{"id":"https://openalex.org/W4414646072","doi":"https://doi.org/10.1109/access.2025.3616235","title":"LENS: Lightweight and Explainable LLM-Based APT Detection at the Edge for 6G Security","display_name":"LENS: Lightweight and Explainable LLM-Based APT Detection at the Edge for 6G Security","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4414646072","doi":"https://doi.org/10.1109/access.2025.3616235"},"language":"en","primary_location":{"id":"doi:10.1109/access.2025.3616235","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3616235","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2025.3616235","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5025254665","display_name":"Suhib Bani Melhem","orcid":"https://orcid.org/0000-0003-4998-3418"},"institutions":[{"id":"https://openalex.org/I161913731","display_name":"Al Ain University","ror":"https://ror.org/023abrt21","country_code":"AE","type":"education","lineage":["https://openalex.org/I161913731"]}],"countries":["AE"],"is_corresponding":true,"raw_author_name":"Suhib Bani Melhem","raw_affiliation_strings":["Department of Cybersecurity, College of Engineering, Al Ain University, Abu Dhabi, United Arab Emirates","The Department of Cybersecurity, College of Engineering, Al Ain University, Abu Dhabi, United Arab Emirates"],"raw_orcid":"https://orcid.org/0000-0003-4998-3418","affiliations":[{"raw_affiliation_string":"Department of Cybersecurity, College of Engineering, Al Ain University, Abu Dhabi, United Arab Emirates","institution_ids":["https://openalex.org/I161913731"]},{"raw_affiliation_string":"The Department of Cybersecurity, College of Engineering, Al Ain University, Abu Dhabi, United Arab Emirates","institution_ids":["https://openalex.org/I161913731"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054023569","display_name":"Muhammed Golec","orcid":"https://orcid.org/0000-0003-0146-9735"},"institutions":[{"id":"https://openalex.org/I2799978770","display_name":"X-Fab (Germany)","ror":"https://ror.org/030bh9196","country_code":"DE","type":"company","lineage":["https://openalex.org/I2799978770"]},{"id":"https://openalex.org/I4405392","display_name":"Bo\u011fazi\u00e7i University","ror":"https://ror.org/03z9tma90","country_code":"TR","type":"education","lineage":["https://openalex.org/I4405392"]}],"countries":["DE","TR"],"is_corresponding":false,"raw_author_name":"Muhammed Golec","raw_affiliation_strings":["Department of Computer Engineering, Boğaziçi University, Istanbul, Türkiye","The Department of Computer Engineering, Bogazici University, Istanbul, Turkiye"],"raw_orcid":"https://orcid.org/0000-0003-0146-9735","affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Boğaziçi University, Istanbul, Türkiye","institution_ids":["https://openalex.org/I2799978770"]},{"raw_affiliation_string":"The Department of Computer Engineering, Bogazici University, Istanbul, Turkiye","institution_ids":["https://openalex.org/I4405392"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054520204","display_name":"Abdulmalik Alwarafy","orcid":"https://orcid.org/0000-0003-0652-3948"},"institutions":[{"id":"https://openalex.org/I201726411","display_name":"United Arab Emirates University","ror":"https://ror.org/01km6p862","country_code":"AE","type":"education","lineage":["https://openalex.org/I201726411"]},{"id":"https://openalex.org/I91044093","display_name":"Zayed University","ror":"https://ror.org/03snqfa66","country_code":"AE","type":"education","lineage":["https://openalex.org/I91044093"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Abdulmalik Alwarafy","raw_affiliation_strings":["Department of Computer and Network Engineering, College of Information Technology, United Arab Emirates University, Al Ain, United Arab Emirates","The College of Technological Innovation, Zayed University, Abu Dhabi, United Arab Emirates"],"raw_orcid":"https://orcid.org/0000-0003-0652-3948","affiliations":[{"raw_affiliation_string":"Department of Computer and Network Engineering, College of Information Technology, United Arab Emirates University, Al Ain, United Arab Emirates","institution_ids":["https://openalex.org/I201726411"]},{"raw_affiliation_string":"The College of Technological Innovation, Zayed University, Abu Dhabi, United Arab Emirates","institution_ids":["https://openalex.org/I91044093"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5066703648","display_name":"Yaser Khamayseh","orcid":"https://orcid.org/0000-0002-8334-3281"},"institutions":[{"id":"https://openalex.org/I201726411","display_name":"United Arab Emirates University","ror":"https://ror.org/01km6p862","country_code":"AE","type":"education","lineage":["https://openalex.org/I201726411"]},{"id":"https://openalex.org/I91044093","display_name":"Zayed University","ror":"https://ror.org/03snqfa66","country_code":"AE","type":"education","lineage":["https://openalex.org/I91044093"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Yaser Khamayseh","raw_affiliation_strings":["College of Technological Innovation, Zayed