{"id":"https://openalex.org/W7225460384","doi":"https://doi.org/10.55670/fpll.futech.5.4.5","title":"Client-side brute force attack detection leveraging large language models","display_name":"Client-side brute force attack detection leveraging large language models","publication_year":2026,"publication_date":"2026-11-08","ids":{"openalex":"https://openalex.org/W7225460384","doi":"https://doi.org/10.55670/fpll.futech.5.4.5"},"language":"en","primary_location":{"id":"doi:10.55670/fpll.futech.5.4.5","doi":"https://doi.org/10.55670/fpll.futech.5.4.5","is_oa":true,"landing_page_url":"https://doi.org/10.55670/fpll.futech.5.4.5","pdf_url":"https://fupubco.com/futech/article/download/1091/370/2740","source":{"id":"https://openalex.org/S4387279145","display_name":"Future Technology","issn_l":"2832-0379","issn":["2832-0379"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Technology","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://fupubco.com/futech/article/download/1091/370/2740","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101713549","display_name":"Israa Ahmed Abbas","orcid":"https://orcid.org/0009-0009-1999-7828","observed_orcids":["https://orcid.org/0009-0009-1999-7828"]},"institutions":[{"id":"https://openalex.org/I78277041","display_name":"University of Diyala","ror":"https://ror.org/01eb5yv70","country_code":"IQ","type":"education","lineage":["https://openalex.org/I78277041"]}],"countries":["IQ"],"is_corresponding":false,"raw_author_name":"Israa A. Abbas","raw_affiliation_strings":["Computer Science Department , College of Science , University of Diyala , Baquba , Iraq"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science Department , College of Science , University of Diyala , Baquba , Iraq","institution_ids":["https://openalex.org/I78277041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102759230","display_name":"Taha Mohammed Hasan","orcid":"https://orcid.org/0000-0002-4464-4655","observed_orcids":["https://orcid.org/0000-0002-4464-4655"]},"institutions":[{"id":"https://openalex.org/I78277041","display_name":"University of Diyala","ror":"https://ror.org/01eb5yv70","country_code":"IQ","type":"education","lineage":["https://openalex.org/I78277041"]}],"countries":["IQ"],"is_corresponding":false,"raw_author_name":"Taha M. Hasan","raw_affiliation_strings":["Computer Science Department , College of Science , University of Diyala , Baquba , Iraq"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science Department , College of Science , University of Diyala , Baquba , Iraq","institution_ids":["https://openalex.org/I78277041"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5027555973","display_name":"Ruaa Azzah Suhail","orcid":"https://orcid.org/0009-0006-8877-7632","observed_orcids":["https://orcid.org/0009-0006-8877-7632"]},"institutions":[{"id":"https://openalex.org/I78277041","display_name":"University of Diyala","ror":"https://ror.org/01eb5yv70","country_code":"IQ","type":"education","lineage":["https://openalex.org/I78277041"]}],"countries":["IQ"],"is_corresponding":false,"raw_author_name":"Ruaa A. Suhail","raw_affiliation_strings":["Computer Science Department , College of Science , University of Diyala , Baquba , Iraq"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science Department , College of Science , University of Diyala , Baquba , Iraq","institution_ids":["https://openalex.org/I78277041"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I78277041"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"5","issue":"4","first_page":"49","last_page":"62"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.5586000084877014,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.5586000084877014,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.267300009727478,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.1356000006198883,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/brute-force-attack-detection","display_name":"brute force attack detection","score":0.8970000147819519},{"id":"https://openalex.org/keywords/credential-stuffing","display_name":"credential stuffing","score":0.7670000195503235},{"id":"https://openalex.org/keywords/email-authentication","display_name":"email authentication","score":0.972000002861023},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"anomaly detection","score":0.6819999814033508},{"id":"https://openalex.org/keywords/real-time-authentication","display_name":"real-time authentication","score":0.44999998807907104}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7893999814987183},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6794000267982483},{"id":"https://openalex.org/C2777810591","wikidata":"https://www.wikidata.org/wiki/Q16861606","display_name":"Credential","level":2,"score":0.5388000011444092},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.5232999920845032},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.4706999957561493},{"id":"https://openalex.org/C113324615","wikidata":"https://www.wikidata.org/wiki/Q472302","display_name":"Login","level":2,"score":0.43560001254081726},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.4131999909877777},{"id":"https://openalex.org/C207468940","wikidata":"https://www.wikidata.org/wiki/Q869370","display_name":"Brute-force attack","level":3,"score":0.38830000162124634},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.3587000072002411},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.3580000102519989},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.35409998893737793},{"id":"https://openalex.org/C188198153","wikidata":"https://www.wikidata.org/wiki/Q1613840","display_name":"Limiting","level":2,"score":0.33329999446868896},{"id":"https://openalex.org/C113328881","wikidata":"https://www.wikidata.org/wiki/Q599809","display_name":"Dictionary