Affiliation:
1. School of Computing, Engineering and Built Environment, Glasgow Caledonian University (GCU), Glasgow G4 0BA, UK
2. School of Arts and Creative Industries, Edinburgh Napier University, Edinburgh EH10 5DT, UK
Abstract
The number of Internet of Things (IoT) devices has increased considerably in the past few years, resulting in a large growth of cyber attacks on IoT infrastructure. As part of a defense in depth approach to cybersecurity, intrusion detection systems (IDSs) have acquired a key role in attempting to detect malicious activities efficiently. Most modern approaches to IDS in IoT are based on machine learning (ML) techniques. The majority of these are centralized, which implies the sharing of data from source devices to a central server for classification. This presents potentially crucial issues related to privacy of user data as well as challenges in data transfers due to their volumes. In this article, we evaluate the use of federated learning (FL) as a method to implement intrusion detection in IoT environments. FL is an alternative, distributed method to centralized ML models, which has seen a surge of interest in IoT intrusion detection recently. In our implementation, we evaluate FL using a shallow artificial neural network (ANN) as the shared model and federated averaging (FedAvg) as the aggregation algorithm. The experiments are completed on the ToN_IoT and CICIDS2017 datasets in binary and multiclass classification. Classification is performed by the distributed devices using their own data. No sharing of data occurs among participants, maintaining data privacy. When compared against a centralized approach, results have shown that a collaborative FL IDS can be an efficient alternative, in terms of accuracy, precision, recall and F1-score, making it a viable option as an IoT IDS. Additionally, with these results as baseline, we have evaluated alternative aggregation algorithms, namely FedAvgM, FedAdam and FedAdagrad, in the same setting by using the Flower FL framework. The results from the evaluation show that, in our scenario, FedAvg and FedAvgM tend to perform better compared to the two adaptive algorithms, FedAdam and FedAdagrad.
Subject
Industrial and Manufacturing Engineering
Reference48 articles.
1. A Review and State of Art of Internet of Things (IoT);Laghari;Arch. Comput. Methods Eng.,2022
2. Nguyen, T.D., Rieger, P., Miettinen, M., and Sadeghi, A.R. (2020, January 23–26). Poisoning Attacks on Federated Learning-based IoT Intrusion Detection System. Proceedings of the Workshop on Decentralized IoT Systems and Security (DISS) 2020, San Diego, CA, USA.
3. Kagita, M.K., Thilakarathne, N., Gadekallu, T.R., Maddikunta, P.K.R., and Singh, S. (2021). Signals and Communication Technology, Springer Science and Business Media GmbH.
4. Role of Artificial Intelligence in the Internet of Things (IoT) cybersecurity;Kuzlu;Discov. Internet Things,2021
5. A review of deep learning with special emphasis on architectures, applications and recent trends;Sengupta;Knowl.-Based Syst.,2020
Cited by
8 articles.
订阅此论文施引文献
订阅此论文施引文献,注册后可以免费订阅5篇论文的施引文献,订阅后可以查看论文全部施引文献