Abstract:Important information needs to be sent over the Internet safely. Real-time data is mixed with harmful information, lowering the quality of communication and the system's overall performance. A network intruder detection system is software that examines all incoming and outgoing network packets to detect malicious events. Federated learning (FL) is a way to put artificial intelligence at the cutting edge. It is a way to solve problems that is not centralized and lets people learn from significant amounts of data. Deep learning (DL) methods have often been used to find harmful data in host intrusion detection systems (HIDS) that look for unusual behavior. The FL architecture allows multiple users to train a global model while respecting the privacy of each user's data, making DL-based methods more useful. But there has yet to be a complete analysis of how well FL-based HIDSs protect against known privacy threats with the already in-place defenses. To solve this problem, we offer two privacy assessment measures for FL-based HIDSs, including a privacy score that rates how close the original and restored traffic attributes are. The CICIDS2017 dataset, which includes several attacks from the present day, was used to make the real-time model. In addition, an adaptive threshold-correlation algorithm (ATCA) is presented to enhance detection accuracy by dynamically adjusting threshold values according to traffic patterns and intrusion behaviors. The FL-HIDS framework was created and tested using a realistic network dataset. Experiment results show that the suggested technique outperforms existing intrusion detection systems regarding detection precision and scalability. The federated learning strategy effectively leverages the collective intelligence of network devices, enabling continuous learning and adaptation to emergent attack strategies. Furthermore, the adaptive threshold technique considerably reduces the rate of false positive and false negative detection, boosting the intrusion detection system's overall effectiveness. The proposed architecture solves previous centralized solutions' shortcomings by providing a scalable, privacy-preserving method for defending network environments against expanding invasion threats.

FL-IIDS: A novel federated learning-based incremental intrusion detection system

CFL-IDS: an Effective Clustered Federated Learning Framework for Industrial Internet of Things Intrusion Detection

FIDS: Detecting DDoS Through Federated Learning Based Method

Federated Learning for Intrusion Detection System: Concepts, Challenges and Future Directions

Effective Intrusion Detection in Heterogeneous Internet-of-Things Networks via Ensemble Knowledge Distillation-based Federated Learning

Improved Intrusion Detection Based on Hybrid Deep Learning Models and Federated Learning

Data Privacy Security Guaranteed Network Intrusion Detection System Based on Federated Learning

Cluster-based Federated Learning Framework for Intrusion Detection

FL-IDS: Federated Learning-Based Intrusion Detection System Using Edge Devices for Transportation IoT

Intelligent Intrusion Detection Based on Federated Learning Aided Long Short-Term Memory.

An Evolutionary Computation-Based Federated Learning for Host Intrusion Detection in Real-Time Traffic Analysis

Continual Learning with Strategic Selection and Forgetting for Network Intrusion Detection

Federated Deep Learning for Intrusion Detection in IoT Networks

Federated Learning for Privacy-Preserving Intrusion Detection in Software-Defined Networks

Survey on Federated Learning for Intrusion Detection System: Concept, Architectures, Aggregation Strategies, Challenges, and Future Directions

Federated Mimic Learning for Privacy Preserving Intrusion Detection

FS-IDS: A Framework for Intrusion Detection Based on Few-Shot Learning

Dependable Federated Learning for IoT Intrusion Detection Against Poisoning Attacks

SecFedNIDS: Robust Defense for Poisoning Attack Against Federated Learning-Based Network Intrusion Detection System

A Semi-Supervised Federated Learning Scheme Via Knowledge Distillation for Intrusion Detection

Federated Incremental Learning Based Evolvable Intrusion Detection System for Zero-Day Attacks