{"id":"https://openalex.org/W7117881229","doi":"https://doi.org/10.1109/milcom64451.2025.11310724","title":"Enhancing Abnormal Network Traffic Detection via Efficient Data Generation Leveraging LLM","display_name":"Enhancing Abnormal Network Traffic Detection via Efficient Data Generation Leveraging LLM","publication_year":2025,"publication_date":"2025-10-06","ids":{"openalex":"https://openalex.org/W7117881229","doi":"https://doi.org/10.1109/milcom64451.2025.11310724"},"language":null,"primary_location":{"id":"doi:10.1109/milcom64451.2025.11310724","is_oa":false,"landing_page_url":"https://doi.org/10.1109/milcom64451.2025.11310724","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"MILCOM 2025 - 2025 IEEE Military Communications Conference (MILCOM)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5103277843","display_name":"Changming Li","orcid":"https://orcid.org/0009-0001-8513-5689"},"institutions":[{"id":"https://openalex.org/I102322142","display_name":"Rutgers, The State University of New Jersey","ror":"https://ror.org/05vt9qd57","country_code":"US","type":"education","lineage":["https://openalex.org/I102322142"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Changming Li","raw_affiliation_strings":["Rutgers University,Department of Electrical and Computer Engineering,NJ,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Rutgers University,Department of Electrical and Computer Engineering,NJ,USA","institution_ids":["https://openalex.org/I102322142"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121696896","display_name":"Zejun Xu","orcid":null},"institutions":[{"id":"https://openalex.org/I102322142","display_name":"Rutgers, The State University of New Jersey","ror":"https://ror.org/05vt9qd57","country_code":"US","type":"education","lineage":["https://openalex.org/I102322142"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zejun Xu","raw_affiliation_strings":["Rutgers University,Department of Electrical and Computer Engineering,NJ,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Rutgers University,Department of Electrical and Computer Engineering,NJ,USA","institution_ids":["https://openalex.org/I102322142"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102604747","display_name":"Qiufan Ji","orcid":"https://orcid.org/0009-0000-5523-8647"},"institutions":[{"id":"https://openalex.org/I118118575","display_name":"New Jersey Institute of Technology","ror":"https://ror.org/05e74xb87","country_code":"US","type":"education","lineage":["https://openalex.org/I118118575"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Qiufan Ji","raw_affiliation_strings":["NJIT,Department of Computer Science,Newark,NJ,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NJIT,Department of Computer Science,Newark,NJ,USA","institution_ids":["https://openalex.org/I118118575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121711557","display_name":"Fan Yang","orcid":null},"institutions":[{"id":"https://openalex.org/I118118575","display_name":"New Jersey Institute of Technology","ror":"https://ror.org/05e74xb87","country_code":"US","type":"education","lineage":["https://openalex.org/I118118575"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fan Yang","raw_affiliation_strings":["NJIT,Department of Computer Science,Newark,NJ,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NJIT,Department of Computer Science,Newark,NJ,USA","institution_ids":["https://openalex.org/I118118575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023218221","display_name":"Cong Shi","orcid":"https://orcid.org/0000-0002-7599-202X"},"institutions":[{"id":"https://openalex.org/I118118575","display_name":"New Jersey Institute of Technology","ror":"https://ror.org/05e74xb87","country_code":"US","type":"education","lineage":["https://openalex.org/I118118575"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Cong Shi","raw_affiliation_strings":["NJIT,Department of Computer Science,Newark,NJ,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NJIT,Department of Computer Science,Newark,NJ,USA","institution_ids":["https://openalex.org/I118118575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063656466","display_name":"Michael DeLucia","orcid":null},"institutions":[{"id":"https://openalex.org/I166416128","display_name":"DEVCOM Army Research Laboratory","ror":"https://ror.org/011hc8f90","country_code":"US","type":"government","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1330347796","https://openalex.org/I166416128","https://openalex.org/I2802705668","https://openalex.org/I4210154437"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michael DeLucia","raw_affiliation_strings":["Adelphi,Army Research Laboratory,MD,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Adelphi,Army Research Laboratory,MD,USA","institution_ids":["https://openalex.org/I166416128"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100394750","display_name":"Yingying Chen","orcid":"https://orcid.org/0000-0002-3994-766X"},"institutions":[{"id":"https://openalex.org/I102322142","display_name":"Rutgers, The State University of New Jersey","ror":"https://ror.org/05vt9qd57","country_code":"US","type":"education","lineage":["https://openalex.org/I102322142"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yingying Chen","raw_affiliation_strings":["Rutgers University,Department of Electrical and Computer Engineering,NJ,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Rutgers University,Department of Electrical and Computer Engineering,NJ,USA","institution_ids":["https://openalex.org/I102322142"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.55430503,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1494","last_page":"1499"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.864300012588501,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.864300012588501,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.05700000002980232,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.011099999770522118,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5999000072479248},{"id":"https://openalex.org/keywords/bottleneck","display_name":"Bottleneck","score":0.5979999899864197},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.5856999754905701},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.585099995136261},{"id":"https://openalex.org/keywords/traffic-generation-model","display_name":"Traffic