Abstract:Malicious traffic has posed a significant threat to current 5G networks. In the upcoming 6G era, with the rapid development of the Internet of Things (IoT), defending against malicious traffic has become even more challenging due to the diverse nature and widespread distribution of IoT devices. This paper presents a new distributed framework for detecting malicious traffic on the access side of the IoT. This framework shifts the line of defense forward, and could alleviate the resource-bottleneck problem of traditional detectors that are usually deployed at the victim side. In particular, we devise a transformer-based neural network, which is tailored for distributed malicious traffic detection at multiple detection points. Additionally, we develop a personalized federated learning-based collaborative algorithm to enable horizontal collaboration among multiple detection points by sharing neural network parameters. Different from the traditional federated learning framework which trains a high-precision global model, our proposed framework fully considers the differences in the distribution of IoT traffic at the entrance, and uses local traffic data to train personalized models with better local detection performance on the basis of the global model. The experimental results demonstrate that our approach achieves an average detection accuracy of 99.2% and an F1-score of 99.2% for all detection points using the N-BaIoT dataset. In comparison to methods lacking collaboration, our approach exhibits significant improvements in terms of accuracy, precision, recall, and F1-score. Moreover, our detection performance is comparable to that of centralized learning frameworks, despite sharing only the model parameters.

AdaTrans: An adaptive transformer for IoT Malware detection based on sensitive API call graph and inter-component communication analysis

TransMalDE: an Effective Transformer Based Hierarchical Framework for IoT Malware Detection

Malton: Towards On-Device Non-Invasive Mobile Malware Analysis for ART.

Efficient malware detection through inter-component communication analysis

Channel Features and API Frequency-Based Transformer Model for Malware Identification

Transformer-Based Malicious Traffic Detection for Internet of Things

Multi-Level Intrusion Detection Based on Transformer and Wavelet Transform for IoT Data Security

A Transformer-Based Framework for Payload Malware Detection and Classification

Securing 5G/6G IoT Using Transformer and Personalized Federated Learning: an Access-Side Distributed Malicious Traffic Detection Framework

MalIoT: Scalable and Real-time Malware Traffic Detection for IoT Networks

SIAT: A Systematic Inter-Component Communication Analysis Technology for Detecting Threats on Android

An Evolutionary Study of IoT Malware

The Detection of Abnormal Behavior by Artificial Intelligence Algorithms Under Network Security

Survey of Transformer-Based Malicious Software Detection Systems

Efficient Detection and Classification of Internet-of-Things Malware Based on Byte Sequences from Executable Files

TPE-Det: A Tamper-Proof External Detector via Hardware Traces Analysis Against IoT Malware

Detection, Classification and Characterization of Android Malware Using API Data Dependency.

ADRIoT: an Edge-Assisted Anomaly Detection Framework Against IoT-Based Network Attacks

ECMT Framework for Internet of Things: An Integrative Approach Employing In-Memory Attribute Examination and Sophisticated Neural Network Architectures in Conjunction With Hybridized Machine Learning Methodologies

AiDroid: When Heterogeneous Information Network Marries Deep Neural Network for Real-time Android Malware Detection

Enhancement of cyber security in IoT based on ant colony optimized artificial neural adaptive Tensor flow