Abstract:Billions of IoT devices lacking proper security mechanisms have been manufactured and deployed for the last years, and more will come with the development of Beyond 5G technologies. Their vulnerability to malware has motivated the need for efficient techniques to detect infected IoT devices inside networks. With data privacy and integrity becoming a major concern in recent years, increasing with the arrival of 5G and Beyond networks, new technologies such as federated learning and blockchain emerged. They allow training machine learning models with decentralized data while preserving its privacy by design. This work investigates the possibilities enabled by federated learning concerning IoT malware detection and studies security issues inherent to this new learning paradigm. In this context, a framework that uses federated learning to detect malware affecting IoT devices is presented. N-BaIoT, a dataset modeling network traffic of several real IoT devices while affected by malware, has been used to evaluate the proposed framework. Both supervised and unsupervised federated models (multi-layer perceptron and autoencoder) able to detect malware affecting seen and unseen IoT devices of N-BaIoT have been trained and evaluated. Furthermore, their performance has been compared to two traditional approaches. The first one lets each participant locally train a model using only its own data, while the second consists of making the participants share their data with a central entity in charge of training a global model. This comparison has shown that the use of more diverse and large data, as done in the federated and centralized methods, has a considerable positive impact on the model performance. Besides, the federated models, while preserving the participant’s privacy, show similar results as the centralized ones. As an additional contribution and to measure the robustness of the federated approach, an adversarial setup with several malicious participants poisoning the federated model has been considered. The baseline model aggregation averaging step used in most federated learning algorithms appears highly vulnerable to different attacks, even with a single adversary. The performance of other model aggregation functions acting as countermeasures is thus evaluated under the same attack scenarios. These functions provide a significant improvement against malicious participants, but more efforts are still needed to make federated approaches robust.

Collective Intelligence: Decentralized Learning for Android Malware Detection in IoT with Blockchain

A Multimodal Malware Detection Technique for Android IoT Devices Using Various Features.

Deep Learning-Based Malicious Smart Contract and Intrusion Detection System for IoT Environment

Collaborative Threat Intelligence: Enhancing IoT Security Through Blockchain and Machine Learning Integration

Securing Android IoT devices with GuardDroid transparent and lightweight malware detection

Federated learning for malware detection in IoT devices

Detection of Android Malware in the Internet of Things through the K-Nearest Neighbor Algorithm

OpCode-Level Function Call Graph Based Android Malware Classification Using Deep Learning

Lightweight Collaborative Anomaly Detection for the IoT using Blockchain

Real-Time Malware Detection on IoT Devices using Behavior-Based Analysis and Neural Networks

Biserial Miyaguchi-Preneel Blockchain-Based Ruzicka-Indexed Deep Perceptive Learning for Malware Detection in IoMT

Enhancement of cyber security in IoT based on ant colony optimized artificial neural adaptive Tensor flow

An Adaptive Semi-Supervised Deep Learning-Based Framework for the Detection of Android Malware.

Blockchain based Attack Detection on Machine Learning Algorithms for IoT based E-Health Applications

An Android Malicious Application Detection Method with Decision Mechanism in the Operating Environment of Blockchain

The Revolution and Vision of Explainable AI for Android Malware Detection and Protection

Prediction of android ransomware with deep learning model using hybrid cryptography

Adversarial Samples on Android Malware Detection Systems for IoT Systems.

MFEMDroid: A Novel Malware Detection Framework Using Combined Multitype Features and Ensemble Modeling

Android-IoT Malware Classification and Detection Approach Using Deep URL Features Analysis

Enhancing Smart IoT Malware Detection: A GhostNet-based Hybrid Approach