Mist-Assisted Federated Learning for Intrusion Detection in Heterogeneous IoT Networks

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Izadi, Saadat, Komasi, Shakib, Salimi, Ali, Rezaei, Alireza, Ahmadi, Mahmood
Format: Preprint
Published: 2025
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866914127845261312
author Izadi, Saadat
Komasi, Shakib
Salimi, Ali
Rezaei, Alireza
Ahmadi, Mahmood
author_facet Izadi, Saadat
Komasi, Shakib
Salimi, Ali
Rezaei, Alireza
Ahmadi, Mahmood
contents The rapid growth of the Internet of Things (IoT) offers new opportunities but also expands the attack surface of distributed, resource-limited devices. Intrusion detection in such environments is difficult due to data heterogeneity from diverse sensing modalities and the non-IID distribution of samples across clients. Federated Learning (FL) provides a privacy-preserving alternative to centralized training, yet conventional frameworks struggle under these conditions. To address this, we propose a Mist-assisted hierarchical framework for IoT intrusion detection. The architecture spans four layers: (i) Mist, where raw data are abstracted into a unified feature space and lightweight models detect anomalies; (ii) Edge, which applies utility-based client selection; (iii) Fog, where multiple regional aggregators use FedProx to stabilize training; and (iv) Cloud, which consolidates and disseminates global models. Evaluations on the TON-IoT dataset show the framework achieves 98-99% accuracy, PR-AUC> 0.97, and stable convergence under heterogeneous and large-scale settings, while maintaining efficiency and preserving privacy.
format Preprint
id arxiv_https___arxiv_org_abs_2511_00271
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Mist-Assisted Federated Learning for Intrusion Detection in Heterogeneous IoT Networks
Izadi, Saadat
Komasi, Shakib
Salimi, Ali
Rezaei, Alireza
Ahmadi, Mahmood
Networking and Internet Architecture
The rapid growth of the Internet of Things (IoT) offers new opportunities but also expands the attack surface of distributed, resource-limited devices. Intrusion detection in such environments is difficult due to data heterogeneity from diverse sensing modalities and the non-IID distribution of samples across clients. Federated Learning (FL) provides a privacy-preserving alternative to centralized training, yet conventional frameworks struggle under these conditions. To address this, we propose a Mist-assisted hierarchical framework for IoT intrusion detection. The architecture spans four layers: (i) Mist, where raw data are abstracted into a unified feature space and lightweight models detect anomalies; (ii) Edge, which applies utility-based client selection; (iii) Fog, where multiple regional aggregators use FedProx to stabilize training; and (iv) Cloud, which consolidates and disseminates global models. Evaluations on the TON-IoT dataset show the framework achieves 98-99% accuracy, PR-AUC> 0.97, and stable convergence under heterogeneous and large-scale settings, while maintaining efficiency and preserving privacy.
title Mist-Assisted Federated Learning for Intrusion Detection in Heterogeneous IoT Networks
topic Networking and Internet Architecture
url https://arxiv.org/abs/2511.00271