mlsanityData to 7 Oct 2026

Adaptive and Robust Data Poisoning Detection and Sanitization in Wearable IoT Systems using Large Language Models

arXiv 2511.02894 ↗First posted 4 Nov 2025cs.LG cs.CRcited by 0

On the map: LLM safety and security → Backdoor and data poisoning attacks

Abstract (arXiv)

The widespread integration of wearable sensing devices in Internet of Things (IoT) ecosystems, particularly in healthcare, smart homes, and industrial applications, has required robust human activity recognition (HAR) techniques to improve functionality and user experience. Although machine learning models have advanced HAR, they are increasingly susceptible to data poisoning attacks that compromise the data integrity and reliability of these systems. Conventional approaches to defending against such attacks often require extensive task-specific training with large, labeled datasets, which limits adaptability in dynamic IoT environments. This work proposes a novel framework that uses large language models (LLMs) to perform poisoning detection and sanitization in HAR systems, utilizing zero-shot, one-shot, and few-shot learning paradigms. Our approach incorporates textitrole play prompting, whereby the LLM assumes the role of expert to contextualize and evaluate sensor anomalies, and textitthink step-by-step reasoning, guiding the LLM to infer poisoning indicators in the raw sensor data and plausible clean alternatives. These strategies minimize reliance on curation of extensive datasets and enable robust, adaptable defense mechanisms in real-time. We perform an extensive evaluation of the framework, quantifying detection accuracy, sanitization quality, latency, and communication cost, thus demonstrating the practicality and effectiveness of LLMs in improving the security and reliability of wearable IoT systems.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Backdoor and data poisoning attacks, one of 12 directions in LLM safety and security. Builds on 22 of its 66 references that are in the map. First posted on arXiv 4 Nov 2025.

Builds on

22 of 66 references.

References · 22

  1. 2020Language Models are Few-Shot Learnerscited by 32,199
  2. 2021Calibrate Before Use: Improving Few-Shot Performance of Language Modelscited by 1,371
  3. 2024A Systematic Survey of Prompt Engineering in Large Language Models: Techniques and Applicationscited by 428
  4. 2020Just How Toxic is Data Poisoning? A Unified Benchmark for Backdoor and Data Poisoning Attackscited by 109
  5. 2018Label Sanitization against Label Flipping Poisoning Attackscited by 68
  6. 2020Data Poisoning Attacks on Federated Machine Learningcited by 58
  7. 2024HARGPT: Are LLMs Zero-Shot Human Activity Recognizers?cited by 52
  8. 2018Protecting Sensory Data against Sensitive Inferencescited by 45
  9. 2024LLMSense: Harnessing LLMs for High-level Reasoning Over Spatiotemporal Sensor Tracescited by 28
  10. 2023LLMind: Orchestrating AI and IoT with LLM for Complex Task Executioncited by 24
  11. 2024Large Language Models for Anomaly and Out-of-Distribution Detection: A Surveycited by 24
  12. 2024Large Language Models are Zero-Shot Recognizers for Activities of Daily Livingcited by 13
10 more
  1. 2024Efficient Prompting for LLM-based Generative Internet of Thingscited by 12
  2. 2024Large Language Models for Wearable Sensor-Based Human Activity Recognition, Health Monitoring, and Behavioral Modeling: A Survey of Early Trends, Datasets, and Challengescited by 12
  3. 2022Label Flipping Data Poisoning Attack Against Wearable Human Activity Recognition Systemcited by 9
  4. 2025Wi-Chat: Large Language Model Powered Wi-Fi Sensingcited by 6
  5. 2024Federated Learning Under Attack: Exposing Vulnerabilities through Data Poisoning Attacks in Computer Networkscited by 5
  6. 2024LightLLM: A Versatile Large Language Model for Predictive Light Sensingcited by 5
  7. 2025Leveraging Large Language Models for Explainable Activity Recognition in Smart Homes: A Critical Evaluationcited by 5
  8. 2024Are You Being Tracked? Discover the Power of Zero-Shot Trajectory Tracing with LLMs!cited by 2
  9. 2024Partner in Crime: Boosting Targeted Poisoning Attacks against Federated Learningcited by 2
  10. 2025EgoLog: Ego-Centric Fine-Grained Daily Log with Ubiquitous Wearablescited by 2

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026CLIP-guided Diffusion Model for Backdoor Generation in Sensor-based Human Activity Recognition
  2. 2025AegisAgent: An Autonomous Defense Agent Against Prompt Injection Attacks in LLM-HARs
  3. 2026Knowledge Distillation for LLM-Based Human Activity Recognition in Homes
  4. 2025ChatIoT: Large Language Model-based Security Assistant for Internet of Things with Retrieval-Augmented Generation
  5. 2025Foundation Models for CPS-IoT: Opportunities and Challenges
  6. 2025LLM-based Multi-class Attack Analysis and Mitigation Framework in IoT/IIoT Networks
  7. 2025Large Language Model-driven Security Assistant for Internet of Things via Chain-of-Thought
  8. 2026Cracking IoT Security: Can LLMs Outsmart Static Analysis Tools?