Harnessing LLMs for IoT Malware Detection: A Comparative Analysis of BERT and GPT-2

In recent years, the proliferation of Internet of Things (IoT) devices has introduced significant vulnerabilities in cybersecurity, particularly with the rise of sophisticated malware targeting these systems. Traditional detection methods, often based on static signatures, struggle to keep pace with evolving threats, such as zero-day attacks. This paper explores the application of Large Language Models (LLMs), specifically BERT and GPT-2, in detecting IoT malware by analyzing network traffic and identifying anomalies. Using the contextual understanding and adaptability of LLM, our approach significantly enhances detection accuracy compared to conventional methods. We evaluated the models using the ToN-IoT dataset, demonstrating their capability to detect complex malware patterns with higher precision. The results indicate that BERT outperforms GPT-2 across multiple metrics, highlighting its effectiveness in generalizing to various attack types. Despite promising advancements, challenges such as computational resource demands and model interpretability persist. Future research should focus on optimizing LLMs for real-time detection in resource-constrained environments and improving transparency to enhance trust among cybersecurity professionals. Our study underscores the potential of LLMs as powerful tools in the ongoing battle against IoT malware, offering a robust framework for enhancing cybersecurity defenses.

Authors

Institutions

Publication Details

Published
2024-11-07
DOI
https://doi.org/10.1109/ismsit63511.2024.10757249
Citations
20
Primary Topic
Advanced Malware Detection Techniques
Type
article
Field-Weighted Citation Impact
7.01
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Harnessing LLMs for IoT Malware Detection: A Comparative Analysis of BERT and GPT-2

Hewa Majeed Zangana, Marwan Omar, Jamal N. Al-Karaki, Derek Mohammed
20 citations
Advanced Malware Detection Techniques
7.01
article

Harnessing LLMs for IoT Malware Detection: A Comparative Analysis of BERT and GPT-2

Hewa Majeed Zangana, Marwan Omar, Jamal N. Al-Karaki, Derek Mohammed
article en
20 citations

Abstract

In recent years, the proliferation of Internet of Things (IoT) devices has introduced significant vulnerabilities in cybersecurity, particularly with the rise of sophisticated malware targeting these systems. Traditional detection methods, often based on static signatures, struggle to keep pace with evolving threats, such as zero-day attacks. This paper explores the application of Large Language Models (LLMs), specifically BERT and GPT-2, in detecting IoT malware by analyzing network traffic and identifying anomalies. Using the contextual understanding and adaptability of LLM, our approach significantly enhances detection accuracy compared to conventional methods. We evaluated the models using the ToN-IoT dataset, demonstrating their capability to detect complex malware patterns with higher precision. The results indicate that BERT outperforms GPT-2 across multiple metrics, highlighting its effectiveness in generalizing to various attack types. Despite promising advancements, challenges such as computational resource demands and model interpretability persist. Future research should focus on optimizing LLMs for real-time detection in resource-constrained environments and improving transparency to enhance trust among cybersecurity professionals. Our study underscores the potential of LLMs as powerful tools in the ongoing battle against IoT malware, offering a robust framework for enhancing cybersecurity defenses.

Saint Leo University (US), Illinois Institute of Technology (US), Duhok Polytechnic University (IQ), Zayed University (AE)
Openalex Percentile: Top 2%
Advanced Malware Detection Techniques
7.01
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.