Abstract:Federated Learning (FL) is a decentralized machine learning approach in which multiple participants collaboratively train a model. Participants keep data locally, train their local models, and aggregate them in a single global model in a federated server. Collaborative FL-based Intrusion Detection Systems face challenges on an uneven statistical distribution of data and malicious participants trying to subvert the learning process. The statistical hurdles associated with imbalanced data and malicious participants pose a risk of skewing the training with biased or random data. The inability to effectively manage these statistical inconsistencies may degrade system performance, leading to false intrusion detection or opening avenues for cybersecurity breaches. To overcome these challenges, we propose a training method that employs score-based participant selection and utilizes global momentum for model aggregation. Our method improves the global model performance while mitigating the risks posed by malicious participants. The proposal incorporates a scoring system based on an information gain variant to evaluate each participant’s contribution. The scoring system and an epsilon greedy selection method ensure robust participant selection in each aggregation round. Furthermore, incorporating a global momentum term helps preserve previous knowledge at each aggregation round, contributing to model stability and overall learning. The proposed solution has demonstrated superior performance, delivering 80% F1-Score and 90% accuracy on experiments even in the presence of malicious participants, revealing the robustness and effectiveness of the proposal in mitigating statistical challenges. Consequently, the proposed method significantly enhances the performance of federated learning models, leading to more secure and efficient collaborative intrusion detection systems.

APFed: Adaptive personalized federated learning for intrusion detection in maritime meteorological sensor networks

FedMADE: Robust Federated Learning for Intrusion Detection in IoT Networks Using a Dynamic Aggregation Method

Intrusion Detection for Maritime Transportation Systems with Batch Federated Aggregation

FedMSE: Federated learning for IoT network intrusion detection

XFedHunter: An Explainable Federated Learning Framework for Advanced Persistent Threat Detection in SDN

Effective Intrusion Detection in Heterogeneous Internet-of-Things Networks via Ensemble Knowledge Distillation-based Federated Learning

DeepFed: Federated Deep Learning for Intrusion Detection in Industrial Cyber–Physical Systems

Cyber Threat Intelligence Sharing Scheme Based on Federated Learning for Network Intrusion Detection

Strengthening network DDOS attack detection in heterogeneous IoT environment with federated XAI learning approach

Improved Intrusion Detection Based on Hybrid Deep Learning Models and Federated Learning

A novel federated learning aggregation algorithm for AIoT intrusion detection

FedSBS: Federated-Learning participant-selection method for Intrusion Detection Systems

Enhancing Intrusion Detection In Internet Of Vehicles Through Federated Learning

A Federated Network Intrusion Detection System with Multi-Branch Network and Vertical Blocking Aggregation

FedSA: Accelerating Intrusion Detection in Collaborative Environments with Federated Simulated Annealing

IDS for Industrial Applications: A Federated Learning Approach with Active Personalization

A Federated Learning-Based Approach for Improving Intrusion Detection in Industrial Internet of Things Networks

A Network Intrusion Detection Method for Various Information Systems Based on Federated and Deep Learning

A review of Federated Learning in Intrusion Detection Systems for IoT

FL-IIDS: A novel federated learning-based incremental intrusion detection system

Fed-LSAE: Thwarting Poisoning Attacks against Federated Cyber Threat Detection System via Autoencoder-based Latent Space Inspection