The DOI matches its Crossref record; 31 of the 35 references it cites were found in a registry or an index.
Poisoning Attacks on Federated Learning-based IoT Intrusion Detection System
Open accessAbstract
Federated Learning (FL) is an appealing method for applying machine learning to large scale systems due to the privacy and efficiency advantages that its training mechanism provides.One important field for FL deployment is emerging IoT applications.In particular, FL has been recently used for IoT intrusion detection systems where clients, e.g., a home security gateway, monitors traffic data generated by IoT devices in its network, trains a local intrusion detection model, and send this model to a central entity, the aggregator, who then computes a global model (using the models of all gateways) that is distributed back to clients.This approach protects the privacy of users as it does not require local clients to share their potentially private IoT data with any other parties, and it is in general more efficient than a centralized system.However, FL schemes have been subject to poising attacks, in particular to backdoor attacks.In this paper, we show that FL-based IoT intrusion detection systems are vulnerable to backdoor attacks.We present a novel data poisoning attack that allows an adversary to implant a backdoor into the aggregated detection model to incorrectly classify malicious traffic as benign.We show that the adversary can gradually poison the detection model by only using compromised IoT devices (and not gateways/clients) to inject small amounts of malicious data into the training process and remain undetected.Our extensive evaluation on three real-world IoT datasets generated from 46 IoT devices shows the effectiveness of our attack in injecting backdoors and circumventing state of the art defenses against FL poisoning.Finally, we discuss shortly possible mitigation approaches.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“Thus, the defense algorithm proposed in [191] can be applied to multiple scenarios.”
From Data and model poisoning backdoor attacks on wireless federated learning, and the defense mechanisms: A comprehensive survey (2024) · cites this paper as [191]
In the citing paper
“Furthermore, a turning point exists after which the Clean ACC remains high and the Backdoor ACC reduces rapidly.”
From Data and model poisoning backdoor attacks on wireless federated learning, and the defense mechanisms: A comprehensive survey (2024) · cites this paper as [191]
In the citing paper
“The backdoor attack success rate under the defense mechanism reduces to zero, while the stability-based defense can ensure a high success rate for the main task.”
From Data and model poisoning backdoor attacks on wireless federated learning, and the defense mechanisms: A comprehensive survey (2024) · cites this paper as [191]
In the citing paper
“This work discusses that the turning points between Clean ACC and Backdoor ACC are similar among different types of backdoor attacks.”
From Data and model poisoning backdoor attacks on wireless federated learning, and the defense mechanisms: A comprehensive survey (2024) · cites this paper as [191]
In the citing paper
“It has been discovered that the probability that the trained model correctly classifies the normal inputs (Clean ACC) is proportional to the probability that the trained model misclassifies the backdoored inputs (Backdoor ACC).”
From Data and model poisoning backdoor attacks on wireless federated learning, and the defense mechanisms: A comprehensive survey (2024) · cites this paper as [191]
In the citing paper
“In the experimental setup, the number of participants is set to 10, and the training data are IID.”
From Data and model poisoning backdoor attacks on wireless federated learning, and the defense mechanisms: A comprehensive survey (2024) · cites this paper as [191]
In the citing paper
“Although Thien et al. [80] propose that it can mix a small number of malicious updates with numerous benign updates to avoid server detection, the server can still identify the attack by comparing historical updates from the client.”
From Poisoning attacks in federated learning: A survey (2023) · cites this paper as [80]
In the citing paper
“First, the attacker can learn the characteristics of benign clients, such as controlling the Euclidean distance between the malicious and benign models [28] or controlling the poisoning data rate (PDR) [80] to reduce the risk of detection by the server.”
