LLM4Network & Malicious Traffic Detection Analysis Resources

LLM4Network & 恶意流量检测相关研究资源汇总

Note:

• ⭐ Please leave a STAR if you like this project! ⭐
• If you find any incorrect / inappropriate / outdated content, please kindly consider opening an issue or a PR.
• We would greatly appreciate your contribution to this list, and you will appear in the contributors✨!

Content

• About
• Dataset
• Survey
• LLM for Network
• Malicious Traffic Detection
• Blogs
• Libraries and Frameworks

About

This is a current list of resources related to the research and development of Malicious Traffic Detection. We comb the field for relevant representative work and related resources, and pay more attention to typical studies and research teams.

Datasets

• Kisune Introduced by Mirsky et al. In Kitsune: An Ensemble of Autoencoders for Online Network Intrusion Detection.
• Yatesbury Introduced by microsoft et al. This dataset serves as a benchmark for evaluting the performance and efficiency of anomaly detectors in east-west data center network traffic.

Survey

LLM for Network

General Tasks

• NetLLM: Adapting Large Language Models for Networking. Duo Wu. SIGCOMM 2024. [code] [video] [slides]

Malicious Traffic Detection

DDoS with Pre-training/LLMs (Generalization, Side-channel Analysis)

• TrafficFormer: An Efficient Pre-trained Model for Traffic Data. Guangmeng Zhou. S&P 2025. [code]
• DoLLM: How Large Language Models Understanding Network Flow Data to Detect Carpet Bombing DDoS. Qingyang Li.
• DrLLM: Prompt-Enhanced Distributed Denial-of-Service Resistance Method with Large Language Models. Zhenyu Yin. [code]
• ShieldGPT: An LLM-based Framework for DDoS Mitigation. Tongze Wang. APNet 2024. [code]

Malicious Traffic with ML-Based Manners

• Realtime Robust Malicious Traffic Detection via Frequency Domain Analysis. Chuanpu Fu. CCS 2021. [code] [video]
• Detecting Unknown Encrypted Malicious Traffic in Real Time via Flow Interaction Graph Analysis. Chuanpu Fu. NDSS 2023. [code] [video] [slide]
• Trident: A Universal Framework for Fine-Grained and Class-Incremental Unknown Traffic Detection. Ziming Zhao. WWW 2024. [code] [video]
• Kitsune: An Ensemble of Autoencoders for Online Network Intrusion Detection. Yisroel Mirsky. NDSS 2018. [code]
• Detecting Tunneled Flooding Traffic via Deep Semantic Analysis of Packet Length Patterns. Chuanpu Fu. CCS 2024. [code]
• Wedjat: Detecting Sophisticated Evasion Attacks via Real-time Causal Analysis. Gao Li. KDD 2025. [code] [video]
• Relative Frequency-Rank Encoding for Unsupervised Network Anomaly Detection. Minsong Kim. ToN 2024. [code]
• NetVigil: Robust and Low-Cost Anomaly Detection for East-West Data Center Security. Kevin Hsieh. NDSI 2024. [code] [video]

Blogs

Tool Libraries and Frameworks

What's New

Version 1.0

Contributors 🌟

Thanks goes to these wonderful people!