{"id":"https://openalex.org/W4416243210","doi":"https://doi.org/10.1145/3733814.3765495","title":"Robust Anomaly Detection in O-RAN: Leveraging LLMs against Data Manipulation Attacks","display_name":"Robust Anomaly Detection in O-RAN: Leveraging LLMs against Data Manipulation Attacks","publication_year":2025,"publication_date":"2025-10-13","ids":{"openalex":"https://openalex.org/W4416243210","doi":"https://doi.org/10.1145/3733814.3765495"},"language":"en","primary_location":{"id":"doi:10.1145/3733814.3765495","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3733814.3765495","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 1st free5GC World Forum 2025","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3733814.3765495","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5071145600","display_name":"Thusitha Dayaratne","orcid":"https://orcid.org/0000-0003-0624-1967"},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Thusitha Thilina Dayaratne","raw_affiliation_strings":["Monash University, Melbourne, Victoria, Australia"],"raw_orcid":"https://orcid.org/0000-0003-0624-1967","affiliations":[{"raw_affiliation_string":"Monash University, Melbourne, Victoria, Australia","institution_ids":["https://openalex.org/I56590836"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101644358","display_name":"Ngoc Duy Pham","orcid":"https://orcid.org/0000-0003-3022-2205"},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Ngoc Duy Pham","raw_affiliation_strings":["Monash University, Melbourne, Victoria, Australia"],"raw_orcid":"https://orcid.org/0000-0003-3022-2205","affiliations":[{"raw_affiliation_string":"Monash University, Melbourne, Victoria, Australia","institution_ids":["https://openalex.org/I56590836"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104233839","display_name":"Viet Vo","orcid":null},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Viet Vo","raw_affiliation_strings":["Swinburne University of Technology, Melbourne, Victoria, Australia"],"raw_orcid":"https://orcid.org/0000-0002-5984-7981","affiliations":[{"raw_affiliation_string":"Swinburne University of Technology, Melbourne, Victoria, Australia","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003005515","display_name":"Shangqi Lai","orcid":"https://orcid.org/0000-0002-0374-3593"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Shangqi Lai","raw_affiliation_strings":["CSIRO's Data61, Melbourne, Victoria, Australia"],"raw_orcid":"https://orcid.org/0000-0002-0374-3593","affiliations":[{"raw_affiliation_string":"CSIRO's Data61, Melbourne, Victoria, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086357020","display_name":"Alsharif Abuadbba","orcid":"https://orcid.org/0000-0001-9695-7947"},"institutions":[{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Sharif Abuadbba","raw_affiliation_strings":["CSIRO's Data61, Marsfield, New South Wales, Australia"],"raw_orcid":"https://orcid.org/0000-0001-9695-7947","affiliations":[{"raw_affiliation_string":"CSIRO's Data61, Marsfield, New South Wales, Australia","institution_ids":["https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073263665","display_name":"Hajime Suzuki","orcid":"https://orcid.org/0000-0001-9564-2847"},"institutions":[{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Hajime Suzuki","raw_affiliation_strings":["CSIRO's Data61, Marsfield, New South Wales, Australia"],"raw_orcid":"https://orcid.org/0000-0001-9564-2847","affiliations":[{"raw_affiliation_string":"CSIRO's Data61, Marsfield, New South Wales, Australia","institution_ids":["https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064553444","display_name":"Xingliang Yuan","orcid":"https://orcid.org/0000-0002-3701-4946"},"institutions":[{"id":"https://openalex.org/I165779595","display_name":"The University of Melbourne","ror":"https://ror.org/01ej9dk98","country_code":"AU","type":"education","lineage":["https://openalex.org/I165779595"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xingliang Yuan","raw_affiliation_strings":["The University of Melbourne, Melbourne, Victoria, Australia"],"raw_orcid":"https://orcid.org/0000-0002-3701-4946","affiliations":[{"raw_affiliation_string":"The University of Melbourne, Melbourne, Victoria, Australia","institution_ids":["https://openalex.org/I165779595"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5086593836","display_name":"Carsten Rudolph","orcid":"https://orcid.org/0000-0001-9050-5675"},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Carsten Rudolph","raw_affiliation_strings":["Monash University, Melbourne, Victoria, Australia"],"raw_orcid":"https://orcid.org/0000-0001-9050-5675","affiliations":[{"raw_affiliation_string":"Monash University, Melbourne, Victoria, Australia","institution_ids":["https://openalex.org/I56590836"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.2328999936580658,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.2328999936580658,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.18549999594688416,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.05249999836087227,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7085000276565552},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6938999891281128},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5845999717712402},{"id":"https://openalex.org/keywords/adaptability","display_name":"Adaptability","score":0.5012000203132629},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.42559999227523804},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.4104999899864197},