异构数据分布下的跨域联邦入侵检测模型

张尚哲

doi:10.11959/j.issn.1000-0801.2026043

您当前的位置：

首页 >

文章列表页 >

异构数据分布下的跨域联邦入侵检测模型

工程与应用 | 更新时间：2026-03-05

- 异构数据分布下的跨域联邦入侵检测模型
- Cross-domain federated intrusion detection model under heterogeneous data distribution
- 电信科学 2026年42卷第2期页码：195-203
- 作者机构：
  
  中国联合网络通信有限公司哈尔滨市分公司，黑龙江哈尔滨 150001
- 作者简介：
  
  [ "张尚哲（2002- ），男，中国联合网络通信有限公司哈尔滨市分公司工程师，主要研究方向为计算机网络与信息安全。" ]
- 基金信息：
- DOI：10.11959/j.issn.1000-0801.2026043
  中图分类号： TN915.08;TP393
- 收稿：2025-09-01，
  
  修回：2025-10-21，
  
  录用：2025-11-11，
  
  纸质出版：2026-02-20
- 稿件说明：
移动端阅览
张尚哲.异构数据分布下的跨域联邦入侵检测模型[J].电信科学,2026,42(02):195-203.

Zhang Shangzhe.Cross-domain federated intrusion detection model under heterogeneous data distribution[J].Telecommunications Science,2026,42(02):195-203.
张尚哲.异构数据分布下的跨域联邦入侵检测模型[J].电信科学,2026,42(02):195-203. DOI： 10.11959/j.issn.1000-0801.2026043.

Zhang Shangzhe.Cross-domain federated intrusion detection model under heterogeneous data distribution[J].Telecommunications Science,2026,42(02):195-203. DOI： 10.11959/j.issn.1000-0801.2026043.

摘要

5G/6G时代的高速移动通信网络和物联网广泛互联，使网络环境更加开放复杂，各类网络入侵威胁也日益严峻。传统入侵检测系统大多采用集中式模型，需要将各域数据汇集到中心进行分析，存在数据孤岛和隐私泄露隐患，且难以适应跨运营域、跨网络场景的多样化威胁。为此，提出了一种基于联邦学习（federated learning，FL）的跨域入侵检测系统（intrusion detection system，IDS）模型框架Cross-FL-IDS，通过在各网络域本地训练入侵检测模型、全球聚合更新参数，实现不同域协同检测新兴威胁。在保护各域数据隐私的前提下，Cross-FL-IDS引入跨域特征共享与个性化融合机制，提升了模型对异构流量模式的泛化能力。

Abstract

In the 5G/6G era

owing to the widespread interconnection of high‑speed mobile communication networks and the Internet of things

network environments are rendered more open and complex

and the severity of diverse network intrusion threats is heightened. Traditional intrusion detection systems are predominantly based on centralized architectures

under which data from each domain are required to be aggregated at a central site for analysis; as a result

risks of data silos and privacy leakage are introduced

and adaptation to diverse threats across operator domains and networks is hindered. To address these issues

a federated learning based cross‑domain intrusion detection system model framework (Cross‑FL‑IDS) was proposed

in which intrusion detection models were trained locally within each network domain and model parameters were globally aggregated and updated

by which collaborative detection of emerging threats across domains was achieved. Under the premise that the privacy of each domain’s data was preserved

cross‑domain feature‑sharing and personalized fusion mechanisms were introduced in Cross‑FL‑IDS

through which the model’s generalization to heterogeneous traffic patterns was improved.

关键词

Keywords

references

IMT‑2030(6G)推进组. 6G总体愿景与潜在关键技术白皮书 [R ] . 北京 : IMT‑ 2030 (6G)推进组 , 2020 .

IMT-2030 (6G) Promotion Group . 6G overall vision and potential key technology white paper [R ] . Beijing : IMT-2030 (6G) Promotion Group , 2020 .

Bace R , Mell P . Intrusion detection systems (IDSv1.0) [R ] . Gaithersburg : U.S. National Institute of Standards and Technology , 2001 .

Li Y C , Ma R , Jiao R H . A hybrid malicious code detection method based on deep learning [J ] . International Journal of Security and its Applications , 2015 , 9 ( 5 ): 205 - 216 .

Aldweesh A , Derhab A , Emam A Z . Deep learning approaches for anomaly-based intrusion detection systems: a survey, taxonomy, and open issues [J ] . Knowledge-Based Systems , 2020 , 189 : 105124 .

Zhang C Y , Patras P , Haddadi H . Deep learning in mobile and wireless networking: a survey [J ] . IEEE Communications Surveys & Tutorials , 2019 , 21 ( 3 ): 2224 - 2287 .

Hodo E , Bellekens X , Hamilton A , et al . Shallow and deep networks intrusion detection system: a taxonomy and survey [PP ] . arXiv ( 2017-01-09 ) [ 2025-05-01 ] arXiv: arXiv. 1701 . 02145 .

Tang F X , Mao B M , Fadlullah Z M , et al . On a novel deep-learning-based intelligent partially overlapping channel assignment in SDN-IoT [J ] . IEEE Communications Magazine , 2018 , 56 ( 9 ): 80 - 86 .

Mothukuri V , Parizi R M , Pouriyeh S , et al . A survey on security and privacy of federated learning [J ] . Future Generation Computer Systems , 2021 , 115 : 619 - 640 .

Taheri R , Shojafar M , Alazab M , et al . Fed-IIoT: a robust federated malware detection architecture in industrial IoT [J ] . IEEE Transactions on Industrial Informatics , 2021 , 17 ( 12 ): 8442 - 8452 .

张磊 , 姜鸽 , 蒲冰倩 , 等 . 联邦学习中的模型中毒攻击防御策略综述 [J ] . 计算机科学与探索 , 2025 : 1 - 26 .

Zhang L , Jiang G , Pu B Q , et al . Model poisoning attack defense strategies in federated learning: a survey [J ] . Journal of Frontiers of Computer Science and Technology , 2025 : 1 - 26 .

Youm S , Kim T . Enhancing federated intrusion detection with class-specific dynamic sampling [J ] . Applied Sciences , 2025 , 15 ( 9 ): 5067 .

Li B B , Wu Y H , Song J R , et al . DeepFed: federated deep learning for intrusion detection in industrial cyber-physical systems [J ] . IEEE Transactions on Industrial Informatics , 2021 , 17 ( 8 ): 5615 - 5624 .

Lin Z P , Yang J , Lian Y B , et al . Optimization design of cross border intelligent marketing management model based on multi layer perceptron-grey wolf optimization convolutional neural network [J ] . Scientific Reports , 2025 , 15 : 5150 .

De S , Wang W , Zhou Y C , et al . Analysing environmental impact of large-scale events in public spaces with cross-domain multimodal data fusion [J ] . Computing , 2021 , 103 ( 9 ): 1959 - 1981 .

Iftikhar N , Rehman M U , Ali Shah M , et al . Intrusion detection in NSL-KDD dataset using hybrid self-organizing map model [J ] . Computer Modeling in Engineering & Sciences , 2025 , 143 ( 1 ): 639 - 671 .

Da Silva Ruffo V G , Lent D M B , Carvalho L F , et al . Generative adversarial networks to detect intrusion and anomaly in IP flow-based networks [J ] . Future Generation Computer Systems , 2025 , 163 : 107531 .

浏览量

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

一种适用于小样本条件的网络入侵检测方法

模式匹配在网络安全中的研究

Least core：联邦学习中高效稳定的参与者贡献评价机制

无人机联邦学习场景下动态选择性同态加密隐私保护研究