Related Experiment Video
Updated: May 25, 2025
08:04
Fully Automated Leg Tracking in Freely Moving Insects using Feature Learning Leg Segmentation and Tracking FLLIT
Published on: April 23, 2020
6.7K
A Heterogeneity-Aware Semi-Decentralized Model for a Lightweight Intrusion Detection System for IoT Networks Based on
Shuroog Alsaleh1,2, Mohamed El Bachir Menai2, Saad Al-Ahmadi2
1Department of Computer Science, King Saud University, Riyadh 11451, Saudi Arabia.
Sensors (Basel, Switzerland)
|February 26, 2025
Summary
This study introduces a semi-decentralized federated learning (FL) model for lightweight intrusion detection systems (IDS) in Internet of Things (IoT) networks. The proposed clustering approach enhances performance and reduces communication overhead, effectively detecting distributed denial-of-service (DDoS) attacks on resource-constrained devices.
Area of Science:
- Cybersecurity
- Network Security
- Artificial Intelligence
Background:
- Internet of Things (IoT) networks are vulnerable to cyberattacks due to their scale and device heterogeneity.
- Resource-constrained IoT devices cannot support conventional intrusion detection systems (IDS).
- Federated learning (FL) offers a lightweight solution for IoT IDSs by enabling on-device training.
Purpose of the Study:
- To propose a novel semi-decentralized FL-based model for a lightweight IDS tailored to IoT device capabilities.
- To address the challenges of IoT device heterogeneity, lightweight-ness, and performance in intrusion detection.
- To specifically mitigate distributed denial-of-service (DDoS) attacks in IoT environments.
Main Methods:
- A semi-decentralized FL architecture with device clustering and cluster heads to reduce communication overhead.
- Integration of deep learning models including Long Short-Term Memory (LSTM), Bidirectional LSTM (BiLSTM), and Wasserstein Generative Adversarial Network (WGAN).
- Evaluation using the CICIoT2023 dataset, followed by testing on BoT-IoT, WUSTL-IIoT-2021, and Edge-IIoTset datasets.
Main Results:
- The proposed semi-decentralized FL model effectively reduces communication overhead and improves the aggregation process.
- BiLSTM demonstrated superior performance and suitability for resource-constrained IoT devices due to its model size.
- The model achieved high performance across multiple datasets, with particular effectiveness in detecting DDoS attacks.
Conclusions:
- The developed semi-decentralized FL model offers an effective and lightweight solution for intrusion detection in heterogeneous IoT networks.
- Clustering IoT devices significantly enhances the efficiency and performance of federated learning-based IDSs.
- The model shows strong potential for real-world deployment in securing IoT ecosystems against prevalent threats like DDoS attacks.
