{"id":"https://openalex.org/W7163032127","doi":"https://doi.org/10.1145/3808674","title":"What's on My Network? Using Large Language Models to Identify Real-World IoT Devices at Scale","display_name":"What's on My Network? Using Large Language Models to Identify Real-World IoT Devices at Scale","publication_year":2026,"publication_date":"2026-06-01","ids":{"openalex":"https://openalex.org/W7163032127","doi":"https://doi.org/10.1145/3808674"},"language":"en","primary_location":{"id":"doi:10.1145/3808674","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3808674","pdf_url":null,"source":{"id":"https://openalex.org/S4387290834","display_name":"Proceedings of the ACM on Networking","issn_l":"2834-5509","issn":["2834-5509"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Networking","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2510.13817","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5119734245","display_name":"Rameen Mahmood","orcid":null},"institutions":[{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rameen Mahmood","raw_affiliation_strings":["New York University, New York, NY, USA"],"raw_orcid":"https://orcid.org/0009-0001-0960-0817","affiliations":[{"raw_affiliation_string":"New York University, New York, NY, USA","institution_ids":["https://openalex.org/I57206974"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062970601","display_name":"Sai Teja Peddinti","orcid":null},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sai Teja Peddinti","raw_affiliation_strings":["Google, Mountain View, CA, USA"],"raw_orcid":"https://orcid.org/0009-0007-3242-9353","affiliations":[{"raw_affiliation_string":"Google, Mountain View, CA, USA","institution_ids":["https://openalex.org/I1291425158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082927308","display_name":"Tousif Ahmed","orcid":"https://orcid.org/0000-0003-1085-6294"},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tousif Ahmed","raw_affiliation_strings":["Google, Mountain View, CA, USA"],"raw_orcid":"https://orcid.org/0000-0003-1085-6294","affiliations":[{"raw_affiliation_string":"Google, Mountain View, CA, USA","institution_ids":["https://openalex.org/I1291425158"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5042935400","display_name":"Danny Yuxing Huang","orcid":"https://orcid.org/0000-0002-1794-6105"},"institutions":[{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Danny Yuxing Huang","raw_affiliation_strings":["New York University, New York, NY, USA"],"raw_orcid":"https://orcid.org/0000-0002-1794-6105","affiliations":[{"raw_affiliation_string":"New York University, New York, NY, USA","institution_ids":["https://openalex.org/I57206974"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.56734701,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"4","issue":"CoNEXT2","first_page":"1","last_page":"26"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.6787999868392944,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.6787999868392944,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.05810000002384186,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.04989999905228615,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.4546000063419342},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.4503999948501587},{"id":"https://openalex.org/keywords/metadata","display_name":"Metadata","score":0.42080000042915344},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.4198000133037567},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.39430001378059387},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.38830000162124634},{"id":"https://openalex.org/keywords/vendor","display_name":"Vendor","score":0.37209999561309814},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.353300005197525},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.3422999978065491},{"id":"https://openalex.org/keywords/ambiguity","display_name":"Ambiguity","score":0.33070001006126404}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7839000225067139},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.4546000063419342},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.45320001244544983},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.4503999948501587},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.44780001044273376},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.42080000042915344},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.4198000133037567},