提升物联网入侵检测的模型精度与可解释性,自动调参且支持决策溯源。
XAI-SOH-FL: Enhancing SOH-FL with Adaptive Aggregation and Explainable AI for Intrusion Detection in Heterogeneous IoT

- 动态调整聚合参数γ,适应数据分布变化,无需人工干预。
- 在CICIDS2017上达94.12%准确率和0.92 F1分数,收敛更快。
- 用SHAP分析特征影响,揭示流量持续时间等关键判断依据。
物联网入侵检测面临数据异构、标签数据少和模型不可解释等问题。联邦学习(FL)虽能保护隐私,但现有SOH-FL方法存在两个缺陷:依赖人工设定的聚合参数γ,且缺乏预测可解释性。本文提出XAI-SOH-FL框架,融合自适应聚合与可解释人工智能。首先,基于相似性阈值设计动态γ选择机制,使聚合过程适应数据分布演化;其次,采用贝叶斯优化自动寻找最优γ值,避免手动调参;第三,引入SHAP提供特征级解释能力。在CICIDS2017数据集上的实验表明,该方法达到94.12%准确率和0.92 F1-score,优于基线SOH-FL,且通信轮次更少。进一步的SHAP分析显示,流级特征如流量持续时间(Flow Duration)和包长度(Packet Length)对检测决策有显著影响。结果表明,XAI-SOH-FL在异构物联网环境中实现了精度、适应性与可解释性的有效平衡。
原文摘要 · Abstract (English)
Intrusion Detection Systems (IDS) in Internet of Things (IoT) environments face significant challenges due to data heterogeneity, lack of labeled data, and limited model interpretability. Federated Learning (FL) offers a privacy-preserving solution; however, existing approaches such as SOH-FL suffer from two key limitations: reliance on a manually tuned aggregation parameter γ and lack of explainability in model predictions. In this paper, we propose XAI-SOH-FL, an enhanced framework that integrates adaptive aggregation and explainable artificial intelligence into the SOH-FL paradigm. First, we introduce a dynamic γ selection mechanism based on similarity thresholding, enabling the aggregation process to adapt to evolving data distributions. Second, Bayesian Optimization is employed to automatically determine optimal γ values, eliminating the need for manual tuning. Third, SHAP (SHapley Additive exPlanations) is incorporated to provide feature-level interpretability for intrusion detection decisions. Experimental evaluation on the CICIDS2017 dataset demonstrates that the proposed approach achieves an accuracy of 94.12% and an F1-score of 0.92, outperforming the baseline SOH-FL model while converging in fewer communication rounds. Furthermore, SHAP-based analysis reveals that flow-level features such as Flow Duration and Packet Length significantly influence model predictions. These results indicate that XAI-SOH-FL provides an effective balance between accuracy, adaptability, and interpretability in heterogeneous IoT environments.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。