Saved in:
Bibliographic Details
Main Authors: Nguyen, Van Tuan, Beuran, Razvan
Format: Preprint
Published: 2024
Subjects:
Online Access:https://arxiv.org/abs/2410.14121
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866910902217867264
author Nguyen, Van Tuan
Beuran, Razvan
author_facet Nguyen, Van Tuan
Beuran, Razvan
contents This paper proposes a novel federated learning approach for improving IoT network intrusion detection. The rise of IoT has expanded the cyber attack surface, making traditional centralized machine learning methods insufficient due to concerns about data availability, computational resources, transfer costs, and especially privacy preservation. A semi-supervised federated learning model was developed to overcome these issues, combining the Shrink Autoencoder and Centroid one-class classifier (SAE-CEN). This approach enhances the performance of intrusion detection by effectively representing normal network data and accurately identifying anomalies in the decentralized strategy. Additionally, a mean square error-based aggregation algorithm (MSEAvg) was introduced to improve global model performance by prioritizing more accurate local models. The results obtained in our experimental setup, which uses various settings relying on the N-BaIoT dataset and Dirichlet distribution, demonstrate significant improvements in real-world heterogeneous IoT networks in detection accuracy from 93.98$\pm$2.90 to 97.30$\pm$0.49, reduced learning costs when requiring only 50\% of gateways participating in the training process, and robustness in large-scale networks.
format Preprint
id arxiv_https___arxiv_org_abs_2410_14121
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle FedMSE: Semi-supervised federated learning approach for IoT network intrusion detection
Nguyen, Van Tuan
Beuran, Razvan
Machine Learning
Artificial Intelligence
This paper proposes a novel federated learning approach for improving IoT network intrusion detection. The rise of IoT has expanded the cyber attack surface, making traditional centralized machine learning methods insufficient due to concerns about data availability, computational resources, transfer costs, and especially privacy preservation. A semi-supervised federated learning model was developed to overcome these issues, combining the Shrink Autoencoder and Centroid one-class classifier (SAE-CEN). This approach enhances the performance of intrusion detection by effectively representing normal network data and accurately identifying anomalies in the decentralized strategy. Additionally, a mean square error-based aggregation algorithm (MSEAvg) was introduced to improve global model performance by prioritizing more accurate local models. The results obtained in our experimental setup, which uses various settings relying on the N-BaIoT dataset and Dirichlet distribution, demonstrate significant improvements in real-world heterogeneous IoT networks in detection accuracy from 93.98$\pm$2.90 to 97.30$\pm$0.49, reduced learning costs when requiring only 50\% of gateways participating in the training process, and robustness in large-scale networks.
title FedMSE: Semi-supervised federated learning approach for IoT network intrusion detection
topic Machine Learning
Artificial Intelligence
url https://arxiv.org/abs/2410.14121