presents a novel approach to perform semi-automated BSI IT-Grundschutz certification using a MultiLarge Language Model system (MLS) with Hybrid RetrievalAugmented Generation (HybridRAG). Facing the challenges of the Network and Information Security Directive 2 (NIS2) directive, a shortage of specialists, and high implementation costs, our MLS architecture aims to increase efficiency, reduce costs, and support certifiers in maintaining the quality of security concepts while meeting the increased demand for certifications of newly affected companies. The system combines Large Language Models (LLMs) and Knowledge Graphs (KGs) to support different phases of the certification process, including protection needs assessment, modeling, IT-Grundschutz check, measure consolidation, and subsequent realization. Our architecture addresses the growing demand for security concepts and offers an approach to handle the digital security challenges introduced by NIS2.

Related papers

• Probabilistic Agents in Deterministic Audits: Evaluating Multi-Agent Systems for Automated Audits Based on the German IT-Grundschutz [0.0]
  NIS-2 Directive mandates robust Risk Management from thousands of small and medium enterprises.<n>IT-GS certification is resource-intensive and requires a high level of manual effort for documentation, validation, and revision.<n>This paper presents the technical implementation and empirical evaluation of a Multi-Agent System (MAS) architecture combined with Hybrid Retrieval Augmented Generation (HybridRAG) for the partial automation of IT-GS certification.
  arXiv  Detail & Related papers  (2026-06-24T09:31:06Z)
• JT-SAFE-V2: Safety-by-Design Foundation Model with World-Context Data [53.59414720003988]
  We introduce JT-Safe-V2, a large language model designed to advance the safety and trustworthiness of foundation models.<n>We also propose Safe-MoMA, a framework that enables traceable and efficient inference through the orchestrated deployment of multiple models and agents.
  arXiv  Detail & Related papers  (2026-05-23T05:57:30Z)
• Toward a Multi-Layer ML-Based Security Framework for Industrial IoT [5.9556977806856155]
  We present the research framework and contributions of our doctoral thesis, which aims to develop a lightweight, Machine Learning (ML)-based security framework for IIoT environments.<n>We first describe our adoption of the Tm-IIoT trust model and the Hybrid IIoT architecture as foundational baselines, then introduce the Trust Convergence Acceleration (TCA) approach.<n>We then propose a real-world deployment architecture based on affordable, open-source hardware, designed to implement and extend the security framework.
  arXiv  Detail & Related papers  (2026-03-25T09:16:43Z)
• Multi-Agent Collaborative Intrusion Detection for Low-Altitude Economy IoT: An LLM-Enhanced Agentic AI Framework [60.72591149679355]
  The rapid expansion of low-altitude economy Internet of Things (LAE-IoT) networks has created unprecedented security challenges.<n>Traditional intrusion detection systems fail to tackle the unique characteristics of aerial IoT environments.<n>We introduce a large language model (LLM)-enabled agentic AI framework for enhancing intrusion detection in LAE-IoT networks.
  arXiv  Detail & Related papers  (2026-01-25T12:47:25Z)
• LAsset: An LLM-assisted Security Asset Identification Framework for System-on-Chip (SoC) Verification [1.7639836127386677]
  LAsset is a novel framework that identifies security assets from both hardware design specifications and register-transfer level (RTL) descriptions.<n>It achieves high classification accuracy, reaching up to 90% recall rate in system-on-chip (SoC) design, and 93% recall rate in IP designs.
  arXiv  Detail & Related papers  (2026-01-06T00:53:23Z)
• SV-LLM: An Agentic Approach for SoC Security Verification using Large Language Models [8.912091484067508]
  We introduce SV-LLM, a novel multi-agent assistant system designed to automate and enhance system-on-chip (SoC) security verification.<n>By integrating specialized agents for tasks like verification question answering, security asset identification, threat modeling, test plan and property generation, vulnerability detection, and simulation-based bug validation, SV-LLM streamlines the workflow.<n>The system aims to reduce manual intervention, improve accuracy, and accelerate security analysis, supporting proactive identification and mitigation of risks early in the design cycle.
  arXiv  Detail & Related papers  (2025-06-25T13:31:13Z)
• Scaling an ISO Compliance Practice: Strategic Insights from Building a \$1m+ Cybersecurity Certification Line [0.0]
  This article describes a successful design, implementation, and scaling of a cybersecurity certification practice in Armanino LLP.<n>I founded an industry practice from stakeholder through implementation to aid mid-market and high-growth firms.<n>During one year, the initiative brought in over $1 million in new service revenue, expanded our portfolio of clients by 150%.
  arXiv  Detail & Related papers  (2025-05-16T17:21:55Z)
• In-Context Experience Replay Facilitates Safety Red-Teaming of Text-to-Image Diffusion Models [104.94706600050557]
  Text-to-image (T2I) models have shown remarkable progress, but their potential to generate harmful content remains a critical concern in the ML community.<n>We propose ICER, a novel red-teaming framework that generates interpretable and semantic meaningful problematic prompts.<n>Our work provides crucial insights for developing more robust safety mechanisms in T2I systems.
  arXiv  Detail & Related papers  (2024-11-25T04:17:24Z)
• ACRIC: Securing Legacy Communication Networks via Authenticated Cyclic Redundancy Integrity Check [98.34702864029796]
  Recent security incidents in safety-critical industries exposed how the lack of proper message authentication enables attackers to inject malicious commands or alter system behavior.<n>These shortcomings have prompted new regulations that emphasize the pressing need to strengthen cybersecurity.<n>We introduce ACRIC, a message authentication solution to secure legacy industrial communications.
  arXiv  Detail & Related papers  (2024-11-21T18:26:05Z)
• Global Challenge for Safe and Secure LLMs Track 1 [57.08717321907755]
  The Global Challenge for Safe and Secure Large Language Models (LLMs) is a pioneering initiative organized by AI Singapore (AISG) and the CyberSG R&D Programme Office (CRPO) This paper introduces the Global Challenge for Safe and Secure Large Language Models (LLMs), a pioneering initiative organized by AI Singapore (AISG) and the CyberSG R&D Programme Office (CRPO) to foster the development of advanced defense mechanisms against automated jailbreaking attacks.
  arXiv  Detail & Related papers  (2024-11-21T08:20:31Z)
• Multi-Domain Polarization for Enhancing the Physical Layer Security of MIMO Systems [51.125572358881556]
  A novel Physical Layer Security (PLS) framework is conceived for enhancing the security of wireless communication systems. We design a sophisticated key generation scheme based on multi-domain polarization, and the corresponding receivers. Our findings indicate that the innovative PLS framework effectively enhances the security and reliability of wireless communication systems.
  arXiv  Detail & Related papers  (2023-10-31T05:50:24Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.