{"title":"Robust intrusion detection based on personalized federated learning for IoT environment","authors":"Shimin Sun , Le Zhou , Ze Wang , Li Han","doi":"10.1016/j.cose.2025.104442","DOIUrl":null,"url":null,"abstract":"<div><div>In the dynamic and complex realm of the Internet of Things (IoT) and artificial intelligence (AI), it is a significant challenge to design a network intrusion detection system that balances accuracy, efficiency, and data privacy. Federated learning offers a solution by enabling the sharing of high-quality attack samples to enhance local models’ intrusion detection capabilities without compromising local data privacy. However, most existing research on federated learning for intrusion detection assumes homogeneity among local models, which can reduce detection accuracy in real-world scenarios where local datasets are often non-independent and identically distributed (Non-IID). The Non-IID characteristic, marked by varied distributional properties and correlations, impacts model convergence and stability. To address this challenge, we propose a personalized federated cross learning framework (pFedCross) for intrusion detection, to manage imbalanced and heterogeneous data distributions. First, we present a collaborative model cross aggregation algorithm for personalized local model update, to solve the problem that one global model cannot always accommodate all the incompatible convergence directions of local models. Then, we introduce a gradient approximation <span><math><mi>α</mi></math></span>-fairness algorithm for global model generation to achieve a well-generalization. Finally, the experiments show that pFedCross outperforms baseline methods in improving model accuracy and reducing loss, highlighting its promise for enhancing IoT security.</div></div>","PeriodicalId":51004,"journal":{"name":"Computers & Security","volume":"154 ","pages":"Article 104442"},"PeriodicalIF":4.8000,"publicationDate":"2025-03-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Computers & Security","FirstCategoryId":"94","ListUrlMain":"https://www.sciencedirect.com/science/article/pii/S0167404825001312","RegionNum":2,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q1","JCRName":"COMPUTER SCIENCE, INFORMATION SYSTEMS","Score":null,"Total":0}
引用次数: 0
Abstract
In the dynamic and complex realm of the Internet of Things (IoT) and artificial intelligence (AI), it is a significant challenge to design a network intrusion detection system that balances accuracy, efficiency, and data privacy. Federated learning offers a solution by enabling the sharing of high-quality attack samples to enhance local models’ intrusion detection capabilities without compromising local data privacy. However, most existing research on federated learning for intrusion detection assumes homogeneity among local models, which can reduce detection accuracy in real-world scenarios where local datasets are often non-independent and identically distributed (Non-IID). The Non-IID characteristic, marked by varied distributional properties and correlations, impacts model convergence and stability. To address this challenge, we propose a personalized federated cross learning framework (pFedCross) for intrusion detection, to manage imbalanced and heterogeneous data distributions. First, we present a collaborative model cross aggregation algorithm for personalized local model update, to solve the problem that one global model cannot always accommodate all the incompatible convergence directions of local models. Then, we introduce a gradient approximation -fairness algorithm for global model generation to achieve a well-generalization. Finally, the experiments show that pFedCross outperforms baseline methods in improving model accuracy and reducing loss, highlighting its promise for enhancing IoT security.
期刊介绍:
Computers & Security is the most respected technical journal in the IT security field. With its high-profile editorial board and informative regular features and columns, the journal is essential reading for IT security professionals around the world.
Computers & Security provides you with a unique blend of leading edge research and sound practical management advice. It is aimed at the professional involved with computer security, audit, control and data integrity in all sectors - industry, commerce and academia. Recognized worldwide as THE primary source of reference for applied research and technical expertise it is your first step to fully secure systems.