A Dynamically Selected GPT Model for Phishing Detection

This paper introduces a novel approach to augmenting Incident Response Teams (IRT) by leveraging fine-tuned GPT models for early threat detection. Traditional IRTs often face challenges in timely response, prompting the need for automation. Our solution focuses on automating the pre-detection phase by alerting users about potentially harmful emails before they are opened, addressing the issue of insufficient response time. In comparison to the base model, our fine-tuned GPT models exhibit superior performance. The results of this study will be forwarded to the IRT for further evaluation and potential integration into a pre-detection system. Notably, our method emphasizes content and context analysis of emails, crucial for identifying insider threats. By employing Generative Large Language Models (GLLM), specifically tuned for this purpose, we aim to enhance the detection capabilities, contributing to a more robust incident response strategy in cybersecurity.