Skip to main content
SpringerLink
Log in

Harnessing the Advanced Capabilities of LLM for Adaptive Intrusion Detection Systems

  • Conference paper
  • First Online:
Advanced Information Networking and Applications (AINA 2024)

Part of the book series: Lecture Notes on Data Engineering and Communications Technologies ((LNDECT,volume 204))

  • 366 Accesses

Abstract

The integration of Machine Learning (ML) and Deep Learning (DL) techniques has significantly advanced Intrusion Detection Systems (IDSs) across diverse domains such as networking, cybersecurity and industrial control systems. These approaches have played a key role in the development of Artificial Intelligence (AI) within IDSs. Moreover, the emergence of Large Language Models (LLMs) has gained prominence, encompassing both ML and AI capabilities. These models are trained on extensive datasets, enabling them to generate human-like text generation and autonomous decisions taking. This paper is intended to evaluate the capacity of LLMs in the context of IDSs for networking. LLMs exhibit the ability to process and comprehend large volumes of network log data, autonomously learn, adapt to evolving network behavior, and effectively differentiate between regular activities and potential threats. Emphasizing the substantial role of ML and AI by enhancing the adaptability and performance of IDSs technologies. The present work also underscores the potential of LLMs and their fine-tuning to reinforce IDSs capabilities, while addressing the associated challenges.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution
Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 149.00
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 279.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

References

  1. Vaswani, A., et al.: Attention is all you need, arXiv preprint, arXiv:1706.03762, https://arxiv.org/abs/1706.03762 (2023)

  2. Ferrag, M.A., Ndhlovu, M., Tihanyi, N., Cordeiro, L.C., Debbah, M., Lestable, T.: Revolutionizing cyber threat detection with large language models, arXiv preprint, arXiv:2306.14263, https://arxiv.org/abs/2306.14263 (2023)

  3. Li, F., Shen, H., Mai, J., et al.: Pre-trained language model-enhanced conditional generative adversarial networks for intrusion detection. Peer-to-Peer Netw. Appl. (2023). https://doi.org/10.1007/s12083-023-01595-6

  4. Saurabh, K.: LBDMIDS: LSTM based deep learning model for intrusion detection systems for IoT networks. IEEE World AI IoT Congress (AIIoT). 2022, 753–75 (2022). https://doi.org/10.1109/AIIoT54504.2022.9817245

  5. Huang, X., Zhang, Y.: Network intrusion detection based on an improved long-short-term memory model in combination with multiple patiotemporal structures. Wirel. Commun. Mobile Comput. 2021, 6623554 (2022).https://doi.org/10.1155/2021/6623554

  6. Salih, A., Zeebaree, S.T., Ameen, S., Alkhyyat, A., Shukur, H.M.: A survey on the role of artificial intelligence, machine learning and deep learning for cybersecurity attack detection. In,: 7th International Engineering Conference “Research & Innovation amid Global Pandemic” (IEC). Erbil, Iraq vol. 2021, pp. 61–66 (2021). https://doi.org/10.1109/IEC52205.2021.9476132

  7. Devlin, J., Chang, M.-W., Lee, K., Toutanova, K.: BERT: pre-training of deep bidirectional transformers for language understanding, arXiv preprint, arXiv:1810.04805, https://arxiv.org/abs/1810.04805 (2019)

  8. Ali, T., Kostakos, P.: HuntGPT: integrating machine learning-based anomaly detection and explainable AI with large language models (LLMs). arXiv preprint arXiv:2309.16021, https://arxiv.org/abs/2309.16021 (2023)

  9. Wang, J., Huang, Z., Liu, H., Yang, N., Xiao, Y.: DefectHunter: a novel LLM-driven boosted-conformer-based code vulnerability detection mechanism." arXiv preprint arXiv:2309.15324, https://api.semanticscholar.org/CorpusID:263152779 (2023)

  10. Zaboli, A., Choi, S.L., Song, T.-J., Hong, J.: ChatGPT and other large language models for cybersecurity of smart grid applications. arXiv preprint arXiv:2311.05462, https://arxiv.org/abs/2311.05462 (2023)

  11. Jüttner, V., Grimmer, M., Buchmann, E.: ChatIDS: explainable cybersecurity using generative AI. arXiv preprint arXiv:2306.14504, https://arxiv.org/abs/2306.14504 (2023)

  12. Ameri, K., Hempel, M., Sharif, H., Lopez Jr J., Perumalla, K.: CyBERT: cybersecurity claim classification by fine-tuning the BERT language model. J. Cybersecur. Priv. 1(4), 615-637 (2021). https://doi.org/10.3390/jcp1040031

  13. Yin, J., Tang, M., Cao, J., Wang, H.: Apply transfer learning to cybersecurity: Predicting exploitability of vulnerabilities by description (2020). https://doi.org/10.1016/j.knosys.2020.106529

  14. Aghaei, E., Niu, X., Shadid, W., Al-Shaer, E.: SecureBERT: a domain-specific language model for cybersecurity, arXiv preprint arXiv:2204.02685, https://arxiv.org/abs/2204.02685 (2022)

