{"id":"https://openalex.org/W7117887207","doi":"https://doi.org/10.1109/milcom64451.2025.11310431","title":"NetPrompt: Evaluation of LLMs as Network Intrusion Detection System","display_name":"NetPrompt: Evaluation of LLMs as Network Intrusion Detection System","publication_year":2025,"publication_date":"2025-10-06","ids":{"openalex":"https://openalex.org/W7117887207","doi":"https://doi.org/10.1109/milcom64451.2025.11310431"},"language":null,"primary_location":{"id":"doi:10.1109/milcom64451.2025.11310431","is_oa":false,"landing_page_url":"https://doi.org/10.1109/milcom64451.2025.11310431","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"MILCOM 2025 - 2025 IEEE Military Communications Conference (MILCOM)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5113146398","display_name":"Pratyay Kumar","orcid":null},"institutions":[{"id":"https://openalex.org/I10052268","display_name":"New Mexico State University","ror":"https://ror.org/00hpz7z43","country_code":"US","type":"education","lineage":["https://openalex.org/I10052268"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Pratyay Kumar","raw_affiliation_strings":["New Mexico State University,Las Cruces,New Mexico,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"New Mexico State University,Las Cruces,New Mexico,USA","institution_ids":["https://openalex.org/I10052268"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046678380","display_name":"Abu Saleh Md Tayeen","orcid":null},"institutions":[{"id":"https://openalex.org/I162281398","display_name":"University of Hartford","ror":"https://ror.org/034gcgd08","country_code":"US","type":"education","lineage":["https://openalex.org/I162281398"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Abu Saleh Md Tayeen","raw_affiliation_strings":["University of Hartford,West Hartford,Connecticut,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Hartford,West Hartford,Connecticut,USA","institution_ids":["https://openalex.org/I162281398"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058905119","display_name":"Qixu Gong","orcid":"https://orcid.org/0009-0000-1984-0411"},"institutions":[{"id":"https://openalex.org/I10052268","display_name":"New Mexico State University","ror":"https://ror.org/00hpz7z43","country_code":"US","type":"education","lineage":["https://openalex.org/I10052268"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Qixu Gong","raw_affiliation_strings":["New Mexico State University,Las Cruces,New Mexico,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"New Mexico State University,Las Cruces,New Mexico,USA","institution_ids":["https://openalex.org/I10052268"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039379744","display_name":"Jiefei Liu","orcid":"https://orcid.org/0009-0006-6159-094X"},"institutions":[{"id":"https://openalex.org/I10052268","display_name":"New Mexico State University","ror":"https://ror.org/00hpz7z43","country_code":"US","type":"education","lineage":["https://openalex.org/I10052268"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jiefei Liu","raw_affiliation_strings":["New Mexico State University,Las Cruces,New Mexico,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"New Mexico State University,Las Cruces,New Mexico,USA","institution_ids":["https://openalex.org/I10052268"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121701016","display_name":"Satyajayant Misra","orcid":null},"institutions":[{"id":"https://openalex.org/I10052268","display_name":"New Mexico State University","ror":"https://ror.org/00hpz7z43","country_code":"US","type":"education","lineage":["https://openalex.org/I10052268"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Satyajayant Misra","raw_affiliation_strings":["New Mexico State University,Las Cruces,New Mexico,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"New Mexico State University,Las Cruces,New Mexico,USA","institution_ids":["https://openalex.org/I10052268"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101151385","display_name":"Huiping Cao","orcid":null},"institutions":[{"id":"https://openalex.org/I10052268","display_name":"New Mexico State University","ror":"https://ror.org/00hpz7z43","country_code":"US","type":"education","lineage":["https://openalex.org/I10052268"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Huiping Cao","raw_affiliation_strings":["New Mexico State University,Las Cruces,New Mexico,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"New Mexico State University,Las Cruces,New Mexico,USA","institution_ids":["https://openalex.org/I10052268"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5045999899","display_name":"Jayashree Harikumar","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jayashree Harikumar","raw_affiliation_strings":["WSMR,DEVCOM Analysis Center,New Mexico,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"WSMR,DEVCOM Analysis Center,New Mexico,USA","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.61893878,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1512","last_page":"1517"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.696399986743927,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.696399986743927,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.02459999918937683,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.02449999935925007,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.57669997215271},{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.5374000072479248},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.45829999446868896},{"id":"https://openalex.org/keywords/selection","display_name":"Selection (genetic algorithm)","score":0.4399000108242035},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.361299991607666},{"id":"https://openalex.org/keywords/baseline","display_name":"Baseline (sea)","score":0.33709999918937683},{"id":"https://openalex.org/keywords/intrusion","display_name":"Intrusion","score":0.33340001106262207}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6388999819755554},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.57669997215271},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.5374000072479248},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4652000069618225},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.45829999446868896},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4406999945640564},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.4399000108242035},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3882000148296356},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.37599998712539673},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.361299991607666},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.33709999918937683},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.33340001106262207},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.33059999346733093},{"id":"https://openalex.org/C204323151","wikidata":"https://www.wikidata.org/wiki/Q905424","display_name":"Range (aeronautics)","level":2,"score":0.3142000138759613},{"id":"https://openalex.org/C179717631","wikidata":"https://www.wikidata.org/wiki/Q2991667","display_name":"Multilayer perceptron","level":3,"score":0.2987000048160553},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.29679998755455017},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.2685999870300293},{"id":"https://openalex.org/C4727928","wikidata":"https://www.wikidata.org/wiki/Q17164759","display_name":"Social network (sociolinguistics)","level":3,"score":0.2669999897480011},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.2648000121116638},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.26420000195503235}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/milcom64451.2025.11310431","is_oa":false,"landing_page_url":"https://doi.org/10.1109/milcom64451.2025.11310431","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"MILCOM 2025 - 2025 IEEE Military Communications Conference (MILCOM)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":13,"referenced_works":["https://openalex.org/W2789828921","https://openalex.org/W2964189064","https://openalex.org/W2979826702","https://openalex.org/W2982682021","https://openalex.org/W3172639611","https://openalex.org/W3185341429","https://openalex.org/W4391136507","https://openalex.org/W4391519594","https://openalex.org/W4400236709","https://openalex.org/W4401508794","https://openalex.org/W4404691174","https://openalex.org/W4408325106","https://openalex.org/W4409261757"],"related_works":[],"abstract_inverted_index":{"Large":[0],"Language":[1],"Models":[2],"(LLMs)":[3],"have":[4,53],"achieved":[5],"remarkable":[6],"success":[7],"across":[8,110],"a":[9,55,77,121],"wide":[10],"range":[11],"of":[12,24,58],"domains,":[13],"yet":[14],"their":[15],"application":[16],"to":[17,41,49,131],"network":[18,25],"security":[19],"remains":[20],"underexplored.":[21],"Prior":[22],"studies":[23,52],"intrusion":[26],"detection":[27],"system":[28],"(NIDS)":[29],"using":[30,63,91],"LLMs":[31,40,98,170],"either":[32],"rely":[33],"on":[34],"computationally":[35],"expensive":[36],"fine-tuning":[37],"or":[38],"use":[39],"generate":[42],"explanations":[43],"for":[44,61,172,178],"traditional":[45],"NIDS":[46,62,79,167],"outputs.":[47],"However,":[48],"date,":[50],"no":[51],"conducted":[54],"comprehensive":[56],"evaluation":[57,80],"LLM":[59],"effectiveness":[60],"diverse":[64],"prompting":[65,102],"strategies":[66],"and":[67,95,108,115,155],"extended":[68],"text":[69],"inputs.":[70],"In":[71],"this":[72],"paper,":[73],"we":[74],"present":[75],"NetPrompt,":[76],"prompt-only":[78],"pipeline":[81],"that":[82,127,143],"operates":[83],"without":[84,175],"any":[85],"fine-tuning.":[86,179],"We":[87,117],"evaluate":[88],"its":[89],"efficacy":[90],"one":[92],"proprietary":[93],"(Gemini-2.0-Flash)":[94],"two":[96,111],"open-source":[97,150],"(Qwen2.5-7B-Instruct,":[99],"Llama-3.1-8B-Instruct),":[100],"employing":[101],"techniques":[103],"such":[104],"as":[105],"Zero-Shot,":[106],"Few-Shot,":[107],"Chain-of-Thought":[109],"benchmark":[112],"datasets:":[113],"CICIDS2017":[114],"CICDDoS2019.":[116],"also":[118],"propose":[119],"iCentroid,":[120],"novel":[122],"class-centric":[123],"example":[124],"selection":[125],"algorithm":[126],"identifies":[128],"representative":[129],"examples":[130],"enhance":[132],"contextual":[133],"understanding":[134],"within":[135],"the":[136,144,162,176],"Few-Shot":[137],"prompting.":[138],"Our":[139],"experimental":[140],"results":[141],"show":[142],"Gemini":[145,160],"model":[146],"consistently":[147],"outperforms":[148],"both":[149],"LLMs,":[151],"achieving":[152],"higher":[153],"F1-scores":[154],"lower":[156],"error":[157],"rates.":[158],"Moreover,":[159],"surpasses":[161],"baseline":[163],"multi-layer":[164],"perceptron":[165],"(MLP)-based":[166],"model,":[168],"making":[169],"attractive":[171],"cybersecurity":[173],"tasks":[174],"need":[177]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2026-01-01T00:00:00"}