Mitigating backdoor attacks in Federated Learning based intrusion detection systems through Neuron Synaptic Weight Adjustment

被引:0
作者
Zukaib, Umer [1 ]
Cui, Xiaohui [1 ]
机构
[1] Wuhan Univ, Sch Cyber Sci & Engn, Key Lab Aerosp Informat Secur & Trusted Comp, Minist Educ, Wuhan 430072, Hubei, Peoples R China
关键词
Intrusion detection systems; Backdoor defense; Federated learning; Cyber security; Machine unlearning; Anomaly detection; POISONING ATTACKS;
D O I
10.1016/j.knosys.2025.113167
中图分类号
TP18 [人工智能理论];
学科分类号
081104 ; 0812 ; 0835 ; 1405 ;
摘要
Federated Learning has emerged as a transformative paradigm that enables collaborative model training across distributed clients while preserving data privacy. However, Federated Learning systems are vulnerable to backdoor attacks, where malicious clients introduce harmful triggers into the global model, undermining its security and reliability. Traditional defenses often struggle to balance robust protection with maintaining high model accuracy, leaving Federated Learning systems exposed to significant risks. In this article, we present SHIELD-FL (Synaptic Harmonization for Intelligent and Enhanced Learning Defense), a novel framework designed to provide comprehensive backdoor defense in federated learning environments. At the core of SHIELD-FL is SYNAPSE (Synaptic Neuron Adjustment for Protective System Enhancement), an innovative metric that leverages L2 norm analysis to detect and identify neurons influenced by backdoor triggers. This targeted approach enables precise adjustment and pruning of compromised neurons, effectively neutralizing backdoor threats while preserving overall model performance. SHIELD-FL further enhances protection through a coordinated, system-wide strategy implemented across all clients, ensuring robust defense against backdoor attacks throughout the federated learning network. We rigorously evaluated SHIELD-FL on multiple datasets, demonstrating its effectiveness. The results consistently show that proposed model outperforms state-of-the-art defenses, achieving superior accuracy and resilience against backdoor attacks. Our approach provides a unified and effective solution for securing the federated learning based intrusion detection systems against emerging threats, marking a significant advancement in the field of security.
引用
收藏
页数:21
相关论文
共 54 条
  • [1] Bagdasaryan E, 2021, PROCEEDINGS OF THE 30TH USENIX SECURITY SYMPOSIUM, P1505
  • [2] Chai Shuwen, 2022, ADV NEUR IN
  • [3] Lightweight Searchable Public-Key Encryption with Forward Privacy over IIoT Outsourced Data
    Chen, Biwen
    Wu, Libing
    Kumar, Neeraj
    Choo, Kim-Kwang Raymond
    He, Debiao
    [J]. IEEE TRANSACTIONS ON EMERGING TOPICS IN COMPUTING, 2021, 9 (04) : 1753 - 1764
  • [4] Chen L., 2024, Knowl.-Based Syst., V302
  • [5] Quarantine: Sparsity Can Uncover the Trojan Attack Trigger for Free
    Chen, Tianlong
    Zhang, Zhenyu
    Zhang, Yihua
    Chang, Shiyu
    Liu, Sijia
    Wang, Zhangyang
    [J]. 2022 IEEE/CVF CONFERENCE ON COMPUTER VISION AND PATTERN RECOGNITION (CVPR 2022), 2022, : 588 - 599
  • [6] Chen Weixin, 2022, Advances in Neural Information Processing Systems
  • [7] Chen XY, 2017, Arxiv, DOI [arXiv:1712.05526, DOI 10.48550/ARXIV.1712.05526]
  • [8] Doan K.D., 2021, Advances in Neural Information Processing Systems, V34, P18944
  • [9] Fan MY, 2025, Arxiv, DOI arXiv:2501.12736
  • [10] Franci A., 2022, P 1 INT C AI ENG SOF, P77