分布式智能体集群实现工业物联网实时安全防护
Decentralized Multi-Agent Swarms for Autonomous Grid Security in Industrial IoT: A Consensus-based Approach
- 每个边缘网关部署自治智能体，通过轻量级协议协同防御
- 0.85毫秒平均响应，97.3%高负载检测率，零日攻击准确率达87%
- 无需云端依赖，带宽消耗比云方案降低89%，适合大规模工控系统
随着工业互联网（IIoT）环境扩展至数万设备，集中式安全架构导致延迟瓶颈，易被复杂攻击利用以破坏整个制造生态。我们提出去中心化多智能体蜂群（DMAS）架构，在每个边缘网关部署自治智能体，构建分布式防御层。不同于静态防火墙或云转发遥测，DMAS智能体通过轻量级点对点协议协同，实现本地威胁检测且不依赖云端。文中提出基于共识的威胁验证（CVT）协议，智能体共同投票确认威胁，实现近实时隔离受损节点。在2000设备硬件测试平台上实验表明，DMAS实现0.85毫秒平均响应时间，高负载下97.3%检测准确率，零日攻击准确率达87%，各项指标均优于集中式与边缘计算基线。相比云方案，带宽消耗降低89%。
原文摘要 · Abstract (English)
As Industrial Internet of Things (IIoT) environments scale to tens of thousands of connected devices, centralized security architectures introduce latency bottlenecks that sophisticated attackers can exploit to compromise an entire manufacturing ecosystem. We present a Decentralized Multi-Agent Swarm (DMAS) architecture that deploys autonomous agents at each edge gateway, forming a distributed defense layer for IIoT networks. Rather than relying on static firewalls or cloud-forwarded telemetry, DMAS agents coordinate through a lightweight peer-to-peer protocol, detecting threats locally without cloud dependency. We describe a Consensus-based Threat Validation (CVT) protocol in which agents collectively vote on detected threats, enabling near-instant quarantine of compromised nodes. Experiments on a 2000-device hardware testbed show that DMAS achieves sub-millisecond response times (0.85 ms average), 97.3% detection accuracy under high load, and 87% accuracy on zeroday attacks, each exceeding both centralized and edge-computing baselines. Bandwidth consumption drops by 89% relative to cloud-based solutions.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品；中文卡片由大模型生成，请以原文为准。