{"id":"https://openalex.org/W4408326009","doi":"https://doi.org/10.1109/aiccsa63423.2024.10912623","title":"Anomaly Based Intrusion Detection Using Large Language Models","display_name":"Anomaly Based Intrusion Detection Using Large Language Models","publication_year":2024,"publication_date":"2024-10-22","ids":{"openalex":"https://openalex.org/W4408326009","doi":"https://doi.org/10.1109/aiccsa63423.2024.10912623"},"language":"en","primary_location":{"id":"doi:10.1109/aiccsa63423.2024.10912623","is_oa":false,"landing_page_url":"https://doi.org/10.1109/aiccsa63423.2024.10912623","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE/ACS 21st International Conference on Computer Systems and Applications (AICCSA)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5036094592","display_name":"Zineb Maasaoui","orcid":"https://orcid.org/0000-0002-1705-9514"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I4210104430","display_name":"Laboratoire d'Informatique de Grenoble","ror":"https://ror.org/01c8rcg82","country_code":"FR","type":"facility","lineage":["https://openalex.org/I106785703","https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I1326498283","https://openalex.org/I4210104430","https://openalex.org/I4210159245","https://openalex.org/I899635006","https://openalex.org/I899635006"]},{"id":"https://openalex.org/I899635006","display_name":"Universit\u00e9 Grenoble Alpes","ror":"https://ror.org/02rx3b187","country_code":"FR","type":"education","lineage":["https://openalex.org/I899635006"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Zineb Maasaoui","raw_affiliation_strings":["LIG/MRIM, CNRS, Grenoble Alpes University,Grenoble,France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"LIG/MRIM, CNRS, Grenoble Alpes University,Grenoble,France","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I4210104430","https://openalex.org/I899635006"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021987049","display_name":"Mheni Merzouki","orcid":"https://orcid.org/0000-0002-9267-5827"},"institutions":[{"id":"https://openalex.org/I1321296531","display_name":"National Institute of Standards and Technology","ror":"https://ror.org/05xpvk416","country_code":"US","type":"funder","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mheni Merzouki","raw_affiliation_strings":["National Institute of Standards and Technology,Smart Connected Systems Division,MD,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Institute of Standards and Technology,Smart Connected Systems Division,MD,USA","institution_ids":["https://openalex.org/I1321296531"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024100219","display_name":"Abdella Battou","orcid":"https://orcid.org/0000-0003-3071-842X"},"institutions":[{"id":"https://openalex.org/I1321296531","display_name":"National Institute of Standards and Technology","ror":"https://ror.org/05xpvk416","country_code":"US","type":"funder","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Abdella Battou","raw_affiliation_strings":["National Institute of Standards and Technology,Smart Connected Systems Division,MD,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Institute of Standards and Technology,Smart Connected Systems Division,MD,USA","institution_ids":["https://openalex.org/I1321296531"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5014069264","display_name":"Ahmed Lbath","orcid":"https://orcid.org/0000-0002-8457-6941"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I4210104430","display_name":"Laboratoire d'Informatique de Grenoble","ror":"https://ror.org/01c8rcg82","country_code":"FR","type":"facility","lineage":["https://openalex.org/I106785703","https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I1326498283","https://openalex.org/I4210104430","https://openalex.org/I4210159245","https://openalex.org/I899635006","https://openalex.org/I899635006"]},{"id":"https://openalex.org/I899635006","display_name":"Universit\u00e9 Grenoble Alpes","ror":"https://ror.org/02rx3b187","country_code":"FR","type":"education","lineage":["https://openalex.org/I899635006"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Ahmed Lbath","raw_affiliation_strings":["LIG/MRIM, CNRS, Grenoble Alpes University,Grenoble,France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"LIG/MRIM, CNRS, Grenoble Alpes