APFed: Adaptive personalized federated learning for intrusion detection in maritime meteorological sensor networks

Abstract

With the rapid development of advanced networking and computing technologies such as the Internet of Things, network function virtualization, and 5G infrastructure, new development opportunities are emerging for Maritime Meteorological Sensor Networks (MMSNs). However, the increasing number of intelligent devices joining the MMSN poses a growing threat to network security. Current Artificial Intelligence (AI) intrusion detection techniques turn intrusion detection into a classification problem, where AI excels. These techniques assume sufficient high-quality instances for model construction, which is often unsatisfactory for real-world operation with limited attack instances and constantly evolving characteristics. This paper proposes an Adaptive Personalized Federated learning (APFed) framework that allows multiple MMSN owners to engage in collaborative training. By employing an adaptive personalized update and a shared global classifier, the adverse effects of imbalanced, Non-Independent and Identically Distributed (Non-IID) data are mitigated, enabling the intrusion detection model to possess personalized capabilities and good global generalization. In addition, a lightweight intrusion detection model is proposed to detect various attacks with an effective adaptation to the MMSN environment. Finally, extensive experiments on a classical network dataset show that the attack classification accuracy is improved by about 5% compared to most baselines in the global scenarios.

Keywords

Intrusion detection / Maritime meteorological sensor network / Federated learning / Personalized model / Deep learning

CRediT authorship contribution statement

Xin Su: Supervision, Methodology, Investigation, Funding acquisition, Data curation, Conceptualization. Guifu Zhang: Writing - original draft, Investigation.

Declaration of Competing Interest

All authors of this research paper have no known competing financial interests or personal relationships that could have appeared to influence the work reported in this paper.

Acknowledgements

This work was supported by the National Natural Science Foundation of China under Grant 62371181, the Project on Excellent Postgraduate Dissertation of Hohai University (422003482), and the Changzhou Science and Technology International Cooperation Program under Grant CZ20230029.

References

[1] O. Jacq, X. Boudvin, D. Brosset, Y. Kermarrec, J. Simonin, Detecting and hunting cyberthreats in a maritime environment: specification and experimentation of a mar-itime cybersecurity operations centre, in: 2018 2nd Cyber Security in Networking Conference (CSNet), IEEE, 2018, pp. 1-8.

[2] I. de la Peña Zarzuelo, Cybersecurity in ports and maritime industry: reasons for raising awareness on this issue, Transp. Policy 100 (2021) 1-4.

[3] K. Sha, T.A. Yang, W. Wei, S. Davari, A survey of edge computing-based designs for iot security, Digit. Commun. Netw. 6 (2) (2020) 195-202.

[4] X. Sun, G. Zhang, H. Xing, Z. Wang, Research on intrusion detection for maritime meteorological sensor network based on balancing generative adversarial network, J. Commun. 44 (4) (2023) 124-136.

[5] Y. Chen, W. Liu, Z. Niu, Z. Feng, Q. Hu, T. Jiang, Pervasive intelligent endogenous 6g wireless systems: prospects, theories and key technologies, Digit. Commun. Netw. 6 (3) (2020) 312-320.

[6] E. Gyamfi, J.A. Ansere, M. Kamal, M. Tariq, A. Jurcut, An adaptive network secu-rity system for iot-enabled maritime transportation, IEEE Trans. Intell. Transp. Syst. 24 (2) (2023) 2538-2547.

[7] X. Su, G. Zhang, M. Zhang, B. Ye, H. Xing, Intrusion detection for marine meteoro-logical sensor network, in: 2022 IEEE Intl Conf on Parallel & Distributed Processing with Applications, Big Data & Cloud Computing, Sustainable Computing & Com-munications, Social Computing & Networking (ISPA/BDCloud/SocialCom/Sustain- Com), IEEE, 2022, pp. 190-196.

[8] J. Leovy, Cyberattack cost maersk as much as $300 million and disrupted op-erations for 2 weeks, https://www.latimes.com/business/la-fi-maersk-cyberattack-20170817-story.html, 2017 (accessed 13 Feb. 2023).

[9] J. Greig,Ransomware attack on maritime software impacts 1,000 ships, https://www.justice.gov/usao-wdpa/pr, 2023 (accessed 13 Feb. 2023).

[10] X. Su, S. Jiang, D. Choi, Location privacy protection of maritime mobile terminals, Digit. Commun. Netw. 8 (6) (2022) 932-941.

