FLEAM A Federated Learning Empowered Architecture to Mitigate DDoS in Industrial IoT
Abstract : Due to resource constraints and working surroundings, many IIoT nodes are easily hacked and turn into zombies from which to launch attacks. It is challenging to detect such networked zombies. We combine federated learning (FL) and fog/edge computing to combat malicious codes. Our protocol trains a global optimized model based on distributed datasets of collaborators while removing the data and communication constraints. The FL-based detection protocol maximizes the value of distributed data samples, resulting in an accurate model timely. On top of the protocol, we place mitigation intelligence in a distributed and collaborative manner. Our approach improves accuracy, eliminates mitigation time, and enlarges attackers' expense. Comprehensive evaluations showcase that the attacking cost incurred is 2.5 times higher, the mitigation delay is about 72% lower, and the accuracy is 47% greater on average than classic solutions. Besides, the protocol evaluation shows the detection accuracy is approximately 98% in the FL.
? We also highlight traceability and assurance of trustworthiness based on evidence. Trustworthiness applies to both new and existing systems.
? The trustworthy system status defines the health of an existing system from normal to ruined as the result of specific levels of loss of functionality.
? Most of these trustworthiness methods have existed for many years in industrial systems.
? The novelty is assignment to one or more of the trustworthiness characteristics and the name and such these methods can be used to implement trustworthiness in a system practically.
? This approach can be problematic when the likelihood of an occurrence is hard to estimate, such as with software, new activities (such as the first flight to the moon or use of a new technology), or for events that occur infrequently making for a lack of historical data.
? The recent technological advancement, such as federated learning (FL) and fog, may have the prospects to solve the problem.
? When the full factory is the system of interest, it includes all the issues for the cameras and many more, such as a potential chemical explosion that could cause loss of life.
? This provides a measure that is straightforward to interpret and enables the user to address the root cause of issues that diminish trust.
• The Industrial Internet Reference Architecture (IIRA) 3 designated five key system characteristics to support a system’s business purpose and to ensure that functions perform adequately without compromise.
• The main purpose of resilience is to prevent or reduce serious impact of a disruption to the system by damage or loss of operation.
• The operational user is responsible for ensuring the system delivers its business purpose while meeting operational requirements and maintaining stated levels of trustworthiness.
• A tool and a trustworthiness resilience method (the main purpose is to protect the system not the environment or humans; carbon dioxide 2 is indeed dangerous for humans).
? As FLEAM makes it possible to weed out malicious data from the source, it has supreme performance in handling DDoS attacks.
? It brings a variety of operational intelligence to improve productivity and efficiency while reducing costs and risks.
? The ML relies on growing volumes of data processed (i.e., training data) in an algorithm to improve the efficiency and accuracy of detection.
? We compare FLEAM with the classic protection model for DDoS mitigation, showcasing the effectiveness and efficiency.
? The authors pointed out that an efficient DDoS traffic pattern should generate the most malicious load, minimize its visibility, effectively disorder the target system within a specific budget.
|