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.39430001378059387},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.38830000162124634},{"id":"https://openalex.org/C2777338717","wikidata":"https://www.wikidata.org/wiki/Q1762621","display_name":"Vendor","level":2,"score":0.37209999561309814},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3662000000476837},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.353300005197525},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.3422999978065491},{"id":"https://openalex.org/C2780522230","wikidata":"https://www.wikidata.org/wiki/Q1140419","display_name":"Ambiguity","level":2,"score":0.33070001006126404},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.3188000023365021},{"id":"https://openalex.org/C33724603","wikidata":"https://www.wikidata.org/wiki/Q812540","display_name":"Bayesian network","level":2,"score":0.3179999887943268},{"id":"https://openalex.org/C129792486","wikidata":"https://www.wikidata.org/wiki/Q1050419","display_name":"Language identification","level":3,"score":0.3116999864578247},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.30959999561309814},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.3089999854564667},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.304500013589859},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.30070000886917114},{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.2957000136375427},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.29030001163482666},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2816999852657318},{"id":"https://openalex.org/C2780513914","wikidata":"https://www.wikidata.org/wiki/Q18210350","display_name":"Bottleneck","level":2,"score":0.2797999978065491},{"id":"https://openalex.org/C2778121359","wikidata":"https://www.wikidata.org/wiki/Q8096","display_name":"Lexicon","level":2,"score":0.27630001306533813},{"id":"https://openalex.org/C112972136","wikidata":"https://www.wikidata.org/wiki/Q7595718","display_name":"Stability (learning theory)","level":2,"score":0.2720000147819519},{"id":"https://openalex.org/C175154964","wikidata":"https://www.wikidata.org/wiki/Q380077","display_name":"Task analysis","level":3,"score":0.271699994802475},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.27160000801086426},{"id":"https://openalex.org/C145804949","wikidata":"https://www.wikidata.org/wiki/Q478123","display_name":"Situation awareness","level":2,"score":0.2705000042915344},{"id":"https://openalex.org/C23224414","wikidata":"https://www.wikidata.org/wiki/Q176769","display_name":"Hidden Markov model","level":2,"score":0.26919999718666077},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.26660001277923584},{"id":"https://openalex.org/C147494362","wikidata":"https://www.wikidata.org/wiki/Q2078905","display_name":"Troubleshooting","level":2,"score":0.26440000534057617},{"id":"https://openalex.org/C151319957","wikidata":"https://www.wikidata.org/wiki/Q752739","display_name":"Asynchronous communication","level":2,"score":0.25769999623298645},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.257099986076355},{"id":"https://openalex.org/C167900197","wikidata":"https://www.wikidata.org/wiki/Q11081100","display_name":"Spoofing attack","level":2,"score":0.2563000023365021},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.2547000050544739},{"id":"https://openalex.org/C160234255","wikidata":"https://www.wikidata.org/wiki/Q812535","display_name":"Bayesian inference","level":3,"score":0.2524000108242035},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.25220000743865967},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.25189998745918274}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3808674","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3808674","pdf_url":null,"source":{"id":"https://openalex.org/S4387290834","display_name":"Proceedings of the ACM on Networking","issn_l":"2834-5509","issn":["2834-5509"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Networking","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2510.13817","is_oa":true,"landing_page_url":"https://arxiv.org/abs/2510.13817","pdf_url":"https://arxiv.org/pdf/2510.13817","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2510.13817","is_oa":true,"landing_page_url":"https://arxiv.org/abs/2510.13817","pdf_url":"https://arxiv.org/pdf/2510.13817","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G580601492","display_name":"Collaborative Research: SaTC: CORE: Small: Supporting