Adapt-LFA: Adaptive Gradient-Guided Label Flipping Attack Against Federated Learning-based Intrusion Detection in IoT

Adopting Federated Learning (FL) in Intrusion Detection Systems (IDS) for IoT enhances privacy by decentralizing model training. However, FL is still vulnerable to adversarial threats, particularly Label-Flipping Attacks (LFA) that manipulate local training data to degrade model performance. This paper introduces the Adaptive Gradient-Guided Label Flipping Attack (Adapt-LFA), which strategically flips training labels using gradient-based optimization to maximize classification errors while minimizing detection risks. Evaluations on the CSE-CICIDS2018 and CICIoV2024 datasets show that Adapt-LFA reduces accuracy by $10 \%$ in Recurrent Neural Networks (RNN) and 13% in Convolutional Neural Networks (CNN), outperforming baseline LFA in disrupting FL-based IDS. These results highlight the effectiveness of the attack in degrading IDS performance within FL-based IoT environments.

Authors

Institutions

Publication Details

Published
2025-08-04
DOI
https://doi.org/10.1109/csr64739.2025.11130071
Citations
2
Primary Topic
Network Security and Intrusion Detection
Type
article
Field-Weighted Citation Impact
2.97
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Adapt-LFA: Adaptive Gradient-Guided Label Flipping Attack Against Federated Learning-based Intrusion Detection in IoT

Stavros Shiaeles, Ivan Jordanov, Rahim Taheri, Hassan Rezaei
2 citations
Network Security and Intrusion Detection
2.97
article

Adapt-LFA: Adaptive Gradient-Guided Label Flipping Attack Against Federated Learning-based Intrusion Detection in IoT

Stavros Shiaeles, Ivan Jordanov, Rahim Taheri, Hassan Rezaei
article en
2 citations

Abstract

Adopting Federated Learning (FL) in Intrusion Detection Systems (IDS) for IoT enhances privacy by decentralizing model training. However, FL is still vulnerable to adversarial threats, particularly Label-Flipping Attacks (LFA) that manipulate local training data to degrade model performance. This paper introduces the Adaptive Gradient-Guided Label Flipping Attack (Adapt-LFA), which strategically flips training labels using gradient-based optimization to maximize classification errors while minimizing detection risks. Evaluations on the CSE-CICIDS2018 and CICIoV2024 datasets show that Adapt-LFA reduces accuracy by $10 \%$ in Recurrent Neural Networks (RNN) and 13% in Convolutional Neural Networks (CNN), outperforming baseline LFA in disrupting FL-based IDS. These results highlight the effectiveness of the attack in degrading IDS performance within FL-based IoT environments.

University of Portsmouth (GB)
Openalex Percentile: Top 8%
Network Security and Intrusion Detection
2.97
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.