logo SBA

ETD

Archivio digitale delle tesi discusse presso l’Università di Pisa

Tesi etd-03142024-100130


Tipo di tesi
Tesi di laurea magistrale
Autore
RUTA, MARCO
URN
etd-03142024-100130
Titolo
A decentralized privacy-preserving IDS for smart buildings based on Federated Learning
Dipartimento
INGEGNERIA DELL'INFORMAZIONE
Corso di studi
CYBERSECURITY
Relatori
relatore Prof. Garroppo, Rosario Giuseppe
relatore Prof. Pagano, Michele
correlatore Landi, Giada
Parole chiave
  • Privacy
  • IoT
  • IDS
  • Federated Learning
  • Cybersecurity
  • Smart Buildings
Data inizio appello
17/04/2024
Consultabilità
Parziale
Data di rilascio
17/04/2064
Riassunto
The integration of IoT and networking technologies in smart buildings has led to an increased need for security measures to protect against threats and vulnerabilities that could compromise system functionalities, data privacy, and even safety. This work highlights the importance of hardening against security attacks using Artificial Intelligence (AI) solutions, while maintaining confidentiality of private data. The research explores the collaborative training of Machine Learning (ML) models across multiple smart buildings, using Federated Learning (FL) techniques to distribute the model creation without directly sharing sensitive data, thereby preserving privacy by design. First, a comprehensive review of the current landscape in AI security, FL, Explainable AI (XAI), and security of 5G and 6G networks was conducted. This research led to the development of two convolutional neural network (CNN) models for detecting network and IoT attacks, using the public ToN-IoT dataset. Following a data engineering process that included sampling, feature extraction and transformation of data into images, a centralised model was first elaborated. The model was then successfully decentralised using TensorFlow Federated, achieving comparable performance to the centralised version. To address the unique vulnerabilities of federated learning, a secure and robust aggregation method was introduced, making the system resistant to poisoning attacks, from up to 20% of the participating clients.
File