University, Abu Dhabi, United Arab Emirates","The Department of Computer and Network Engineering, College of Information Technology, United Arab Emirates University, Al Ain, United Arab Emirates"],"raw_orcid":"https://orcid.org/0000-0002-8334-3281","affiliations":[{"raw_affiliation_string":"College of Technological Innovation, Zayed University, Abu Dhabi, United Arab Emirates","institution_ids":["https://openalex.org/I91044093"]},{"raw_affiliation_string":"The Department of Computer and Network Engineering, College of Information Technology, United Arab Emirates University, Al Ain, United Arab Emirates","institution_ids":["https://openalex.org/I201726411"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5025254665"],"corresponding_institution_ids":["https://openalex.org/I161913731"],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":4.1552,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.94493503,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"13","issue":null,"first_page":"172402","last_page":"172415"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12131","display_name":"Wireless Signal Modulation Classification","score":0.9574000239372253,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12131","display_name":"Wireless Signal Modulation Classification","score":0.9574000239372253,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.947700023651123,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14117","display_name":"Integrated Circuits and Semiconductor Failure Analysis","score":0.9419000148773193,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/metadata","display_name":"Metadata","score":0.6061000227928162},{"id":"https://openalex.org/keywords/enhanced-data-rates-for-gsm-evolution","display_name":"Enhanced Data Rates for GSM Evolution","score":0.6000000238418579},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.44830000400543213},{"id":"https://openalex.org/keywords/edge-device","display_name":"Edge device","score":0.44020000100135803},{"id":"https://openalex.org/keywords/node","display_name":"Node (physics)","score":0.4162999987602234},{"id":"https://openalex.org/keywords/edge-computing","display_name":"Edge computing","score":0.4068000018596649},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.357699990272522},{"id":"https://openalex.org/keywords/wireless","display_name":"Wireless","score":0.3573000133037567},{"id":"https://openalex.org/keywords/wireless-network","display_name":"Wireless network","score":0.35409998893737793}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.859499990940094},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.6061000227928162},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.6000000238418579},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.44830000400543213},{"id":"https://openalex.org/C138236772","wikidata":"https://www.wikidata.org/wiki/Q25098575","display_name":"Edge device","level":3,"score":0.44020000100135803},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.4162999987602234},{"id":"https://openalex.org/C2778456923","wikidata":"https://www.wikidata.org/wiki/Q5337692","display_name":"Edge computing","level":3,"score":0.4068000018596649},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3752000033855438},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.357699990272522},{"id":"https://openalex.org/C555944384","wikidata":"https://www.wikidata.org/wiki/Q249","display_name":"Wireless","level":2,"score":0.3573000133037567},{"id":"https://openalex.org/C108037233","wikidata":"https://www.wikidata.org/wiki/Q11375","display_name":"Wireless network","level":3,"score":0.35409998893737793},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3215999901294708},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.32030001282691956},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.30000001192092896},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.29100000858306885},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.2906000018119812},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.2881999909877777},{"id":"https://openalex.org/C24590314","wikidata":"https://www.wikidata.org/wiki/Q336038","display_name":"Wireless sensor network","level":2,"score":0.28700000047683716},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2847000062465668},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.28459998965263367},{"id":"https://openalex.org/C163258240","wikidata":"https://www.wikidata.org/wiki/Q25342","display_name":"Power (physics)","level":2,"score":0.2806999981403351},{"id":"https://openalex.org/C81669768","wikidata":"https://www.wikidata.org/wiki/Q2359161","display_name":"Precision and recall","level":2,"score":0.27889999747276306},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.2782000005245209},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.2759000062942505},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.2703000009059906},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.26510000228881836},{"id":"https://openalex.org/C31510193","wikidata":"https://www.wikidata.org/wiki/Q1192553","display_name":"Facial