Federated Intrusion Detection System Based on Unsupervised Machine Learning
Fuente:
arXiv
Gespeichert in:
| Hauptverfasser: | , , , , |
|---|---|
| Format: | Preprint |
| Veröffentlicht: |
2025
|
| Schlagworte: | |
| Online-Zugang: | |
| Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
| _version_ | 1866909555899760640 |
|---|---|
| author | Gourceyraud, Maxime Salem, Rim Ben Neal, Christopher Cuppens, Frédéric Cuppens, Nora Boulahia |
| author_facet | Gourceyraud, Maxime Salem, Rim Ben Neal, Christopher Cuppens, Frédéric Cuppens, Nora Boulahia |
| contents | Recent Intrusion Detection System (IDS) research has increasingly moved towards the adoption of machine learning methods. However, most of these systems rely on supervised learning approaches, necessitating a fully labeled training set. In the realm of network intrusion detection, the requirement for extensive labeling can become impractically burdensome. Moreover, while IDS training could benefit from inter-company knowledge sharing, the sensitive nature of cybersecurity data often precludes such cooperation. To address these challenges, we propose an IDS architecture that utilizes unsupervised learning to reduce the need for labeling. We further facilitate collaborative learning through the implementation of a federated learning framework. To enhance privacy beyond what current federated clustering models offer, we introduce an innovative federated K-means++ initialization technique. Our findings indicate that transitioning from a centralized to a federated setup does not significantly diminish performance. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2503_22065 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | Federated Intrusion Detection System Based on Unsupervised Machine Learning Gourceyraud, Maxime Salem, Rim Ben Neal, Christopher Cuppens, Frédéric Cuppens, Nora Boulahia Cryptography and Security Recent Intrusion Detection System (IDS) research has increasingly moved towards the adoption of machine learning methods. However, most of these systems rely on supervised learning approaches, necessitating a fully labeled training set. In the realm of network intrusion detection, the requirement for extensive labeling can become impractically burdensome. Moreover, while IDS training could benefit from inter-company knowledge sharing, the sensitive nature of cybersecurity data often precludes such cooperation. To address these challenges, we propose an IDS architecture that utilizes unsupervised learning to reduce the need for labeling. We further facilitate collaborative learning through the implementation of a federated learning framework. To enhance privacy beyond what current federated clustering models offer, we introduce an innovative federated K-means++ initialization technique. Our findings indicate that transitioning from a centralized to a federated setup does not significantly diminish performance. |
| title | Federated Intrusion Detection System Based on Unsupervised Machine Learning |
| topic | Cryptography and Security |
| url | https://arxiv.org/abs/2503.22065 |