AUTOMATICALLY PRIORITIZE SECURITY ISSUES FROM DIFFERENT TOOLS WITH AN LLM

Summary from the TLDR InfoSec newsletter

Security issue prioritization is a complex and time-consuming process that takes away time from resolving issues. This blog post proposes three scoring strategies that an LLM can use to rank security issues to combat this. The first strategy is to have the LLM assign a score based on provided criteria to each issue and sort the issues based on that score. The second strategy is to have the LLM use bubble sort and compare each issue pair-wise, which is more thorough than the first strategy but slower. The third strategy is to use an Elo system where a random sampling of issues is compared.