Enhancing Federated Intrusion Detection with Class-Specific Dynamic Sampling
Source abstract
Abstract
Federated Learning (FL) presents a promising approach for collaborative intrusion detection while preserving data privacy. However, current FL frameworks face challenges with non-independent and identically distributed (non-IID) data and class imbalances in network security contexts. This paper introduces Dynamic Sampling-FedIDS (DS-FedIDS), a novel framework that enhances federated intrusion detection through adaptive sampling and personalization. DS-FedIDS extends the Federated Learning with Personalization Layers (FedPer) architecture by incorporating dynamic up/down sampling to address class imbalance issues in network security datasets. The framework maintains a global model for shared attack detection while enabling client-specific adaptation through personalized layers. Our approach effectively handles heterogeneous network environments, including Content Delivery Networks, Internet of Things, and industrial systems, each with distinct traffic patterns and attack profiles. Experimental results demonstrate that DS-FedIDS outperforms baseline FedPer in accuracy and efficiency, achieving superior detection rates across diverse attack classes while maintaining reasonable training overhead. Notably, DS-FedIDS excels in detecting minority attack classes and adapting to client-specific normal traffic patterns, making it ideal for real-world intrusion detection scenarios with inherently imbalanced and heterogeneous data distributions.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Network Security and Intrusion Detection · Internet Traffic Analysis and Secure E-voting · Anomaly Detection Techniques and Applications
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of Information and Communication Engineering, Wonkwang University, Iksan 54538, Republic of Korea
Department of Mobile System Engineering, Dankook University, Yongin-si 16890, Republic of Korea
Funding
Wonkwang University
References (34)
Show source-provided references
1. McMahan, H.B., Moore, E., Ramage, D., and Hampson, S. (2016). Communication-efficient learning of deep networks from decentralized data. arXiv.
2. Advances and open problems in federated learning10.1561/2200000083 ↗
3. Federated Learning for Cybersecurity: Concepts, Challenges and Future Directions10.1109/TII.2021.3119038 ↗
4. Hard, A., Rao, K., Mathews, R., Ramaswamy, S., Beaufays, F., Augenstein, S., Eichner, H., Kiddon, C., and Ramage, D. (2019). Federated learning for mobile keyboard prediction. arXiv.
5. Fan, L., and Jin, H. (2015, January 18–22). A Practical Framework for Privacy-Preserving Data Analytics. Proceedings of the 24th International Conference on World Wide Web, Florence, Italy.10.1145/2736277.2741122 ↗
6. Hinton, G., Vinyals, O., and Dean, J. (2015). Distilling the knowledge in a neural network. arXiv.
7. Zhao, Y., Li, M., Lai, L., Suda, N., Civin, D., and Chandra, V. (2018). Federated Learning with Non-IID Data. arXiv.
8. Reddi, S.J., Charles, Z., Zaheer, M., Garrett, Z., Rush, K., Konečný, J., Kumar, S., and McMahan, H.B. (2020). Adaptive Federated Optimization. arXiv.
9. Li, T., Hu, S., Beirami, A., and Smith, V. (2020). Ditto: Fair and Robust Federated Learning Through Personalization. arXiv.
10. Federated Learning for Collaborative Network Security in Decentralized Environments
11. Hanzely, F., and Richtárik, P. (2021). Federated learning of a mixture of global and local models. arXiv.
12. Personalized federated learning-based intrusion detection system: Poisoning attack and defense
13. Machine Learning for Automated Industrial IoT Attack Detection: An Efficiency-Complexity Trade-off10.1145/3460822 ↗
14. Hsu, T.-M.H., Qi, H., and Brown, M. (2019). Measuring the effects of non-identical data distribution for federated visual classification. arXiv.
15. Khodak, M., Balcan, M.-F., and Talwalkar, A. (2019). Adaptive gradient-based meta-learning methods. arXiv.
16. Arivazhagan, M.G., Aggarwal, V., Singh, A.K., and Choudhary, S. (2019). Federated learning with personalization layers. arXiv.
