Feature Distraction Based Backdoor Defense for Federated Trained Intrusion Detection System

Convolutional Neural Network (CNN)-based Intrusion Detection System (IDS) incorporated with Federated Learning (FL) facilitates collaborative model training to secure user privacy and enhance data diversity, emerging as a promising solution to defend malicious flows. Yet, FL is vulnerable to trigger backdoor attacks. Existing methods have limited ability on IDS with FL for detecting or repairing a converged attacked model as they either require access to the training process or are dedicated to specific applications. To tackle the limitations, we propose a novel Features Distraction Defense Framework (FDDF) that does not interfere with the model training and requires only a few additional model inferences to protect users from the aforesaid attack. The experiment results show that FDDF can recover the accuracy effectively and preserve the accuracy of normal models.