  15. Lin, X., Xiong, G., Gou, G., Li, Z., Shi, J., Yu, J.: ET-BERT: a contextualized datagram representation with pre-training transformers for encrypted traffic classification (2022). https://doi.org/10.1145/3485447.3512217

  16. Naveed, H., et al.: A comprehensive overview of large language models. arXiv preprint arXiv:2307.06435, https://arxiv.org/abs/2307.06435 (2023)

  17. Manocchio, L.D., Layeghy, S., Lo, W.W., Kulatilleke, G.K., Sarhan, M., Portmann, M.: FlowTransformer: a transformer framework for flow-based network intrusion detection systems. arXiv preprint arXiv:2304.14746, https://arxiv.org/abs/2304.14746 (2023)

  18. Shaukat, K., Luo, S., Varadharajan, V., Hameed, I.A., Xu, M.: A survey on machine learning techniques for cyber security in the last decade. IEEE Access 8, 222310–222354 (2022). https://doi.org/10.1109/ACCESS.2020.3041951

    Article  Google Scholar 

  19. Liu, H.; Lang, B.: Machine learning and deep learning methods for intrusion detection systems: a survey. Appl. Sci. 9(20), 4396 (2019). https://www.mdpi.com/2076-3417/9/20/4396

  20. Kocher, G., Kumar, G.: Machine learning and deep learning methods for intrusion detection systems: recent developments and challenges. Soft Comput. 25, 9731–9763 (2021). Accepted 17 May (2021). 24 June 2021. Issue Date: August 2022. https://doi.org/10.1007/s00500-021-05893-0

  21. Ridwan, M.A., Radzi, N.A.M., Abdullah, F., Jalil, Y.E.: Applications of machine learning in networking: a survey of current issues and future challenges. IEEE Access 9, 52523–52556 (2022). https://doi.org/10.1109/ACCESS.2021.3069210

    Article  Google Scholar 

  22. Wibowo, R.N., Sukarno, P., Jadied, E.M.: NSL-KDD Dataset. In: Proceedings (2019). https://api.semanticscholar.org/CorpusID:198166203

  23. Britto, R., Murphy, T., Iovene, M., Jonsson, L., Erol-Kantarci, M., Kovács, B.: Telecom AI native systems in the age of generative AI – an engineering perspective arXiv preprintarXiv:2310.11770, https://aps.arxiv.org/abs/2310.11770 (2023)

  24. Lv, K., Yang, Y., Liu, T., Gao, Q., Guo, Q., Qiu, X.: Full parameter fine-tuning for large language models with limited resources. arXiv preprint arXiv:2306.09782, https://doi.org/10.48550/arXiv.2306.09782 (2023)

  25. Yang, J., et al.: Harnessing the power of LLMs in practice: a survey on ChatGPT and beyond. arXiv preprint arXiv:2304.13712, https://doi.org/10.48550/arXiv.2304.13712 (2023)

  26. Kaddour, J., Harris, J., Mozes, M., Bradley, H., Raileanu, R., McHardy, R.: Challenges and applications of large language models. arXiv preprint arXiv:2307.10169, https://arxiv.org/abs/2307.10169 (2023)

  27. Ye, W., et al.: Assessing Hidden risks of LLMs: an empirical study on robustness, consistency, and credibility. arXiv preprint arXiv:2305.10235, https://doi.org/10.48550/arXiv.2305.10235 (2023)

  28. Ingre, B., Yadav, A.: Performance analysis of NSL-KDD dataset using ANN. In: 2015 International Conference on Signal Processing and Communication Engineering Systems, Guntur, India, pp. 92–96 (2015). https://doi.org/10.1109/SPACES.2015.7058223

  29. Author, E., et al.: A Comparative study of intrusion detection systems applied to NSL-KDD Dataset. Egyptian Int. J. Eng. Sci. Technol. 43(2), 88-98 (2023). https://doi.org/10.21608/eijest.2022.137441.1156

Download references

Author information

Authors and Affiliations

  1. Research Laboratory in Information and Communication Technologies, Universidad Galileo, 7a. Av. Final, Calle Dr. Suger, Zona 10, Guatemala

    Oscar G. Lira, Alberto Marroquin & Marco Antonio To

Authors
  1. Oscar G. Lira
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Alberto Marroquin
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. Marco Antonio To
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Marco Antonio To .

Editor information

Editors and Affiliations

  1. Department of Information and Communication Engineering, Fukuoka Institute of Technology, Fukuoka, Japan

    Leonard Barolli

Rights and permissions

Reprints and permissions

Copyright information

© 2024 The Author(s), under exclusive license to Springer Nature Switzerland AG

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

G. Lira, O., Marroquin, A., To, M.A. (2024). Harnessing the Advanced Capabilities of LLM for Adaptive Intrusion Detection Systems. In: Barolli, L. (eds) Advanced Information Networking and Applications. AINA 2024. Lecture Notes on Data Engineering and Communications Technologies, vol 204. Springer, Cham. https://doi.org/10.1007/978-3-031-57942-4_44

Download citation

Publish with us

Policies and ethics

Search

Navigation