From Poisoning attacks in federated learning: A survey (2023) · cites this paper as [80]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Communication-Efficient Learning of Deep Networks from Decentralized Data
McMahan, H. B., Moore, E., Ramage, D., Hampson, S., & Arcas, B. A. Y. (2016) · arXiv · doi:10.48550/arxiv.1602.05629 · Cited by 14,215
Empirical Evaluation of Gated Recurrent Neural Networks on Sequence Modeling
Chung, J., Gulcehre, C., Cho, K., & Bengio, Y. (2014) · arXiv · doi:10.48550/arxiv.1412.3555 · Cited by 11,008
How to backdoor federated learning
Bagdasaryan, E., Veit, A., Hua, Y., Estrin, D., & Shmatikov, V. (2018) · arXiv · doi:10.48550/arxiv.1807.00459 · Cited by 1,495
(2017) · neural information processing systems · Cited by 1,413
Understanding the mirai botnet
Antonakakis, M., April, T., Bailey, M., Bernhard, M., Bursztein, E., Cochran, J., Durumeric, Z., Halderman, J. A., Invernizzi, L., Kallitsis, M., et al. (2017) · USENIX Security Symposium · Cited by 1,362
Machine Learning DDoS Detection for Consumer Internet of Things Devices
Doshi, R., Apthorpe, N., & Feamster, N. (2018) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw.2018.00013 · Cited by 920
Classifying IoT Devices in Smart Environments Using Network Traffic Characteristics
Sivanathan, A., Gharakheili, H. H., Loi, F., Radford, A., Wijenayake, C. A., Vishwanath, A., & Sivaraman, V. (2018) · IEEE Transactions on Mobile Computing · doi:10.1109/tmc.2018.2866249 · Cited by 812
Natarajan, N., Dhillon, I. S., Ravikumar, P., & Tewari, A. (2013) · Cited by 740
DÏoT: A Federated Self-learning Anomaly Detection System for IoT
Nguyen, T. D., Marchal, S., Miettinen, M., Fereidooni, H., Asokan, N., & Sadeghi, A.-R. (2019) · 2019 IEEE 39th International Conference on Distributed Computing Systems (ICDCS) · doi:10.1109/icdcs.2019.00080 · Cited by 663
Self-citationFederated Learning: Collaborative Machine Learning without Centralized Training Data
Abhishek, V. A., Binny, S., Johan, T. R., Raj, N., & Thomas, V. (2022) · International Journal of Engineering Technology and Management Sciences · doi:10.46647/ijetms.2022.v06i05.052 · Cited by 489
Flagged first, then by citations
4 of the 35 references couldn’t be matched to a known paper.
Research works printed but not linked: 1
- S. Shen, S. Tople, and P. Saxena, "Auror: Defending against poisoning attacks in collaborative deep learning systems," in Proceedings of the 32Nd Annual Conference on Computer Security Applications, ser. ACSAC '16. ACM, 2016, pp. 508-519.
Cited by
Sorted by citations
Data Poisoning Attacks Against Federated Learning Systems
Tolpegin, V., Truex, S., Gursoy, M. E., & Liu, L. (2020) · Lecture Notes in Computer Science · doi:10.1007/978-3-030-58951-6_24 · Cited by 927
Federated Learning for intrusion detection system: Concepts, challenges and future directions
Agrawal, S., Sarkar, S., Aouedi, O., Yenduri, G., Piamrat, K., Alazab, M., Bhattacharya, S., Maddikunta, P. K. R., & Gadekallu, T. R. (2022) · Computer Communications · doi:10.1016/j.comcom.2022.09.012 · Cited by 457
Federated Deep Learning for Zero-Day Botnet Attack Detection in IoT-Edge Devices
Popoola, S. I., Ande, R., Adebisi, B., Gui, G., Hammoudeh, M. A. A., & Jogunola, O. (2021) · IEEE Internet of Things Journal · doi:10.1109/jiot.2021.3100755 · Cited by 375
Federated Learning in Edge Computing: A Systematic Survey
