Abstract:Billions of IoT devices lacking proper security mechanisms have been manufactured and deployed for the last years, and more will come with the development of Beyond 5G technologies. Their vulnerability to malware has motivated the need for efficient techniques to detect infected IoT devices inside networks. With data privacy and integrity becoming a major concern in recent years, increasing with the arrival of 5G and Beyond networks, new technologies such as federated learning and blockchain emerged. They allow training machine learning models with decentralized data while preserving its privacy by design. This work investigates the possibilities enabled by federated learning concerning IoT malware detection and studies security issues inherent to this new learning paradigm. In this context, a framework that uses federated learning to detect malware affecting IoT devices is presented. N-BaIoT, a dataset modeling network traffic of several real IoT devices while affected by malware, has been used to evaluate the proposed framework. Both supervised and unsupervised federated models (multi-layer perceptron and autoencoder) able to detect malware affecting seen and unseen IoT devices of N-BaIoT have been trained and evaluated. Furthermore, their performance has been compared to two traditional approaches. The first one lets each participant locally train a model using only its own data, while the second consists of making the participants share their data with a central entity in charge of training a global model. This comparison has shown that the use of more diverse and large data, as done in the federated and centralized methods, has a considerable positive impact on the model performance. Besides, the federated models, while preserving the participant’s privacy, show similar results as the centralized ones. As an additional contribution and to measure the robustness of the federated approach, an adversarial setup with several malicious participants poisoning the federated model has been considered. The baseline model aggregation averaging step used in most federated learning algorithms appears highly vulnerable to different attacks, even with a single adversary. The performance of other model aggregation functions acting as countermeasures is thus evaluated under the same attack scenarios. These functions provide a significant improvement against malicious participants, but more efforts are still needed to make federated approaches robust.

Federated Deep Learning Approaches for the Privacy and Security of IoT Systems

Federated Deep Learning for Cyber Security in the Internet of Things: Concepts, Applications, and Experimental Analysis

Federated Deep Learning for Intrusion Detection in IoT Networks

Anomaly Detection of IoT Cyberattacks in Smart Cities Using Federated Learning and Split Learning

Enhancing IoT Security Against DDoS Attacks through Federated Learning

A Federated Learning-Based Approach for Improving Intrusion Detection in Industrial Internet of Things Networks

Federated deep learning for anomaly detection in the internet of things

A Study of Federated Learning with Internet of Things for Data Privacy and Security using Privacy Preserving Techniques

Security of Internet of Things (IoT) using federated learning and deep learning - Recent advancements, issues and prospects

Strengthening network DDOS attack detection in heterogeneous IoT environment with federated XAI learning approach

Federated transfer learning for intrusion detection system in industrial iot 4.0

NGMD: next generation malware detection in federated server with deep neural network model for autonomous networks

Federated learning for malware detection in IoT devices

Privacy-Preserving Federated Learning-Based Intrusion Detection Technique for Cyber-Physical Systems

Enhancing IoT Security: A Novel Approach with Federated Learning and Differential Privacy Integration

Federated Learning for Internet of Things: Recent Advances, Taxonomy, and Open Challenges

Federated Learning for Decentralized DDoS Attack Detection in IoT Networks

A review of Federated Learning in Intrusion Detection Systems for IoT

From distributed machine learning to federated learning: In the view of data privacy and security

FedMSE: Federated learning for IoT network intrusion detection