Federated Malware Detection Robustness Against Adversarial Poisoning Attacks

Abstract

Abstract: This report synthesises findings from 15 peer-reviewed papers addressing the following research question: How does the federated malware detection model's robustness against adversarial poisoning attacks compare to other federated learning approaches (e.g., FedAvg, FedProx) when evaluated on the N-BaIoT. In this article, we present a comprehensive study with an experimental analysis of federated deep learning approaches for cyber security in the Internet of Things (IoT) applications. Specifically, we first provide a review of the federated learning-based security and privacy. 8 claims were extracted from source literature; 7 were independently verified against retrieved documents. An automated multi-reviewer quality assessment produced a score of 7.4/10. This report is a machine-generated literature synthesis and does not constitute original research.

Research Question

How does the federated malware detection model's robustness against adversarial poisoning attacks compare to other federated learning approaches (e.g., FedAvg, FedProx) when evaluated on the N-BaIoT dataset using precision and recall metrics?

Verification Level

Descriptive public verification status only; aggregate claim counts are public, but individual claim records are not exposed here.

Truth-Engine Gate Verdict

This record has not completed Gate 2 of the verification pipeline (a type-checked Lean4 proof for mathematical claims, or a sealed-sandbox reproduction for empirical claims). It is a literature synthesis only. VERIFIED requires an attached reproducible artifact (Lean4 proof source, or repro script and results) before this status can be set; it is not derived from review score or claim count.

Quality Tier

Descriptive public triage only; this tier does not alter current publication or DOI behavior.

Quality Dimensions

Automated triage signals derived from public fields; not human peer review or independent validation.

Correction Record

Public corrections are additive records. Current status does not claim the synthesis is error-free.

Provenance