[11] S. Gamage, J. Samarabandu, Deep learning methods in network intrusion detection: a survey and an objective comparison, J. Netw. Comput. Appl. 169 (2020) 102767.

[12] J. Chen, D. Wu, Y. Zhao, N. Sharma, M. Blumenstein, S. Yu, Fooling intrusion detec-tion systems using adversarially autoencoder, Digit. Commun. Netw. 7 (3) (2021) 453-460.

[13] S. Tan, D. He, S. Chan, M. Guizani, Flowspotter: intelligent iot threat detection via imaging network flows, IEEE Netw. 38 (4) (2023) 268-274.

[14] X. Zhang, F. Yang, Y. Hu, Z. Tian, W. Liu, Y. Li, W. She, Ranet: network intrusion detection with group-gating convolutional neural network, J. Netw. Comput. Appl. 198 (2022) 103266.

[15] B. Hu, Y. Bi, M. Zhi, K. Zhang, F. Yan, Q. Zhang, Z. Liu, A deep one-class intrusion detection scheme in software-defined industrial networks, IEEE Trans. Ind. Inform. 18 (6) (2022) 4286-4296.

[16] X. Su, T. Tian, L. Cai, B. Ye, H. Xing, A cvae-gan-based approach to process imbal-anced datasets for intrusion detection in marine meteorological sensor networks, in: 2022 IEEE Intl Conf on Parallel & Distributed Processing with Applications, Big Data & Cloud Computing, Sustainable Computing & Communications, Social Computing & Networking (ISPA/BDCloud/SocialCom/SustainCom), IEEE, 2022, pp. 190-196.

[17] B. Li, Y. Wu, J. Song, R. Lu, T. Li, L. Zhao, Deepfed: federated deep learning for intrusion detection in industrial cyber-physical systems, IEEE Trans. Ind. Inform. 17 (8) (2021) 5615-5624.

[18] X. Huang, J. Liu, Y. Lai, B. Mao, H. Lyu, Eefed: personalized federated learning of execution&evaluation dual network for cps intrusion detection, IEEE Trans. Inf. Forensics Secur. 18 (2023) 41-56.

[19] B. McMahan, E. Moore, D. Ramage, S. Hampson, B.A. y Arcas, Communication-efficient learning of deep networks from decentralized data, in:Artificial Intelligence and Statistics, vol. 54, PMLR, 2017, pp. 1273-1282.

[20] N. Wang, W. Yang, X. Wang, L. Wu, Z. Guan, X. Du, M. Guizani, A blockchain based privacy-preserving federated learning scheme for Internet of vehicles, Digit. Commun. Netw. 10 (1) (2022) 126-134.

[21] T.V. Khoa, Y.M. Saputra, D.T. Hoang, N.L. Trung, D. Nguyen, N.V. Ha, E. Dutkiewicz,Collaborative learning model for cyberattack detection systems in iot industry 4.0, in: 2020 IEEE Wireless Communications and Networking Conference (WCNC), IEEE, 2020, pp. 1-6.

[22] V. Mothukuri, P. Khare, R.M. Parizi, S. Pouriyeh, A. Dehghantanha, G. Srivastava, Federated-learning-based anomaly detection for iot security attacks, IEEE Int. Things J. 9 (4) (2021) 2545-2554.

[23] R.T.P. Kumar, G.P. Gupta, Pefl: deep privacy-encoding-based federated learning framework for smart agriculture, IEEE MICRO 42 (1) (2022) 33-40.

[24] X. Su, L. Meng, Y. Zhou, C. Wu, Maritime mobile edge computing offloading method based on deep reinforcement learning, J. Commun. 43 (10) (2022) 133-145.

[25] T. Deng, X. Xu, Z. Ding, X. Xiao, M. Zhu, K. Peng, Automatic collaborative water surface coverage and cleaning strategy of uav and usvs, Digit. Commun. Netw., https://doi.org/10.1016/j.dcan.2022.12.014.

[26] Q. Yuan, G. Gou, Y. Zhu, Y. Zhu, G. Xiong, Y. Wang, Mcre: a unified framework for handling malicious traffic with noise labels based on multidimensional constraint representation, IEEE Trans. Inf. Forensics Secur. 19 (2024) 133-147.

[27] R. Zhao, J. Yin, Z. Xue, G. Gui, B. Adebisi, T. Ohtsuki, H. Gacanin, H. Sari, An efficient intrusion detection method based on dynamic autoencoder, IEEE Wirel. Commun. Lett. 10 (8) (2021) 1707-1711.

