Result: An LLM-Based Self-Evolving Security Framework for 6G Space-Air-Ground Integrated Networks

Title:
An LLM-Based Self-Evolving Security Framework for 6G Space-Air-Ground Integrated Networks
Source:
IEEE Communications Magazine. 63:110-116
Publication Status:
Preprint
Publisher Information:
Institute of Electrical and Electronics Engineers (IEEE), 2025.
Publication Year:
2025
Document Type:
Academic journal Article
ISSN:
1558-1896
0163-6804
DOI:
10.1109/mcom.003.2400695
DOI:
10.48550/arxiv.2505.03161
Rights:
IEEE Copyright
arXiv Non-Exclusive Distribution
Accession Number:
edsair.doi.dedup.....2817bc3b6e2283f2a2f24e6b9f0b92a2
Database:
OpenAIRE

Further Information

Recently emerged 6G space-air-ground integrated networks (SAGINs), which integrate satellites, aerial networks, and terrestrial communications, offer ubiquitous coverage for various mobile applications. However, the highly dynamic, open, and heterogeneous nature of SAGINs poses severe security issues. Forming a defense line of SAGINs suffers from two preliminary challenges: 1) accurately understanding massive unstructured multi-dimensional threat information to generate defense strategies against various malicious attacks, 2) rapidly adapting to potential unknown threats to yield more effective security strategies. To tackle the above two challenges, we propose a novel security framework for SAGINs based on Large Language Models (LLMs), which consists of two key ingredients LLM-6GNG and 6G-INST. Our proposed LLM-6GNG leverages refined chain-of-thought (CoT) reasoning and dynamic multi-agent mechanisms to analyze massive unstructured multi-dimensional threat data and generate comprehensive security strategies, thus addressing the first challenge. Our proposed 6G-INST relies on a novel self-evolving method to automatically update LLM-6GNG, enabling it to accommodate unknown threats under dynamic communication environments, thereby addressing the second challenge. Additionally, we prototype the proposed framework with ns-3, OpenAirInterface (OAI), and software-defined radio (SDR). Experiments on three benchmarks demonstrate the effectiveness of our framework. The results show that our framework produces highly accurate security strategies that remain robust against a variety of unknown attacks. We will release our code to contribute to the community.
Accepted by IEEE Communications Magazine