计算机工程与应用 ›› 2026, Vol. 62 ›› Issue (8): 48-63.DOI: 10.3778/j.issn.1002-8331.2506-0010

• 热点与综述 • 上一篇    下一篇

联邦学习驱动的网络入侵检测研究综述

张舒琦1,王海凤1+,王再平2,赵鹏1,刘英华1,池志宏1,赵昕晟1   

  1. 1.内蒙古工业大学 智能科学与技术学院,呼和浩特 010080
    2.内蒙古自治区大数据中心 信息技术服务九处,呼和浩特 010011
    + 通信作者 E-mail:wanghf@imut.edu.com
  • 收稿日期:2025-06-01 修回日期:2025-09-02 在线发布日期:2026-04-15 出版日期:2026-04-15
  • 基金资助:
    内蒙古自治区直属高校基本科研业务费项目(JY20240010);内蒙古自治区自然科学基金(2023LHMS06016)。

Review of Network Intrusion Detection Driven by Federated Learning

ZHANG Shuqi1, WANG Haifeng1+, WANG Zaiping2, ZHAO Peng1, LIU Yinghua1, CHI Zhihong1, ZHAO Xinsheng1   

  1. 1.College of Intelligent Science and Technology, Inner Mongolia University of Technology, Hohhot 010080, China
    2.Information Technology Services Nine, Inner Mongolia Autonomous Region Big Data Center, Hohhot 010011, China
    + Corresponding author E-mail:wanghf@imut.edu.com
  • Received:2025-06-01 Revised:2025-09-02 Online:2026-04-15 Published:2026-04-15

摘要: 随着网络流量的快速增长和攻击手段的不断演化,传统入侵检测方法在数据孤岛、隐私保护和异构环境适配方面暴露出明显不足。联邦学习因具备“数据不出本地”的特性,为跨域协作建模和隐私保护提供了新思路,但针对其在入侵检测领域的研究尚缺乏系统化梳理与方法演进分析。围绕联邦学习驱动的网络入侵检测研究,从聚合策略、隐私保护机制和检测技术三大核心维度出发,系统总结近年来的研究进展,分析各类方法的优劣与适用场景,并归纳当前面临的挑战与发展趋势。为该领域相关研究人员提供研究思路,也为实际系统的设计与部署提供理论支撑。

关键词: 联邦学习(FL), 入侵检测, 聚合策略, 隐私保护, 检测技术

Abstract: With the rapid growth of network traffic and the continuous evolution of attack methods, traditional intrusion detection methods have exposed obvious deficiencies in data island, privacy protection and heterogeneous environment adaptation. Federated learning provides a new idea for cross-domain collaborative modeling and privacy protection because of its characteristic of “data not being local”. However, there is still a lack of systematic combing and method evolution analysis for its research in the field of intrusion detection. This paper focuses on the research of network intrusion detection driven by federated learning. Starting from the three core dimensions of aggregation strategy, privacy protection mechanism and detection technology, the paper systematically summarizes the research progress in recent years, analyzes the advantages and disadvantages of various methods and applicable scenarios, and summarizes the current challenges and development trends. This paper provides research ideas for relevant researchers in this field, and also provides theoretical support for the design and deployment of actual systems.

Key words: federal learning (FL), intrusion detection, aggregation strategy, privacy protection, detection technology