Abreha, H. G., Hayajneh, M., & Serhani, M. A. (2022) · Sensors · doi:10.3390/s22020450 · Cited by 384
SAFELearn: Secure Aggregation for private FEderated Learning
Fereidooni, H., Marchal, S., Miettinen, M., Mirhoseini, A., Möllering, H., Nguyen, T. D., Rieger, P., Sadeghi, A., Schneider, T. H., Yalame, H., et al. (2021) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw53761.2021.00017 · Cited by 298
Self-citationEvaluating Federated Learning for intrusion detection in Internet of Things: Review and challenges
Campos, E. M., Saura, P. F., González-Vidal, A., Hernández-Ramos, J. L., Bernabé, J. B., Baldini, G., & Skármeta, A. (2021) · Computer Networks · doi:10.1016/j.comnet.2021.108661 · Cited by 294
Poisoning attacks in federated learning: A survey
Xia, G., Chen, J., Yu, C., & Ma, J. (2023) · IEEE Access · doi:10.1109/access.2023.3238823 · Cited by 212
DeepSight: Mitigating Backdoor Attacks in Federated Learning Through Deep Model Inspection
Rieger, P., Nguyen, T. D., Miettinen, M., & Sadeghi, A.-R. (2022) · Proceedings 2022 Network and Distributed System Security Symposium · doi:10.14722/ndss.2022.23156 · Cited by 202
Self-citationThe Impact of Adversarial Attacks on Federated Learning: A Survey
Kumar, K. N., Mohan, C. K., & Cenkeramaddi, L. R. (2023) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2023.3322785 · Cited by 209
Intrusion Detection for Wireless Edge Networks Based on Federated Learning
Chen, Z., Lv, N., Liu, P., Fang, Y. K., Chen, K., & Pan, W. M. (2020) · IEEE Access · doi:10.1109/access.2020.3041793 · Cited by 182
Muneer, S., Farooq, U., Athar, A., Raza, M. A., Ghazal, T. M., & Sakib, S. (2024) · Journal of Engineering · doi:10.1155/2024/3909173 · Cited by 215
Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive ReviewPreprint
Gao, Y., Doan, B. G., Zhang, Z., Ma, S., Zhang, J., Fu, A., Nepal, ., & Kim, H. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2007.10760 · Cited by 276
Wan, Y., Qu, Y., Ni, W., Xiang, Y., Gao, L., & Hossain, E. (2024) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2024.3361451 · Cited by 152
“The stability-based defense method against backdoor attacks under the WFL framework is discussed in [191].”
BackgroundMethodThe Cross-Evaluation of Machine Learning-Based Network Intrusion Detection Systems
Apruzzese, G., Pajola, L., & Conti, M. (2022) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2022.3157344 · Cited by 142
Efficient Dropout-Resilient Aggregation for Privacy-Preserving Machine Learning
Liu, Z., Guo, J., Lam, K., & Zhao, J. (2022) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2022.3163592 · Cited by 145
Nguyen, T. D., Nguyen, T., Nguyen, P. L., Pham, H. H., Doan, K. D., & Wong, K.-S. (2024) · Engineering Applications of Artificial Intelligence · doi:10.1016/j.engappai.2023.107166 · Cited by 130
Self-citationAbbas, S., Issa, G. F., Fatima, A., Abbas, T., Ghazal, T. M., Ahmad, M., Yeun, C. Y., & Khan, M. A. (2023) · International Journal of Intelligent Systems · doi:10.1155/2023/2599161 · Cited by 124
Federated Learning for IoT Intrusion Detection
Lazzarini, R., Tianfield, H., & Charissis, V. (2023) · AI · doi:10.3390/ai4030028 · Cited by 138
Ünal, D., Hammoudeh, M. A. A., Khan, M. A., Abuarqoub, A., Epiphaniou, G., & Hamila, R. (2021) · Computers & Security · doi:10.1016/j.cose.2021.102393 · Cited by 116
