Abstract:Federated learning-based network intrusion detection system (FL-based NIDS) has demonstrated tremendous potential in protecting the security of IoT network. It enables learning an effective intrusion detection model from massive traffic data collaboratively without data privacy leakage. However, FL-based NIDS has exhibited inherent vulnerabilities on the poisoning attacks launched by malicious clients. The poisoning attacks aim to corrupt the intrusion detection model and impair its protection capability, by injecting the poisoned traffic data into the local training dataset. We build a secure FL-based NIDS that is robust for the poisoning attacks, namely SecFedNIDS. Firstly, we propose the model-level defensive mechanism based on poisoned model detection. Specifically, we propose the gradient-based important model parameter selection method to provide the effective low-dimensional representations of the uploaded local model parameters, and then we propose the online unsupervised poisoned model detection method to identify the poisoned models and reject them to join in the global intrusion detection model. Subsequently, we design the data-level defensive mechanism based on poisoned data detection. Notably, we propose a novel poisoned data detection method based on class path similarity, to filter out the poisoned traffic data and avoid them participating in subsequent local training. We adopt layer-wise relevance propagation to extract the class path of clean traffic data, and transmit the class paths to the poisoned clients to help distinguish the poisoned traffic data. Results show that SecFedNIDS with the proposed model-level defense boosts the accuracy by up to 48% under the poisoning attacks on UNSW-NB15 dataset and 36% on CICIDS2018 dataset, and the proposed data-level defense further improves its accuracy by up to 13% on CICIDS2018 dataset.

SecFedNIDS: Robust Defense for Poisoning Attack Against Federated Learning-Based Network Intrusion Detection System

Evaluation of data poisoning attacks on federated learning-based network intrusion detection system.

Dependable Federated Learning for IoT Intrusion Detection Against Poisoning Attacks

PPFL-IDS: Privacy-Preserving Federated Learning Based IDS Against Poisoning Attacks

FedDef: Robust Federated Learning-based Network Intrusion Detection Systems Against Gradient Leakage

FDSFL: Filtering Defense Strategies Toward Targeted Poisoning Attacks in IIoT-Based Federated Learning Networking System.

FedDef: Defense Against Gradient Leakage in Federated Learning-Based Network Intrusion Detection Systems

FLDetector: Defending Federated Learning Against Model Poisoning Attacks via Detecting Malicious Clients

Depriving the Survival Space of Adversaries Against Poisoned Gradients in Federated Learning

Defending Against Data Poisoning Attack in Federated Learning With Non-IID Data

Poisoning with A Pill: Circumventing Detection in Federated Learning

FL-PTD: A Privacy Preserving Defense Strategy Against Poisoning Attacks in Federated Learning.

Fed-LSAE: Thwarting Poisoning Attacks against Federated Cyber Threat Detection System via Autoencoder-based Latent Space Inspection

Precision Guided Approach to Mitigate Data Poisoning Attacks in Federated Learning

SPFL: A Self-purified Federated Learning Method Against Poisoning Attacks

A Robust and Efficient Federated Learning Algorithm Against Adaptive Model Poisoning Attacks

Tracing Back the Malicious Clients in Poisoning Attacks to Federated Learning

Data Poisoning Attacks Against Federated Learning Systems

Model Poisoning Attacks to Federated Learning via Multi-Round Consistency

FLShield: A Validation Based Federated Learning Framework to Defend Against Poisoning Attacks

Federated Learning based on Defending Against Data Poisoning Attacks in IoT