Zero-X: A Blockchain-Enabled Open-Set Federated Learning Framework for Zero-Day Attack Detection in IoV

• Published in: IEEE transactions on vehicular technology 2024-09, Vol.73 (9), p.12399-12414
• Main Authors: Korba, Abdelaziz Amara, Boualouache, Abdelwahab, Ghamri-Doudane, Yacine
• Format: Article
• Language: English
• Subjects: Artificial neural networks; Blockchain; Communications traffic; Computational modeling; Computer security; connected and automated vehicles; Cybersecurity; Data models; differential privacy; Federated learning; Intelligent transportation systems; Internet of Vehicles; Intrusion detection; Intrusion detection systems; IoV; Machine learning; Network latency; open-set recognition; Privacy; security; Servers; Training; Transportation networks; zero-day attacks
• ISSN: 0018-9545; 1939-9359
• DOI: 10.1109/TVT.2024.3385916

The Internet ofVehicles (IoV) is a crucial technology for Intelligent Transportation Systems (ITS) that integrates vehicles with the Internet and other entities. The emergence of 5G and the forthcoming 6G networks presents an enormous potential to transform the IoV by enabling ultra-reliable, low-latency, and high-bandwidth communications. Nevertheless, as connectivity expands, cybersecurity threats have become a significant concern. The issue has been further exacerbated by the rising number of zero-day (0-day) attacks, which can exploit unknown vulnerabilities and bypass existing Intrusion Detection Systems (IDSs). In this paper, we propose Zero-X, an innovative security framework that effectively detects both 0-day and N-day attacks. The framework achieves this by combining deep neural networks with Open-Set Recognition (OSR). Our approach introduces a novel scheme that uses blockchain technology to facilitate trusted and decentralized federated learning (FL) of the Zero-X framework. This scheme also prioritizes privacy preservation, enabling both CAVs and Security Operation Centers (SOCs) to contribute their unique knowledge while protecting the privacy of their sensitive data. To the best of our knowledge, this is the first work to leverage OSR in combination with privacy-preserving FL to identify both 0-day and N-day attacks in the realm of IoV. The in-depth experiments on two recent network traffic datasets show that the proposed framework achieved a high detection rate while minimizing the false positive rate. Comparison with related work showed that the Zero-X framework outperforms existing solutions.