FIDChain: Federated Intrusion Detection System for Blockchain-Enabled IoT Healthcare Applications
Ashraf, E., Areed, N. F. F., Salem, H., Abdelhay, E. H., & Farouk, A. (2022) · Healthcare · doi:10.3390/healthcare10061110 · Cited by 121
Zhang, Z., Zhang, Y., Guo, D., Yao, L. Y., & Zhao, L. (2022) · Future Generation Computer Systems · doi:10.1016/j.future.2022.04.010 · Cited by 110
Khan, T. A., Fatima, A., Shahzad, T., Rahman, A., Alissa, K. A., Ghazal, T. M., Al-Sakhnini, M. M., Abbas, S., Khan, M. A., & Ahmed, A. (2023) · IEEE Access · doi:10.1109/access.2023.3266156 · Cited by 100
LocKedge: Low-Complexity Cyberattack Detection in IoT Edge Computing
Hương, T. T., Bac, T. P., Long, D. M., Thang, B. D., Binh, N. T., Luong, T. D., & Tran, K. P. (2021) · IEEE Access · doi:10.1109/access.2021.3058528 · Cited by 100
Panda, M., Mousa, A. A. A., & Hassanien, A. E. (2021) · IEEE Access · doi:10.1109/access.2021.3092054 · Cited by 113
Federated Learning for Distributed IIoT Intrusion Detection Using Transfer Approaches
Zhang, J., Luo, C., Carpenter, M., & Min, G. (2022) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2022.3216575 · Cited by 101
The Evolution of Federated Learning-Based Intrusion Detection and Mitigation: A Survey
Lavaur, L., Pahl, M., Busnel, Y., & Autrel, F. (2022) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2022.3177512 · Cited by 110
Security and Privacy Threats to Federated Learning: Issues, Methods, and Challenges
Zhang, J., Zhu, H., Wang, F., Zhao, J., Xu, Q., & Li, H. (2022) · Security and Communication Networks · doi:10.1155/2022/2886795 · Cited by 105
Privacy-Preserving Federated Learning for Intrusion Detection in IoT Environments: A Survey
Vyas, A., Lin, P., Hwang, R., & Tripathi, M. (2024) · IEEE Access · doi:10.1109/access.2024.3454211 · Cited by 115
Machine learning-based early detection of IoT botnets using network-edge traffic
Kumar, A., Shridhar, M., Swaminathan, S., & Lim, T. J. (2022) · Computers & Security · doi:10.1016/j.cose.2022.102693 · Cited by 85
Wang, N., Xiao, Y., Chen, Y., Yang, H., Lou, W., & Hou, Y. T. (2022) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/3488932.3517395 · Cited by 83
Mohammadi, S., Balador, A., Sinaei, S., & Flammini, F. (2024) · Journal of Parallel and Distributed Computing · doi:10.1016/j.jpdc.2024.104918 · Cited by 93
A Survey on Adversarial Attack in the Age of Artificial Intelligence
Kong, Z., Xue, J., Wang, Y., Huang, L., Niu, Z., & Li, F. (2021) · Wireless Communications and Mobile Computing · doi:10.1155/2021/4907754 · Cited by 90
Qiao, C., Li, M., Liu, Y., & Tian, Z. (2024) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2024.3399612 · Cited by 92
Duy, P. T., Tien, L. K., Khoa, N. H., Hien, D. T. T., Nguyen, A. G.-T., & Pham, V.-H. (2021) · Computers & Security · doi:10.1016/j.cose.2021.102367 · Cited by 70
A Review of Federated Learning Applications in Intrusion Detection Systems
Belenguer, A., Pascual, J. A., & Navaridas, J. (2025) · Computer Networks · doi:10.1016/j.comnet.2024.111023 · Cited by 134
Sun, Y., Ochiai, H., & Esaki, H. (2021) · IEEE Transactions on Artificial Intelligence · doi:10.1109/tai.2021.3133819 · Cited by 77
Blika, A., Palmos, S., Doukas, G. S., Lamprou, V., Pelekis, S., Kontoulis, M., Ntanos, C., & Askounis, D. (2024) · IEEE Open Journal of the Communications Society · doi:10.1109/ojcoms.2024.3449563 · Cited by 82
