Federated Machine Learning for Privacy-Preserving Cyber Threat Intelligence in Global Cloud-Integrated MIS Platforms
Article Sidebar
Main Article Content
Abstract
Cyber Intelligence (CI) is an advanced security system that defends networks against cyberattacks by using ML models. In conventional centralized machine learning tools used to detect cyber threats, critical organizational information must be shared, which imposes severe privacy and security issues. To overcome this issue, this paper suggests a privacy-aware cyber threat detection system based on Federated Learning combined with a Convolutional Neural Network (FL-CNN). The proposed framework is tested on CIC-IDS-2017 dataset, where the methods of preprocessing like: missing value imputation, MinMax normalization, one-hot encoding, and attack label remapping are used. Experiment findings show that the suggested FL-CNN model outperforms the centralized CNN model in most metrics, including accuracy (96.8%), precision (96.2%), recall (96.7%), and F1-score (96.5%). Also, a false positive rate of the model stands at 0.025, which is much lower meaning that the model is better at identifying a cyber threat in a distributed cloud system.
Article Details
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
References
[1] M. Jouini and L. B. A. Rabai, “A Security Framework for Secure Cloud Computing Environments,” Int. J. Cloud Appl. Comput., vol. 6, no. 3, pp. 32–44, Jul. 2016, doi: 10.4018/IJCAC.2016070103.
[2] A. Gupta, “What Is The Right Security Posture? A Perspective on Cloud Computing Security Threats and Risk Assessment,” Int. J. Emerg. Res. Eng. Technol., vol. 4, no. 4, 2023, doi: 10.63282/3050-922X.IJERET-V4I4P112.
[3] M. Zekri, S. El Kafhali, N. Aboutabit, and Y. Saadi, “DDoS Attack Detection Using Machine Learning Techniques in Cloud Computing Environments,” in 2017 3rd International Conference of Cloud Computing Technologies and Applications (CloudTech), IEEE, Oct. 2017, pp. 1–7. doi: 10.1109/CloudTech.2017.8284731.
[4] S. K. Chintagunta and S. Amrale, “Enhancing Cloud Database Security Through Intelligent Threat Detection and Risk Mitigation,” TIJER--Int. Res. J, vol. 9, no. 10, pp. 49–55, 2022.
[5] V. K. Sharma, “Security and Threat Mitigation in 5G Core and RAN Networks,” Int. J. Multidiscip. Res., vol. 3, no. 5, pp. 1–10, 2021.
[6] S. Garg, “Predictive Analytics and Auto Remediation using Artificial Inteligence and Machine learning in Cloud Computing Operations,” Int. J. Innov. Res. Eng. Multidiscip. Phys. Sci., vol. 7, no. 2, 2019.
[7] S. Singamsetty, “Edge Nexus: Bridging AI and Data Engineering for Seamless Edge Computing,” Turkish Online J. Qual. Inq., vol. 13, no. 1, pp. 2343–2351, Mar. 2022, doi: 10.53555/axxezz36.
[8] G. Sarraf, “BalanceNet: Addressing Class Imbalance in AI-Powered Intrusion Detection Through Adaptive Sampling,” Asian J. Comput. Sci. Eng., vol. 8, no. 4, pp. 1–8, 2023, doi: 10.22377/ajcse.v8i04.268.
[9] M. Lane, A. Shrestha, and O. Ali, “Managing the Risks of Data Security and Privacy in the Cloud: A Shared Responsibility between the Cloud Service Provider and the Client Organisation,” Bright Internet Glob. Summit, 2017.
[10] A. Parupalli and H. Kali, “An In-Depth Review of Cost Optimization Tactics in Multi-Cloud Frameworks,” Int. J. Adv. Res. Sci. Commun. Technol., vol. 3, no. 5, pp. 1043–1052, Jun. 2023, doi: 10.48175/IJARSCT-11937Q.
[11] O. Achbarou, “A New Distributed Intrusion Detection System Based on Multi-Agent System for Cloud Environment,” Int. J. Commun. Networks Inf. Secur., vol. 10, no. 3, Apr. 2022, doi: 10.17762/ijcnis.v10i3.3546.
[12] M. A. Ferrag, O. Friha, L. Maglaras, H. Janicke, and L. Shu, “Federated Deep Learning for Cyber Security in the Internet of Things: Concepts, Applications, and Experimental Analysis,” IEEE Access, 2021, doi: 10.1109/ACCESS.2021.3118642.
[13] V. K. Sharma, “AI-Based Anomaly Detection for 5G Core and RAN Components,” Int. J. Sci. Res. Eng. Manag., vol. 6, no. 1, pp. 1–6, 2022.
[14] S. Amrale, “Proactive Resource Utilization Prediction for Scalable Cloud Systems with Machine Learning,” Int. J. Res. Anal. Rev., vol. 10, no. 4, pp. 758–764, 2023.
[15] M. Hafsa and F. Jemili, “Comparative Study Between Big Data Analysis Techniques in Intrusion Detection,” Big Data Cogn. Comput., vol. 3, no. 1, Dec. 2018, doi: 10.3390/bdcc3010001.
[16] C. Tayal, “Designing Hybrid ETL Pipelines for Multi-Cloud Integration,” Int. J. Emerg. Trends Comput. Sci. Inf. Technol., vol. 4, no. 4, pp. 129–134, 2023, doi: 10.63282/3050-9246.IJETCSIT-V4I4P114.
[17] R. Patel, “Advancements in Renewable Energy Utilization for Sustainable Cloud Data Centers : A Survey of Emerging Approaches,” Int. J. Curr. Eng. Technol., vol. 13, no. 5, pp. 447–454, 2023.
[18] A. Mohamed, J. Heilala, and N. S. Madonsela, “Machine Learning-Based Intrusion Detection Systems for Enhancing Cybersecurity,” in 2023 Second International Conference on Smart Technologies for Smart Nation (SmartTechCon), IEEE, Aug. 2023, pp. 366–370. doi: 10.1109/SmartTechCon57526.2023.10391626.
[19] A. Agarwal, “Load forecast anomaly detection under cyber attacks using a novel approach,” in Proceedings of 4th International Conference on Cybernetics, Cognition and Machine Learning Applications, ICCCMLA 2022, 2022. doi: 10.1109/ICCCMLA56841.2022.9988990.
[20] J. A. Abraham and V. R. Bindu, “Intrusion Detection and Prevention in Networks Using Machine Learning and Deep Learning Approaches: A Review,” in 2021 International Conference on Advancements in Electrical, Electronics, Communication, Computing and Automation (ICAECA), 2021, pp. 1–4. doi: 10.1109/ICAECA52838.2021.9675595.
[21] G. Yedukondalu, G. H. Bindu, J. Pavan, G. Venkatesh, and A. Saiteja, “Intrusion Detection System Framework Using Machine Learning,” in Proceedings of the 3rd International Conference on Inventive Research in Computing Applications, ICIRCA 2021, 2021. doi: 10.1109/ICIRCA51532.2021.9544717.
[22] D. Kapil, N. Mehra, A. Gupta, S. Maurya, and A. Sharma, “Network Security: Threat Model, Attacks, and IDS Using Machine Learning,” in 2021 International Conference on Artificial Intelligence and Smart Systems (ICAIS), IEEE, Mar. 2021, pp. 203–208. doi: 10.1109/ICAIS50930.2021.9395884.
[23] S. Chatterjee, “Risk Management in Advanced Persistent Threats (APTs) for Critical Infrastructure in the Utility Industry,” Int. J. Multidiscip. Res., vol. 3, no. 4, pp. 1–10, Aug. 2021, doi: 10.36948/ijfmr.2021.v03i04.34396.
[24] H.-N. Nguyen, H.-T. Nguyen, D. Lescos, and Q. Nhat, “Classification of ransomware attacks using federated learning based on the CNN model,” in Annual conference of Vietnamese young scientists, 2022.
[25] G. Sarraf, “Autonomous Ransomware Forensics: Advanced ML Techniques for Attack Attribution and Recovery,” Int. J. Adv. Res. Sci. Commun. Technol., vol. 3, no. 3, pp. 1377–1390, Jul. 2023, doi: 10.48175/IJARSCT-11978W.
[26] S. S. Panwar, P. S. Negi, and Y. P. Raiwani, “Implementation of Machine Learning Algorithms on CICIDS-2017 Dataset for Intrusion Detection using WEKA,” Int. J. Recent Technol. Eng., vol. 8, no. 3, Sep. 2019, doi: 10.35940/ijrte.C4587.098319.
[27] S. Ustebay, Z. Turgut, and M. A. Aydin, “Intrusion Detection System with Recursive Feature Elimination by Using Random Forest and Deep Learning Classifier,” in International Congress on Big Data, Deep Learning and Fighting Cyber Terrorism, IBIGDELFT 2018 - Proceedings, 2019. doi: 10.1109/IBIGDELFT.2018.8625318.
[28] P. Verma, J. G. Breslin, and D. O’Shea, “FLDID: Federated Learning Enabled Deep Intrusion Detection in Smart Manufacturing Industries,” Sensors, vol. 22, no. 22, p. 8974, Nov. 2022, doi: 10.3390/s22228974.
[29] S. Mishra, A. Albarakati, and S. K. Sharma, “Cyber Threat Intelligence for IoT Using Machine Learning,” Processes, vol. 10, no. 12, p. 2673, Dec. 2022, doi: 10.3390/pr10122673.
[30] M. M. Rashid, S. U. Khan, F. Eusufzai, M. A. Redwan, S. R. Sabuj, and M. Elsharief, “A Federated Learning-Based Approach for Improving Intrusion Detection in Industrial Internet of Things Networks,” Network, vol. 3, no. 1, pp. 158–179, Jan. 2023, doi: 10.3390/network3010008.