Large Language Model-based Network Intrusion Detection

Dhruv Davey*, Kayvan Karim, Hani Ragab Hassan, Hadj Batatia

*Corresponding author for this work

Research output: Contribution to conferencePaperpeer-review

Abstract

The increasing complexity of cyber threats has made effective Network Intrusion Detection Systems (NIDS) crucial. Traditional NIDS, which rely on predefined signatures or normal network behavior, often struggle with high false-positive rates and emerging threats. This study explores integrating Large Language Models (LLMs) into NIDS to improve detection accuracy and adaptability. Fine-tuned on a comprehensive NetFlow dataset, the LLMs were evaluated using accuracy, precision, recall, and F1 score. The results demonstrate LLM- based NIDS’ potential in reducing false positives and improving novel attack detection, marking a promising direction for cybersecurity.
Original languageEnglish
Publication statusPublished - 2024
Event18th International Conference on Information Technology and Applications 2024 - Sydney, Australia
Duration: 17 Oct 202419 Oct 2024
https://2024.icita.world/#/

Conference

Conference18th International Conference on Information Technology and Applications 2024
Abbreviated titleICITA 2024
Country/TerritoryAustralia
CitySydney
Period17/10/2419/10/24
Internet address

Fingerprint

Dive into the research topics of 'Large Language Model-based Network Intrusion Detection'. Together they form a unique fingerprint.

Cite this