Khan, N., Ahmad, K., Tamimi, A. A., Alani, M. M., Bermak, A., & Khalil, I. M. (2025) · Information · doi:10.3390/info16121036 · Cited by 121
Dependable federated learning for IoT intrusion detection against poisoning attacks
Yang, R., He, H. X., Wang, Y., Qu, Y., & Zhang, W. (2023) · Computers & Security · doi:10.1016/j.cose.2023.103381 · Cited by 58
Multi-metrics adaptively identifies backdoors in Federated learning
Huang, S., Li, Y., Chen, C., Shi, L., & Gao, Y. (2023) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv51070.2023.00429 · Cited by 63
Nowroozi, E., Haider, I., Taheri, R., & Conti, M. (2025) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2025.3525554 · Cited by 57
FLGUARD: Secure and Private Federated Learning
Nguyen, T. D., Rieger, P., Yalame, H., Möllering, H., Fereidooni, H., Marchal, S., Miettinen, M., Mirhoseini, A., Sadeghi, A., Schneider, T. H., et al. (2021) · TUbilio (Technical University of Darmstadt) · Cited by 55
Self-citationHe, S., Du, C., & Hossain, M. S. (2023) · IEEE Transactions on Consumer Electronics · doi:10.1109/tce.2023.3321846 · Cited by 56
Makris, I., Karampasi, A. S., Grammatikis, P. I. R., Episkopos, N., Iturbe, E., Rios, E., Piperigkos, N., Lalos, A. S., Xenakis, C., Λάγκας, Θ., et al. (2024) · Computer Science Review · doi:10.1016/j.cosrev.2024.100717 · Cited by 67
FreqFed: A Frequency Analysis-Based Approach for Mitigating Poisoning Attacks in Federated Learning
Fereidooni, H., Pegoraro, A., Rieger, P., Dmitrienko, A., & Sadeghi, A. (2024) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2024.24620 · Cited by 56
Self-citationNawshin, F., Gad, R., Ünal, D., Al-Ali, A. K., & Suganthan, P. N. (2024) · Computers & Electrical Engineering · doi:10.1016/j.compeleceng.2024.109233 · Cited by 56
Govindaram, A., & Jegatheesan, A. (2024) · Multimedia Tools and Applications · doi:10.1007/s11042-024-19777-6 · Cited by 57
Chen, Y., Zhu, X., Gong, X., Yi, X., & Li, S. X. (2022) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2022.3198481 · Cited by 51
Two-phase Defense Against Poisoning Attacks on Federated Learning-based Intrusion Detection
Lai, Y., Lin, J.-Y., Lin, Y., Hwang, R., Lin, P.-C., Wu, H.-K., & Chen, C.-K. (2023) · Computers & Security · doi:10.1016/j.cose.2023.103205 · Cited by 53
Resource optimizing federated learning for use with IoT: A systematic review
Ferreira, L., Sadok, D. F. H., & Endo, P. T. (2023) · Journal of Parallel and Distributed Computing · doi:10.1016/j.jpdc.2023.01.006 · Cited by 49
Ko, S., Lee, K., Cho, H., Hwang, Y., & Jang, H. (2023) · Expert Systems with Applications · doi:10.1016/j.eswa.2023.119896 · Cited by 51
Drift Adaptive Online DDoS Attack Detection Framework for IoT System
Beshah, Y. K., Abebe, S. L., & Melaku, H. M. (2024) · Electronics · doi:10.3390/electronics13061004 · Cited by 44
Abosata, N., Al–Rubaye, S., & İnalhan, G. (2022) · Sensors · doi:10.3390/s23010321 · Cited by 40
Data-Agnostic Model Poisoning Against Federated Learning: A Graph Autoencoder Approach
Li, K., Zheng, J., Yuan, X., Ni, W., Akan, O. B., & Poor, H. V. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3362147 · Cited by 41
Edge-assisted federated learning for anomaly detection in diverse IoT network
Sharma, P., Sharma, S. K., & Dani, D. (2024) · International Journal of Information Technology · doi:10.1007/s41870-024-01728-x · Cited by 40
