Saqib Hussain , Jingsha He , Nafei Zhu , Fahad Razaque Mughal , Sadique Ahmad , Muhammad Iftikhar Hussain , Zulfiqar Ali Zardari
{"title":"Edge AI-based self-learning technique for mitigating DDoS attacks in WSN","authors":"Saqib Hussain , Jingsha He , Nafei Zhu , Fahad Razaque Mughal , Sadique Ahmad , Muhammad Iftikhar Hussain , Zulfiqar Ali Zardari","doi":"10.1016/j.comnet.2025.111769","DOIUrl":null,"url":null,"abstract":"<div><div>Wireless Sensor Networks (WSNs) are increasingly deployed in critical applications but remain highly susceptible to Distributed Denial of Service (DDoS) attacks. The constrained nature of WSNs-limited energy, memory, and processing power-renders traditional centralized intrusion detection systems inefficient due to high latency, bandwidth consumption, and privacy risks. This research presents a lightweight, edge AI-based self-learning framework that leverages federated deep learning to detect and mitigate DDoS attacks in WSNs without sharing raw sensor data. The proposed model enables local model training at individual nodes and aggregates updates securely at a central server, preserving data privacy while reducing network overhead. A multi-layer deep learning architecture is utilized to enhance anomaly detection capability across heterogeneous devices. Experimental results demonstrate the effectiveness of the approach, achieving 99.2 % accuracy, 96 % precision, 94 % recall, and improved corresponding F1-scores on benchmark datasets. Compared to traditional centralized models, the framework reduces latency by 31.7 % and communication overhead by 28 %, while maintaining high detection performance even under Non-IID data distributions. Additionally, it shows resilience to class imbalance and scalability across distributed nodes. These results confirm the framework’s suitability for real-time, privacy-preserving intrusion detection in modern WSNs. Future work will extend this system with adaptive client selection, adversarial robustness techniques, and deployment on live WSN hardware to validate real-time performance and security under evolving threat conditions.</div></div>","PeriodicalId":50637,"journal":{"name":"Computer Networks","volume":"273 ","pages":"Article 111769"},"PeriodicalIF":4.6000,"publicationDate":"2025-10-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Computer Networks","FirstCategoryId":"94","ListUrlMain":"https://www.sciencedirect.com/science/article/pii/S1389128625007352","RegionNum":2,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q1","JCRName":"COMPUTER SCIENCE, HARDWARE & ARCHITECTURE","Score":null,"Total":0}
引用次数: 0
Abstract
Wireless Sensor Networks (WSNs) are increasingly deployed in critical applications but remain highly susceptible to Distributed Denial of Service (DDoS) attacks. The constrained nature of WSNs-limited energy, memory, and processing power-renders traditional centralized intrusion detection systems inefficient due to high latency, bandwidth consumption, and privacy risks. This research presents a lightweight, edge AI-based self-learning framework that leverages federated deep learning to detect and mitigate DDoS attacks in WSNs without sharing raw sensor data. The proposed model enables local model training at individual nodes and aggregates updates securely at a central server, preserving data privacy while reducing network overhead. A multi-layer deep learning architecture is utilized to enhance anomaly detection capability across heterogeneous devices. Experimental results demonstrate the effectiveness of the approach, achieving 99.2 % accuracy, 96 % precision, 94 % recall, and improved corresponding F1-scores on benchmark datasets. Compared to traditional centralized models, the framework reduces latency by 31.7 % and communication overhead by 28 %, while maintaining high detection performance even under Non-IID data distributions. Additionally, it shows resilience to class imbalance and scalability across distributed nodes. These results confirm the framework’s suitability for real-time, privacy-preserving intrusion detection in modern WSNs. Future work will extend this system with adaptive client selection, adversarial robustness techniques, and deployment on live WSN hardware to validate real-time performance and security under evolving threat conditions.
期刊介绍:
Computer Networks is an international, archival journal providing a publication vehicle for complete coverage of all topics of interest to those involved in the computer communications networking area. The audience includes researchers, managers and operators of networks as well as designers and implementors. The Editorial Board will consider any material for publication that is of interest to those groups.