Abstract:Anomaly detection for the Internet of Things (IoT) is a very important topic in the context of cyber-security. Indeed, as the pervasiveness of this technology is increasing, so is the number of threats and attacks targeting smart objects and their interactions. Behavioral fingerprinting has gained attention from researchers in this domain as it represents a novel strategy to model object interactions and assess their correctness and honesty. Still, there exist challenges in terms of the performance of such AI-based solutions. The main reasons can be alleged to scalability, privacy, and limitations on adopted Machine Learning algorithms. Indeed, in classical distributed fingerprinting approaches, an object models the behavior of a target contact by exploiting only the information coming from the direct interaction with it, which represents a very limited view of the target because it does not consider services and messages exchanged with other neighbors. On the other hand, building a global model of a target node behavior leveraging the information coming from the interactions with its neighbors, may lead to critical privacy concerns. To face this issue, the strategy proposed in this paper exploits Federated Learning to compute a global behavioral fingerprinting model for a target object, by analyzing its interactions with different peers in the network. Our solution allows the training of such models in a distributed way by relying also on a secure delegation strategy to involve less capable nodes in IoT. Moreover, through homomorphic encryption and Blockchain technology, our approach guarantees the privacy of both the target object and the different workers, as well as the robustness of the strategy in the presence of attacks. All these features lead to a secure fully privacy-preserving solution whose robustness, correctness, and performance are evaluated in this paper using a detailed security analysis and an extensive experimental campaign. Finally, the performance of our model is very satisfactory, as it consistently discriminates between normal and anomalous behaviors across all evaluated test sets, achieving an average accuracy value of 0.85.

Federated Learning-Based Anomaly Detection with Isolation Forest in the IoT-Edge Continuum

Edge-assisted U-Shaped Split Federated Learning with Privacy-preserving for Internet of Things

Anomaly Detection of IoT Cyberattacks in Smart Cities Using Federated Learning and Split Learning

Privacy-Preserving Federated Learning Against Label-Flipping Attacks on Non-IID Data

A Novel Buffered Federated Learning Framework for Privacy-Driven Anomaly Detection in IIoT

Toward data efficient anomaly detection in heterogeneous edge-cloud environments using clustered federated learning

Performance-Enhanced Federated Learning with Differential Privacy for Internet of Things

Federated deep learning for anomaly detection in the internet of things

Federated Semi-Supervised and Semi-Asynchronous Learning for Anomaly Detection in IoT Networks

An Empirical Study of Federated Learning on IoT-Edge Devices: Resource Allocation and Heterogeneity

Robust Hierarchical Federated Learning with Anomaly Detection in Cloud-Edge-End Cooperation Networks

A Fully Privacy-Preserving Solution for Anomaly Detection in IoT using Federated Learning and Homomorphic Encryption

Federated Learning and Its Role in the Privacy Preservation of IoT Devices

Survey: federated learning data security and privacy-preserving in edge-Internet of Things

Deep Anomaly Detection for Time-Series Data in Industrial IoT: A Communication-Efficient On-Device Federated Learning Approach

Privacy-Preserving Edge Federated Learning for Intelligent Mobile-Health Systems

Intrusion Detection based on Privacy-preserving Federated Learning for the Industrial IoT

Federated Anomaly Detection on System Logs for the Internet of Things: A Customizable and Communication-Efficient Approach

Anomaly detection and defense techniques in federated learning: a comprehensive review

A review of secure federated learning: Privacy leakage threats, protection technologies, challenges and future directions

Edge computing empowered anomaly detection framework with dynamic insertion and deletion schemes on data streams