Abstract:Billions of IoT devices lacking proper security mechanisms have been manufactured and deployed for the last years, and more will come with the development of Beyond 5G technologies. Their vulnerability to malware has motivated the need for efficient techniques to detect infected IoT devices inside networks. With data privacy and integrity becoming a major concern in recent years, increasing with the arrival of 5G and Beyond networks, new technologies such as federated learning and blockchain emerged. They allow training machine learning models with decentralized data while preserving its privacy by design. This work investigates the possibilities enabled by federated learning concerning IoT malware detection and studies security issues inherent to this new learning paradigm. In this context, a framework that uses federated learning to detect malware affecting IoT devices is presented. N-BaIoT, a dataset modeling network traffic of several real IoT devices while affected by malware, has been used to evaluate the proposed framework. Both supervised and unsupervised federated models (multi-layer perceptron and autoencoder) able to detect malware affecting seen and unseen IoT devices of N-BaIoT have been trained and evaluated. Furthermore, their performance has been compared to two traditional approaches. The first one lets each participant locally train a model using only its own data, while the second consists of making the participants share their data with a central entity in charge of training a global model. This comparison has shown that the use of more diverse and large data, as done in the federated and centralized methods, has a considerable positive impact on the model performance. Besides, the federated models, while preserving the participant’s privacy, show similar results as the centralized ones. As an additional contribution and to measure the robustness of the federated approach, an adversarial setup with several malicious participants poisoning the federated model has been considered. The baseline model aggregation averaging step used in most federated learning algorithms appears highly vulnerable to different attacks, even with a single adversary. The performance of other model aggregation functions acting as countermeasures is thus evaluated under the same attack scenarios. These functions provide a significant improvement against malicious participants, but more efforts are still needed to make federated approaches robust.

Efficient Federated Intrusion Detection in 5G ecosystem using optimized BERT-based model

Revolutionizing Cyber Threat Detection With Large Language Models: A Privacy-Preserving BERT-Based Lightweight Model for IoT/IIoT Devices

Federated Learning for 5G and Beyond, a Blessing and a Curse- An Experimental Study on Intrusion Detection Systems

A Hierarchical Federated Learning-Based Intrusion Detection System for 5G Smart Grids

A Federated Learning-Based Approach for Improving Intrusion Detection in Industrial Internet of Things Networks

Beyond Detection: Leveraging Large Language Models for Cyber Attack Prediction in IoT Networks

Federated learning for malware detection in IoT devices

Federated Deep Learning for Intrusion Detection in IoT Networks

FedMSE: Federated learning for IoT network intrusion detection

Effective Intrusion Detection in Heterogeneous Internet-of-Things Networks via Ensemble Knowledge Distillation-based Federated Learning

Securing 5G/6G IoT Using Transformer and Personalized Federated Learning: an Access-Side Distributed Malicious Traffic Detection Framework

A cognitive security framework for detecting intrusions in IoT and 5G utilizing deep learning

Federated Deep Learning Models for Detecting RPL Attacks on Large-Scale Hybrid IoT Networks

Enhancing Intrusion Detection In Internet Of Vehicles Through Federated Learning

Fast and Practical Intrusion Detection System Based on Federated Learning for VANET

Federated transfer learning for attack detection for Internet of Medical Things

FL-IDS: Federated Learning-Based Intrusion Detection System Using Edge Devices for Transportation IoT

Enhancing IoT Security Against DDoS Attacks through Federated Learning

Improved Intrusion Detection Based on Hybrid Deep Learning Models and Federated Learning

Privacy-Preserving Intrusion Detection in Software-defined VANET using Federated Learning with BERT

FELIDS: Federated Learning-Based Intrusion Detection System for Agricultural Internet of Things