recognition system","level":3,"score":0.2551000118255615},{"id":"https://openalex.org/C15336307","wikidata":"https://www.wikidata.org/wiki/Q1766051","display_name":"Lens (geology)","level":2,"score":0.2535000145435333}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2025.3616235","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3616235","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:4abe24cbccf74a08ab59ac883d23000b","is_oa":true,"landing_page_url":"https://doaj.org/article/4abe24cbccf74a08ab59ac883d23000b","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 13, Pp 172402-172415 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2025.3616235","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3616235","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320323593","display_name":"United Arab Emirates University","ror":"https://ror.org/01km6p862"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":38,"referenced_works":["https://openalex.org/W2766837879","https://openalex.org/W2767094836","https://openalex.org/W2903942159","https://openalex.org/W2921539374","https://openalex.org/W2946419751","https://openalex.org/W2955325220","https://openalex.org/W3096184861","https://openalex.org/W3102927640","https://openalex.org/W3206160551","https://openalex.org/W4205482083","https://openalex.org/W4206444805","https://openalex.org/W4213425359","https://openalex.org/W4283215087","https://openalex.org/W4311703141","https://openalex.org/W4312239358","https://openalex.org/W4312802906","https://openalex.org/W4322207963","https://openalex.org/W4376473329","https://openalex.org/W4383619745","https://openalex.org/W4386869719","https://openalex.org/W4387415009","https://openalex.org/W4387869928","https://openalex.org/W4390421852","https://openalex.org/W4392366650","https://openalex.org/W4394586155","https://openalex.org/W4394596018","https://openalex.org/W4399449628","https://openalex.org/W4399668352","https://openalex.org/W4402978375","https://openalex.org/W4403212129","https://openalex.org/W4403421327","https://openalex.org/W4404240613","https://openalex.org/W4404555905","https://openalex.org/W4408072837","https://openalex.org/W4408354083","https://openalex.org/W4411337269","https://openalex.org/W4412985063","https://openalex.org/W4414041283"],"related_works":[],"abstract_inverted_index":{"Expected":[0],"to":[1,79,93,193],"be":[2],"deployed":[3],"in":[4,179],"the":[5,27,109,121,145,194],"early":[6],"2030s,":[7],"sixth-generation":[8],"(6G)":[9],"wireless":[10],"networks,":[11],"with":[12,18,182],"their":[13],"high":[14],"speed":[15],"and":[16,30,52,72,105,128,137,158,185,198],"integration":[17],"cutting-edge":[19],"technology":[20],"such":[21,36],"as":[22,37],"intelligent":[23],"edge":[24,166],"computing,":[25],"expand":[26],"attack":[28,46],"surface":[29],"face":[31],"serious":[32],"cyber":[33,45],"threat":[34,83],"risks":[35],"Advanced":[38],"Persistent":[39],"Threats":[40],"(APTs).":[41],"This":[42,66],"type":[43],"of":[44,57,126],"can":[47],"imitate":[48],"benign":[49],"network":[50,75,96,116],"traffic":[51,117],"operate":[53],"for":[54,84,140,201],"long":[55],"periods":[56],"time":[58],"without":[59],"being":[60],"detected":[61],"by":[62,160],"traditional":[63],"detection":[64,181],"systems.":[65],"paper":[67],"introduces":[68],"LENS,":[69],"a":[70,89,153,163],"lightweight":[71],"explainable":[73],"LLM-based":[74],"security":[76],"framework":[77],"designed":[78],"address":[80],"this":[81],"cybersecurity":[82],"6G":[85,203],"environments.":[86,204],"LENS":[87,175],"uses":[88],"fine-tuned":[90],"DistilBERT":[91],"model":[92],"convert":[94],"raw":[95],"streams":[97],"into":[98],"natural":[99],"language":[100],"commands":[101],"using":[102,114,132,152],"contextual":[103],"metadata":[104],"is":[106,199],"trained":[107,151],"on":[108,144,162],"CICAPT-IIoT":[110,146],"(2024)":[111],"dataset":[112],"generated":[113],"real-time":[115],"data.":[118],"To":[119],"evaluate":[120],"proposed":[122],"model,":[123],"adapted":[124],"versions":[125],"DeepLog":[127],"EarlyCrow":[129],"are":[130,150],"compared":[131,192],"F1-score,":[133],"false":[134],"positive":[135],"rate,":[136],"explainability":[138],"metrics":[139],"binary":[141],"APT":[142,180],"classification":[143],"dataset.":[147],"All":[148],"models":[149],"high-performance":[154],"GPU":[155],"(Nvidia":[156],"A10)":[157],"validated":[159],"deploying":[161],"real-world":[164],"resource-constrained":[165],"node":[167],"(Raspberry":[168],"Pi":[169],"4).":[170],"The":[171],"results":[172],"confirm":[173],"that":[174],"has":[176],"higher":[177,190],"performance":[178],"0.82":[183,186],"accuracy":[184],"recall":[187],"despite":[188],"consuming":[189],"energy":[191],"other":[195],"two":[196],"baselines,":[197],"applicable":[200],"edge-enabled":[202]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-05-06T08:25:59.206177","created_date":"2025-10-10T00:00:00"}