Intrusion detection systems are evolving into intelligent systems that perform data analysis searching for anomalies in their environment. The development of deep learning technologies opened the door to build more complex and effective threat detection models. However, training those models may be computationally infeasible in most Internet of Things devices. Current approaches rely on powerful centralized servers that receive data from all their parties -- violating basic privacy constraints and substantially affecting response times and operational costs due to the huge communication overheads. To mitigate these issues, Federated Learning emerged as a promising approach where different agents collaboratively train a shared model, neither exposing training data to others nor requiring a compute-intensive centralized infrastructure. This paper focuses on the application of Federated Learning approaches in the field of Intrusion Detection. Both technologies are described in detail and current scientific progress is reviewed and categorized. Finally, the paper highlights the limitations present in recent works and presents some future directions for this technology.
翻译:入侵探测系统正在演变成智能系统,进行数据分析,寻找环境异常现象;深深层学习技术的发展打开了建立更复杂和有效威胁探测模型的大门;然而,在大多数物器装置的互联网上,培训这些模型可能无法进行计算;目前的方法依赖强大的中央服务器,这些服务器接收各方的数据 -- -- 违反基本的隐私限制,并因庞大的通信间接费用而严重影响反应时间和运营成本;为缓解这些问题,联邦学习组织出现了一种有希望的做法,不同代理机构合作培训了一个共享模型,既不向他人披露培训数据,也不要求建立计算密集的中央基础设施;本文侧重于在入侵探测领域应用联邦学习方法,详细叙述这两种技术,并审查和分类目前的科学进展;最后,文件强调了近期工作中存在的局限性,并提出了这一技术的未来方向。