IDS-MA: Intrusion Detection System for IoT MQTT Attacks Using Centralized and Federated Learning

Omotosho, Adebayo ORCID: https://orcid.org/0000-0002-1642-7610, Qendah, Yaman and Hammer, Christian (2023) IDS-MA: Intrusion Detection System for IoT MQTT Attacks Using Centralized and Federated Learning. In: 2023 IEEE 47th Annual Computers, Software, and Applications Conference (COMPSAC). IEEE Xplore, pp. 678-688. ISBN 9798350326970

Text 15788 Omotosho, A et al (2023) IDS-MA_Intrusion_Detection_System_for_IoT_MQTT_Attacks_Using_Centralized_and_Federated_Learning.pdf - Published Version Restricted to Repository staff only Available under License All Rights Reserved. Download (1MB)

Abstract

Yearly, the number of connected Internet of Things (IoT) devices is growing. The attack surface is also increasing because IoT is generally functionality-centric and security is usually an after-thought. Therefore, memory corruption attacks, man-in-the-middle attacks, and distributed denial of service attacks are a few of the attacks that have been widely exploited on these devices communicating via Message Queue Telemetry Transport (MQTT), which is the most commonly used messaging protocol in IoT. However, much of the research on MQTT intrusion detection has either covered a smaller number of attacks, completely ignored memory attacks, or used inadequate classification evaluation metrics (e.g., only accuracy). In this paper, we design and simulate an MQTT IoT network and present IDS-MA, an intrusion detection system for MQTT attacks by training both centralized and federated learning models. Seven different MQTT attacks were implemented with the models evaluated with metrics such as accuracy, precision, and recall. Our evaluation results show high detection scores on MQTT attacks (including memory attacks). We also obtain an average model detection accuracy of over 80% on 2,210,797 real attacks from the MQTT-IoT-IDS2020 benchmark for both centralized and federated models.

Item Type:	Book Section
Uncontrolled Keywords:	Message Queue Telemetry Transport protocol (MQTT); Internet of Things (IoT); Intrusion detection; Federated learning,; Centralized learning
Subjects:	H Social Sciences > HD Industries. Land use. Labor > HD28 Management. Industrial Management > HD61 Risk in industry. Risk management Q Science > QA Mathematics > QA76 Computer software
Divisions:	Schools and Research Institutes > School of Business, Computing and Social Sciences
Depositing User:	Kamila Niekoraniec
Date Deposited:	04 Feb 2026 10:31
Last Modified:	05 Feb 2026 08:00
URI:	https://eprints.glos.ac.uk/id/eprint/15788

University Staff: Request a correction | Repository Editors: Update this record