Search papers, labs, and topics across Lattice.
The paper introduces Zone-Adaptive Intrusion Detection (ZAID), a collaborative framework for detecting zero-day attacks in Internet of Battlefield Things (IoBT) networks, addressing challenges of limited bandwidth and non-IID traffic. ZAID employs a universal convolutional model for traffic representation, an autoencoder for anomaly scoring, and adapter modules for zone adaptation. The framework uses federated aggregation and pseudo-labeling to improve cross-zone generalization under constrained connectivity, achieving 83.16% accuracy on unseen attacks from ToN_IoT and 71.64% on UNSW-NB15 datasets.
Achieve up to 83% accuracy detecting novel cyberattacks in tactical networks by combining federated learning with zone-specific adaptation, even with limited bandwidth and intermittent connectivity.
The Internet of Battlefield Things (IoBT) relies on heterogeneous, bandwidth-constrained, and intermittently connected tactical networks that face rapidly evolving cyber threats. In this setting, intrusion detection cannot depend on continuous central collection of raw traffic due to disrupted links, latency, operational security limits, and non-IID traffic across zones. We present Zone-Adaptive Intrusion Detection (ZAID), a collaborative detection and model-improvement framework for unseen attack types, where"zero-day"refers to previously unobserved attack families and behaviours (not vulnerability disclosure timing). ZAID combines a universal convolutional model for generalisable traffic representations, an autoencoder-based reconstruction signal as an auxiliary anomaly score, and lightweight adapter modules for parameter-efficient zone adaptation. To support cross-zone generalisation under constrained connectivity, ZAID uses federated aggregation and pseudo-labelling to leverage locally observed, weakly labelled behaviours. We evaluate ZAID on ToN_IoT using a zero-day protocol that excludes MITM, DDoS, and DoS from supervised training and introduces them during zone-level deployment and adaptation. ZAID achieves up to 83.16% accuracy on unseen attack traffic and transfers to UNSW-NB15 under the same procedure, with a best accuracy of 71.64%. These results indicate that parameter-efficient, zone-personalised collaboration can improve the detection of previously unseen attacks in contested IoBT environments.