# A Crowdsensing Intrusion Detection Dataset For Decentralized Federated Learning Models

arXiv: https://arxiv.org/abs/2507.13313 · HTML: https://mlsanity.com/paper/2507.13313/

## Key facts

- Cited by 1 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 17 Jul 2025.

## Built on by (most cited first, 1 of 1)

- [CACTUS: Mask-Guided Semantic Clean-Label Backdoors in Decentralized Federated Learning](https://mlsanity.com/paper/2609.02450/) (2026)

## Abstract (arXiv)

This paper introduces a dataset and an experimental study on Decentralized Federated Learning (DFL) for Internet of Things (IoT) crowdsensing malware detection. The dataset comprises behavioral records from benign and eight malware attacks. A total of 21,582,484 original records were collected from system calls, file system activities, resource usage, kernel events, input/output events, and network records. These records were aggregated into 30-second windows, resulting in 342,106 data records used for model training and evaluation. Experiments on the DFL platform compare traditional Machine Learning (ML), Centralized Federated Learning (CFL), and DFL across different node counts, topologies, and data distributions. Results show that DFL maintains competitive performance while preserving data locality, outperforming CFL in most settings. This dataset provides a solid foundation for studying the security of IoT crowdsensing environments.