Result: Investigating the Impact of Label-flipping Attacks against Federated Learning for Collaborative Intrusion Detection
collection:CNRS
collection:UNIV-UBS
collection:INSA-RENNES
collection:IRISA
collection:IRISA_SET
collection:CENTRALESUPELEC
collection:UR1-HAL
collection:UR1-MATH-STIC
collection:UR1-UFR-ISTIC
collection:IMTA_SRCD
collection:TEST-UR-CSS
collection:IRISA_IMTA
collection:UNIV-RENNES
collection:IMT-ATLANTIQUE
collection:INSA-GROUPE
collection:INSTITUTS-TELECOM
collection:UR1-MATH-NUM
collection:IRISA-SOTERN-IMTA
collection:INSTITUT-MINES-TELECOM
Further Information
The recent advances in Federated Learning (FL) and its promise of privacypreserving information sharing have led to a renewed interest in the development of collaborative models for Intrusion Detection Systems (IDSs). However, its distributed nature makes FL vulnerable to malicious contributions from its participants, including data poisoning attacks. Label-flipping attacks-where the labels of a subset of the training data are flipped-have been overlooked in the context of IDSs that leverage FL primitives. This work contributes to closing this gap by providing a systematic and comprehensive overview of the impact of label-flipping attacks on Federated Intrusion Detection Systems (FIDSs). We show that the e!ects of such attacks can range from severe to highly mitigated, depending on hyperparameters and dataset characteristics, and that their mitigation is non-trivial in heterogeneous settings. We discuss these findings in the context of existing literature and propose recommendations for the evaluation of FIDSs. Finally, we provide a methodology and tools to extend our findings to other models and datasets, thus enabling the comparable evaluation of existing and future countermeasures.