AM2DN-FL: Adaptive Malicious Model Detection in Non-IID Data Using Federated Learning for IoT System
Okba Ben Atia, Mustafa Al Samara, Ismail Bennis, Jaafar Gaber, Abdelhafid Abouaïssa, Pascal Lorenz · 2024
Federated Learning (FL) is a technique used in Internet of Things (IoT) networks to enhance data privacy through decentralised Machine Learning (ML). However FL faces challenges due to the Non-Independent and Identically Distributed (Non-IID) data that is stored on various devices. Each device typically has a unique Non-IID subset of data from its local environment. This Non-IID distribution can be manipulated by poisoning attacks, where malicious modifications disrupt the global model. To addresses these complex in both IID and Non-IID data environments, we introduce AM2DN-FL. This adaptive approach identifies and removes malicious models in FL system, using a dual-sided defense strategy that leverages server and client components to combat Label-Flipping (LF) and backdoor attacks. AM2DN-FL employs an refined Local Outlier Factor (LOF) algorithm with an adaptive threshold based on Genetic Algorithms (GA) to fine-tuning the optimal threshold selection. Our simulation outcomes, utilizing the MNIST and CIFAR10 datasets for IID and Non-IID scenarios, demonstrate that our innovative approach outperforms other previously examined approaches in the literature across various performance metrics, such as Accuracy Rate (ACC), Attack Success Rate (ASR), Recall, Precision, and CPU run-time.