Cited by 47Network Security and Intrusion DetectionIoT and Edge/Fog ComputingInternet of Things and AI

Federated Threat-Hunting Approach for Microservice-Based Industrial Cyber-Physical System

Abdel-Basset, Mohamed, Hawash, Hossam, Sallam, Karam·2022·IEEE Transactions on Industrial Informatics

Abstract

The lightning convergence of industry 4.0 and the intelligent Internet of Things (IoT) technologies has significantly increased the vulnerability of industrial cyber-physical systems (ICPSs) to a large population of cyber threats. Intelligent threat detection for discovering cyber threats is a challenging task as it essentially deals with wide-scale, complicated, and heterogeneous ICPSs. This article presents a novel federated deep learning (DL) model (Fed-TH) for hunting cyber threats against ICPSs that captures the temporal and spatial representations of network data. Then, a container-based industrial edge computing framework is designed to deploy the Fed-TH as a threat-hunting microservice on suitable edge servers while maintaining decent resource orchestration. To tackle the latency issue of an ICSP, an exploratory microservice placement method is introduced to enable better microservice deployment based on the computational resources of the participants. The simulation results obtained from two public benchmarks validate the effectiveness of these approaches in terms of accuracy (92.97%, 92.84%) and f1-scores (91.61%, 90.49%).

Integrity signals

Registry

Crossref · 10.1109/tii.2021.3091150

Cites

29 of 29 references verified0 citation errors · 0 not checkable

Statistics

Recomputing p-values needs the paper’s full text.

Claims the paper makes

This paper’s full text isn’t openly available, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

Cites

Flagged first, then by citations

Cited by

Sorted by citations

Authors
Abdel-Basset, M., Hawash, H., & Sallam, K.
Affiliations
Zagazig University (EG)
Venue
IEEE Transactions on Industrial Informatics
Published
2022-03
Volume
18
Issue
3
Pages
1905-1917
ISSN
  • 1551-3203 (ISSN-L)
  • 1941-0050
OpenAlex
W3176372534
Cited by
47
References
29
Citations by year
2026: 2 · 2025: 9 · 2024: 11 · 2023: 13 · 2022: 9 · 2021: 3
FWCI
4.04
Type
journal article
Language
en
Open access
closed
Locations
IEEE Transactions on Industrial Informatics (publishedVersion)
Topics
  • Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
  • Physical Sciences › Computer Science › Computer Networks and Communications › IoT and Edge/Fog Computing
  • Physical Sciences › Computer Science › Information Systems › Internet of Things and AI
Keywords
federated learning, threat hunting, industrial cyber-physical systems, microservices, industrial edge computing, containerization, microservice placement, network traffic anomaly detection, Industrial Internet of Things, resource orchestration

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review