Collaborative Intrusion Detection System for SDVN: A Fairness Federated Deep Learning Approach

被引:37
作者
Cui, Jie [1 ,2 ,3 ]
Sun, Hu [1 ,2 ,3 ]
Zhong, Hong [1 ,2 ,3 ]
Zhang, Jing [1 ,2 ,3 ]
Wei, Lu [1 ,2 ,3 ]
Bolodurina, Irina [4 ]
He, Debiao [5 ,6 ]
机构
[1] Anhui Univ, Sch Comp Sci & Technol, Key Lab Intelligent Comp & Signal Proc, Minist Educ, Hefei 230039, Peoples R China
[2] Anhui Univ, Anhui Engn Lab IoT Secur Technol, Hefei 230039, Peoples R China
[3] Anhui Univ, Inst Phys Sci & Informat Technol, Hefei 230039, Peoples R China
[4] Orenburg State Univ, Fac Math & Informat Technol, Orenburg 460018, Russia
[5] Wuhan Univ, Sch Cyber Sci & Engn, Wuhan 430072, Peoples R China
[6] Matrix Elements Technol, Shanghai Key Lab Privacy Preserving Computat, Shanghai 201204, Peoples R China
基金
中国国家自然科学基金;
关键词
Training; Intrusion detection; Security; Vehicular ad hoc networks; Collaboration; Data models; Computational modeling; Federated deep learning; collaborative intrusion detection system; intelligent transportation system; Index Terms; convolutional neural network; gradient optimization; SOFTWARE-DEFINED NETWORKING; SECURE; SDN;
D O I
10.1109/TPDS.2023.3290650
中图分类号
TP301 [理论、方法];
学科分类号
081202 ;
摘要
With the continuous innovations and development in communication technology and intelligent transportation systems, a new generation of vehicular ad hoc networks (VANETs) has become increasingly popular, making VANET communication security increasingly important. An intrusion detection system (IDS) is an important tool for detecting network attacks and is an effective means of improving network security. However, existing IDSs encounter several problems involving inaccurate detections, low detection efficiencies, and incomplete detections owing to extensive changes in vehicle locations in VANETs. This study explores federated learning in software-defined VANETs and designs an efficient and accurate collaborative intrusion detection system (CIDS) model. The model utilizes the collaboration among local software-defined networks (SDNs) to jointly train the CIDS model without directly exchanging local network data flows to improve the expansibility and globality of IDSs. To reduce the model difference between different SDN clients and improve the detection accuracy, this study regards the prediction loss for each SDN client as an objective from the perspective of constrained multi-objective optimization. By optimizing a surrogate maximum function containing all the objectives, the method adopts two-stage gradient optimization to achieve Pareto optimality for SDN clients with the worst fairness constraint maximization performance. In addition, this study evaluates the training model using two open-source datasets and compares it with the latest methods. Experimental results reveal that the proposed model ensures local data privacy and demonstrates high accuracy and efficiency in detecting attacks and is thus superior to the current schemes.
引用
收藏
页码:2512 / 2528
页数:17
相关论文
共 49 条
[1]   Federated Intrusion Detection in Blockchain-Based Smart Transportation Systems [J].
Abdel-Basset, Mohamed ;
Moustafa, Nour ;
Hawash, Hossam ;
Razzak, Imran ;
Sallam, Karam M. ;
Elkomy, Osama M. .
IEEE TRANSACTIONS ON INTELLIGENT TRANSPORTATION SYSTEMS, 2022, 23 (03) :2523-2537
[2]   On the Performance of Machine Learning Models for Anomaly-Based Intelligent Intrusion Detection Systems for the Internet of Things [J].
Abdelmoumin, Ghada ;
Rawat, Danda B. ;
Rahman, Abdul .
IEEE INTERNET OF THINGS JOURNAL, 2022, 9 (06) :4280-4290
[3]  
Alcoy P., 2018, NETSCOUT ARBORS 13 A
[4]   An intrusion detection system for connected vehicles in smart cities [J].
Aloqaily, Moayad ;
Otoum, Safa ;
Al Ridhawi, Ismaeel ;
Jararweh, Yaser .
AD HOC NETWORKS, 2019, 90
[5]   Software-defined networking (SDN): a survey [J].
Benzekki, Kamal ;
El Fergougui, Abdeslam ;
Elalaoui, Abdelbaki Elbelrhiti .
SECURITY AND COMMUNICATION NETWORKS, 2016, 9 (18) :5803-5833
[6]   Feature selection and classification in multiple class datasets: An application to KDD Cup 99 dataset [J].
Bolon-Canedo, V. ;
Sanchez-Marono, N. ;
Alonso-Betanzos, A. .
EXPERT SYSTEMS WITH APPLICATIONS, 2011, 38 (05) :5947-5957
[7]   SDN-Enabled Multi-Attribute-Based Secure Communication for Smart Grid in IIoT Environment [J].
Chaudhary, Rajat ;
Aujla, Gagangeet Singh ;
Garg, Sahil ;
Kumar, Neeraj ;
Rodrigues, Joel J. P. C. .
IEEE TRANSACTIONS ON INDUSTRIAL INFORMATICS, 2018, 14 (06) :2629-2640
[8]   Multiple-gradient descent algorithm (MGDA) for multiobjective optimization [J].
Desideri, Jean-Antoine .
COMPTES RENDUS MATHEMATIQUE, 2012, 350 (5-6) :313-318
[9]  
Dhanabal L., 2015, INT J ADV RES COMPUT, V4
[10]  
Du W., 2021, Proceedings of the 2021 SIAM International Conference on Data Mining (SDM), P181