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.4075999855995178},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.387800008058548}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7304999828338623},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7085000276565552},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6938999891281128},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5845999717712402},{"id":"https://openalex.org/C177606310","wikidata":"https://www.wikidata.org/wiki/Q5674297","display_name":"Adaptability","level":2,"score":0.5012000203132629},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4528000056743622},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.42559999227523804},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.4104999899864197},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.4075999855995178},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.387800008058548},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.37689998745918274},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.3522000014781952},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.34299999475479126},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.3028999865055084},{"id":"https://openalex.org/C2776973144","wikidata":"https://www.wikidata.org/wiki/Q6880649","display_name":"Misuse detection","level":4,"score":0.29840001463890076},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2937000095844269},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.28380000591278076},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.2750999927520752},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.2687000036239624},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.2671999931335449},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.26109999418258667},{"id":"https://openalex.org/C193415008","wikidata":"https://www.wikidata.org/wiki/Q639681","display_name":"Network architecture","level":2,"score":0.25940001010894775}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3733814.3765495","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3733814.3765495","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 1st free5GC World Forum 2025","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2508.08029","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2508.08029","pdf_url":"https://arxiv.org/pdf/2508.08029","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2508.08029","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2508.08029","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.1145/3733814.3765495","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3733814.3765495","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 1st free5GC World Forum 2025","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320331703","display_name":"Department of Home Affairs","ror":"https://ror.org/00seaxa44"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0],"introduction":[1],"of":[2,26,116,144,162],"5G":[3],"and":[4,16,24,89,141],"the":[5,21,40,47,68,114,125,160,186],"Open":[6],"Radio":[7],"Access":[8],"Network":[9],"(O-RAN)":[10],"architecture":[11,127],"has":[12],"enabled":[13],"more":[14],"flexible":[15],"intelligent":[17],"network":[18],"deployments.":[19,212],"However,":[20],"increased":[22],"complexity":[23],"openness":[25],"these":[27],"architectures":[28],"also":[29],"introduce":[30],"novel":[31],"security":[32],"challenges,":[33],"such":[34,100,167],"as":[35,101,168],"data":[36,69,109],"manipulation":[37],"attacks":[38,166],"on":[39,97],"semi-standardised":[41],"Shared":[42],"Data":[43],"Layer":[44],"(SDL)":[45],"within":[46,124],"O-RAN":[48,126],"platform":[49],"through":[50,180],"malicious":[51,55],"xApps.":[52],"In":[53],"particular,":[54],"xApps":[56,136],"can":[57,85],"exploit":[58],"this":[59,130,189],"vulnerability":[60],"by":[61,74],"introducing":[62],"subtle":[63],"Unicode-wise":[64,83],"alterations":[65],"(hypoglyphs)":[66],"into":[67],"that":[70,134,196],"are":[71,104,142],"being":[72],"used":[73],"traditional":[75,98],"machine":[76],"learning":[77],"(ML)-based":[78],"anomaly":[79,93,122],"detection":[80,88,94,123,152,200],"methods.":[81],"These":[82],"manipulations":[84],"potentially":[86],"bypass":[87],"cause":[90],"failures":[91],"in":[92,170],"systems":[95],"based":[96],"ML,":[99],"AutoEncoders,":[102],"which":[103],"unable":[105],"to":[106,128,164,176,183],"process":[107],"hypoglyphed":[108],"without":[110,148],"crashing.":[111,149],"We":[112,132],"investigate":[113],"use":[115,177],"Large":[117],"Language":[118],"Models":[119],"(LLMs)":[120],"for":[121,208],"address":[129],"challenge.":[131],"demonstrate":[133],"LLM-based":[135],"maintain":[137],"robust":[138],"operational":[139],"performance":[140],"capable":[143],"processing":[145],"manipulated":[146],"messages":[147],"While":[150],"initial":[151],"accuracy":[153],"requires":[154,190],"further":[155,184,191],"improvements,":[156],"our":[157],"results":[158],"highlight":[159],"robustness":[161],"LLMs":[163,197],"adversarial":[165],"hypoglyphs":[169],"input":[171],"data.":[172],"There":[173],"is":[174],"potential":[175],"their":[178],"adaptability":[179],"prompt":[181],"engineering":[182],"improve":[185],"accuracy,":[187],"although":[188],"research.":[192],"Additionally,":[193],"we":[194],"show":[195],"achieve":[198],"low":[199],"latency":[201],"(under":[202],"0.07":[203],"seconds),":[204],"making":[205],"them":[206],"suitable":[207],"Near-Real-Time":[209],"(Near-RT)":[210],"RIC":[211]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}