DoLLM: How Large Language Models Understanding Network Flow Data to Detect Carpet Bombing DDoS

arXiv:2405.07638v1 Announce Type: cross
Abstract: It is an interesting question Can and How Large Language Models (LLMs) understand non-language network data, and help us detect unknown malicious flows. This paper takes Carpet Bombing as a case study and shows how to exploit LLMs' powerful capability in the networking area. Carpet Bombing is a new DDoS attack that has dramatically increased in recent years, significantly threatening network infrastructures. It targets multiple victim IPs within subnets, causing congestion on access links and …

arxiv bombing can case cs.ai cs.cr cs.ni data ddos detect exploit flow language language models large llms malicious network non question study understand understanding