Beyond Detection: Leveraging Large Language Models for Cyber Attack Prediction in IoT Networks
Not on the map. Why?
Abstract (arXiv)
In recent years, numerous large-scale cyberattacks have exploited Internet of Things (IoT) devices, a phenomenon that is expected to escalate with the continuing proliferation of IoT technology. Despite considerable efforts in attack detection, intrusion detection systems remain mostly reactive, responding to specific patterns or observed anomalies. This work proposes a proactive approach to anticipate and mitigate malicious activities before they cause damage. This paper proposes a novel network intrusion prediction framework that combines Large Language Models (LLMs) with Long Short Term Memory (LSTM) networks. The framework incorporates two LLMs in a feedback loop: a fine-tuned Generative Pre-trained Transformer (GPT) model for predicting network traffic and a fine-tuned Bidirectional Encoder Representations from Transformers (BERT) for evaluating the predicted traffic. The LSTM classifier model then identifies malicious packets among these predictions. Our framework, evaluated on the CICIoT2023 IoT attack dataset, demonstrates a significant improvement in predictive capabilities, achieving an overall accuracy of 98%, offering a robust solution to IoT cybersecurity challenges.
Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Builds on 5 of its 21 references that are in the map. First posted on arXiv 26 Aug 2024.
Builds on
5 of 21 references.
References · 5
- 2017Attention Is All You Needcited by 59,932
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2019DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lightercited by 4,243
- 2023Revolutionizing Cyber Threat Detection with Large Language Models: A privacy-preserving BERT-based Lightweight Model for IoT/IIoT Devicescited by 38
- 2023LogGPT: Log Anomaly Detection via GPTcited by 26
Built on by
Citing papers per year: 2025: 6; 2026: 1.
7 papers.
- 2025Large Language Models for Security Operations Centers: A Comprehensive Surveycited by 9
- 2025Advancing Autonomous Incident Response: Leveraging LLMs and Cyber Threat Intelligencecited by 6
- 2025BARTPredict: Empowering IoT Security with LLM-Driven Cyber Threat Predictioncited by 4
- 2025Less Data, More Security: Advancing Cybersecurity LLMs Specialization via Resource-Efficient Domain-Adaptive Continuous Pre-training with Minimal Tokenscited by 4
- 2025Zero-Day Botnet Attack Detection in IoV: A Modular Approach Using Isolation Forests and Particle Swarm Optimizationcited by 0
- 2025Fuse and Federate: Enhancing EV Charging Station Security with Multimodal Fusion and Federated Learningcited by 0
- 2026Anticipating Adversary Behavior in DevSecOps Scenarios through Large Language Modelscited by 0
- 2026Anticipating Adversary Behavior in DevSecOps Scenarios through Large Language Models15 Feb 2026
- 2025Large Language Models for Security Operations Centers: A Comprehensive Survey13 Sep 2025
- 2025Advancing Autonomous Incident Response: Leveraging LLMs and Cyber Threat Intelligence14 Aug 2025
- 2025Less Data, More Security: Advancing Cybersecurity LLMs Specialization via Resource-Efficient Domain-Adaptive Continuous Pre-training with Minimal Tokens30 Jun 2025
- 2025Fuse and Federate: Enhancing EV Charging Station Security with Multimodal Fusion and Federated Learning7 Jun 2025
- 2025Zero-Day Botnet Attack Detection in IoV: A Modular Approach Using Isolation Forests and Particle Swarm Optimization26 Apr 2025
- 2025BARTPredict: Empowering IoT Security with LLM-Driven Cyber Threat Prediction3 Jan 2025