본문 바로가기
  • Home

A Large Language Model-based Intrusion Detection Model for Smart Buildings

  • Journal of Software Assessment and Valuation
  • Abbr : JSAV
  • 2024, 20(4), pp.303-314
  • Publisher : Korea Software Assessment and Valuation Society
  • Research Area : Engineering > Computer Science
  • Received : December 8, 2024
  • Accepted : December 20, 2024
  • Published : December 31, 2024

Seokhyun Ahn 1 Suhyeon Park 2 Doik Kim 3 SEONG JE CHO 1 Hong-Geun Kim 4

1단국대학교
2단국대학교 소프트웨어학과
3단국대학교 모바일시스템공학과
4한국인터넷진흥원 공공정보보호단

Accredited

ABSTRACT

Smart building automation systems provide convenience and efficiency but remain vulnerable to cyberattacks. This study proposes an intrusion detection model specifically designed for smart buildings using a large language model. Targeting HVAC systems, normal and malicious behaviors were identified to create training datasets, and the LLaMA 3 8B model was fine-tuned. Benign datasets were developed from physical processes and devices such as HMIs, PLCs, and sensors, while malicious datasets incorporated attack tactics and techniques from the MITRE ATT&CK for ICS matrix. The fine-tuned model demonstrated 90% accuracy on evaluation prompts, significantly outperforming the base model. Inaccuracies were attributed to limited training data, suggesting that additional dataset development and retraining could further enhance performance. These results demonstrate the effectiveness of large language models in intrusion detection for smart building environments.

Citation status

* References for papers published after 2023 are currently being built.