SoK: The Impact of Unlabelled Data in Cyberthreat Detection
Apruzzese, G., Laskov, P., & Tastemirova, A. (2022) · European Symposium on Security and Privacy · doi:10.1109/eurosp53844.2022.00010 · Cited by 53
CrowdGuard: Federated Backdoor Detection in Federated Learning
Rieger, P., Krauß, T., Miettinen, M., Dmitrienko, A., & Sadeghi, A.-R. (2024) · Proceedings 2024 Network and Distributed System Security Symposium · doi:10.14722/ndss.2024.23233 · Cited by 36
Self-citationCross-Layer Federated Learning for Lightweight IoT Intrusion Detection Systems
Hajj, S., Azar, J., Abdo, J. B., Demerjian, J., Guyeux, C., Makhoul, A., & Dominique Ginhac, B. (2023) · Sensors · doi:10.3390/s23167038 · Cited by 35
Decentralized Federated Learning for Internet of Things Anomaly Detection
Lian, Z., & Su, C. (2022) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/3488932.3527285 · Cited by 35
More is Better (Mostly): On the Backdoor Attacks in Federated Graph Neural Networks
Xu, J., Wang, R., Koffas, S., Liang, K.-T., & Picek, S. (2022) · Asia-Pacific Computer Systems Architecture Conference · doi:10.1145/3564625.3567999 · Cited by 45
BayBFed: Bayesian Backdoor Defense for Federated Learning
Kumari, K., Rieger, P., Fereidooni, H., Jadliwala, M., & Sadeghi, A.-R. (2023) · 2023 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp46215.2023.10179362 · Cited by 37
Self-citationA survey on security and privacy threats to federated learning
Zhang, J., Li, M., Zeng, S., Xie, B., & Zhao, D. (2021) · International Conference on Networking and Network Applications (NaNA) · doi:10.1109/nana53684.2021.00062 · Cited by 34
Robust and Secure Federated Learning With Verifiable Differential Privacy
Zhang, C., Weng, J., Weng, J., Zhong, Y., Liu, J.-N., & Deng, C. (2025) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2025.3574745 · Cited by 33
Wang, M., Yang, N., Gunasinghe, D. H., & Weng, N. (2023) · Computers · doi:10.3390/computers12100209 · Cited by 29
ENIDrift: A Fast and Adaptive Ensemble System for Network Intrusion Detection under Real-world Drift
Wang, X. (2022) · Annual Computer Security Applications Conference · doi:10.1145/3564625.3567992 · Cited by 34
Decentralized Federated Learning Preserves Model and Data Privacy
Wittkopp, T., & Acker, A. (2021) · Lecture notes in computer science · doi:10.1007/978-3-030-76352-7_20 · Cited by 28
Alsaleh, S., Menaï, M. E. B., & Al-Ahmadi, S. A. (2024) · IEEE Access · doi:10.1109/access.2024.3460468 · Cited by 33
Zhong, C., Sarkar, A., Manna, S., Khan, M. Z., Noorwali, A., Das, A. K., & Chakraborty, K. (2024) · International Journal of Machine Learning and Cybernetics · doi:10.1007/s13042-024-02269-2 · Cited by 29
FedCRI: Federated Mobile Cyber-Risk Intelligence
Fereidooni, H., Dmitrienko, A., Rieger, P., Miettinen, M., Sadeghi, A., & Madlener, F. (2022) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2022.23153 · Cited by 29
Self-citationPrivacy-Enhancing and Robust Backdoor Defense for Federated Learning on Heterogeneous Data
Chen, Z., Yu, S., Fan, M., Liu, X., & Deng, R. H. (2023) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2023.3326983 · Cited by 30
FPGA Hardware Acceleration Framework for Anomaly-based Intrusion Detection System in IoT
Ngo, D., Temko, A., Murphy, C. C., & Popovici, E. M. (2021) · International Conference on Field Programmable Logic and Applications (FPL) · doi:10.1109/fpl53798.2021.00020 · Cited by 25
