基于个性化联邦学习的医疗物联网攻击检测技术

MIOT attack detection technology based on personalized federation learning

  • 摘要: 医疗物联网(Internet of Medical Things,MoIT)中的网络攻击会造成医疗保健系统瘫痪,治疗中断,给病患生命带来极大威胁,因此MoIT中的网络攻击检测势在必行. 鉴于医疗终端中场景丰富、设备复杂,网络攻击目标分散形成孤岛、手段多样不均衡,单一模型的攻击检测难以奏效. 因此,提出一种基于个性化联邦学习的医疗物联网攻击检测技术,在本地客户端基于元学习框架结合ResNet算法构建本地模型,训练过程中包含两个阶段:第一阶段客户端与中央服务器之间进行模型“求同”训练,客户端上的本地模型吸收全局模型全部参数,确保本地模型的泛化能力;第二阶段客户端与中央服务器之间进行模型“存异”训练,客户端上的本地模型吸收全局模型部分参数,并利用本地数据分类规律,训练个性化专有模型. 实验结果表明,第一阶段求同训练只需要少量几个迭代轮次就能达到较高的检测正确率,第二阶段个性化训练冻结少数几个网络结构数就能使本地模型达到较高的检测正确率. 另外,通过与其他联邦学习方法对比,个性化联邦算法对本地网络攻击具有良好的检测性能.

     

    Abstract: Cyber attacks in the Internet of Medical Things (MIOT) can paralyze the healthcare system, interrupt treatment, and pose a great threat to patients' lives. Therefore, cyber attack detection in MoIT is imperative. Medical terminals are rich in scenarios and complex in equipment. Cyber attack targets are scattered to form islands, and the means are diverse and unbalanced. Attack detection with a single model is difficult to work. Therefore, a medical Internet of Things attack detection technology based on a personalized federated model is proposed. A local model is built on the local client based on the meta-learning framework combined with the ResNet algorithm. The training process includes two stages: In the first stage, the client and the central server conduct model "seeking commonality" training. The local model on the client absorbs all parameters of the global model to ensure the generalization ability of the local model. In the second stage, the client and the central server conduct model "keeping differences" training. The local model on the client absorbs some parameters of the global model and uses the local data classification rules to train a personalized proprietary model. Experimental results show that the first stage of seeking commonality training only requires a few iterations to achieve a high detection accuracy, and the second stage of personalized training freezes a few network structures to enable the local model to achieve a high detection accuracy. In addition, by comparing with other federated learning methods, the personalized federated algorithm has good detection performance for local network attacks.

     

/

返回文章
返回