generation model","score":0.5468999743461609},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.4465000033378601},{"id":"https://openalex.org/keywords/network-traffic-control","display_name":"Network traffic control","score":0.415800005197525},{"id":"https://openalex.org/keywords/data-modeling","display_name":"Data modeling","score":0.36649999022483826}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7829999923706055},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5999000072479248},{"id":"https://openalex.org/C2780513914","wikidata":"https://www.wikidata.org/wiki/Q18210350","display_name":"Bottleneck","level":2,"score":0.5979999899864197},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.5856999754905701},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.585099995136261},{"id":"https://openalex.org/C176715033","wikidata":"https://www.wikidata.org/wiki/Q2080768","display_name":"Traffic generation model","level":2,"score":0.5468999743461609},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4950000047683716},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.4465000033378601},{"id":"https://openalex.org/C201100257","wikidata":"https://www.wikidata.org/wiki/Q393287","display_name":"Network traffic control","level":3,"score":0.415800005197525},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.36649999022483826},{"id":"https://openalex.org/C94168897","wikidata":"https://www.wikidata.org/wiki/Q574324","display_name":"Network traffic simulation","level":4,"score":0.3596999943256378},{"id":"https://openalex.org/C2781317605","wikidata":"https://www.wikidata.org/wiki/Q7832483","display_name":"Traffic analysis","level":2,"score":0.35920000076293945},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.34880000352859497},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.3395000100135803},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.33090001344680786},{"id":"https://openalex.org/C114289077","wikidata":"https://www.wikidata.org/wiki/Q3284399","display_name":"Statistical model","level":2,"score":0.3197999894618988},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.31679999828338623},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.30489999055862427},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.2903999984264374},{"id":"https://openalex.org/C81877898","wikidata":"https://www.wikidata.org/wiki/Q1965787","display_name":"Network monitoring","level":2,"score":0.2702000141143799},{"id":"https://openalex.org/C46451311","wikidata":"https://www.wikidata.org/wiki/Q262550","display_name":"Traffic shaping","level":4,"score":0.26570001244544983},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.25780001282691956},{"id":"https://openalex.org/C104122410","wikidata":"https://www.wikidata.org/wiki/Q1416406","display_name":"Network model","level":2,"score":0.2551000118255615},{"id":"https://openalex.org/C114563136","wikidata":"https://www.wikidata.org/wiki/Q19725982","display_name":"Network planning and design","level":2,"score":0.25369998812675476}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/milcom64451.2025.11310724","is_oa":false,"landing_page_url":"https://doi.org/10.1109/milcom64451.2025.11310724","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"MILCOM 2025 - 2025 IEEE Military Communications Conference (MILCOM)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320316514","display_name":"Arm","ror":"https://ror.org/04mmhzs81"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W1969576680","https://openalex.org/W2104692292","https://openalex.org/W2140437701","https://openalex.org/W2163461120","https://openalex.org/W2296509296","https://openalex.org/W2789828921","https://openalex.org/W2805674924","https://openalex.org/W2963276095","https://openalex.org/W3011253173","https://openalex.org/W3174443214","https://openalex.org/W4297957988","https://openalex.org/W4400236709","https://openalex.org/W4401380488","https://openalex.org/W4403561221","https://openalex.org/W4405963808","https://openalex.org/W4411523078"],"related_works":[],"abstract_inverted_index":{"Network":[0],"attacks":[1],"(e.g.,":[2,34],"distributed":[3],"denial":[4],"of":[5,129,147],"service":[6],"(DDoS),":[7],"worms,":[8],"and":[9,37,156],"botnets)":[10],"have":[11],"become":[12],"serious":[13],"threats":[14],"to":[15,30,43,51,98,112,118],"the":[16,71,120,125,144,161],"Internet.":[17],"To":[18],"mitigate":[19],"these":[20,46],"threats,":[21],"network":[22,32,59,72,122,141,163],"systems":[23],"increasingly":[24],"utilize":[25],"machine":[26],"learning":[27,124],"(ML)":[28],"models":[29,116,168],"analyze":[31],"traffic":[33,38,60,73,142,164],"packet":[35],"rates":[36],"volumes),":[39],"detecting":[40],"anomalies":[41],"related":[42],"attacks.":[44,150],"However,":[45],"ML-based":[47],"methods":[48],"normally":[49],"fail":[50],"detect":[52],"multi-vector":[53,149,171],"attacks,":[54],"where":[55],"a":[56,89],"single":[57],"malicious":[58],"simultaneously":[61],"exhibits":[62],"multiple":[63],"attack":[64,80,100,172],"characteristics.":[65],"The":[66,108],"key":[67,109],"bottleneck":[68],"is":[69,111],"that":[70,92,160],"datasets":[74,97,158],"are":[75],"predominantly":[76],"single-vector":[77,106,121],"(i.e.,":[78],"one":[79],"type":[81],"per":[82],"traffic).":[83],"In":[84],"this":[85],"paper,":[86],"we":[87],"design":[88],"novel":[90],"framework":[91,138],"can":[93,139,165],"generate":[94,140],"diverse":[95],"multi-label":[96],"facilitate":[99],"detection":[101],"by":[102],"only":[103],"leveraging":[104],"existing":[105],"datasets.":[107],"idea":[110],"leverage":[113],"large":[114],"language":[115],"(LLMs)":[117],"interpret":[119],"traffic,":[123],"underlying":[126],"statistical":[127,145],"characteristics":[128,146],"each":[130],"individual":[131],"attack.":[132],"Through":[133],"advanced":[134],"prompt":[135],"engineering,":[136],"our":[137],"exhibiting":[143],"real-world":[148],"Extensive":[151],"experiments":[152],"on":[153],"both":[154],"public":[155],"self-collected":[157],"show":[159],"generated":[162],"build":[166],"ML":[167],"for":[169],"effective":[170],"detection.":[173]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-01-01T00:00:00"}
