<?xml version="1.0" encoding="UTF-8"?>
<modsCollection xmlns="http://www.loc.gov/mods/v3">
<mods ID="cohen-etal-2026-lisaa">
    <titleInfo>
        <title>LISAA: A Framework for Large Language Model Information Security Awareness Assessment</title>
    </titleInfo>
    <name type="personal">
        <namePart type="given">Ofir</namePart>
        <namePart type="family">Cohen</namePart>
        <role>
            <roleTerm authority="marcrelator" type="text">author</roleTerm>
        </role>
    </name>
    <name type="personal">
        <namePart type="given">Gil</namePart>
        <namePart type="given">Ari</namePart>
        <namePart type="family">Agmon</namePart>
        <role>
            <roleTerm authority="marcrelator" type="text">author</roleTerm>
        </role>
    </name>
    <name type="personal">
        <namePart type="given">Rami</namePart>
        <namePart type="family">Puzis</namePart>
        <role>
            <roleTerm authority="marcrelator" type="text">author</roleTerm>
        </role>
    </name>
    <name type="personal">
        <namePart type="given">Asaf</namePart>
        <namePart type="family">Shabtai</namePart>
        <role>
            <roleTerm authority="marcrelator" type="text">author</roleTerm>
        </role>
    </name>
    <originInfo>
        <dateIssued>2026-10</dateIssued>
    </originInfo>
    <typeOfResource>text</typeOfResource>
    <relatedItem type="host">
        <titleInfo>
            <title>Findings of the Association for Computational Linguistics: EMNLP 2026</title>
        </titleInfo>
        <name type="personal">
            <namePart type="given">Hung-Yi</namePart>
            <namePart type="family">Lee</namePart>
            <role>
                <roleTerm authority="marcrelator" type="text">editor</roleTerm>
            </role>
        </name>
        <name type="personal">
            <namePart type="given">Sunipa</namePart>
            <namePart type="family">Dev</namePart>
            <role>
                <roleTerm authority="marcrelator" type="text">editor</roleTerm>
            </role>
        </name>
        <name type="personal">
            <namePart type="given">Jessy</namePart>
            <namePart type="family">Li</namePart>
            <role>
                <roleTerm authority="marcrelator" type="text">editor</roleTerm>
            </role>
        </name>
        <name type="personal">
            <namePart type="given">Desmond</namePart>
            <namePart type="family">Elliott</namePart>
            <role>
                <roleTerm authority="marcrelator" type="text">editor</roleTerm>
            </role>
        </name>
        <originInfo>
            <publisher>Association for Computational Linguistics</publisher>
            <place>
                <placeTerm type="text">Budapest, Hungary</placeTerm>
            </place>
        </originInfo>
        <genre authority="marcgt">conference publication</genre>
        <identifier type="isbn">979-8-89176-462-0</identifier>
    </relatedItem>
    <abstract>LLM-based assistants have become ubiquitous, yet information security awareness (ISA) remains an underexplored aspect of LLM safety. ISA encompasses not only security knowledge, but also the attitudes and behaviors required to recognize implicit security risks and avoid prioritizing user satisfaction over secure guidance. We introduce LISAA, a framework for evaluating LLM ISA under realistic end-user interactions. The framework includes a dataset of 100 realistic scenarios spanning all criteria of an ISA taxonomy, each with a tension between implicit security implications and user satisfaction. We further introduce methods for systematically refining realistic ISA scenarios from authentic user queries and for selecting reliable LLM judges without requiring large annotated datasets. Robustness analyses show that LISAA rankings remain stable under scenario resampling and stochastic generation, while construct-validity experiments demonstrate sensitivity to changes in security behavior. Applying LISAA to leading LLMs reveals that many widely deployed models still exhibit medium-to-low ISA levels, and that strong performance on traditional cybersecurity knowledge benchmarks does not necessarily translate to high ISA. In addition, the framework enables comparative analyses across model families, revealing consistent trends such as higher ISA in newer and larger variants, although meaningful gaps persist even among recent models. We release the dataset, evaluation pipeline, source code, and an online tool for evaluating new models using the LISAA framework.</abstract>
    <identifier type="citekey">cohen-etal-2026-lisaa</identifier>
    <location>
        <url>https://aclanthology.org/2026.findings-emnlp.1276/</url>
    </location>
    <part>
        <date>2026-10</date>
        <extent unit="page">
            <start>27017</start>
            <end>27046</end>
        </extent>
    </part>
</mods>
</modsCollection>

%0 Conference Proceedings
%T LISAA: A Framework for Large Language Model Information Security Awareness Assessment
%A Cohen, Ofir
%A Agmon, Gil Ari
%A Puzis, Rami
%A Shabtai, Asaf
%Y Lee, Hung-Yi
%Y Dev, Sunipa
%Y Li, Jessy
%Y Elliott, Desmond
%S Findings of the Association for Computational Linguistics: EMNLP 2026
%D 2026
%8 October
%I Association for Computational Linguistics
%C Budapest, Hungary
%@ 979-8-89176-462-0
%F cohen-etal-2026-lisaa
%X LLM-based assistants have become ubiquitous, yet information security awareness (ISA) remains an underexplored aspect of LLM safety. ISA encompasses not only security knowledge, but also the attitudes and behaviors required to recognize implicit security risks and avoid prioritizing user satisfaction over secure guidance. We introduce LISAA, a framework for evaluating LLM ISA under realistic end-user interactions. The framework includes a dataset of 100 realistic scenarios spanning all criteria of an ISA taxonomy, each with a tension between implicit security implications and user satisfaction. We further introduce methods for systematically refining realistic ISA scenarios from authentic user queries and for selecting reliable LLM judges without requiring large annotated datasets. Robustness analyses show that LISAA rankings remain stable under scenario resampling and stochastic generation, while construct-validity experiments demonstrate sensitivity to changes in security behavior. Applying LISAA to leading LLMs reveals that many widely deployed models still exhibit medium-to-low ISA levels, and that strong performance on traditional cybersecurity knowledge benchmarks does not necessarily translate to high ISA. In addition, the framework enables comparative analyses across model families, revealing consistent trends such as higher ISA in newer and larger variants, although meaningful gaps persist even among recent models. We release the dataset, evaluation pipeline, source code, and an online tool for evaluating new models using the LISAA framework.
%U https://aclanthology.org/2026.findings-emnlp.1276/
%P 27017-27046

Markdown (Informal)

[LISAA: A Framework for Large Language Model Information Security Awareness Assessment](https://aclanthology.org/2026.findings-emnlp.1276/) (Cohen et al., Findings 2026)

• LISAA: A Framework for Large Language Model Information Security Awareness Assessment (Cohen et al., Findings 2026)

ACL

• Ofir Cohen, Gil Ari Agmon, Rami Puzis, and Asaf Shabtai. 2026. LISAA: A Framework for Large Language Model Information Security Awareness Assessment. In Findings of the Association for Computational Linguistics: EMNLP 2026, pages 27017–27046, Budapest, Hungary. Association for Computational Linguistics.