17. Dinh, C.T., Tran, N.H., and Nguyen, T.D. (2020, January 6–12). Personalized Federated Learning with Moreau Envelopes. Proceedings of the Advances in Neural Information Processing Systems 33 (NeurIPS 2020), Virtual Conference.
18. Shamsian, A., Navon, A., Fetaya, E., and Chechik, G. (2021). Personalized Federated Learning using Hypernetworks. arXiv.
19. Shibly, K.H., Roy, S.K., Hossain, M.A., Bhuiyan, M.Z.A., and Hossain, M.S. (2022, January 12–14). Personalized Federated Learning for Automotive Intrusion Detection Systems. Proceedings of the 2022 IEEE Future Networks World Forum, Montreal, QC, Canada.10.1109/FNWF55208.2022.00101 ↗
20. He, C., Annavaram, M., and Avestimehr, S. (2020, January 6–12). Group Knowledge Transfer: Federated Learning of Large CNNs at the Edge. Proceedings of the Advances in Neural Information Processing Systems 33 (NeurIPS 2020), Virtual Conference.
21. Lin, T., Stich, S.U., Patel, K.K., and Jaggi, M. (2020, January 26–30). Don’t Use Large Mini-Batches, Use Local SGD. Proceedings of the 8th International Conference on Learning Representations (ICLR 2020), Addis Ababa, Ethiopia.
22. Sengupta, S., Chowdhary, A., Sabur, A., Alshamrani, A., Huang, D., and Kang, S. (2016, January 24–27). Privacy-Preserving Cyber-Security Information Exchange Mechanism. Proceedings of the Performance Evaluation of Computer and Telecommunication Systems, Montreal, QC, Canada.
23. Alkhamisi, A., Katib, I., and Buhari, S.M. (2024). Federated Learning-Based Security Attack Detection for Multi-Controller Software-Defined Networks. Algorithms, 17.10.3390/a17070290 ↗
24. Krizhevsky, A. (2009). Learning Multiple Layers of Features from Tiny Images, University of Toronto. Available online: https://www.cs.toronto.edu/~kriz/learning-features-2009-TR.pdf.
25. Fallah, A., Mokhtari, A., and Ozdaglar, A. (2020, January 6–12). Personalized Federated Learning with Theoretical Guarantees: A Model-Agnostic Meta-Learning Approach. Proceedings of the Advances in Neural Information Processing Systems 33 (NeurIPS 2020), Virtual Conference.
26. Li, T., Sanjabi, M., Beirami, A., and Smith, V. (2020, January 26–30). Fair Resource Allocation in Federated Learning. Proceedings of the 8th International Conference on Learning Representations (ICLR 2020), Addis Ababa, Ethiopia.
27. He, H., and Ma, Y. (2013). Imbalanced Learning: Foundations, Algorithms, and Applications, Wiley-IEEE Press.10.1002/9781118646106 ↗
28. A systematic study of the class imbalance problem in convolutional neural networks10.1016/j.neunet.2018.07.011 ↗
29. Dynamic oversampling strategy for imbalanced big data in intrusion detection
30. Collins, L., Hassani, H., Mokhtari, A., and Shakkottai, S. (2023). Exploiting shared representations for personalized federated learning. arXiv.
31. Adversarial Weight Perturbation Helps Robust Generalization
32. Smith, V., Chiang, C.-K., Sanjabi, M., and Talwalkar, A.S. (2017, January 4–9). Federated Multi-Task Learning. Proceedings of the Advances in Neural Information Processing Systems 30 (NeurIPS 2017), Long Beach, CA, USA.
33. Caldas, S., Wu, P., Li, T., Konečný, J., McMahan, H.B., Smith, V., and Talwalkar, A. (2019). LEAF: A benchmark for federated settings. arXiv.
34. Moustafa, N., and Slay, J. (2015, January 10–12). UNSW-NB15: A Comprehensive Data Set for Network Intrusion Detection Systems (UNSW-NB15 Network Data Set). Proceedings of the Military Communications and Information Systems Conference (MilCIS), Canberra, ACT, Australia. Available online: https://research.unsw.edu.au/projects/unsw-nb15-dataset.10.1109/MilCIS.2015.7348942 ↗