University,Grenoble,France","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I4210104430","https://openalex.org/I899635006"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9850999712944031,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9850999712944031,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.935699999332428,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6852142810821533},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6731133460998535},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.5759143829345703},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5155398845672607},{"id":"https://openalex.org/keywords/intrusion","display_name":"Intrusion","score":0.45219406485557556},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3221243619918823},{"id":"https://openalex.org/keywords/geology","display_name":"Geology","score":0.22161367535591125}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6852142810821533},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6731133460998535},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.5759143829345703},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5155398845672607},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.45219406485557556},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3221243619918823},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.22161367535591125},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C17409809","wikidata":"https://www.wikidata.org/wiki/Q161764","display_name":"Geochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/aiccsa63423.2024.10912623","is_oa":false,"landing_page_url":"https://doi.org/10.1109/aiccsa63423.2024.10912623","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE/ACS 21st International Conference on Computer Systems and Applications (AICCSA)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":25,"referenced_works":["https://openalex.org/W1988790447","https://openalex.org/W2087347434","https://openalex.org/W2107263349","https://openalex.org/W2112796928","https://openalex.org/W2149706766","https://openalex.org/W2600154155","https://openalex.org/W2896457183","https://openalex.org/W3134888992","https://openalex.org/W3199174176","https://openalex.org/W4205908404","https://openalex.org/W4205965165","https://openalex.org/W4226319939","https://openalex.org/W4292779060","https://openalex.org/W4297152848","https://openalex.org/W4309623083","https://openalex.org/W4317600234","https://openalex.org/W4385245566","https://openalex.org/W4391582407","https://openalex.org/W4393407048","https://openalex.org/W4393407299","https://openalex.org/W4398239377","https://openalex.org/W4401113920","https://openalex.org/W6735053293","https://openalex.org/W6755207826","https://openalex.org/W6778883912"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2667207928","https://openalex.org/W2912112202","https://openalex.org/W4377864969","https://openalex.org/W3120251014"],"abstract_inverted_index":{"In":[0],"the":[1,22,50,98,116],"context":[2],"of":[3,25,118],"modern":[4],"networks":[5],"where":[6],"cyber-attacks":[7],"are":[8],"increasingly":[9],"complex":[10],"and":[11,27,78,107],"frequent,":[12],"traditional":[13,85],"Intrusion":[14],"Detection":[15],"Systems":[16],"(IDS)":[17],"often":[18],"struggle":[19],"to":[20,29,65],"manage":[21],"vast":[23],"volume":[24],"data":[26],"fail":[28],"detect":[30],"novel":[31],"attacks.":[32],"Leveraging":[33],"Artificial":[34],"Intelligence,":[35],"specifically":[36],"Natural":[37],"Language":[38,121],"Processing":[39],"with":[40,101],"transformer":[41],"architectures,":[42],"offers":[43],"a":[44,60],"promising":[45],"solution.":[46],"This":[47],"study":[48],"applies":[49],"Bidirectional":[51],"Encoder":[52],"Representations":[53],"from":[54],"Transformers":[55],"(BERT)":[56],"model,":[57],"enhanced":[58],"by":[59],"Byte-level":[61],"Byte-pair":[62],"tokenizer":[63],"(BBPE),":[64],"effectively":[66],"identify":[67],"network-based":[68],"attacks":[69],"within":[70],"IoT":[71],"systems.":[72],"Experiments":[73],"on":[74,97],"three":[75],"datasets-UNSW-NB15,":[76],"TON-IoT,":[77],"Edge-IIoT-show":[79],"that":[80],"our":[81],"approach":[82],"substantially":[83],"outperforms":[84],"methods":[86],"in":[87,104,109,124],"multi-class":[88],"classification":[89,95],"tasks.":[90],"Notably,":[91],"we":[92],"achieved":[93],"near-perfect":[94],"accuracy":[96],"Edge-IIoT":[99],"dataset,":[100],"significant":[102],"improvements":[103],"F1":[105],"scores":[106],"reduction":[108],"validation":[110],"losses":[111],"across":[112],"all":[113],"datasets,":[114],"demonstrating":[115],"efficacy":[117],"pre-trained":[119],"Large":[120],"Models":[122],"(LLMs)":[123],"network":[125],"security.":[126]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":4}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}