[28] M. Abdel-Basset, H. Hawash, R.K. Chakrabortty, M.J. Ryan, Semi-supervised spa-tiotemporal deep learning for intrusions detection in iot networks, IEEE Int. Things J. 8 (15) (2021) 12251-12265.

[29] L. Yang, A. Moubayed, A. Shami, Mth-ids: a multitiered hybrid intrusion detection system for Internet of vehicles, IEEE Int. Things J. 9 (1) (2022) 616-632.

[30] P. Kumar, G.P. Gupta, R. Tripathi, S. Garg, M.M. Hassan, Dltif: deep learning-driven cyber threat intelligence modeling and identification framework in iot-enabled maritime transportation systems, IEEE Trans. Intell. Transp. Syst. 24 (2) (2021) 2472-2481.

[31] S.A. Rahman, H. Tout, C. Talhi, A. Mourad, Internet of things intrusion detection: centralized, on-device, or federated learning?, IEEE Netw. 34 (6) (2020) 310-317.

[32] S.I. Popoola, R. Ande, B. Adebisi, G. Gui, M. Hammoudeh, O. Jogunola, Federated deep learning for zero-day botnet attack detection in iot-edge devices, IEEE Int. Things J. 9 (5) (2022) 3930-3944.

[33] C. Yang, Z. Junzhe, Y. Chai Kiat, Privacy-preserving knowledge transfer for intrusion detection with federated deep autoencoding Gaussian mixture model, Inf. Sci. 609 (2022) 1204-1220.

[34] W. Liu, X. Xu, L. Wu, L. Qi, A. Jolfaei, W. Ding, M.R. Khosravi, Intrusion detection for maritime transportation systems with batch federated aggregation, IEEE Trans. Intell. Transp. Syst. 24 (2) (2022) 2503-2514.

[35] Y. Cheng, J. Lu, D. Niyato, B. Lyu, J. Kang, S. Zhu, Federated transfer learning with client selection for intrusion detection in mobile edge computing, IEEE Commun. Lett. 26 (3) (2022) 552-556.

[36] O. Aouedi, K. Piamrat, G. Muller, K. Singh, Federated semisupervised learning for attack detection in industrial Internet of things, IEEE Trans. Ind. Inform. 19 (1) (2023) 286-295.

[37] M.G. Arivazhagan, V. Aggarwal, A.K. Singh, S. Choudhary, Federated learning with personalization layers, arXiv preprint arXiv : 1912.00818.

[38] L. Collins, H. Hassani, A. Mokhtari, S. Shakkottai,Exploiting shared representations for personalized federated learning, in:International Conference on Machine Learn-ing, vol. 139, PMLR, 2021, pp. 2089-2099.

[39] Y. Huang, L. Chu, Z. Zhou, L. Wang, J. Liu, J. Pei, Y. Zhang, Personalized Cross- Silo Federated Learning on Non-IID Data, Proceedings of the AAAI Conference on Artificial Intelligence, vol. 35, AAAI Press, 2021, pp. 7865-7873.

[40] J. Zhang, Y. Hua, H. Wang, T. Song, Z. Xue, R. Ma, H. Guan, Fedala: adaptive Local Aggregation for Personalized Federated Learning, Proceedings of the AAAI Conference on Artificial Intelligence, vol. 37, AAAI Press, 2022, pp. 11237-11244.

[41] T. Li, A.K. Sahu, M. Zaheer, M. Sanjabi, A. Talwalkar, V. Smith,Federated optimiza-tion in heterogeneous networks, in:Proceedings of Machine Learning and Systems, vol. 2, mlsys.org, 2020, pp. 429-450.

[42] A. Krizhevsky, I. Sutskever, G.E. Hinton, Imagenet classification with deep convolu-tional neural networks, Commun. ACM 60 (6) (2017) 84-90.

[43] K. Cup, Available on http://kdd.ics.uci.edu/databases/kddcup99/kddcup99.html, 2007 (accessed 13 Feb. 2023).

[44] L. Dhanabal, S.P. Shantharajah, A study on nsl-kdd dataset for intrusion detection system based on classification algorithms, Int. J. Adv. Res. Comput. Commun. Eng. 4 (6) (2015) 446-452.

[45] M. Tavallaee, E. Bagheri, W. Lu, A.A. Ghorbani, A detailed analysis of the kdd cup 99 data set, in: 2009 IEEE Symposium on Computational Intelligence for Security and Defense Applications, IEEE, 2009, pp. 1-6.