D"IoT: A Federated Self-learning Anomaly Detection System for IoT
Not on the map. Why?
Abstract (arXiv)
IoT devices are increasingly deployed in daily life. Many of these devices are, however, vulnerable due to insecure design, implementation, and configuration. As a result, many networks already have vulnerable IoT devices that are easy to compromise. This has led to a new category of malware specifically targeting IoT devices. However, existing intrusion detection techniques are not effective in detecting compromised IoT devices given the massive scale of the problem in terms of the number of different types of devices and manufacturers involved. In this paper, we present D"IoT, an autonomous self-learning distributed system for detecting compromised IoT devices effectively. In contrast to prior work, D"IoT uses a novel self-learning approach to classify devices into device types and build normal communication profiles for each of these that can subsequently be used to detect anomalous deviations in communication patterns. D"IoT utilizes a federated learning approach for aggregating behavior profiles efficiently. To the best of our knowledge, it is the first system to employ a federated learning approach to anomaly-detection-based intrusion detection. Consequently, D"IoT can cope with emerging new and unknown attacks. We systematically and extensively evaluated more than 30 off-the-shelf IoT devices over a long term and show that D"IoT is highly effective (95.6% detection rate) and fast (~257 ms) at detecting devices compromised by, for instance, the infamous Mirai malware. D"IoT reported no false alarms when evaluated in a real-world smart home deployment setting.
Key facts. Cited by 89 papers in the map (data through 7 Oct 2026). First posted on arXiv 20 Apr 2018.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 19; 2022: 21; 2023: 14; 2024: 11; 2025: 11; 2026: 13.
89 papers.
Sort:
By area:
- 2022Survey on Federated Learning Threats: concepts, taxonomy on attacks and defences, experimental study and challengescited by 81
- 2022DeepSight: Mitigating Backdoor Attacks in Federated Learning Through Deep Model Inspectioncited by 78
- 2021Federated Learning for Internet of Things: Applications, Challenges, and Opportunitiescited by 49
- 2021Federated Learning for Malware Detection in IoT Devicescited by 36
- 2023Backdoor Attacks and Defenses in Federated Learning: Survey, Challenges and Future Research Directionscited by 33
- 2022Machine Learning for Microcontroller-Class Hardware: A Reviewcited by 28
- 2021FedAdapt: Adaptive Offloading for IoT Devices in Federated Learningcited by 26
- 2022CrowdGuard: Federated Backdoor Detection in Federated Learningcited by 26
- 2023FreqFed: A Frequency Analysis-Based Approach for Mitigating Poisoning Attacks in Federated Learningcited by 25
- 2023BayBFed: Bayesian Backdoor Defense for Federated Learningcited by 23
- 2021Federated Learning for Intrusion Detection System: Concepts, Challenges and Future Directionscited by 22
- 2021Evaluation and Optimization of Distributed Machine Learning Techniques for Internet of Thingscited by 20
38 more
- 2022A Survey of Graph-based Deep Learning for Anomaly Detection in Distributed Systemscited by 20
- 2021Federated Learning for Internet of Things: A Federated Learning Framework for On-device Anomaly Data Detectioncited by 19
- 2021Evaluating Federated Learning for Intrusion Detection in Internet of Things: Review and Challengescited by 16
- 2022ADMoE: Anomaly Detection with Mixture-of-Experts from Noisy Labelscited by 15
- 2021Federated Intrusion Detection for IoT with Heterogeneous Cohort Privacycited by 14
- 2021Federated Variational Learning for Anomaly Detection in Multivariate Time Seriescited by 12
