Netinfo Security ›› 2022, Vol. 22 ›› Issue (1): 46-54.doi: 10.3969/j.issn.1671-1122.2022.01.006

Previous Articles     Next Articles

Research on Intrusion Detection Mechanism Based on Federated Learning

BAI Hongpeng1, DENG Dongxu2, XU Guangquan1(), ZHOU Dexiang3   

  1. 1. College of Intelligence and Computing, Tianjin University, Tianjin 300350, China
    2. China Electronic System Technology Co.,Ltd., Beijing 100070, China
    3. Great Wall Motor Company Limited, Baoding 071000, China
  • Received:2021-09-16 Online:2022-01-10 Published:2022-02-16
  • Contact: XU Guangquan E-mail:losin@tju.edu.cn

Abstract:

With the advent of the era of big data, data has become an important strategic resource for social development. However, with the increasing complexity of the network environment, privacy leakage and malicious attacks emerge in an endless stream. As a new data sharing model, federated learning can share data on the premise of protecting data privacy. In particular, it can effectively solve the shortcomings of traditional intrusion detection model. Therefore, this paper proposed an intrusion detection mechanism based on federated learning. This paper first introduced the structure and characteristics of federated learning and intrusion detection model, And deeply analyzed the feasibility of intrusion detection mechanism based on federated learning to effectively improve the detection accuracy and efficiency. The prototype system was developed through the requirement analysis and design of the model, and the simulation experimented with function programming. It is found that the federated learning mechanism can realize the sharing of multi-party attack logs on the premise of ensuring the data privacy security of participating clients. At the same time, through the control experiments of multiple groups of control variables, it is proved that the intrusion detection mechanism based on federated learning has significantly improved the detection accuracy and efficiency.

Key words: federated learning, malicious attacks, intrusion detection, network security

CLC Number: