Privacy-Preserving Federated Learning Architecture for Cross-Domain IoT Threat Detection and Compliance

References

[1] Adahman, Z., Malik, A. W., & Anwar, Z. (2022). An analysis of zero-trust architecture and its cost-effectiveness for organizational security. Computers & Security, 122, 102911. https://doi.org/10.1016/j.cose.2022.102911

[2] Alshamrani, A. (2022). Cybersecurity and privacy challenges in large-scale IoT ecosystems. Future Internet, 14(11), 327.

[3] Barrett, E., & Santos, J. (2023). Governance models for cross-domain IoT data sharing. ACM Transactions on Internet Technology, 23(2).

[4] Benaissa, M., Khoufi, I., & Laouiti, A. (2024). Privacy-preserving federated learning via hybrid homomorphic encryption. Journal of Network and Computer Applications, 238, 103684.

[5] Bertino, E. (2023). Data privacy and federated architectures in modern cybersecurity. Communications of the ACM, 66(4), 48–57.

[6] Blanco-Justicia, A., Domingo-Ferrer, J., Martínez, S., Sánchez, D., Flanagan, A., & Tan, K. E. (2021). Achieving security and privacy in federated learning systems: Survey, research challenges and future directions. Engineering Applications of Artificial Intelligence, 106, 104468. https://doi.org/10.1016/j.engappai.2021.104468

[7] Briggs, C., Fan, Z., & Andras, P. (2021). A review of privacy-preserving federated learning for the internet-of-things. In Studies in Computational Intelligence (pp. 21–50). Springer International Publishing. https://doi.org/10.1007/978-3-030-70604-3_2

[8] Chen, H., Chen, X., Peng, L., & Ma, R. (2023). FLRAM: Robust aggregation technique for defense against byzantine poisoning attacks in federated learning. Electronics, 12(21), 4463. https://doi.org/10.3390/electronics12214463

[9] Dwork, C., Feldman, V., & Hardt, M. (2021). The algorithmic foundations of differential privacy (updated). Foundations and Trends in Theoretical Computer Science.

[10] Ferrag, M. A., Shu, L., & Maglaras, L. (2023). Machine learning-based IoT intrusion detection systems: A comprehensive review. Information Fusion, 90, 180–205.

[11] Gamundani, A. M., Phillips, A., & Muyingi, H. N. (2023). A scalable and lightweight authentication architecture for the internet of things (iot) in smart home applications. 2023 2nd Zimbabwe Conference of Information and Communication Technologies (ZCICT), 1–5. https://doi.org/10.1109/zcict59466.2023.10528576

[12] Gonzalez, S., et al. (2023). Zero Trust architectures for distributed cyber defense. IEEE Security & Privacy, 21(1), 45–55.

[13] Granata, D., Mastroianni, M., Rak, M., Cantiello, P., & Salzillo, G. (2024). GDPR compliance through standard security controls: An automated approach. Journal of High Speed Networks, 30(2), 147–174. https://doi.org/10.3233/jhs-230080

[14] Hasan, M., Islam, Md. M., Zarif, M. I. I., & Hashem, M. M. A. (2019). Attack and anomaly detection in IoT sensors in IoT sites using machine learning approaches. Internet of Things, 7, 100059. https://doi.org/10.1016/j.iot.2019.100059

[15] Hossain, M., Fotouhi, M., & Hasan, R. (2022). Towards privacy-preserving IoT security analytics: A survey. IEEE Access, 10, 36404–36429.

[16] Jere, N., et al. (2023). Secure multiparty computation for federated learning: Challenges and advances. Computers & Security, 132, 103311

[17] Khan, L. U., Saad, W., Han, Z., Hossain, E., & Hong, C. S. (2021). Federated learning for internet of things: Recent advances, taxonomy, and open challenges. IEEE Communications Surveys & Tutorials, 23(3), 1759–1799. https://doi.org/10.1109/comst.2021.3090430

[18] Li, Y., Chen, X., & Guo, S. (2021). Survey on IoT security: Threats and solutions. IEEE Communications Surveys & Tutorials, 23(4), 2347–2376.

[19] Liao, B., Ali, Y., Nazir, S., He, L., & Khan, H. U. (2020). Security analysis of iot devices by using mobile computing: A systematic literature review. IEEE Access, 8, 120331–120350. https://doi.org/10.1109/access.2020.3006358

[20] Nguyen, T., et al. (2023). Federated learning for IoT anomaly detection: A cross-domain perspective. Future Generation Computer Systems, 144, 615–628.

[21] Wang, Z., Wang, P., & Sun, Z. (2022). SDN traffic anomaly detection method based on convolutional autoencoder and federated learning. GLOBECOM 2022 - 2022 IEEE Global Communications Conference, 4154–4160. https://doi.org/10.1109/globecom48099.2022.10001438

[22] Zhang, J., Gascon, A., & Papernot, N. (2022). On the security and fairness of federated learning. In Advances in Neural Information Processing Systems (NeurIPS 2022).

@article{1712966,
      author = {Nathaniel Adeniyi Akande, Uju Judith Eziokwu, Adetunji Oludele Adebayo  , Omowunmi Folashayo Makinde, Cynthia Udoka Duruemeruo},
      title = {Privacy-Preserving Federated Learning Architecture for Cross-Domain IoT Threat Detection and Compliance},
      journal = {Iconic Research And Engineering Journals},
      year = {2024},
      volume = {8},
      number = {3},
      pages = {1002-1013},
      issn = {2456-8880},
      url = {https://www.irejournals.com/formatedpaper/1712966.pdf},
      abstract = {The rapid expansion of Internet of Things (IoT) ecosystems across healthcare, industry, smart cities, and critical infrastructure has amplified both the value of distributed telemetry and the security challenges associated with its use. Traditional centralised machine learning approaches, although effective, are increasingly incompatible with privacy regulations, data sovereignty constraints, and the risks inherent in aggregating sensitive cross-domain IoT data. This paper presents the Privacy-Preserving Federated Learning Architecture for Cross-Domain IoT Threat Detection and Compliance (PP-FL-IoT), a unified framework that integrates federated learning with differential privacy, homomorphic encryption, secure multiparty computation, Zero Trust security, and compliance-aware governance. Using real-world datasets and synthetic multi-domain simulations, the architecture demonstrates high threat detection accuracy that approaches centralised models while significantly reducing privacy leakage and improving adversarial robustness. Evaluation results show resilience against gradient inversion, membership inference, and poisoning attacks, alongside low communication overhead and practical detection latency suitable for time-sensitive IoT environments. Furthermore, PP-FL-IoT aligns with regulatory standards such as GDPR, HIPAA, ISO 27001, and NIST SP 800-53 through embedded governance controls and auditability. The study highlights how multi-layered privacy-preserving federated learning can enable secure, collaborative IoT threat intelligence without compromising data sovereignty or compliance obligations.},
      keywords = {IoT Security, Secure Aggregation, Threat Detection, Zero Trust},
      month = {September},
      doi = {https://doi.org/10.64388/IREV8I3-1712966}
  }