{"id":"https://openalex.org/W7160040259","doi":"https://doi.org/10.48550/arxiv.2605.00741","title":"Self-Adaptive Multi-Agent LLM-Based Security Pattern Selection for IoT Systems","display_name":"Self-Adaptive Multi-Agent LLM-Based Security Pattern Selection for IoT Systems","publication_year":2026,"publication_date":"2026-05-01","ids":{"openalex":"https://openalex.org/W7160040259","doi":"https://doi.org/10.48550/arxiv.2605.00741"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.00741","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.00741","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.00741","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135124079","display_name":"Saeid Jamshidi","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jamshidi, Saeid","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135159935","display_name":"Foutse Khomh","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Khomh, Foutse","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135203179","display_name":"Carol Fung","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Fung, Carol","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5110358595","display_name":"Kawser Wazed Nafi","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nafi, Kawser Wazed","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.2379000037908554,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.2379000037908554,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.14239999651908875,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.09139999747276306,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/testbed","display_name":"Testbed","score":0.6689000129699707},{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.43560001254081726},{"id":"https://openalex.org/keywords/security-domain","display_name":"Security domain","score":0.4047999978065491},{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.3749000132083893},{"id":"https://openalex.org/keywords/enhanced-data-rates-for-gsm-evolution","display_name":"Enhanced Data Rates for GSM Evolution","score":0.3596000075340271},{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.3463999927043915},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.3431999981403351},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.34299999475479126}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8102999925613403},{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.6689000129699707},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5246000289916992},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.4966000020503998},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.43560001254081726},{"id":"https://openalex.org/C2780264999","wikidata":"https://www.wikidata.org/wiki/Q7445032","display_name":"Security domain","level":2,"score":0.4047999978065491},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.3749000132083893},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.3596000075340271},{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.3463999927043915},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.3431999981403351},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.34299999475479126},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.3310999870300293},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.2840000092983246},{"id":"https://openalex.org/C138236772","wikidata":"https://www.wikidata.org/wiki/Q25098575","display_name":"Edge device","level":3,"score":0.28060001134872437},{"id":"https://openalex.org/C2164484","wikidata":"https://www.wikidata.org/wiki/Q5170150","display_name":"Core (optical fiber)","level":2,"score":0.2797999978065491},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.27559998631477356},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2727999985218048},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.2702000141143799},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.2655999958515167},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.26170000433921814},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.25540000200271606}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.00741","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.00741","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.00741","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.00741","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/7","display_name":"Affordable and clean energy","score":0.6913860440254211}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0],"adoption":[1],"of":[2,4,12,48,88],"Internet":[3],"Things":[5],"(IoT)":[6],"systems":[7],"at":[8,155],"the":[9,19,188],"network":[10],"edge":[11,97],"smart":[13],"architectures":[14],"is":[15],"increasing":[16,231],"rapidly,":[17],"intensifying":[18],"need":[20],"for":[21],"security":[22,109,179],"mechanisms":[23,35],"that":[24,112],"are":[25,36],"both":[26],"adaptive":[27],"and":[28,59,64,81,92,152,167,176,203,222,227],"resource-efficient.":[29],"In":[30,186],"such":[31],"environments,":[32],"runtime":[33,178],"defence":[34],"no":[37],"longer":[38],"limited":[39,86],"to":[40],"detection":[41],"alone":[42],"but":[43],"become":[44],"a":[45,106,123,142,163],"resource-constrained":[46,96],"task":[47],"selecting":[49],"mitigation":[50,139],"actions.":[51],"Security":[52],"controls":[53],"must":[54],"be":[55],"carefully":[56],"selected,":[57],"combined,":[58],"executed":[60],"under":[61],"latency,":[62],"energy,":[63],"computational":[65],"constraints,":[66],"while":[67,141],"preventing":[68],"unsafe":[69],"interactions":[70],"between":[71],"controls.":[72],"Existing":[73],"approaches":[74],"predominantly":[75],"rely":[76],"on":[77,162],"static":[78],"rule":[79],"sets":[80],"learned":[82],"policies,":[83],"which":[84],"provide":[85],"guarantees":[87],"feasibility,":[89],"conflict":[90],"safety,":[91],"execution":[93,217],"correctness":[94],"in":[95],"settings.":[98],"To":[99],"address":[100],"this":[101],"limitation,":[102],"we":[103],"introduce":[104],"ASPO,":[105],"self-adaptive":[107],"multi-agent":[108],"pattern":[110,205],"selection":[111],"integrates":[113],"Large":[114],"Language":[115],"Model":[116],"(LLM)-based":[117],"reasoning":[118],"with":[119,207],"deterministic":[120,143],"enforcement":[121],"within":[122],"MAPE-K":[124],"control":[125],"loop.":[126],"ASPO":[127,161],"explicitly":[128],"separates":[129],"stochastic":[130],"decision":[131,157,213],"generation":[132],"from":[133],"execution:":[134],"LLM":[135],"agents":[136],"propose":[137],"candidate":[138],"portfolios,":[140],"optimisation":[144],"core":[145],"enforces":[146],"closed-world":[147],"action":[148],"integrity,":[149],"conflict-free":[150,196],"composition,":[151],"resource":[153,199],"feasibility":[154,200],"every":[156],"epoch.":[158],"We":[159],"deploy":[160],"distributed":[164],"edge-gateway":[165],"testbed":[166],"evaluate":[168],"it":[169],"across":[170,201],"two":[171],"workloads,":[172,202],"each":[173],"comprising":[174],"500":[175],"1000":[177],"decisions,":[180],"using":[181],"replayed":[182],"IoT":[183],"attack":[184],"traffic.":[185],"addition,":[187],"results":[189],"demonstrate":[190],"invariant":[191],"safety":[192],"properties,":[193],"including":[194],"100%":[195],"activation,":[197],"consistent":[198],"stable":[204],"dominance":[206],"perfect":[208],"rank":[209],"preservation.":[210],"Importantly,":[211],"deeper":[212],"exploration":[214],"reduces":[215],"extreme-case":[216],"costs,":[218],"compressing":[219],"tail":[220],"latency":[221],"energy":[223,233],"overheads":[224],"by":[225],"21.9%":[226],"23.1%,":[228],"respectively,":[229],"without":[230],"mean":[232],"consumption.":[234]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-05T00:00:00"}