- 2021Failure Prediction in Production Line Based on Federated Learning: An Empirical Studycited by 11
- 2021A Survey on Federated Learning and its Applications for Accelerating Industrial Internet of Thingscited by 11
- 2022Fast Deep Autoencoder for Federated learningcited by 10
- 2024Efficient Federated Learning against Heterogeneous and Non-stationary Client Unavailabilitycited by 9
- 2021Decentralized Federated Learning Preserves Model and Data Privacycited by 8
- 2023BELT: Old-School Backdoor Attacks can Evade the State-of-the-Art Defense with Backdoor Exclusivity Liftingcited by 7
- 2021Revisiting IoT Device Identificationcited by 6
- 2022Towards More Efficient Data Valuation in Healthcare Federated Learning using Ensemblingcited by 6
- 2022FedDef: Defense Against Gradient Leakage in Federated Learning-based Network Intrusion Detection Systemscited by 6
- 2023ARGUS: Context-Based Detection of Stealthy IoT Infiltration Attackscited by 6
- 2021Active Learning for Network Traffic Classification: A Technical Studycited by 5
- 2022Studying the Robustness of Anti-adversarial Federated Learning Models Detecting Cyberattacks in IoT Spectrum Sensorscited by 5
- 2022Federated PCA on Grassmann Manifold for Anomaly Detection in IoT Networkscited by 5
- 2022An Interpretable Federated Learning-based Network Intrusion Detection Frameworkcited by 4
- 2022A review of Federated Learning in Intrusion Detection Systems for IoTcited by 4
- 2023FLEDGE: Ledger-based Federated Learning Resilient to Inference and Backdoor Attackscited by 4
- 2023Federated Learning for 6G: Paradigms, Taxonomy, Recent Advances and Insightscited by 4
- 2024Overcoming Catastrophic Forgetting in Federated Class-Incremental Learning via Federated Global Twin Generatorcited by 4
- 2022Deep Federated Anomaly Detection for Multivariate Time Series Datacited by 3
- 2022CELEST: Federated Learning for Globally Coordinated Threat Detectioncited by 3
- 2023Edge-assisted U-Shaped Split Federated Learning with Privacy-preserving for Internet of Thingscited by 3
- 2024Federated PCA on Grassmann Manifold for IoT Anomaly Detectioncited by 3
- 2025Quantifying the Privacy Implications of High-Fidelity Synthetic Network Trafficcited by 3
- 2021FederatedNILM: A Distributed and Privacy-preserving Framework for Non-intrusive Load Monitoring based on Federated Deep Learningcited by 2
- 2021Robust Federated Learning for execution time-based device model identification under label-flipping attackcited by 2
- 2021Deep Transfer Learning: A Novel Collaborative Learning Model for Cyberattack Detection Systems in IoT Networkscited by 2
- 2022GowFed -- A novel Federated Network Intrusion Detection Systemcited by 2
- 2023Decentralized Online Federated G-Network Learning for Lightweight Intrusion Detectioncited by 2
- 2024On the Convergence Rates of Federated Q-Learning across Heterogeneous Environmentscited by 2
- 2024FedMSE: Semi-supervised federated learning approach for IoT network intrusion detectioncited by 2
- 2021SCEI: A Smart-Contract Driven Edge Intelligence Framework for IoT Systemscited by 1
- 2021FedDICE: A ransomware spread detection in a distributed integrated clinical environment using federated learning and SDN based mitigationcited by 1
50 most cited of 89 All 89 (JSON)
- 2026Federated Attention Autoencoders with a Stochastic Aggregation Scheme for Anomaly Detection9 Aug 2026
- 2026Federated Low-Rank Koopman Learning for Multivariate Time-Series Anomaly Detection in IoT Systems9 Jul 2026
- 2026F-ACVAE: A Federated Adaptive Conditional Variational Auto-Encoder for Privacy-Preserving Intrusion Detection in IoT Networks6 Jul 2026
- 2026Privacy-Preserving Federated Temporal Graph Learning with Digital Twin--Guided Adaptive Deception for Cyber-Resilient IoMT19 Jun 2026