attack","level":3,"score":0.322299987077713},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.31310001015663147},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.29899999499320984},{"id":"https://openalex.org/C2780741293","wikidata":"https://www.wikidata.org/wiki/Q4818019","display_name":"Attack patterns","level":3,"score":0.28369998931884766},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.26989999413490295},{"id":"https://openalex.org/C2780615836","wikidata":"https://www.wikidata.org/wiki/Q2471869","display_name":"USable","level":2,"score":0.26899999380111694},{"id":"https://openalex.org/C131129157","wikidata":"https://www.wikidata.org/wiki/Q1059963","display_name":"Challenge\u2013response authentication","level":4,"score":0.2687999904155731},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.25049999356269836}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.55670/fpll.futech.5.4.5","doi":"https://doi.org/10.55670/fpll.futech.5.4.5","is_oa":true,"landing_page_url":"https://doi.org/10.55670/fpll.futech.5.4.5","pdf_url":"https://fupubco.com/futech/article/download/1091/370/2740","source":{"id":"https://openalex.org/S4387279145","display_name":"Future Technology","issn_l":"2832-0379","issn":["2832-0379"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Technology","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.55670/fpll.futech.5.4.5","doi":"https://doi.org/10.55670/fpll.futech.5.4.5","is_oa":true,"landing_page_url":"https://doi.org/10.55670/fpll.futech.5.4.5","pdf_url":"https://fupubco.com/futech/article/download/1091/370/2740","source":{"id":"https://openalex.org/S4387279145","display_name":"Future Technology","issn_l":"2832-0379","issn":["2832-0379"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Technology","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7225460384.pdf","grobid_xml":"https://content.openalex.org/works/W7225460384.grobid-xml"},"referenced_works_count":25,"referenced_works":["https://openalex.org/W2069054745","https://openalex.org/W2520445601","https://openalex.org/W2584343393","https://openalex.org/W2933127114","https://openalex.org/W2963704216","https://openalex.org/W3022534249","https://openalex.org/W3157639148","https://openalex.org/W3164952570","https://openalex.org/W3205600320","https://openalex.org/W4210595268","https://openalex.org/W4379538552","https://openalex.org/W4391582407","https://openalex.org/W4403659027","https://openalex.org/W4405254715","https://openalex.org/W4405760810","https://openalex.org/W4406489069","https://openalex.org/W4406489840","https://openalex.org/W4408619130","https://openalex.org/W4411675341","https://openalex.org/W4415273418","https://openalex.org/W4416073403","https://openalex.org/W4416113018","https://openalex.org/W4417026148","https://openalex.org/W7124430326","https://openalex.org/W7160982810"],"related_works":["https://openalex.org/W7163886791","https://openalex.org/W7221166932","https://openalex.org/W7203717286","https://openalex.org/W7202205768","https://openalex.org/W7129591124","https://openalex.org/W7214770319","https://openalex.org/W4416381550","https://openalex.org/W4400896910","https://openalex.org/W4399773878","https://openalex.org/W3036197589"],"abstract_inverted_index":{"For":[0],"email":[1,211],"authentication":[2,8,59,121,212],"systems,":[3],"the":[4,62,78,83,105,157,196],"last":[5],"mile":[6],"of":[7,88,125,140,147,198],"poses":[9],"a":[10,54,137,203],"critical":[11],"security":[12,213],"challenge,":[13],"as":[14,96,129,202],"attackers":[15],"leverage":[16],"known,":[17],"real":[18,73],"logins":[19],"to":[20],"bypass":[21],"established":[22],"server-side":[23],"protections":[24],"against":[25,42,185,214],"brute-force":[26],"attacks":[27,45],"and":[28,36,85,91,99,131,167,178,191,206,216],"credential":[29],"stuffing.":[30],"Traditional":[31],"methods":[32],"like":[33],"rate":[34,139],"limiting":[35],"threshold":[37],"anomaly":[38],"detection":[39],"are":[40],"ineffective":[41],"distributed,":[43],"stealthy":[44],"that":[46],"mimic":[47],"normal":[48],"user":[49,158,183],"activity.":[50],"This":[51],"paper":[52],"proposes":[53],"novel":[55],"framework":[56,80,115],"for":[57,107,164,209],"detecting":[58],"sequences":[60],"on":[61],"client":[63],"side":[64],"by":[65],"leveraging":[66],"lightweight":[67],"Large":[68],"Language":[69],"Models":[70],"(LLMs)":[71],"in":[72,169,188],"time.":[74],"Unlike":[75],"signature-based":[76],"approaches,":[77],"proposed":[79],"can":[81],"\"explain\"":[82],"temporal":[84],"contextual":[86],"characteristics":[87],"login":[89],"behavior":[90],"detect":[92],"anomalous":[93],"sequences,":[94],"such":[95],"high-frequency":[97],"bursts":[98],"low-and-slow":[100],"last-mile":[101,210],"reassembly":[102],"attacks,":[103,130],"without":[104,155],"need":[106],"predefined":[108],"signatures":[109],"or":[110],"centralized":[111],"log":[112],"aggregation.":[113],"The":[114,160,193],"was":[116,162],"tested":[117],"with":[118,136],"2.5":[119],"million":[120,124,174],"sessions,":[122],"1":[123],"which":[126],"were":[127],"marked":[128],"achieved":[132],"98.4%":[133],"attack-detection":[134],"accuracy":[135],"false-positive":[138],"1.2%.":[141],"With":[142],"an":[143],"average":[144],"response":[145],"time":[146],"180":[148],"ms,":[149],"it":[150],"achieves":[151],"near":[152],"real-time":[153],"inference":[154],"impacting":[156],"experience.":[159],"system":[161],"live-deployed":[163],"six":[165],"months":[166],"succeeded":[168],"blocking":[170],"more":[171,180],"than":[172,181],"1.2":[173],"malicious":[175],"logon":[176],"attempts":[177],"safeguarding":[179],"850,000":[182],"accounts":[184],"traditional":[186],"baselines":[187],"both":[189],"scale":[190],"precision.":[192],"results":[194],"demonstrate":[195],"promise":[197],"lightweight,":[199],"client-side":[200],"LLMs":[201],"privacy-safe,":[204],"low-resource,":[205],"robust":[207],"solution":[208],"current":[215],"future":[217],"brute":[218],"force":[219],"attack":[220],"vectors.":[221]},"counts_by_year":[],"updated_date":"2026-11-09T13:22:03.289127","created_date":"2026-11-08T00:00:00"}