Sun, S., Sharma, P., Nwodo, K., Stavrou, A., & Wang, H. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-75764-8_15 · Cited by 24
Untargeted Poisoning Attack Detection in Federated Learning via Behavior AttestationAl
Mallah, R. A., Lopez, D. L., Badu-Marfo, G., & Farooq, B. (2023) · IEEE Access · doi:10.1109/access.2023.3330144 · Cited by 53
Secure IoT Search Engine: Survey, Challenges Issues, Case Study, and Future Research Direction
Hatcher, W. G., Qian, C., Liang, F., Liao, W., Blasch, E., & Yu, W. (2022) · IEEE Internet of Things Journal · doi:10.1109/jiot.2022.3153171 · Cited by 24
Federated learning‐based IoT: A systematic literature review
Hosseinzadeh, M., Hemmati, A., & Rahmani, A. M. (2022) · International Journal of Communication Systems · doi:10.1002/dac.5185 · Cited by 24
Alkadi, S., Al-Ahmadi, S. A., & Ismail, M. M. B. (2023) · Applied Sciences · doi:10.3390/app13106001 · Cited by 24
Kalpana, P., Tappari, S., Smitha, L., Madhavi, D., Naresh, K., & Vijayalakshmi, M. (2025) · Discover Internet of Things · doi:10.1007/s43926-025-00157-x · Cited by 23
Wainakh, A., Zimmer, E., Subedi, S., Keim, J., Grube, T., Karuppayah, S., Guinea, A. S., & Mühlhäuser, M. (2022) · Sensors · doi:10.3390/s23010031 · Cited by 26
Securing federated learning: a defense strategy against targeted data poisoning attack
Khraisat, A., Alazab, A., Alazab, M., Jan, T., Singh, S., & Uddin, M. A. (2025) · Discover Internet of Things · doi:10.1007/s43926-025-00108-6 · Cited by 21
DART: A Solution for decentralized federated learning model robustness analysis
Feng, C., Celdrán, A. H., von der Assen, J., Beltrán, E. T. M., Bovet, G., & Stiller, B. (2024) · Array · doi:10.1016/j.array.2024.100360 · Cited by 23
Automatic Adversarial Adaption for Stealthy Poisoning Attacks in Federated Learning
Krauß, T., König, J., Dmitrienko, A., & Kanzow, C. (2024) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2024.241366 · Cited by 20
FogAI: An AI-supported fog controller for Next Generation IoT
Kök, İ., Okay, F. Y., & Özdemi̇r, S. (2022) · Internet of Things · doi:10.1016/j.iot.2022.100572 · Cited by 20
Sharma, I., & Khullar, V. (2024) · Journal of Industrial Information Integration · doi:10.1016/j.jii.2024.100765 · Cited by 21
VREFL: Verifiable and Reconnection-Efficient Federated Learning in IoT scenarios
Ye, H., Liu, J., Zhen, H., Jiang, W., Wang, B., & Wang, W. (2022) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2022.103486 · Cited by 18
Turning Federated Learning Systems Into Covert Channels
Costa, G., Pinelli, F., Soderi, S., & Tolomei, G. (2022) · IEEE Access · doi:10.1109/access.2022.3229124 · Cited by 35
Evaluation of data poisoning attacks on federated learning-based network intrusion detection system
Zhang, Y., Zhang, Y., Zhang, Z., Bai, H., Zhong, T., & Song, M. N. (2022) · IEEE International Conference on High Performance Computing and Communications; IEEE International Conference on Smart City; IEEE International Conference on Data Science and Systems (HPCC/SmartCity/DSS) · doi:10.1109/hpcc-dss-smartcity-dependsys57074.2022.00330 · Cited by 18
Vy, N. C., Quyen, N. H., Duy, P. T., & Pham, V.-H. (2021) · Lecture notes in computer science · doi:10.1007/978-3-030-92708-0_8 · Cited by 18
Attacking-Distance-Aware Attack: Semi-targeted Model Poisoning on Federated Learning
