Sentinel: Dynamic Knowledge Distillation for Personalized Federated Intrusion Detection in Heterogeneous IoT Networks
Not on the map. Why?
Abstract (arXiv)
Federated learning (FL) offers a privacy-preserving paradigm for machine learning, but its application in intrusion detection systems (IDS) within IoT networks is challenged by severe class imbalance, non-IID data, and high communication overhead.These challenges severely degrade the performance of conventional FL methods in real-world network traffic classification. To overcome these limitations, we propose Sentinel, a personalized federated IDS (pFed-IDS) framework that incorporates a dual-model architecture on each client, consisting of a personalized teacher and a lightweight shared student model. This design effectively balances deep local adaptation with efficient global model consensus while preserving client privacy by transmitting only the compact student model, thus reducing communication costs. Sentinel integrates three key mechanisms to ensure robust performance: bidirectional knowledge distillation with adaptive temperature scaling, multi-faceted feature alignment, and class-balanced loss functions. Furthermore, the server employs normalized gradient aggregation with equal client weighting to enhance fairness and mitigate client drift. Extensive experiments on the IoTID20 and 5GNIDD benchmark datasets demonstrate that Sentinel significantly outperforms state-of-the-art federated methods, establishing a new performance benchmark, especially under extreme data heterogeneity, while maintaining communication efficiency.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 29 of its 66 references that are in the map. First posted on arXiv 27 Oct 2025.
Builds on
29 of 66 references.
References · 29
- 2015Distilling the Knowledge in a Neural Networkcited by 10,324
- 2018Representation Learning with Contrastive Predictive Codingcited by 7,777
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,669
- 2017Model-Agnostic Meta-Learning for Fast Adaptation of Deep Networkscited by 4,897
- 2019Advances and Open Problems in Federated Learningcited by 3,046
- 2018Federated Optimization in Heterogeneous Networkscited by 2,987
- 2019Class-Balanced Loss Based on Effective Number of Samplescited by 1,245
- 2019Deep Leakage from Gradientscited by 1,021
- 2019Measuring the Effects of Non-Identical Data Distribution for Federated Visual Classificationcited by 851
- 2017Federated Multi-Task Learningcited by 672
- 2020Ditto: Fair and Robust Federated Learning Through Personalizationcited by 672
- 2020Personalized Federated Learning with Moreau Envelopescited by 618
17 more
- 2021Federated Learning on Non-IID Data Silos: An Experimental Studycited by 568
- 2021Exploiting Shared Representations for Personalized Federated Learningcited by 541
- 2021Towards Personalized Federated Learningcited by 464
- 2021FedProto: Federated Prototype Learning across Heterogeneous Clientscited by 352
- 2020Attack of the Tails: Yes, You Really Can Backdoor Federated Learningcited by 309
- 2020Personalized Cross-Silo Federated Learning on Non-IID Datacited by 283
- 2020Personalized Federated Learning with First Order Model Optimizationcited by 201
- 2021FedKD: Communication Efficient Federated Learning via Knowledge Distillationcited by 187
- 2022FedALA: Adaptive Local Aggregation for Personalized Federated Learningcited by 122
- 2018N-BaIoT: Network-based Detection of IoT Botnet Attacks Using Deep Autoencoderscited by 67
- 2021Adapt to Adaptation: Learning Personalization for Cross-Silo Federated Learningcited by 53
- 2024FedTGP: Trainable Global Prototypes with Adaptive-Margin-Enhanced Contrastive Learning for Data and Model Heterogeneity in Federated Learningcited by 47
- 2021Federated Learning for Malware Detection in IoT Devicescited by 36
- 2021Evaluating Federated Learning for Intrusion Detection in Internet of Things: Review and Challengescited by 16
- 20225G-NIDD: A Comprehensive Network Intrusion Detection Dataset Generated over 5G Wireless Networkcited by 16
- 2020FLEAM: A Federated Learning Empowered Architecture to Mitigate DDoS in Industrial IoTcited by 12
- 2024Efficient Federated Learning against Byzantine Attacks and Data Heterogeneity via Aggregating Normalized Gradientscited by 2
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026FedTransKD-IDS: Robust Federated Transfer Learning with Knowledge Distillation for Intrusion Detection in IoT
- 2026Reliable Federated TinyML Deployment for IoT Security
- 2026RIFLE: Robust Distillation-based FL for Deep Model Deployment on Resource-Constrained IoT Networks
- 2023Clustered Federated Learning Architecture for Network Anomaly Detection in Large Scale Heterogeneous IoT Networks
- 2026Generative AI and Federated Learning for Intrusion Detection Systems: A Survey
- 2026Digital Twin-Driven Communication-Efficient Federated Anomaly Detection for Industrial IoT
- 2025Lightweight Intrusion Detection in IoT via SHAP-Guided Feature Pruning and Knowledge-Distilled Kronecker Networks
- 2024Efficient Federated Intrusion Detection in 5G ecosystem using optimized BERT-based model