Privacy Negotiation Among Multiple Stakeholders in Smart Environments","funder_award_id":"2232655","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6786433975","display_name":"CIRC: Planning-C: Global Smart Home Testbed for Security & Privacy Researchers","funder_award_id":"2346332","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G753425401","display_name":"Collaborative Research: IMR: MM-1C: Privacy-preserving IoT Analytics and Behavior Prediction on Network Edge","funder_award_id":"2219867","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7163032127.pdf","grobid_xml":"https://content.openalex.org/works/W7163032127.grobid-xml"},"referenced_works_count":33,"referenced_works":["https://openalex.org/W2012095206","https://openalex.org/W2694044524","https://openalex.org/W2733765803","https://openalex.org/W2750674396","https://openalex.org/W2774161712","https://openalex.org/W2795566406","https://openalex.org/W2806344036","https://openalex.org/W2888505697","https://openalex.org/W2907410281","https://openalex.org/W2953381066","https://openalex.org/W2971782395","https://openalex.org/W2991374072","https://openalex.org/W2998216295","https://openalex.org/W3029119254","https://openalex.org/W3031816651","https://openalex.org/W3045818689","https://openalex.org/W3083750600","https://openalex.org/W3093880997","https://openalex.org/W3206325220","https://openalex.org/W3217401178","https://openalex.org/W4225093391","https://openalex.org/W4285106051","https://openalex.org/W4288080331","https://openalex.org/W4307941479","https://openalex.org/W4308562596","https://openalex.org/W4362584777","https://openalex.org/W4387874118","https://openalex.org/W4387880730","https://openalex.org/W4387986956","https://openalex.org/W4395022407","https://openalex.org/W4399463119","https://openalex.org/W4401208776","https://openalex.org/W4411119308"],"related_works":[],"abstract_inverted_index":{"The":[0],"growth":[1],"of":[2,85,90],"IoT":[3,79,156],"devices":[4],"in":[5,28],"shared":[6],"environments":[7],"has":[8],"outpaced":[9],"our":[10],"ability":[11],"to":[12,18,116,140,166],"identify":[13],"them,":[14],"posing":[15],"urgent":[16],"risks":[17],"privacy,":[19],"safety,":[20],"and":[21,97,121,130,145,162,171],"accountability.":[22],"This":[23],"challenge":[24],"is":[25,35],"especially":[26],"pronounced":[27],"open-world":[29],"environments,":[30],"where":[31],"network":[32,62],"traffic":[33],"metadata":[34],"often":[36],"sparse,":[37],"noisy,":[38],"or":[39],"adversarial.":[40],"To":[41],"address":[42],"this":[43,65,111],"problem,":[44],"we":[45,71],"introduce":[46],"a":[47,56,104,180],"semantic":[48],"inference":[49],"pipeline":[50],"that":[51],"reframes":[52],"device":[53,186],"identification":[54,187],"as":[55,179],"language":[57,92],"modeling":[58],"task":[59],"over":[60],"real-world":[61,83],"metadata.":[63],"As":[64],"approach":[66],"depends":[67],"on":[68,110,153],"reliable":[69],"supervision,":[70],"first":[72],"construct":[73],"high-fidelity":[74],"vendor":[75,123],"labels":[76],"for":[77,184],"the":[78,151],"Inspector":[80],"dataset\u2014the":[81],"largest":[82],"corpus":[84],"its":[86],"kind\u2014using":[87],"an":[88,154],"ensemble":[89],"large":[91],"models":[93],"guided":[94],"by":[95],"mutual-information":[96],"entropy-based":[98],"stability":[99],"scores.":[100],"We":[101,148],"then":[102],"instruction-tune":[103],"quantized":[105],"LLaMA":[106],"3.1":[107],"8B":[108],"model":[109,126,152],"dataset":[112],"using":[113],"curriculum":[114],"learning":[115],"support":[117],"generalization":[118],"under":[119,169],"sparsity":[120],"long-tail":[122],"distributions.":[124],"Our":[125],"achieves":[127],"98.69%":[128],"top-1":[129],"90.73%":[131],"macro":[132],"accuracy":[133],"across":[134],"2,015":[135],"vendors,":[136],"while":[137],"remaining":[138],"robust":[139],"missing":[141],"fields,":[142],"protocol":[143],"drift,":[144],"adversarial":[146,164],"manipulation.":[147],"also":[149],"evaluate":[150],"independent":[155],"testbed":[157],"dataset,":[158],"assess":[159],"explanation":[160],"quality,":[161],"conduct":[163],"tests":[165],"probe":[167],"robustness":[168],"spoofed":[170],"obfuscated":[172],"input.":[173],"These":[174],"results":[175],"position":[176],"instruction-tuned":[177],"LLMs":[178],"scalable,":[181],"interpretable":[182],"foundation":[183],"trustworthy":[185],"at":[188],"scale.":[189]},"counts_by_year":[],"updated_date":"2026-08-18T07:49:30.821534","created_date":"2026-06-02T00:00:00"}