Authors :
Ayush; Dr. Amarjeet Singh
Volume/Issue :
Volume 11 - 2026, Issue 4 - April
Google Scholar :
https://tinyurl.com/3dbewat3
DOI :
https://doi.org/10.38124/ijisrt/26apr2363
Note : A published paper may take 4-5
working days from the publication date to appear in PlumX Metrics, Semantic Scholar, and
ResearchGate.
Abstract :
The rapid expansion of fifth-generation 5G wireless networks has significantly increased the attack surface available to adversaries who seek to disrupt critical communication infrastructure. Traditional centralized intrusion detection systems expose raw user data to a central server, creating unacceptable privacy risks and bandwidth overhead incompatible with real-time 5G operations. This paper proposes a Privacy Preserving Federated Learning FL framework for real-time security anomaly detection in 5G networks that is simultaneously robust against model poisoning attacks. Distributed 5G edge nodes collaboratively train a global anomaly detection model by sharing only locally computed model weight updates rather than raw telemetry data. The aggregation server applies a multi-layered Byzantine-fault-tolerant pipeline comprising Multi-Krum selection, Isolation Forest outlier detection, and Z-Score norm filtering to identify and discard malicious gradient updates injected by compromised nodes. Differential Privacy noise is added before aggregation to provide formal mathematical privacy guarantees. The system is evaluated across nine attack scenarios involving gradient scaling, sign-flip, and random noise poisoning at adversarial node ratios of 10, 20, and 30 Percentage. Results demonstrate that the proposed system maintains detection accuracy above 90.5 Percentage even when 30 Percentage of participating nodes are adversarial, outperforming baseline FedAvg by up to 48.1 percentage points. A real-time dashboard built on FastAPI and WebSockets provides live visualization of model convergence and threat events. The proposed approach establishes a scalable, privacy preserving, and attack-resilient framework suitable for deployment in operational 5G network environments.
Keywords :
Federated Learning; 5G Network Security; Anomaly Detection; Byzantine Robustness; Model Poisoning Attacks; Differential Privacy; Multi-Krum; Isolation Forest; Edge Intelligence; Privacy-Preserving Machine Learning.
References :
- McMahan, H. B., Moore, E., Ramage, D., Hampson, S., and Arcas, B. A. (2017). Communication-Efficient Learning of Deep Networks from Decentralized Data. Proceedings of the 20th International Conference on Artificial Intelligence and Statistics (AISTATS), pp. 1273-1282.
- Blanchard, P., El Mhamdi, E. M., Guerraoui, R., and Stainer, J. (2017). Machine Learning with Adversaries: Byzantine Tolerant Gradient Descent. Advances in Neural Information Processing Systems (NeurIPS), 30, pp. 119-129.
- Abadi, M., Chu, A., Goodfellow, I., McMahan, H. B., Mironov, I., Talwar, K., and Zhang, L. (2016). Deep Learning with Differential Privacy. Proceedings of the 23rd ACM Conference on Computer and Communications Security (CCS), pp. 308-318.
- Fang, M., Cao, X., Jia, J., and Gong, N. Z. (2020). Local Model Poisoning Attacks to Byzantine-Robust Federated Learning. Proceedings of the 29th USENIX Security Symposium, pp. 16051622.
- Yin, D., Chen, Y., Ramchandran, K., and Bartlett, P. (2018). Byzantine-Robust Distributed Learning: Towards Optimal Statistical Rates. Proceedings of the 35th International Conference on Machine Learning (ICML), pp. 5650-5659.
- Liu, F. T., Ting, K. M., and Zhou, Z. H. (2008). Isolation Forest. Proceedings of the 8th IEEE International Conference on Data Mining (ICDM), pp. 413-422.
- Geyer, R. C., Klein, T., and Nabi, M. (2017). Differentially Private Federated Learning: A Client Level Perspective. NeurIPS Workshop on Privacy-Preserving Machine Learning.
- Ahmad, I., Kumar, T., Liyanage, M., Okwuibe, J., Ylianttila, M., and Gurtov, A. (2018). Overview of 5G Security Challenges and Solutions. IEEE Communications Standards Magazine, 2(1), pp. 3643.
- Zhang, T., Gao, L., He, C., Zhang, M., Krishnamachari, B., and Avestimehr, A. (2022). Federated Learning for Internet of Things: Applications, Challenges, and Opportunities. IEEE Internet of Things Magazine, 5(4), pp. 24-29.
- Nguyen, D. C., Ding, M., Pathirana, P. N., Seneviratne, A., Li, J., and Poor, H. V. (2021). Federated Learning for Cybersecurity: Concepts, Challenges, and Future Directions. IEEE Transactions on Neural Networks and Learning Systems, 33(9), pp. 4665-4679.
- Chandola, V., Banerjee, A., and Kumar, V. (2009). Anomaly Detection: A Survey. ACM Computing Surveys, 41(3), pp. 1-58.
- 3GPP TS 33.501 V17.7.0 (2022). Security Architecture and Procedures for 5G System. 3rd Generation Partnership Project, Sophia Antipolis, France.
The rapid expansion of fifth-generation 5G wireless networks has significantly increased the attack surface available to adversaries who seek to disrupt critical communication infrastructure. Traditional centralized intrusion detection systems expose raw user data to a central server, creating unacceptable privacy risks and bandwidth overhead incompatible with real-time 5G operations. This paper proposes a Privacy Preserving Federated Learning FL framework for real-time security anomaly detection in 5G networks that is simultaneously robust against model poisoning attacks. Distributed 5G edge nodes collaboratively train a global anomaly detection model by sharing only locally computed model weight updates rather than raw telemetry data. The aggregation server applies a multi-layered Byzantine-fault-tolerant pipeline comprising Multi-Krum selection, Isolation Forest outlier detection, and Z-Score norm filtering to identify and discard malicious gradient updates injected by compromised nodes. Differential Privacy noise is added before aggregation to provide formal mathematical privacy guarantees. The system is evaluated across nine attack scenarios involving gradient scaling, sign-flip, and random noise poisoning at adversarial node ratios of 10, 20, and 30 Percentage. Results demonstrate that the proposed system maintains detection accuracy above 90.5 Percentage even when 30 Percentage of participating nodes are adversarial, outperforming baseline FedAvg by up to 48.1 percentage points. A real-time dashboard built on FastAPI and WebSockets provides live visualization of model convergence and threat events. The proposed approach establishes a scalable, privacy preserving, and attack-resilient framework suitable for deployment in operational 5G network environments.
Keywords :
Federated Learning; 5G Network Security; Anomaly Detection; Byzantine Robustness; Model Poisoning Attacks; Differential Privacy; Multi-Krum; Isolation Forest; Edge Intelligence; Privacy-Preserving Machine Learning.