- 2026Federated Temporal Attention Intelligence for Cyber-Resilient IoMT: Lightweight Digital Twins and PPO-Driven Honeypot Deception19 Jun 2026
- 2026AI-Native Closed-Loop Security for 6G-Enabled Cyber-Physical Systems: From Edge Detection to Network-Wide Mitigation6 Jun 2026
- 2026Integration of AI in Cybersecurity: Current Trends with a Focused Look at Intrusion Detection Applications17 May 2026
- 2026CLAD: A Clustered Label-Agnostic Federated Learning Framework for Joint Anomaly Detection and Attack Classification7 May 2026
- 2026VARS-FL: Validation-Aligned Client Selection for Non-IID Federated Learning in IoT Systems7 May 2026
- 2026Collaborative Zone-Adaptive Zero-Day Intrusion Detection for IoBT18 Feb 2026
- 2026Resource-Aware Deployment Optimization for Collaborative Intrusion Detection in Layered Networks12 Feb 2026
- 2026IoT Device Identification with Machine Learning: Common Pitfalls and Best Practices28 Jan 2026
38 more
- 2026NOS-Gate: Queue-Aware Streaming IDS for Consumer Gateways under Timing-Controlled Evasion1 Jan 2026
- 2025Quantifying the Privacy Implications of High-Fidelity Synthetic Network Traffic25 Nov 2025
- 2025A Robust Federated Learning Approach for Combating Attacks Against IoT Systems Under non-IID Challenges20 Nov 2025
- 2025Anomaly Detection in Electric Vehicle Charging Stations Using Federated Learning11 Sep 2025
- 2025Hammer and Anvil: Toward a Theory of Backdoors in Federated Learning9 Sep 2025
- 2025Enhancing QoS in Edge Computing through Federated Layering Techniques: A Pathway to Resilient AI Lifelong Learning Systems28 Jul 2025
- 2025FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning26 Jul 2025
- 2025Integrating Asynchronous AdaBoost into Federated Learning: Five Real World Applications10 Jun 2025
- 2025WeiDetect: Weibull Distribution-Based Defense against Poisoning Attacks in Federated Learning for Network Intrusion Detection Systems6 Apr 2025
- 2025Extra Clients at No Extra Cost: Overcome Data Heterogeneity in Federated Learning with Filter Decomposition11 Mar 2025
- 2025UniNet: A Unified Multi-granular Traffic Modeling Framework for Network Security6 Mar 2025
- 2025Fine-Tuning Federated Learning-Based Intrusion Detection Systems for Transportation IoT10 Feb 2025
- 2024Act in Collusion: Distributed Multi-Target Backdoor Attacks in Federated Learning6 Nov 2024
- 2024FedMSE: Semi-supervised federated learning approach for IoT network intrusion detection18 Oct 2024
- 2024Efficient Federated Learning against Heterogeneous and Non-stationary Client Unavailability26 Sep 2024
- 2024A Survey of Anomaly Detection in In-Vehicle Networks11 Sep 2024
- 2024On the Convergence Rates of Federated Q-Learning across Heterogeneous Environments5 Sep 2024
- 2024Overcoming Catastrophic Forgetting in Federated Class-Incremental Learning via Federated Global Twin Generator13 Jul 2024
- 2024Federated PCA on Grassmann Manifold for IoT Anomaly Detection10 Jul 2024
- 2024Variational Bayes for Federated Continual Learning23 May 2024
- 2024Detecting Compromised IoT Devices Using Autoencoders with Sequential Hypothesis Testing21 Apr 2024
- 2024Analyzing Consumer IoT Traffic from Security and Privacy Perspectives: a Comprehensive Survey24 Mar 2024
- 2024SusFL: Energy-Aware Federated Learning-based Monitoring for Sustainable Smart Farms15 Feb 2024
- 2023BELT: Old-School Backdoor Attacks can Evade the State-of-the-Art Defense with Backdoor Exclusivity Lifting8 Dec 2023
- 2023Federated Learning for 6G: Paradigms, Taxonomy, Recent Advances and Insights7 Dec 2023
- 2023FreqFed: A Frequency Analysis-Based Approach for Mitigating Poisoning Attacks in Federated Learning7 Dec 2023
- 2023Edge-assisted U-Shaped Split Federated Learning with Privacy-preserving for Internet of Things8 Nov 2023
