SpaLLM-Guard: pairing SMS spam detection using open-source and commercial LLMs

Muhammad Salman, Muhammad Ikram, Nardine Basta, Dali Kaafar

Research output: Contribution to conferencePaperpeer-review

Abstract

The increasing threat of SMS spam, driven by evolving adversarial techniques and concept drift, calls for more robust and adaptive detection methods. In this paper, we evaluate the potential of large language models (LLMs), both open-source and commercial, for SMS spam detection, comparing their performance across zero-shot, few-shot, fine-tuning, and chain-of-thought (CoT) prompting approaches. Using a comprehensive dataset of SMS messages, we assess the spam detection capabilities of prominent LLMs such as GPT-4, DeepSeek, LLAMA-2, and Mixtral. Our findings reveal that while zero-shot learning provides convenience, it is unreliable for effective spam detection. Few-shot learning, particularly with carefully selected examples, improves detection but exhibits variability across models. Fine-tuning emerges as the most effective strategy, with Mixtral achieving 98.61% accuracy and a balanced false positive and false negative rate below 2%, meeting the criteria for robust spam detection. Furthermore, we explore the resilience of these models to adversarial attacks, finding that fine-tuning significantly enhances robustness against both perceptible and imperceptible manipulations. Lastly, we investigate the impact of concept drift and demonstrate that fine-tuned LLMs, especially when combined with few-shot learning, can mitigate its effects, maintaining high performance even on evolving spam datasets. This study highlights the importance of fine-tuning and tailored learning strategies to deploy LLMs effectively for real-world SMS spam detection.
Original languageEnglish
Pages1-18
Number of pages18
Publication statusSubmitted - 15 May 2025
EventInternational Symposium on Research in Attacks, Intrusions, and Defenses - Gold Coast, Australia, Gold Coast, Australia
Duration: 19 Oct 202522 Oct 2025
Conference number: 28
https://raid2025.github.io/

Conference

ConferenceInternational Symposium on Research in Attacks, Intrusions, and Defenses
Abbreviated titleRAID
Country/TerritoryAustralia
CityGold Coast
Period19/10/2522/10/25
Internet address

Cite this