Sun, Y., Ochiai, H., & Sakuma, J. (2023) · IEEE Transactions on Artificial Intelligence · doi:10.1109/tai.2023.3280155 · Cited by 19
Multidisciplinary cancer disease classification using adaptive FL in healthcare industry 5.0
Abbas, T., Fatima, A., Shahzad, T., Alharbi, M., Khan, M. A., & Ahmed, A. (2024) · Scientific Reports · doi:10.1038/s41598-024-68919-1 · Cited by 20
Tom, A. K., Khraisat, A., Jan, T., Whaiduzzaman, M., Nguyen, T. D., & Alazab, A. (2025) · Future Internet · doi:10.3390/fi17090409 · Cited by 15
Self-citationZhu, L., Zhao, B., Li, W., Wang, Y., & An, Y. (2024) · Ad Hoc Networks · doi:10.1016/j.adhoc.2024.103517 · Cited by 14
Federated Learning for Privacy-Preserving Intrusion Detection in IoT Networks
Azeez, S. D., Ilyas, M., & Bakko, I. M. (2024) · International Congress on Human-Computer Interaction, Optimization and Robotic Applications (ICHORA) · doi:10.1109/hora61326.2024.10550685 · Cited by 14
Lavaur, L., Busnel, Y., & Autrel, F. (2025) · Computers & Security · doi:10.1016/j.cose.2025.104462 · Cited by 14
Homogeneous Learning: Self-Attention Decentralized Deep Learning
Sun, Y., & Ochiai, H. (2022) · IEEE Access · doi:10.1109/access.2022.3142899 · Cited by 13
Clients Eligibility-Based Lightweight Protocol in Federated Learning: An IDS Use Case
Asad, M., Otoum, S., & Shaukat, S. (2024) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2024.3398213 · Cited by 15
FLOW: A Robust Federated Learning Framework to Defend Against Model Poisoning Attacks in IoT
Liu, S., Li, Z., Sun, Q., Chen, L., Zhang, X., & Li, D. (2023) · IEEE Internet of Things Journal · doi:10.1109/jiot.2023.3341811 · Cited by 13
Hai, T., Sarkar, A., Aksoy, M., Karmakar, R., Manna, S., & Prasad, A. (2024) · Cluster Computing · doi:10.1007/s10586-024-04356-z · Cited by 12
Privacy-Preserving Detection of DDoS Attacks in IoT Using Federated Learning Techniques
Bhatia, K., Bhattacharya, S., & Sharma, I. (2024) · doi:10.1109/icbdml60909.2024.10577342 · Cited by 12
A Proxy Attack-Free Strategy for Practically Improving the Poisoning Efficiency in Backdoor Attacks
Li, Z., Sun, H., Xia, P., Xia, B., Rui, X., Zhang, W., Guo, Q., Fu, Z., & Li, B. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3472510 · Cited by 17
Lavaur, L., Busnel, Y., & Autrel, F. (2024) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1145/3664476.3670434 · Cited by 12
Metadata
- Authors
- Nguyen, T. D., Rieger, P., Miettinen, M., & Sadeghi, A.-R.
- Affiliations
- Technische Universität Darmstadt (DE)
- Venue
- Proceedings 2020 Workshop on Decentralized IoT Systems and Security
- Publisher
- Internet Society
- Published
- 2020
- OpenAlex
- W3030742901
- Cited by
- 200
- References
- 35
- Citations by year
- 2026: 13 · 2025: 35 · 2024: 54 · 2023: 38 · 2022: 36 · 2021: 19 · 2020: 5
- FWCI
- 9.36
- Type
- conference paper
- Language
- en
- Open access
- bronze
- doi.org
- Locations
- Workshop on Decentralized IoT Systems and Security (DISS) (publishedVersion)
- TUbilio (Technical University of Darmstadt) (submittedVersion)
- Funders
- Deutsche Forschungsgemeinschaft (SFB 1119, 236615297)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Keywords
- federated learning, data poisoning, backdoor attacks, IoT intrusion detection, privacy-preserving machine learning, malicious traffic classification, attack mitigation
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review