Saved in:
Bibliographic Details
Main Authors: Golec, Muhammed, Khamayseh, Yaser, Melhem, Suhib Bani, Alwarafy, Abdulmalik
Format: Preprint
Published: 2025
Subjects:
Online Access:https://arxiv.org/abs/2505.18846
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866915547710488576
author Golec, Muhammed
Khamayseh, Yaser
Melhem, Suhib Bani
Alwarafy, Abdulmalik
author_facet Golec, Muhammed
Khamayseh, Yaser
Melhem, Suhib Bani
Alwarafy, Abdulmalik
contents Sixth Generation (6G) wireless networks, which are expected to be deployed in the 2030s, have already created great excitement in academia and the private sector with their extremely high communication speed and low latency rates. However, despite the ultra-low latency, high throughput, and AI-assisted orchestration capabilities they promise, they are vulnerable to stealthy and long-term Advanced Persistent Threats (APTs). Large Language Models (LLMs) stand out as an ideal candidate to fill this gap with their high success in semantic reasoning and threat intelligence. In this paper, we present a comprehensive systematic review and taxonomy study for LLM-assisted APT detection in 6G networks. We address five research questions, namely, semantic merging of fragmented logs, encrypted traffic analysis, edge distribution constraints, dataset/modeling techniques, and reproducibility trends, by leveraging most recent studies on the intersection of LLMs, APTs, and 6G wireless networks. We identify open challenges such as explainability gaps, data scarcity, edge hardware limitations, and the need for real-time slicing-aware adaptation by presenting various taxonomies such as granularity, deployment models, and kill chain stages. We then conclude the paper by providing several research gaps in 6G infrastructures for future researchers. To the best of our knowledge, this paper is the first comprehensive systematic review and classification study on LLM-based APT detection in 6G networks.
format Preprint
id arxiv_https___arxiv_org_abs_2505_18846
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle LLM-Driven APT Detection for 6G Wireless Networks: A Systematic Review and Taxonomy
Golec, Muhammed
Khamayseh, Yaser
Melhem, Suhib Bani
Alwarafy, Abdulmalik
Cryptography and Security
Sixth Generation (6G) wireless networks, which are expected to be deployed in the 2030s, have already created great excitement in academia and the private sector with their extremely high communication speed and low latency rates. However, despite the ultra-low latency, high throughput, and AI-assisted orchestration capabilities they promise, they are vulnerable to stealthy and long-term Advanced Persistent Threats (APTs). Large Language Models (LLMs) stand out as an ideal candidate to fill this gap with their high success in semantic reasoning and threat intelligence. In this paper, we present a comprehensive systematic review and taxonomy study for LLM-assisted APT detection in 6G networks. We address five research questions, namely, semantic merging of fragmented logs, encrypted traffic analysis, edge distribution constraints, dataset/modeling techniques, and reproducibility trends, by leveraging most recent studies on the intersection of LLMs, APTs, and 6G wireless networks. We identify open challenges such as explainability gaps, data scarcity, edge hardware limitations, and the need for real-time slicing-aware adaptation by presenting various taxonomies such as granularity, deployment models, and kill chain stages. We then conclude the paper by providing several research gaps in 6G infrastructures for future researchers. To the best of our knowledge, this paper is the first comprehensive systematic review and classification study on LLM-based APT detection in 6G networks.
title LLM-Driven APT Detection for 6G Wireless Networks: A Systematic Review and Taxonomy
topic Cryptography and Security
url https://arxiv.org/abs/2505.18846