- 2023FLEDGE: Ledger-based Federated Learning Resilient to Inference and Backdoor Attacks3 Oct 2023
- 2023A Novel IoT Trust Model Leveraging Fully Distributed Behavioral Fingerprinting and Secure Delegation2 Oct 2023
- 2023Unsupervised anomalies detection in IIoT edge devices networks using federated learning23 Aug 2023
- 2023Fedward: Flexible Federated Backdoor Defense Framework with Non-IID Data1 Jul 2023
- 2023Online Self-Supervised Deep Learning for Intrusion Detection Systems22 Jun 2023
- 2023Decentralized Online Federated G-Network Learning for Lightweight Intrusion Detection22 Jun 2023
- 2023Backdoor Attacks and Defenses in Federated Learning: Survey, Challenges and Future Research Directions3 Mar 2023
- 2023CADeSH: Collaborative Anomaly Detection for Smart Homes2 Mar 2023
- 2023ARGUS: Context-Based Detection of Stealthy IoT Infiltration Attacks15 Feb 2023
- 2023BayBFed: Bayesian Backdoor Defense for Federated Learning23 Jan 2023
- 2022Federated PCA on Grassmann Manifold for Anomaly Detection in IoT Networks23 Dec 2022
50 newest of 89 All 89 (JSON)
- 2022Survey on Federated Learning Threats: concepts, taxonomy on attacks and defences, experimental study and challengescited by 81
- 2022DeepSight: Mitigating Backdoor Attacks in Federated Learning Through Deep Model Inspectioncited by 78
- 2021Federated Learning for Internet of Things: Applications, Challenges, and Opportunitiescited by 49
- 2021Federated Learning for Malware Detection in IoT Devicescited by 36
- 2023Backdoor Attacks and Defenses in Federated Learning: Survey, Challenges and Future Research Directionscited by 33
- 2022Machine Learning for Microcontroller-Class Hardware: A Reviewcited by 28
- 2021FedAdapt: Adaptive Offloading for IoT Devices in Federated Learningcited by 26
- 2022CrowdGuard: Federated Backdoor Detection in Federated Learningcited by 26
- 2023FreqFed: A Frequency Analysis-Based Approach for Mitigating Poisoning Attacks in Federated Learningcited by 25
- 2023BayBFed: Bayesian Backdoor Defense for Federated Learningcited by 23
- 2021Federated Learning for Intrusion Detection System: Concepts, Challenges and Future Directionscited by 22
- 2021Evaluation and Optimization of Distributed Machine Learning Techniques for Internet of Thingscited by 20
12 most cited of 87 All 87 (JSON)
- 2026Federated Attention Autoencoders with a Stochastic Aggregation Scheme for Anomaly Detection9 Aug 2026
- 2026Federated Low-Rank Koopman Learning for Multivariate Time-Series Anomaly Detection in IoT Systems9 Jul 2026
- 2026F-ACVAE: A Federated Adaptive Conditional Variational Auto-Encoder for Privacy-Preserving Intrusion Detection in IoT Networks6 Jul 2026
- 2026Privacy-Preserving Federated Temporal Graph Learning with Digital Twin--Guided Adaptive Deception for Cyber-Resilient IoMT19 Jun 2026
- 2026Federated Temporal Attention Intelligence for Cyber-Resilient IoMT: Lightweight Digital Twins and PPO-Driven Honeypot Deception19 Jun 2026
- 2026AI-Native Closed-Loop Security for 6G-Enabled Cyber-Physical Systems: From Edge Detection to Network-Wide Mitigation6 Jun 2026
- 2026Integration of AI in Cybersecurity: Current Trends with a Focused Look at Intrusion Detection Applications17 May 2026
- 2026CLAD: A Clustered Label-Agnostic Federated Learning Framework for Joint Anomaly Detection and Attack Classification7 May 2026
- 2026VARS-FL: Validation-Aligned Client Selection for Non-IID Federated Learning in IoT Systems7 May 2026
- 2026Collaborative Zone-Adaptive Zero-Day Intrusion Detection for IoBT18 Feb 2026
- 2026Resource-Aware Deployment Optimization for Collaborative Intrusion Detection in Layered Networks12 Feb 2026
- 2026IoT Device Identification with Machine Learning: Common Pitfalls and Best Practices28 Jan 2026
12 newest of 87 All 87 (JSON)